From: Richard G. <ric...@ut...> - 2015-01-29 17:28:19
|
On Jan 29, 2015, at 6:58 AM, Cover, Chris <Co...@wp...<mailto:Co...@wp...>> wrote: I think you misunderstood the Negative Transcript Anxiety(tm) comment. I meant that with every major OS release one had to carefully look at the Negative transcript for things that could break. The open directory change would be one example. It could be time consuming to figure out what needed to be added/removed from a Negative Transcript for the OS. Ok, understand, but better documentation and better/easier community sharing of negatives would help was the time spent on creating/testing a negative. Also in regards to the Transcript editor, while I eventually moved to TextWrangler for those things, the “official” transcript editor was IMHO a far better way of dealing with large transcripts so I preferred to do work there. We use BBEdit and haven't had any issues with large transcripts. What was better with the “official” transcript editor? Can you provide details? And no, we absolutely could not force anyone to move items to their home folders if they were admins and certainly had no way of predicting what they may have “forgotten" was in the Applications folder prior to a RADMIND session. K, understand, we don't allow users be admins in our environment, so, it hasn't been an issue. You could probably script a solution around the issue. One idea, is if you don't distribute any applications at the root of the Applications folder you could move any found applications to ~/Applications. Probably multiple ways to workaround this issue. Christopher D. Cover Macintosh Support College Hall Rm 140 Wayne NJ, 07470 973-720-3664 co...@wp...<mailto:co...@wp...> Please make help requests via the ticketing system at: http://wpunj.edu/helpdesk --- The William Paterson University IT Wiki: https://itwiki.wpunj.edu/index.php/Main_Page On Jan 28, 2015, at 5:03 PM, Richard Glaser <ric...@ut...<mailto:ric...@ut...>> wrote: Thanks: Richard Glaser University of Utah, Marriott Library ITS ric...@ut...<mailto:ri...@sc...> On Jan 28, 2015, at 2:33 PM, Cover, Chris <Co...@wp...<mailto:Co...@wp...>> wrote: In my case three things made me move from RADMIND: 1) The difficulty in getting “good” negative transcripts for OS releases. Every major release lead to “negative transcript anxiety” for me. Even specialized updates became a thing of horror. And or document the process better for people using it. Maybe have a wiki page everyone can contribute? 2) App store installs from people who were admins. Since RADMIND would blow away anything not installed by us we began to have serious conflicts with people wishing to install their own software and who wouldn’t use their own home folders for such installs (and app store applications typically did not go there by default). A self-serve component would have probably eased some of this. Hum, you can’t tell them to copy it to their home folder? Or maybe a solution to force it, but have seen or researched it. 3) The Transcript editor issue of breaking transcripts. I got bitten by that NOT a few times. My fault for not pushing copies to client machines that I had to run it on, but to bork a long transcript by accidentally opening it in a “wrong” version of transcript editor was not fun times. We don’s use the transcript editor. I do miss the largely “known state” thing with RADMIND. -- Christopher D. Cover Macintosh Support College Hall Rm 140 Wayne NJ, 07470 973-720-3664 co...@wp...<mailto:co...@wp...> Please make help requests via the ticketing system at: http://wpunj.edu/helpdesk --- The William Paterson University IT Wiki: https://itwiki.wpunj.edu/index.php/Main_Page On Jan 26, 2015, at 3:34 PM, Richard Glaser <ric...@ut...<mailto:ric...@ut...>> wrote: What we do with staff is we make sure they all have big enough hard disks to handle all the software we distribute globally. I am not sure, I understand the logic of a self-service model from a user service/support means, maybe a budgetary means. Not purchasing software that you users don't use. We use Keyserver to audit usage and modify licensing depending on the software usage. With radmind you need a solution that allows dynamic individual command files that the user can edit via a GUI and update somehow on the radmind server? How about a web interface that they user authenticates and can add/remove software from their command file using some sort of user-friendly GUI? Are there any other reasons outside the self-service you are using Munki 2? I think for many it is easy to just distribute installers and munki makes it easy to ingest installer, dmg's, etc. If there was a tool to make it easy for radmind to ingest installers, dmg's, etc. would that help? Any other reasons? On Jan 26, 2015, at 1:12 PM, Jim Kirkum <ji...@bg...<mailto:ji...@bg...>> wrote: The plan for Munki 2 would be to provide the App Store experience for self-service in faculty/staff offices. We are looking to try to replicate (or actually improve in my opinion) the “Application Catalog” experience our Windows users receive through Microsoft SCCM on the Mac. I think that Munki 2 offers the best GUI for this use case. Here are some screenshots for comparison: SCCM Example: http://blogs.technet.com/cfs-file.ashx/__key/communityserver-blogs-components-weblogfiles/00-00-00-69-65/4745.AppCatalog1.jpg Munki 2 Example: http://wiki.munki.googlecode.com/git/images/managed_software_center.png With Munki 2, we will be able to allow clients to pick/choose which apps they want to install/uninstall/update on their office computer as well as make some items “required”. This will reduce tickets coming into the help desk as clients should be able to complete these operations themselves for the most part. If there was a similar, client-friendly GUI for radmind, then I would certainly entertain the idea of using it, but alas such does not exist currently. We are getting rid of using Altiris for software deployment in offices, as it has proven unreliable, particularly for Mac software deployment. Jim -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- James Kirkum, Jr. Server Administrator Information Technology Services Bowling Green State University Bowling Green, OH -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- On 1/26/15, 2:33 PM, "Richard Glaser" <ric...@ut...<mailto:ric...@ut...>> wrote: Why are you using Munki 2 vs Radmind for faculty/staff? What are the pro's or con's in your environment? Are you using self-service? On Jan 26, 2015, at 12:30 PM, Jim Kirkum <ji...