accessible view | jump to content | search | jump to site-wide navigation
Changes to the OS (prefs changes to test/verify)
| Date & Time | Timezone -> Eastern |
| NTP Server -> UMich, Apple, pool.ntp.org | |
| NTP Enabled | |
| Sharing | Hostnames set |
| Remote Management service started and configured to allow anyone to request permission to control the screen | |
| Security | Application Firewall Enabled |
| ipfw firewall limits SSH and ARD access to on-campus | |
| Disable automatic login | |
| Require password to unlock each System Preferences pane | |
| Internet | Email Prefs -> ITCS email servers |
| Web Prefs -> www.umich.edu | |
| Safari bookmarks -> UMich links | |
| Loginwindow | Autologin disabled |
| no list of users | |
| Desktop & Screensaver | Set to use LSA pictures |
| U of M desktop background | |
| Requires password to unlock | |
| Accounts | First user account auto created |
| Automatic login disabled | |
| Display login window as Name and password | |
| Login/out Hooks | Uses the MacOSXHooks.pkg to execute multiple scripts in /etc/hooks during login and logout |
| UsageAgreement | Loginhook added to display usage agreement during console login |
| AFP greeting displays usage agreement | |
| SSH connections display usage agreement | |
| Kerberos | Sets default realm to UMICH.EDU |
| Disables saving of Kerberos passwords to Keychain | |
| Loginwindow and other GUI prompts accept Kerberos or Local password | |
| SSH, sudo, and su accept Kerberos or Local password | |
| LSA Path | Extra directories added to GUI $PATH |
| Extra directories added to CLI $PATH and $MANPATH | |
| UMwebCA | UMweb Certificate Authority added to trusted certificates |
| OpenAFS | Sets default cell to umich.edu |
| Auto creates links on desktop to user's AFS space | |
| Installs aklog plugin to automatically get token | |
| Installs aklog applescript on user's desktop | |
| Installs AFS-control script in /Applications/Utilities | |
| DVD Regions | ANYONE can set the DVD region the first time. Admins are still required for subsequent changes |
| DeptInfo | Creates a file at /var/db/DeptInfo.txt with the short and long name of the department selected in SNI at install. Additionally, this configures the 4 ARD Custom text fields of the machine as defined in SNI. |
| Repair Permissions | Does a diskutil repairpermissions every night |
| PowerChecker | Reports back to a central server if the computer is left on overnight |
| SSH-config | Disables public key authentication and X11 forwarding |