This is a good starter video: Youtube Video

I've added this to a larger script that I use, but if you only wanted to automate the naming process the above would work for you. Else just remove the header #!/bin/sh and add the reset to any setup scripts that you have to automate this portion of the setup.

Another good resource that lists a bunch of useful tools for macOS management. https://github.com/smashism/awesome-macadmin-tools

Dont' use bullet/number lists in instructions and guides like this. it makes it annoying for those that want to copy and paste. This guide is assuming that you are running as root. If not prepend everything here with sudo. Install the salt-master package dnf install salt-master Open the required ports in the firewall firewall-cmd --add-port=4505-4506/tcp --permanent firewall-cmd --reload Enable the salt-master service to start on boow, and also start it now. systemctl enable --now salt-master.service

@black3dynamite said in CUPS Administration Job Info 1 Destination Mailbox: @DustinB3403 said in CUPS Administration Job Info 1 Destination Mailbox: While I found where OSX stores the user printer preferences, but copying a "working version of preferences" to the user workstation and directory doesn't set the preferences. Still investigating. May require a restart when doing this remotely. . . Full system restart or just the cups service? Just did a full system restart and no change. While the plist file is there, and the user has owner access to it, the changes don't appear to take effect. Not sure why.

@DustinB3403 said in Saltstack and Brew Casks: @black3dynamite That doesn't seem to work for me. Either as my non-admin user or root salt '*' cmd.run 'brew cask install obs -y' [WARNING ] Failed to open log file, do you have permission to write to /var/log/salt/master? Salt request timed out. The master is not responding. You may need to run your command with `--async` in order to bypass the congested event bus. With `--async`, the CLI tool will print the job id (jid) and exit immediately without listening for responses. You can then use `salt-run jobs.lookup_jid` to look up the results of the job in the job cache later. Root salt '*' cmd.run 'brew cask install obs -y' [WARNING ] /usr/lib/python2.7/site-packages/salt/payload.py:149: DeprecationWarning: encoding is deprecated, Use raw=False instead. ret = msgpack.loads(msg, use_list=True, ext_hook=ext_type_decoder, encoding=encoding) admins-MacBook-Air.local: Error: Running Homebrew as root is extremely dangerous and no longer supported. As Homebrew does not drop privileges on installation you would be giving all build scripts full access to your system. https://docs.saltstack.com/en/latest/ref/cli/salt.html#options Use the --timeout option The timeout in seconds to wait for replies from the Salt minions. The timeout number specifies how long the command line client will wait to query the minions and check on running jobs. Default: 5 Or Use --async option Instead of waiting for the job to run on minions only print the job id of the started execution and complete. And then use salt-run jobs.lookup_jid to see the results. # Using --timeout sudo salt '*' cmd.run 'sudo -u non-adminuser brew cask install obs -y' --timeout 60 # Using --async sudo salt '*' cmd.run 'sudo -u non-adminuser brew cask install obs -y' --async

It is likely obvious, but as I know that some people are searching for this information, creating administrative users in this way can be done very easily from remote command lines such as ScreenConnect, ConnectWise, MeshCentral, and so forth.

Worth noting that using rsync worked very well, but there were issues with the Outlook profile on the existing user workstation and the end result. Not a huge issue for us as everything is stored in O365, but worth being mindful of if your email was hosted locally. Also because of username convention changes, I had to set the ownership of the user profile to match the new shortened name.

Have never looked at that.

Fixed a small typo.

@RojoLoco said in OSX Mojave - System Storage - Time Machine Disabled: @DustinB3403 said in OSX Mojave - System Storage - Time Machine Disabled: That seems unnecessary as this shouldn't be so difficult, nor should it ever occur. ...because everything apple does is perfect and never, ever malfunctions in any way, right? Yeah. . . no I get the stance. What makes no sense is there is no way for me to find where this bulk is coming from.

@DustinB3403 said in Nomad - Manage Mac OS in Windows/AD Environment - Anyone Used It?: I've heard of it, and it's supposedly a really good product, the issue with it is the cost. At least at the time. The product now is JAMF Connect. So it looks to be a dead product that was replaced. Interesting. I'll look into that. I didn't see any mention of jamf.

@DustinB3403 said in OSX Power Saving Settings: @black3dynamite said in OSX Power Saving Settings: Does that also prevent it from sleeping when the lid is closed? The lid closed is powernap

So with further testing, a restart is required if the user is using their system, otherwise they'll continue to get the notifications.

@dbeato said in lpadmin - remove printer with a space in the name: @DustinB3403 said in lpadmin - remove printer with a space in the name: Nevermind! lpadmin adds spaces as underscores! So with lpadmin -p I was able to find the list of printers. lpadmin -p Accounting_Printer And with lpadmin -x Accounting_Printer was able to remove the printer! Removed Accounting_Printer Good to know for central administration of Apple devices. What are you using right now? ARD and Unix cli

@wrx7m said in OSX 10.14.X Bug - Roaming AD Accounts unable to login when Off Network: @DustinB3403 said in OSX 10.14.X Bug - Roaming AD Accounts unable to login when Off Network: My co-worker thinks he may have a workaround, which involves backing up the user profile, deleting the existing one and restoring the files for the user. We're testing this currently to see if this actually "sticks". Did it work? Waiting to hear back

Just used this again today, as another script I have had this attribute. Not sure when the attribute was written to the script though. But it's working now. This is the full error. /bin/sh: bad interpreter: Operation not permitted

@scottalanmiller said in OSX Unix Using Brew to install software remotely: @DustinB3403 said in OSX Unix Using Brew to install software remotely: So I can just unpack the dmg file, and have an Copy job, copy the application to the Applications folder for any user. As my admin user account. All via Apple Remote Desktop. This works without issue. What I am trying to do is avoid having to locally download the app at all, unpack it and then have a Copy job to run. I'd like to streamline the process. That's what the script is doing already. Making your own "sudo friendly" script for your install might make sense. The issue is there is no way AFAIK without adding my local admin account to this group. Which is more work than it may be worth since the existing solution works but is annoying.

You might look at the tools that Apple is pushing (and thus supporting). I don't know if Munki will fit your requirements, but it may. Here is a list of several projects for managing macOS: https://simplemdm.com/2018/07/19/popular-open-source-tools-for-mac-admins/. NoMAD is pretty cool if you're in a Windows-centric environment.

@marcinozga said in Find the character break - sh script: @DustinB3403 you need to source .bash_profile after changing it, so bash picks up modified file. Either source ~/.bash_profile or . ~/.bash_profile Thanks for that, I was actually sorting out that bit as you posted. Short of setting up a few printers via the script I'm back in working order.

Now I'm getting Unexpected end of File FML. . . what changed!

I got it from here brew install macosvpn sudo macosvpn create --l2tp Atlantic --endpoint atlantic.example.com --username ' ' --password ' ' --shared-secret s3same You can provide ' ' for both the username and password, this allows any user to fill in as required.

@black3dynamite I was digging into it and it appears to be an issue with the host more than brew.

@romo said in Remote Connect/Support Tools for Fedora, Windows, OS X: Seems really interesting with the monitoring and the ability to have custom alerts. @FATeknollogee How has the testing been going? Haven't done much more than my OP. I plan to do some more testing over the weekend. My main goal is to find a ScreenConnect replacement.

I have seen some books for the Apple certifications, but they were always Apple books.

We use a mac mini server for streaming locally generated TV content (I work for telecom, working with IPTV) So it's primarily multicast traffic. We do have a mac mini server for corporate as well. That handles the group policies and such for our mac computers. Works nice. Not sure what OS version it is on.