Keychain update via ARD?

Hello,
I'd like to run a unix command via ARD to update a password for a user and update the keychain login paassword is this possible?
It's an AD enviroment and sometimes when the AD password is changed via web or some other means the keychain password doesn't update automatically  I would like to run a command to force this update behind the scenes.
Thanks in Advance.

Here's the full data:
usage: softwareupdate <mode> [<args> ...]
     -l | --list          List all appropriate updates
     -d | --download          Download Only
     -i | --install          Install
          <label> ...     specific updates
          -a | --all          all appropriate updates
          -r | --recommended     only recommended updates
          -u | --url <url> ...     from signed package URLs
     Per-user preferences:
     --ignore <label> ...     Ignore specific updates
     --reset-ignored          Clear all ignored updates
     --schedule (on | off)     Set automatic checking
     -h | --help     Print this help
So in the Send Unix Command, to see what updates a workstation needed, you'd type:
softwareupdate -l
(that's the letter l as in "list")
and to have the system get all updates, you'd send:
softwareupdate -i -a
Set the user as root for all these commands (the Run Command as... dialog)

Similar Messages

  • Remote App Store Updates via ARD

    Has anyone managed to do App Store Updates over ARD, probably via a shell script or Apple script?
    Would be great, if you could share.
    Pete

    it would be nice if apple added a command line tool to do this.

  • Disable Microsoft Auto Updates via ARD/Terminal

    Hi there,
    We have rolled out 100 copies of Office 2011 to our 10.6.7 users.
    By default they are currently set to automatically check for Updates. I'd like to stop Microsoft Auto Update from running on each machine and then roll out updates (After our own testing) when we see fit using ARD. This will also save us huge amounts of bandwidth.
    Does anyone know how the terminal commands to stop Microsoft Auto Update from running automatically?
    I have asked over at Microsoft but I dare say they're not going to be too helpful!

    As an update to this thread.
    MCX would indeed be a way to do this for users, however MCX aka. Managed Preferences is deprecated in Mavericks and you should instead do this via Profile Manager. There is also another method you could use, if you put this preference in the User Template folder then any user account created afterwards will take a copy of the plist file and use it. The following command would create a plist in the User Template folder with this setting
    sudo defaults write /System/Library/User\ Template/English.lproj/Library/Preferences/com.microsoft.autoupdate2 HowToCheck Manual
    You could also add this to a DeployStudio (or similar) imaging work flow by adding the following to a generic script step
    /usr/bin/defaults write /System/Library/User\ Template/English.lproj/Library/Preferences/com.microsoft.autoupdate2 HowToCheck Manual
    By the way, my thanks to varjak for the original solution.

  • Unix command to update Microsoft Office 2008 via ARD

    I'm looking for a unix command I can send via ARD to update Microsoft Office 2008. It just needs to install all updates and then restart. Kinda like apple's software update one: softwareupdate -i -a; shutdown -r now

    Why go through all the trouble of trying to do it in Unix.  Apple and Microsoft made it a LOT easier.
    Just download the update from Mactopia
    Open the .dmg
    (for convience and ability to have it stored) Drag the Update from the Microsoft folder that opens up and put the update on your desktop
    In ARD Select what computer(s) you want to install the update in
    Use ARD Install function to install the update
    Go have a cup of coffee and a donut while ARD does the install.
    You do not even have to do a restart.  Microsoft uses a different icon for the update but it still is a package file operation.

  • Root vs. admin softwareupdate via ARD 2.0

    Hello,
    I've searched here and have not been able to find a similar post. I have an office of about 25 Tiger clients (10.4.6) which get their directory information via LDAP from a Tiger server(10.4.6). If I run softwareupdate from the GUI as an admin account or even from the command line as admin, softwareupdate looks to the local server, which is running the softwareupdate service. If, however, I run softwareupdate as root (which I have to do via ARD, from what I can tell) it checks Apple's servers and wants to download from them. This is a source of frustration because I don't want to have to visit every machine, nor do I prefer to download updates on my admin machine and then push the package out with ARD.
    I'm wondering if using softwareupdate via root is designed to work this way, or if it's a bug. If it's a bug, I'll report it to Apple.
    If this has happened to any of you, please resond with your solution.
    By the way, if I send this command:
    sudo -u admin softwareupdate -i -a
    via ARD as root user, I am prompted for a password, which I'm not sure how to enter. The task just fails.
    Thanks in advance!
    Sean

