<HTML>
<HEAD>
<TITLE>Leopard Core OS build</TITLE>
</HEAD>
<BODY>
<FONT SIZE="4"><FONT FACE="Calibri, Verdana, Helvetica, Arial"><SPAN STYLE='font-size:11pt'>Hello all,<BR>
<BR>
I think it would be beneficial for us all to share what we feel needs to be done to the core OS image for Leopard and why. I’ll start.<BR>
<BR>
</SPAN></FONT></FONT><OL><LI><FONT SIZE="4"><FONT FACE="Calibri, Verdana, Helvetica, Arial"><SPAN STYLE='font-size:11pt'>Install on newest hardware in production, in my case MacBookPro4,1 – long accepted best practice, gives most compatibility with Mac models
</SPAN></FONT></FONT><LI><FONT SIZE="4"><FONT FACE="Calibri, Verdana, Helvetica, Arial"><SPAN STYLE='font-size:11pt'>Erase & install – long accepted best practice, cleans out the hard drive of any junk before installing a system
</SPAN></FONT></FONT><LI><FONT SIZE="4"><FONT FACE="Calibri, Verdana, Helvetica, Arial"><SPAN STYLE='font-size:11pt'>Custom install, uncheck all optional components – keeping it lean and keeping it modular
</SPAN></FONT></FONT><LI><FONT SIZE="4"><FONT FACE="Calibri, Verdana, Helvetica, Arial"><SPAN STYLE='font-size:11pt'>Create admin account(s) for IT staff & casper tools – needed to perform admin tasks and manage via casper
</SPAN></FONT></FONT><LI><FONT SIZE="4"><FONT FACE="Calibri, Verdana, Helvetica, Arial"><SPAN STYLE='font-size:11pt'>Set a computer name that will be recognizable as an unconfigured machine – easily spot problem machines on the network
</SPAN></FONT></FONT><LI><FONT SIZE="4"><FONT FACE="Calibri, Verdana, Helvetica, Arial"><SPAN STYLE='font-size:11pt'>Disable the guest account – security consideration
</SPAN></FONT></FONT><LI><FONT SIZE="4"><FONT FACE="Calibri, Verdana, Helvetica, Arial"><SPAN STYLE='font-size:11pt'>Disable automatic login, password hints, display login window as name & password – security considerations
</SPAN></FONT></FONT><LI><FONT SIZE="4"><FONT FACE="Calibri, Verdana, Helvetica, Arial"><SPAN STYLE='font-size:11pt'>Require password to unlock each system preference pane – security consideration
</SPAN></FONT></FONT><LI><FONT SIZE="4"><FONT FACE="Calibri, Verdana, Helvetica, Arial"><SPAN STYLE='font-size:11pt'>Turn off Bluetooth – security consideration
</SPAN></FONT></FONT><LI><FONT SIZE="4"><FONT FACE="Calibri, Verdana, Helvetica, Arial"><SPAN STYLE='font-size:11pt'>Turn off Software Update checking – to keep this under control of casper policies
</SPAN></FONT></FONT><LI><FONT SIZE="4"><FONT FACE="Calibri, Verdana, Helvetica, Arial"><SPAN STYLE='font-size:11pt'>Turn off Time Machine status icon – In my environment, we don’t use Time Machine
</SPAN></FONT></FONT><LI><FONT SIZE="4"><FONT FACE="Calibri, Verdana, Helvetica, Arial"><SPAN STYLE='font-size:11pt'>Set default energy saver settings for power adapter – keep machines from sleeping or spinning down hard disks while plugged in
</SPAN></FONT></FONT><LI><FONT SIZE="4"><FONT FACE="Calibri, Verdana, Helvetica, Arial"><SPAN STYLE='font-size:11pt'>Run critical software updates, OS, security – security consideration, OS comes out of the gate as up to date and patched as possible without waiting for a policy to run.<BR>
</SPAN></FONT></FONT></OL><FONT SIZE="4"><FONT FACE="Calibri, Verdana, Helvetica, Arial"><SPAN STYLE='font-size:11pt'><BR>
Several of the above items could be accomplished with scripts, policies, packaged plists, etc.. I choose to set them in the core OS package since these are the values we want, they have to be set to something, and if we change our minds later, its easy enough to change them with policies.<BR>
<BR>
-- <BR>
Miles Leacy<BR>
Senior Macintosh Technician<BR>
Polo Ralph Lauren<BR>
212-318-7603<BR>
miles.leacy@poloralphlauren.com<BR>
<IMG src="cid:3291208410_1219139" ><BR>
<BR>
</SPAN></FONT></FONT>
This message and any attached documents contain information which may be confidential, subject to privilege or exempt from disclosure under applicable law. These materials are intended only for the use of the intended recipient. If you are not the intended recipient of this transmission you are hereby notified that any distribution, disclosure, printing, copying, storage, modification or the taking of any action in reliance upon this transmission is strictly prohibited. Delivery of this message to any person other than the intended recipient shall not compromise or waive such confidentiality, privilege or exemption from disclosure as to this communication. If you have received this communication in error, please immediately notify the sender and delete the message from your system.
</BODY>
</HTML>