<HTML>
<HEAD>
<TITLE>Re: [Casper] Request for Feature</TITLE>
</HEAD>
<BODY>
<FONT SIZE="4"><FONT FACE="Calibri, Verdana, Helvetica, Arial"><SPAN STYLE='font-size:11pt'>Hello,<BR>
<BR>
I know this may not be an option for people, but we basically depend on Active Directory permissions to handle this. A group in AD is created and then only that group is applied to that particular group of machines with a script under AD administrators.<BR>
<BR>
I imagine a similar thing can be done with Open Directory groups, but I don’t use OD here at the moment.<BR>
<BR>
I attached a sample of what we use.<BR>
<BR>
NOTE: I have a sleep in here because this normally runs At Reboot. I could configure this in the Configuration in the JSS, and I do, but an issue that started with 10.4.11 and dsconfigad is that when the JAMF start up script does the binding that includes an admin group, the admin group portion fails. This script waits 60 seconds later when it tries again. This seems to work fine then.<BR>
<BR>
Craig Ernst<BR>
Systems Management & Configuration<BR>
----------------------------------<BR>
University of Wisconsin-Eau Claire<BR>
Learning & Technology Services<BR>
105 Garfield Ave<BR>
Eau Claire, WI 54701<BR>
Phone: (715) 836-3639<BR>
Fax: (715) 836-6001<BR>
----------------------------------<BR>
ernstcs@uwec.edu<BR>
<BR>
<BR>
<BR>
On 4/3/08 10:44 AM, "NATHANIEL.LINDLEY@spps.org" <NATHANIEL.LINDLEY@spps.org> wrote:<BR>
<BR>
</SPAN></FONT></FONT><BLOCKQUOTE><FONT SIZE="4"><FONT FACE="Calibri, Verdana, Helvetica, Arial"><SPAN STYLE='font-size:11pt'><BR>
<BR>
I second Dusty's request. Scope based rights for building techs to their<BR>
network segment(s).<BR>
<BR>
AND, lets have custom searches be able to save "by user" or "for all"<BR>
Each school wants their own custom searches, but doesn't need to share them<BR>
with the rest of the district.<BR>
<BR>
<BR>
<BR>
Nathaniel Lindley<BR>
<BR>
++++++++++++++++++<BR>
Learning Systems Specialist<BR>
Educational Technology<BR>
Saint Paul Public Schools<BR>
Saint Paul, Minnesota<BR>
nathaniel.lindley@spps.org<BR>
phone: 651-603-4929<BR>
<BR>
<BR>
<BR>
"Dorey, Dustin"<BR>
<Dustin.Dorey@dis<BR>
trict196.org> To<BR>
Sent by: <casper@list.jamfsoftware.com><BR>
casper-bounces@li cc<BR>
st.jamfsoftware.c<BR>
om Subject<BR>
[Casper] Request for Feature<BR>
<BR>
04/03/08 10:41 AM<BR>
<BR>
<BR>
<BR>
<BR>
<BR>
<BR>
<BR>
<BR>
Not sure if anyone else has requested this before. Or if I'm just missing<BR>
something. But it would be great if there was a way to set up an admin to<BR>
have access only to a certain group of machines. i.e. we have many<BR>
different schools in our district and I would like it if our building level<BR>
admins had only access to the machines on their subnet or if we could<BR>
create a smart group that they were only allowed to administer or something<BR>
like that.<BR>
<BR>
Dustin Dorey<BR>
Technology Support Cluster Specialist<BR>
ISD 196 Apple Valley, Rosemount, Eagan<BR>
14445 Diamond Path West<BR>
Rosemount, MN 55068<BR>
(952) 423-7971<BR>
dustin.dorey@district196.org<BR>
_______________________________________________<BR>
Casper mailing list<BR>
Casper@list.jamfsoftware.com<BR>
<a href="http://list.jamfsoftware.com/mailman/listinfo/casper">http://list.jamfsoftware.com/mailman/listinfo/casper</a><BR>
<BR>
<BR>
<BR>
<BR>
_______________________________________________<BR>
Casper mailing list<BR>
Casper@list.jamfsoftware.com<BR>
<a href="http://list.jamfsoftware.com/mailman/listinfo/casper">http://list.jamfsoftware.com/mailman/listinfo/casper</a><BR>
<BR>
</SPAN></FONT></FONT></BLOCKQUOTE>
</BODY>
</HTML>