    It sounds like your group is pushing out Workgroup Management (MCX) from your MacOS X Server box, specifically they are setting the Software Update server. But it sounds like they are setting this as a policy based on groups, rather than on computers. So since root is not in any of the groups managed by the MCX settings, when you run Software Update it is not set, and is defaulting to the built-in address.
    If you really wanted to do it without making changes (if they don't want to put that in for "guest" computers and every other one), then you could use:
    defaults write /Library/Preferences/com.apple.SoftwareUpdate CatalogURL http://your.softwareupdateserver.com:8088/
    note that that last goes all on one line, and is taken from afp548.com.

  • Adobe apps fail to launch after copying via ARD 3

    For several years we have beeen updating our Adobe apps by updating our master image and copying (via ARD v.1, then v.2, now v. 3) the applications and the associated Application Support files to the target machines. (300 Macs running Tiger) Since upgrading to version 3 of ARD. Adobe apps fail to launch after they are replaced, even with the old files.
    I found a post alluding to a known issue with Acrobat from June. It stated it was a known bug that engineering was aware of. THAT was the only mention I could find. Does anyone know anything more about this? This is critical for our publishing workflow - Adobe has two updates that affect us in critical areas that we need to implement, but are reluctant to visit 300 individual desktops (even remotely) and run individual install patches.
    The silent install works great for installation, but does not address updates.
    Anyone?
    Mac OS X (10.4.7)
      Mac OS X (10.4.7)  

    Just FYI. I only had problems with InDesign not launching but this was a know issue with Adobe:
    http://www.adobe.com/support/techdocs/331578.html

  • Update of ARD "Info" Field  w/ Serial#

    Trolling through the forums I was able to find a true ARD gem. Placing the Serial # of a machine into one the the info fields of the sharing console.
    Below is a code snippet from Joel. D. Reid which is excellent on the 10.5.8 machines, but does not run on 10.4.11 (tiger) Can anyone offer a 10.4.11 solution that is similar?
    /System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/Resources/ki ckstart -configure -computerinfo -set2 -2 "$(system_profiler SPHardwareDataType | awk '/Serial Number/{print $NF}')" && sleep 2 && /System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/Resources/k ickstart -restart -agent -console ;
    Any help would be much appreciated.

    Just have a couple thoughts. I've had better luck with using kickstart proper than defaults for changing ard info fields and actually having the agent recognize the change. Also, if you're able to get it to update via kickstart, you could just append that to your script. I routinely send the following via Send UNIX Command as root for at-a-glance access to the serial number:
    /System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/Resources/ki ckstart -configure -computerinfo -set2 -2 "$(system_profiler SPHardwareDataType | awk '/Serial Number/{print $NF}')" && sleep 2 && /System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/Resources/k ickstart -restart -agent -console ;
    The 'sleep 2' was tacked in as sometimes kickstart apparently exits before it's actually done. The consecutive commands are appended using && rather than ; so the agent restart step isn't done unless the -setX -X one succeeds. Also note that if all works as planned, the ARD task never actually finishes as you're interrupting the remote ARD agent mid-stream; just wait for the clients to all return "Starting..." twice and then hit stop on that active task.
    In any case, you can change the -set2 -2 to choose an info field, then substitute in your Foo commands in place of "$(system_profiler SPHardwareDataType | awk '/Serial Number/{print $NF}')"
    Hope that helps some. Let us know how you've made out.
    Cheers, Joel

  • What Is The Point Of The Login & Keychain Update?

    I installed Leopard on Friday.
    It did not and still does not recognise my Username and/or Password.
    I note that a Login & Keychain Update has appeared in Software Update, its purpose being to address login & password issues "where the password is 8 or more characters".
    (1) I cannot install the Update because Leopard does not recognise my password.
    (2) My password is only 7 digits long yet I'm still unable to access my iMac properly.
    What's the point of issuing an Update for people who are unable to install it?

