<html><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">I found a bug with the Restricted Software feature that causes the computers to always stay awake since the checking for processes apparently resets the sleep timer. This was an issue for us because of our green initiatives on campus.<div><br></div><div>That being said, I find that feature far superior to search and destroy scripts for a couple of reasons:</div><div><br></div><div>1. It doesn't matter where the applications is running from, since it looks for process information, it will spot the process and delete the app.</div><div>2. For the most part, a user can't just rename the .app and fool the system (i.e., search and destroy can be fooled if a user renames "LimeWire.app" to "LW.app", since Casper uses process names, thats a little more difficult.</div><div><br></div><div><br></div><div>One thing that might be interesting to check out is if you can make a launchd item that will monitor the process list and be started up if a process with a certain name, similar to how it can be notified on folder change. This would eliminate polling and maybe fix the sleep issue, but I haven't looked at the man page enough to see if it can be done.<br><div> <span class="Apple-style-span" style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0; "><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; "><font class="Apple-style-span" color="#8776B3" size="4"><b style="color: rgb(135, 118, 179); font-size: 14px; font-weight: bold; "><br class="Apple-interchange-newline">Ryan Harter</b></font></div><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; "><font class="Apple-style-span" color="#8776B3" size="2">UW - Stevens Point</font></div><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; "><font class="Apple-style-span" color="#8776B3" size="2">Workstation Developer</font></div><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; "><font class="Apple-style-span" color="#8776B3" size="2">715.346.2716</font></div><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; "><a href="mailto:Ryan.Harter@uwsp.edu"><font class="Apple-style-span" size="2"><span class="Apple-style-span" style="color: rgb(0, 0, 238); ">Ryan.Harter@uwsp.edu</span></font></a></div></span> </div><br><div><div>On Mar 2, 2009, at 10:35 AM, Thomas Larkin wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite"><span class="Apple-style-span" style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0; "><div style="line-height: normal; margin-top: 4px; margin-bottom: 1px; font-variant: normal; margin-left: 4px; margin-right: 4px; "><div style="margin-top: 0px; margin-bottom: 0px; "><font face="Lucida Grande" size="3">I had to let it search out mounted disk images and thumb drives, and there was one application folder with botched permissions that allowed them write access. They aren't admins but they have the brute force hacker mentality where they just keep trying every possible thing until they get it right. </font><br><br><br>___________________________<br>Thomas Larkin<br>TIS Department<br>KCKPS USD500<br><a href="mailto:tlarki@kckps.org">tlarki@kckps.org</a><br>blackberry: 913-449-7589<br>office: 913-627-0351<br><br><br><br><br><br>>>> Miles Leacy <<a href="mailto:miles.leacy@themacadmin.com">miles.leacy@themacadmin.com</a>> 03/02/09 10:32 AM >>><br>Assuming your users aren't admins, you could limit your search & destroy scripts to locations that a user has access to (i.e., ~ and /Users/Shared/).</div><div content="text/html; charset=UTF-8" http-equiv="Content-Type"><div style="margin-top: 0px; margin-bottom: 0px; "><br></div></div><div><div style="margin-top: 0px; margin-bottom: 0px; ">If your users are admins, you've got bigger problems. :)<br clear="all"><br>----------<br>Miles A. Leacy IV<br><br> Certified System Administrator<br> Certified Trainer<br>Certified Casper Administrator<br>----------<br>voice: 1-347-277-7321<br><a href="mailto:miles.leacy@themacadmin.com">miles.leacy@themacadmin.com</a><br><a href="http://www.themacadmin.com">www.themacadmin.com</a><br><br><br><br><br></div><div class="gmail_quote"><div style="margin-top: 