[Casper] Prohibit copying from /Applications

Tue Feb 17 14:24:08 PST 2009

If you have "keyed" applications they work when you can talk to the keyserver. Options for when the keyserver is not available are to allow the app to run and just meter the usage and report update when it can talk again, or to deny the app to run. You also have the option to allow the user to "check-out" a license or seat before leaving the network of which you can predefine how long that check out lasts.

Keyserver client runs as service.

I think that is all the options, but there may be more options. I'm not our keyserver guru, but we use it here.

Craig Ernst
UW-Eau Claire
(715) 836-3639

Sent from my iPhone

On Feb 17, 2009, at 2:06 PM, "Thomas Larkin" <tlarki at kckps.org<mailto:tlarki at kckps.org>> wrote:

Do you have to be connected to this key server for it to work?  Like if I go off campus with my laptop are all my 'keyed' applications no longer going to run?

Thanks

___________________________
Thomas Larkin
TIS Department
KCKPS USD500
<mailto:tlarki at kckps.org>tlarki at kckps.org<mailto:tlarki at kckps.org>
blackberry:  913-449-7589
office:  913-627-0351

>>> "Criss  Myers" <CMyers at uclan.ac.uk<mailto:CMyers at uclan.ac.uk>> 02/16/09 1:57 AM >>>

Hi All,

what you need is KeyServer, i use a KeyServer to monitor and control licenses and if you KEY and application then it cannot be run without a connection to the keyserver so if an application is copied to a pen drive and taken else where it will never run.

Criss

Criss Myers
Senior Customer Support Analyst (Mac Services)
Apple Certified Technical Coordinator v10.5
LIS Business Support Team
Library 301
University of Central Lancashire
Preston PR1 2HE
Ex 5054
01772 895054

>>> On Sun, Feb 15, 2009 at  9:12 PM, in message <499830CE0200003900009394 at gwoes4.kckps.org<mailto:499830CE0200003900009394 at gwoes4.kckps.org>>, "Thomas Larkin" <tlarki at kckps.org<mailto:tlarki at kckps.org>> wrote:

That is where launchd would kick in.  It monitors the folder and then when whatever action is taking place it then executes what you tell it to do so.  You could have it check every 30 seconds, or however you set it up in ARD.  Once it is triggered the script can run, but yes it will take time to run and if it takes too long and the user ejects their usb thumb drive then it will become moot.

I just think it seems like a lot of hassle for very little pay off.

___________________________
Thomas Larkin
TIS Department
KCKPS USD500
tlarki at kckps.org<mailto:tlarki at kckps.org>
blackberry:  913-449-7589
office:  913-627-0351

>>> Jeff Strauss <jstrauss at loyolahs.edu> 02/15/09 1:32 PM >>>
But don't your scripts run at intervals?What if a user copies an app
to his flash drive and unmounts it before your script ran?

Sent from my iPhone

On Feb 15, 2009, at 11:13 AM, "Thomas Larkin" <tlarki at kckps.org> wrote:

> I have search and destroy scripts that search out and delete certain
> file systems, by file extension.  I suppose you could modify my
> scripts to search the path of the user's desktop and have it remove
> anything with .app as the extension.  If they don't have write
> access to /Applications they can't trash them.  You could also use
> Unix permissions to make their desktop read only, so they would be
> forced to save things in their ~/Documents but I can see that
> causing issues perhaps.  Like Safari for example, by default wants
> to download files to the user's desktop.
>
> We have had this problem as well, and I could never come up with a
> working feasible solution that wouldn't confuse or cause issues with
> end users using their laptops.
>
> ___________________________
> Thomas Larkin
> TIS Department
> KCKPS USD500
> tlarki at kckps.org
> blackberry:  913-449-7589
> office:  913-627-0351
>
>
>
>>>> Jeff Strauss <jstrauss at loyolahs.edu> 02/14/09 4:19 PM >>>
> Thanks for that. I'm going to start work on it after the weekend.
> Expect email asking for help :)
>
> Sent from my iPhone
>
> On Feb 14, 2009, at 2:17 PM, "clinton.blackmore" <clinton.blackmore at westwind.ab.ca
>> wrote:
>
>> Darn.  Here I'd always hoped that some funky set of ACLs could
>> prevent the problem.  We have a problem where students move
>> applications onto their desktops when trying to put it on their Dock
>> (and then we get complains that the app is not installed, or that
>> users (inexplicably) can not log into network accounts with a .app
>> on the desktop.)
>>
>> If you are serious about writing a launchd item, and especially if
>> your running all Leopard, there is a python application called
>> crankd that can install hooks into system events (like filesystem
>> activity, network transitions, and such) and call your code when it
>> happens.  I don't know a lot about it, but http://code.google.com/p/pymacadmin/
>> is a place to start looking.  I think it might be easier to work
>> with than launchd.
>>
>> If you do come up with something, I'd appreciate it if you'd share.
>>
>> Cheers,
>> Clinton Blackmore
>>
>>
>> _______________________________________________
>> Casper mailing list
>> Casper at list.jamfsoftware.com
>> http://list.jamfsoftware.com/mailman/listinfo/casper
> _______________________________________________
> Casper mailing list
> Casper at list.jamfsoftware.com
> http://list.jamfsoftware.com/mailman/listinfo/casper
>

_______________________________________________
Casper mailing list
Casper at list.jamfsoftware.com
http://list.jamfsoftware.com/mailman/listinfo/casper

_______________________________________________
Casper mailing list
Casper at list.jamfsoftware.com<mailto:Casper at list.jamfsoftware.com>
http://list.jamfsoftware.com/mailman/listinfo/casper
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20090217/aebdc348/attachment.html 