The purpose of this package installer is to provide you with an easy way to install a package that will make the currently logging in user a local admin on the computer. It checks to see if the user exists in Open Directory in a group named "administration" (this must be the exact short name of the group in Open Directory - without quotes). If that user exists in that group, they are added to the local admin group on the machine they are logging into, so that they can do anything a local admin can do on the specific workstation. As soon as you take this user out of the group in Open Directory (and they log out of the machine), they will be removed from the local admin group on the workstation. This way, you can somewhat dynamically give users local admin access, if needed, without having to touch any of the machines. This also works with Mobile Accounts (PHD's) - so if you want to have a user login and have a mobile account created (via Workgroup Manager) - it will also make them a local administrator for their computer - without you needing to check the box in System Preferences that allows them to be an administrator of that computer. And again, if you need to take away that control, you can simply remove them out of the administration group in Open Directory, and once they logout and log back in, they will no longer be a local administrator. All local accounts (accounts created on the local machine - not from a directory server) are exempt from this script.
The package installs the following:
/etc/login.hook
/etc/logout.hook
/etc/hooks/LIdseditgroup.hook
/etc/hooks/LOdseditgroup.hook
/etc/hooks/masterlogin.hook
/etc/hooks/masterlogout.hook
Sets a login and logout hook (defaults write /private/var/root/Library/Preferences/com.apple.loginwindow LoginHook /etc/login.hook and logout.hook)
I have added in all of my packages, to take one or more of the packages that I have created, and install them on top of each other. By default, only one script can be associated with a login hook, but by installing any of my packages, you will be able to install multiple login scripts that will all run at login. So, if you want to use several of my packages, you don't have to try and figure out how to get them all inside of one script - simply install any of the installer packages and that package will get added to any of your existing login/logout hooks (and if you don't have any set, it will set up the current package up as a login hook).
Disclaimer: Use these packages and scripts at your own risk. Although I have complete confidence in these scripts, you are reminded that use of these scripts are at your own risk without any warranty. In no event shall I be liable for any damage that these scripts might cause. Test these scripts out extensively before mass deploying it to your machines.
Questions - please contact me at jochsner1@me.com
