...
| Anchor | ||||
|---|---|---|---|---|
|
Allow user access to Accessibility, Date & Time, Energy Saver, Network, Print & Scan, and Time Machine
...
Disables in-app updates and sets initial configurations - however, these options may not work depending on the app and if the user is migrated on or is a new user.
| App | Method | Settings |
|---|---|---|
| Adobe Acrobat Pro | /Library/Preferences/com.adobe.Acrobat.Pro.plist | Disable auto-updates |
| Adobe Reader | /Library/Preferences/com.adobe.Reader.plist /System/Library/User Template/Non_localized/Library/Preferences/com.adobe.Reader.plist | Disable auto-updates |
| Adobe Flash Player | /Library/Application Support/Macromedia/mms.cfg file | Disable auto-updates |
| Apple Software Updates | /Library/LaunchDaemons/edu.umich.izzy.DisableASU.plist com.apple.SoftwareUpdate • AllowPreReleaseInstallation | Disable Apple's software update engine|
Block pre-release OS X installs (public beta) Chrome | /Library/Google/Google Chrome Master Preferencescom.google.Keystone.Agent • checkInterval | Sets default homepage to umich.edu, disable sync initial promotionAttempt to disable Chrome's updater |
| Microsoft Excel 2011 | com.microsoft.Excel • 14\Microsoft Excel\Hide Welcome Window | Disable first-launch screen |
| Microsoft Outlook 2011 | com.microsoft.Outlook • FirstRunExperienceCompleted | Disable first-launch screen |
| Microsoft PowerPoint 2011 | com.microsoft.PowerPoint • 14\Options\Options\Hide Welcome Dialog | Disable first-launch screen |
| Microsoft Word 2011 | com.microsoft.Word • 14\Options\Hide Welcome Dialog | Disable first-launch screen |
| Microsoft Auto-Update 2011 | com.microsoft.autoupdate2 • HowToCheck | Disable automatic Microsoft software updates prompting (Office 2011) |
| Microsoft Error Reporting | com.microsoft.error_reporting • SQMReportsEnabled | Disable error reporting for Office 2011 |
| Microsoft Office 2011 | com.microsoft.office • 14\FirstRun\SetupComplete com.microsoft.office • 14\UserInfo\UserOrganization | Disable first-launch screen |
| Anchor | ||||
|---|---|---|---|---|
|
MiWorkspace Login Window Banner
...
| Setting | Description |
|---|---|
| Disable Guest Account | Prevent users from logging in as Guest |
| Disable Internet Sharing | Cannot use Internet sharing to set up a personal WiFi network from e.g. Ethernet |
| Use network time server | Forced to time.apple.com |
| Enable Application Firewall | Turn on the "Firewall" in Security Preferences. This setting does not appear to work reliably, but it is the only setting Apple provides. |
| Apple IR Controller | Disable IR Controller |
| Disable >console logins | Turn off text-mode console login |
| Disable password hints | Turn off password hints after successive mistakes |
| Use username & password fields | Login screen should be username and password, not portraits of usernames. |
| Automatic timezone | Set system to automatically set its timezone |
| Home directory mode 700 | Make user home directories mode 700 (no group/other read/write access) |
...
| Anchor | ||||
|---|---|---|---|---|
|
Standard User Experience
- Configures the URL for Managed Software Center to get package icons
- Disable the iCloud setup assistant page, when possible
- Disable the trackpad 'reverse gesture' setup assistant page
- Disable the meaningless 'optimizing your Mac' setup assistant pageDisable Spotlight on external volumes
- We discovered Spotlight might try to walk network volumes, which causes significant performance problems
- Disable .DS_Store (Finder preference files) on network volumes
- Shorten the AD at-login binding timeout, which speeds up initial boot significantly
| Anchor | ||||
|---|---|---|---|---|
|
IronIzzy (FileVault) Enabler
...
Enables the "Secure Keyboard Entry" by default in Terminal. Secure Entry prevents other apps from listening in on keydown events, which means that other apps can't read passwords into the Terminal window. Note that this will break apps like TextExpander. Also note that recent versions of OS X will macOS automatically enable Secure Entry at common password prompts, which is indicated by a 'key' icon in the cursor.