0px; margin-bottom: 0px; ">On Mon, Mar 2, 2009 at 11:28 AM, Thomas Larkin</div><div dir="ltr"><div style="margin-top: 0px; margin-bottom: 0px; "><<a href="mailto:tlarki@kckps.org">tlarki@kckps.org</a>></div></div><div style="margin-top: 0px; margin-bottom: 0px; ">wrote:<br></div><blockquote class="gmail_quote" style="margin-top: 0px; margin-bottom: 0px; padding-left: 0px; border-left-width: 1px; border-left-color: rgb(204, 204, 204); border-left-style: solid; margin-left: 0px; margin-right: 0px; "><div><div style="margin-top: 0px; margin-bottom: 0px; "><font face="Lucida Grande" size="3">Well I was using search and destroy scripts using the find command and it killed my logs. I deleted those policies and I shaved off, get this, an epic 5 gigs off of my MySQL database on the JSS. It looks like the find command was indexing every single file on the computer, which is like millions, and even with limited scope search paths it was still too much.</font></div><div style="margin-top: 0px; margin-bottom: 0px; "><br></div><div style="margin-top: 0px; margin-bottom: 0px; "><font face="Lucida Grande" size="3">The find commands work well for one time execution over ARD admin though.</font></div><div class="ih2e3d"><div style="margin-top: 0px; margin-bottom: 0px; "><br><br><br>___________________________<br>Thomas Larkin<br>TIS Department<br>KCKPS USD500<br><a href="mailto:tlarki@kckps.org" target="_blank">tlarki@kckps.org</a><br>blackberry: 913-449-7589<br>office: 913-627-0351<br><br><br><br><br><br></div></div><div style="margin-top: 0px; margin-bottom: 0px; ">>>> Miles Leacy <<a href="mailto:miles.leacy@themacadmin.com" target="_blank">miles.leacy@themacadmin.com</a>> 03/02/09 10:24 AM >>><br></div><br><div><div><br></div><div class="wj3c7c"><div class="gmail_quote" content="text/html; charset=UTF-8" http-equiv="Content-Type"><div style="margin-top: 0px; margin-bottom: 0px; ">2009/3/2 Thomas Larkin</div><div dir="ltr"><div style="margin-top: 0px; margin-bottom: 0px; "><<a href="mailto:tlarki@kckps.org" target="_blank">tlarki@kckps.org</a>></div></div><div style="margin-top: 0px; margin-bottom: 0px; "><br></div><blockquote class="gmail_quote" style="margin-top: 0px; margin-bottom: 0px; padding-left: 0px; border-left-width: 1px; border-left-color: rgb(204, 204, 204); border-left-style: solid; margin-left: 0px; margin-right: 0px; "><div><div style="margin-top: 0px; margin-bottom: 0px; "><br></div><div style="font-size: 16px; font-family: 'Lucida Grande'; "><div style="margin-top: 0px; margin-bottom: 0px; ">So Casper will shut down Skype.app but me just listing it exactly what the process is called right?</div></div><div style="margin-top: 0px; margin-bottom: 0px; "><br></div></div></blockquote><div><div style="margin-top: 0px; margin-bottom: 0px; "><br></div></div><div class="gmail_quote"><div style="margin-top: 0px; margin-bottom: 0px; ">Right. I'd enter a message to display to the user, unless you want them to think that the app's failure to launch is a system issue, then you can have the help desk scold them when they call in. :)</div></div><div class="gmail_quote"><div style="margin-top: 0px; margin-bottom: 0px; "><br></div></div><div class="gmail_quote"><div style="margin-top: 0px; margin-bottom: 0px; ">What I really like is that you can send email notifications and delete the offending app too. This eliminates the need for "search and destroy" scripts for offending apps that you know about and don't want on your systems.</div></div><div style="margin-top: 0px; margin-bottom: 0px; "><br>----------<br>Miles A. Leacy IV<br><br> Certified System Administrator<br> Certified Trainer<br>Certified Casper Administrator<br>----------<br>voice: 1-347-277-7321<br><a href="mailto:miles.leacy@themacadmin.com" target="_blank">miles.leacy@themacadmin.com</a><br></div><div><div style="margin-top: 0px; margin-bottom: 0px; "><a href="http://www.themacadmin.com" target="_blank">www.themacadmin.com</a></div></div></div></div></div></div></blockquote></div><div style="margin-top: 0px; margin-bottom: 0px; "><br></div><span><ATT00001.txt></span></div></div></span></blockquote></div><br></div></body></html>