@bg...<mailto:ji...@bg...>> wrote: I am right around 800 as well for our main campus public and department computer labs, laptop carts, classrooms, internet stations, as well as the Mac computer labs at one of our satellite campuses. It works so well for us for lab management, I would prefer to not move away from it. We are in the early stages of adopting Munki 2, but the plan is to use it as an SCCM-equivalent for office faculty/staff users. I am not planning to use it as a radmind replacement for what I am using radmind for currently. Jim -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- James Kirkum, Jr. Server Administrator Information Technology Services Bowling Green State University Bowling Green, OH -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- On 1/26/15, 2:12 PM, "Richard Glaser" <ric...@ut...<mailto:ric...@ut...>> wrote: We are using radmind to manage labs and staff around 800. On Jan 26, 2015, at 11:59 AM, Rodd Kleinschmidt <rkl...@uc...<mailto:rkl...@uc...>> wrote: If we’re taking a headcount, I still use radmind to manage 21 computer classrooms/labs (~450 Macs) at UC Davis. My unit does not have a need to manage office/staff machines, so seeing radmind maintained is more in our best interest than moving to a package-based system. Sincerely, Rodd Kleinschmidt Computer Lab Manager IET-Academic Technology Services University of California, Davis On Jan 26, 2015, at 8:44 AM, Tom Johnson <pal...@pu...<mailto:pal...@pu...>> wrote: Purdue still uses Radmind for its central classroom computer labs. From conferences and mailing list chatter many have moved over to packaged based deployment systems - often Munki or Casper. This is particularly the case if the IT folks manage both office and lab machines. However, in lab spaces Radmind offers a lot that I want to keep. - I know what is on the file system. None of the stuff my Windows co-workers deal with SCCM side where you know whether a package you made deployed or not, but not what is actually on the file system. - Ability to clean house - remove stuff that isn't supposed to be there. - Compare existing files to known good files to find modifications/corruption/intrusions . This is particularly nice when you have files that have to be world writable for the application to work. - My Windows coworkers reimage machines daily to fix problems. Nuke and pave. I check the Radmind log file my process keeps and if that looks good, I for directory structure corruption or a bad HD (though, usually you see both of those in errors in the Radmind runs). About the only reason I ever need to reimage a Mac is a dead/trashed HD. Tom "Macintosh Doctor" Johnson pal...@pu...<mailto:pal...@pu...> On Jan 26, 2015, at 08:14 , Scott Hannahs wrote: Sam, I agree about the AV capabilities. Apple does something in the pkg receipts that has a checksum and can detect when a file is modified. But it is not widely used. The man page on bom mentions a checksum and if you look at the entry for the "ls" command: ./bin/ls 100555 0/0 80752 847817710 This gives a filename, permissions, group/user, size, and ??? I am not sure if that last entry is a date or a checksum and what format. Of course this is for OS X only unless linux distributions are starting to keep BOM type files? It might be interesting to start comparing basic OS transcripts for versions of the OS. Modified, corrupted, or compromised files would be easy to spot. This would be a future version of radmind that would check against a crowdsourced "golden" version. But then I wonder how many folks are actually still using radmind? I know our campus has started to use munki but our lab by inertia has found that radmind works well and is staying with it. I used to use "Assimilator" under OS 8 and 9. -Scott On Jan 26, 2015, at 00:30, Sam Agnew <sa...@qa...<mailto:sa...@qa...>> wrote: I just want to say, it is nice to see someone picking up the ball and running with it. I’m not in the client management game in my current post but Radmind is too good to die. In fact, as I have said earlier, I think this sort of “whole disk whitelisting” may someday be the only sort of AV that is effective. It certainly took all the guesswork out of our client management when we were using it here. ------------------------------------------------------------------------------ Dive into the World of Parallel Programming. The Go Parallel Website, sponsored by Intel and developed in partnership with Slashdot Media, is your hub for all things parallel software development, from weekly thought leadership blogs to news, videos, case studies, tutorials and more. Take a look and join the conversation now. http://goparallel.sourceforge.net/ _______________________________________________ Radmind-users mailing list Rad...@li...<mailto:Rad...@li...> https://lists.sourceforge.net/lists/listinfo/radmind-users ------------------------------------------------------------------------------ Dive into the World of Parallel Programming. The Go Parallel Website, sponsored by Intel and developed in partnership with Slashdot Media, is your hub for all things parallel software development, from weekly thought leadership blogs to news, videos, case studies, tutorials and more. Take a look and join the conversation now. http://goparallel.sourceforge.net/_______________________________________________ Radmind-users mailing list Rad...@li...<mailto:Rad...@li...> https://lists.sourceforge.net/lists/listinfo/radmind-users Thanks: Richard Glaser University of Utah, Marriott Library ITS ric...@ut...<mailto:ric...@ut...> Thanks: Richard Glaser University of Utah, Marriott Library ITS ric...@ut...<mailto:ric...@ut...> Thanks: Richard Glaser University of Utah, Marriott Library ITS ric...@ut...<mailto:ric...@ut...> ------------------------------------------------------------------------------ Dive into the World of Parallel Programming. The Go Parallel Website, sponsored by Intel and developed in partnership with Slashdot Media, is your hub for all things parallel software development, from weekly thought leadership blogs to news, videos, case studies, tutorials and more. Take a look and join the conversation now. http://goparallel.sourceforge.net/_______________________________________________ Radmind-users mailing list Rad...@li...<mailto:Rad...@li...> https://lists.sourceforge.net/lists/listinfo/radmind-users Thanks: Richard Glaser University of Utah, Marriott Library ITS ric...@ut...<mailto:ric...@ut...> |