• Articles and Books,  iPhone,  Mac OS X,  Mac OS X Server,  Mac Security,  Mass Deployment,  public speaking

    MacSysAdmin 2012!

    MacSysAdmin has quickly become one of my favorite conferences to attend. I love the high level of technical acumen and the chance to row a canoe from Minneapolis to Gothenburg, Sweden, which is a serious workout, let me tell you! The 2012 lineup boasts one of the politest guys I know in Arek Dreyer, my coworker Zack Smith, Andrew Renz (of Code 42/CrashPlan fame), the well dressed (and spoken) Ed Marczak, the great Greg Neagle (Munki/Repasado/awesome guy), Alan Gordon’s alter-ego Alan Gordon, the JAMFerific Andrina Kelly, the ostentatious Duncan McCracken, Rick Wylie, Gary Larizza, Luis Giraldo in all his wireless awesomeness, Sébastien Tomasi (representing the file set goodness that is…

  • Mac OS X,  Mac OS X Server,  Mac Security,  Mass Deployment

    Moving Managed Preferences to Profiles

    If you’ve been following my postings for the past few weeks you may have noticed that I’m putting the pieces together for a strategy to transition existing managed preferences in environments to profiles, most notably those managed using Lion Server’s Profile Manager as more than just a mobile device management tool, but also as a computer management tool. To put the articles into a bit more order, let’s look at the order that you’d likely use them to actually do an integration: If needed, upgrade any existing Open Directory deployments to Lion: https://krypted.com//mac-os-x/upgrading-open-directory-from-snow-leopard-server-to-lion-server Start off with getting Profile Manager installed (Part 1): https://krypted.com//iphone/setting-up-profile-manager-in-lion-server Then integrate Profile Manager with your internal directory…

  • public speaking

    MacTech InDepth In New York

    I have been added as a speaker at MacTech InDepth in New York. If you haven’t signed up yet, and you work with Mac OS X Server then you should really check out the sessions that have been planned: The Elephant in the Room: The New Lion OS X is out, now what? There are a lot of differences to contend with between Lion and Snow Leopard. Now with the new Mountain Lion update, what changes can we expect to see? We discuss the differences in advanced services, GUI simplicity, and Apache management GUI’s. We help you understand the updates in the new OS and make the transition easier. We…

  • Mac OS X,  Mac OS X Server,  Mac Security,  Mass Deployment

    Automating Profile Manager Enrollment Through DeployStudio

    When planning to migrate from managed preferences to profiles, one of the important aspects to consider is automated enrollment. One of the more important aspects of automating a traditional managed preferences environment is to automate the binding to directory services. You do not bind to Profile Manager; however, you do enroll devices. Much like binding computers to Lion Server’s Open Directory (by default), certificates and host names are important aspects of the enrollment process. Much as with local managed preferences, management via profiles can be done through the command line and without any involvement from a centralized source. I had written an article awhile back on using profiles from the…

  • Mac OS X,  Mac OS X Server,  Mac Security,  Mass Deployment

    Disable AutoUpdates in Google Chrome

    More and more deployments seem to come with sending Google Chrome out to client systems. Chrome is yet another application with built-in updating to make the process of owning software a bit less tedious for end users. However, in large deployments, we usually need to disable such a feature. Given how talented they are, the Googlers that built the automatic updaters went ahead and showed great foresight and made it easy to disable. Simply set the checkInterval key in com.google.Keystone.Agent to 0, done using defaults here: defaults write com.google.Keystone.Agent checkInterval 0 Once disabled, use defaults to set the checkInterval key to how frequently you’d like the check to run (in…

  • Mac OS X,  Mac OS X Server,  Mac Security,  Ubuntu,  Unix

    Configuring Spam Assassin In Mac OS X Lion Server

    The built-in message hygiene in Lion Server is provided by Spam Assassin and clamav (amavis). Lion Server’s Server Admin application has an easy-to-use way of configuring some of the more basic settings for Spam Assassin. Spam Assassin’s rules are configured in /etc/mail/spamassassin/local.cf. If you open this into a standard text editor then you can insert blocks that are rules. Each rule has the ability to either locate text within a header (such as an email address), a subject or in the text of an email. To use Spam Assassin to block messages that have the word viagra in them, for example, you would insert the following block: body NO_MORE_VIAGRA /viagra/i…

  • Mac OS X,  Mac OS X Server

    Configuring Out of Office Messages in Lion Server

    One of the more common administrative tasks for any administrator of a mail server is to work with users on enabling various rules. One such rule is the Out of Office email messages. These messages can be enabled to automatically send responses to people that send email to those accounts when a user is not going to be checking mail. These can be somewhat frustrating for people on list serves, but they are a great way to be able to step away from your email in the event that you’re, I don’t know, Out of the Office. I should learn to rely on these more when I’m on vacation, but…