• Mac OS X,  Mac Security,  Mass Deployment

    Enable And Disable Permissions On Volumes Using A Script

    Someone hands you a USB drive. You put it in your computer and you can’t access anything on it. You are running an imaging lab and you want to backup or troubleshoot a device before you re-image it, but you can’t access certain files. Obviously, you can sudo. But, you can also simply disable permissions on that volume (which, like getting someone to make you a sandwich, requires sudo of course). The command used to enable and disable permissions on a volume is vsdbutil, located at /usr/sbin/vsdbutil. And there’s a LaunchDaemon at /System/Library/LaunchDaemons/com.apple.vsdbutil.plist that interacts with diskarbitrationd so that when a volume is mounted, it is marked as having permissions…

  • Mac OS X,  Mass Deployment

    Quick And Dirty Language Management In OS X

    I bet you thought this would be the article where I showed you how to make your computer curse more. Well, language can mean much more than that. In fact, Apple has dedicated a whole binary to switching your default language in OS X, in languagesetup. This command, located at /usr/sbin/languagesetup, is capable of changing the default language used by a system to a number of different languages. There are other ways to accomplish this, but none quite so easy. To get started, note that there are two ways to run languagesetup. The first is interactively, which I mostly use to figure out what I actually want to do with…

  • Mac OS X,  Mass Deployment

    How Big Is My Journal And Where Is It?

    Back when I worked with Xsan a lot more than I do now, one of the things we spent a lot of time doing was working with metadata and journal data on Xsan volumes. You can also view journal data for non-Xsan volumes. The hfs.util binary is used to view journal data about volumes. In this example, we’ll look at the journal size and location the boot volume of our system: /System/Library/Filesystems/hfs.fs/Contents/Resources/hfs.util -I /Volumes/Macintosh\ HD The output shows the size of the journal and the location, as follows: /Volumes/Macintosh HD : journal size 40960 k at offset 0x1a38b000

  • Mac OS X,  Mac OS X Server,  Mass Deployment

    Repair Permissions Using The Command Line In El Capitan

    Repair permissions was unceremoniously removed from OS X in El Capitan. This staple of the Mac gurus toolkit disappeared. There was no 21 gun salute, there was no flaming casket sent out to sea and there was no sweet, sweet wake to get drunk at. Instead, there was pain. There was pain, because when the button disappeared, the need did not. Need proof? If you haven’t yet run it, let’s check your system to verify the permissions of the standard packages: sudo /usr/libexec/repair_packages --verify --standard-pkgs --volume / In the above command, we used the repair_packages binary, which has not changed in awhile. We then feed that the –verify option and the…

  • 318,  Apps,  Articles and Books,  Bushel,  Business,  certifications,  Mac OS X,  Mac OS X Server,  Mac Security,  Mass Deployment,  Microsoft Exchange Server,  Minneapolis

    My 3,000th Post On Krypted

    This is my 3,000th post on Krypted.com. The past 3,000 posts have primarily been about OS X Server, Mac automation, Mac deployment, scripting, iOS deployments, troubleshooting, Xsan, Windows Servers, Exchange Server, Powershell, security, and other technical things that I have done in my career. I started the site in response to a request from my first publisher. But it took on a mind of its own. And I’m happy with the way it’s turned out. My life has changed a lot over these past 11 years. I got married and then I got divorced. I now have a wonderful daughter. I became a partner and the Chief Technology Officer of 318 and helped to shape it into…

  • Apple Configurator,  iPhone,  Mass Deployment

    Add Profiles To Blueprints In Apple Configurator 2

    One of the tasks you’ll need to perform in Apple Configurator 2, is to assign Profiles to iOS devices in order to set them up with features or restrict the device from using certain features. I cover creating a profile here. To get started applying a profile to a device, bring up the Blueprints screen. Choose a Blueprint and right-click on it. Choose Profiles… Browse to the profile and then click on Add Profile. The profile is then applied to any devices that the Blueprint is applied to. For more on Blueprints, view this article.

  • Apple Configurator,  iPhone,  Mass Deployment

    Apple Configurator 2 Guide

    Apple Configurator 2 is a great new evolution in iOS initial and configuration management. And there are lots of great options. And to help you wrap your head around all this new fun stuff, I’ve written up a quick and dirty guide for using Apple Configurator 2. It’s not completely done, but it will be shortly. Hope this help someone. Enjoy!

  • Apple Configurator,  iPhone,  Mass Deployment

    Manage Profiles To Control Settings On iOS Devices With Apple Configurator 2

    Enter Apple Configurator 2, a free tool on the Mac App Store. This tool basically fixes most setup challenges for iOS, but does so over USB. This means that Apple Configurator is not necessarily a replacement for MDM. In fact, you can deploy Trust and Entrollment profiles for MDM and automate the MDM enrollment for a device through Apple Configurator 2. Instead, Apple Configurator 2 is a tool that can either help to manage iOS devices during a mass deployment and do so in a manner that is easy enough that you don’t need a firm background in IT to manage devices on a day-to-day basis. Here is what Apple Configurator can do: Update…

  • Apple Configurator,  Mac OS X,  Mass Deployment

    Using Apple Configurator 2 Blueprints to Manage iOS Devices

    Blueprints are a new option in Apple Configurator 2. Blueprints allow you setup a template of settings, options, apps, and restore data, and then apply those Blueprints on iOS devices. For example, if you have 1,000 iOS devices, you can create a Blueprint with a restore item, an enrollment profile, a default wallpaper, skip all of the activation steps, install 4 apps, and then enabling encrypted backups. The Blueprint will provide all of these features to any device that the Blueprint is applied to. But then why not call it a group? Why call it a Blueprint? Because the word template is boring. And you’re not dynamically making changes to devices over…

  • Mac OS X,  Mac OS X Server,  Mac Security,  Mass Deployment

    Programmatically Obtain Recent Wi-Fi Networks On A Mac

    When you join a wireless network on a Mac, the information for that network is cached into the com.apple.airport.preferences property list. You can access this information using the following command, constraining output to the LastConnected field and the next 7 lines: defaults read /Library/Preferences/SystemConfiguration/com.apple.airport.preferences | grep LastConnected -A 7