    Hopefull you will have already seen other posts explaining how to get past the login problem. This worked for me:
    1 Boot up from the install disc (hold down C key when restarting).
    2 Launch the installer as if you are going to install.
    3 From the Utilities menu, select reset Passwords
    4 In the username field type: System Administrator (root)
    5 In the password field type the password you want to use
    6 Quit the change passwords app
    7 From utilities, select Start Up Disk. Choose you HD as the start up disc and restart
    8 Once restarted, select accounts from the System Preferences menu
    9 Click the lock at the bottom left
    10 When asked for username and password, enter System Administrator as the username and the password you changed earlier as the password
    11 Click the enable user to administer computer check box for your account. Your account should now change from Standard to Admin.
    After I did that I could log in and download the software update. I was connecting via Ethernet. However, once thte update was installed my PB G4 stated that I do not have an airport card installed (which I obviously do). I still haven't found anything that works for me to fix that. I have given up for the moment.
    Hope this helps

  • Software Update via Unix command but get updates from my OS X server?

    I have a OS X server which I use to manage how software update runs on the clients. Currently when you run software update from the client it connects to the server and downloads what it needs which is much faster than downloading it via the internet each time.
    now, I would like to run a unix command via ARD that would run software update against the local server. Does anyone know the correct syntax for this? Running softwareupdate -l -a does not work. Thanks

    I'm also in the process of getting my Xserve setup as an internal software update server. I haven't gotten to the point of testing this yet, but I was under the impression that once the clients were managed, any software update command would force the clients to retrieve their updates from your internal server as specified in the MCX settings.
    I have a OS X server which I use to manage how software update runs on the clients. Currently when you run software update from the client it connects to the server and downloads what it needs which is much faster than downloading it via the internet each time.
    When you say that currently when you run software update from he client it connects to the server and downloads updates, are you referring to running the graphical Software Update tool?

  • How do I set the DVD region code via ARD?

    We recently deployed around 200 MacBooks in a k12 environment and manage them via ARD & WGM. We forgot to set the DVD region when creating our master image and as a result, every single MacBook prompts for an admin password when attempting to use the DVD Player to view a DVD for the first time.
    Instead of attending to each of the 200+ MacBooks personally and putting a DVD in and setting the region code one by one, is there a way I could do this via ARD? Unix command? Managed preference via WGM? Thanks, I appreciate any input.

    I've been working on this very topic for about a year. Here's what you need to know.
    1) setting the region code on your master image would result in the same behavior. Setting the region code triggers an update to the DVD drive firmware itself - it's not something that's stored in software. Obviously this is something that needs to be set on each machine individually. Setting it on the image won't affect the imaged-machines.
    2) Apple seems to have gone to great lengths to hide the app that triggers this action. If they had provided a simple CLI interface to trigger this on a client machine we'd be able to use ARD to trigger the action on all of our client machines. Alas, this app is buried somewhere I can't find and seems to only rear its head when a DVD with a region code is inserted into the drive. There is one idea that popped into my head while at Macworld that I want to try to see if I can find this app but I have my doubts.
    3) Failing my last ditch effort to find this app, I think our fallback will be to give users explicit rights to set the initial DVD region code on thier machines. This is something that can be done using WGM. There is a rule in /etc/authorication specifically allowing users/groups to set the region code for the first time. According to the notes, giving this access will NOT allow users to change the region code - which is a good thing - but only give them rights to do so the initial time. This way, we can empower our users to help themselves while also protecting them from resetting the region code accidentally.
    In conclusion, I haven't found any way to script/push this command to a client machine. I'll definitely file this with Bug Reporter and hope Apple will give us a CLI or an ARD command to trigger this action after imaging.
    G4   Mac OS X (10.4.8)  
    G4    
    G4    

  • Software Update via Server Admin 10.5.1 not working.

    I have a headless XServe running 10.5.1 that I control using Server Admin. Unfortunately, the feature to install updates via Server Admin doesn't seem to be working.
    When I click Check Now, it says it is "Checking for new software", then stays for a bit on "scanning in progress". It then stops, and there's no updates listed.
    When I use ARD to log into the machine and run Software Update there, there are updates to be installed.
    Does anyone know why this isn't working?

    I experienced this with a pre-release build from the past.
    You didn't specify where the build came from. Is it possible that the Admin that gave you the disk gave you an older pre-release build?
    These disks often came from bit torrents or the developer connection pre-release builds. Todays modern binaries are not compatible with the pre-release OS, so its typical to see the error messages that you have experienced.
    If you used a genuine apple branded production build then you may want to try the update again as I've seen that the update servers go down from time to time.

  • Root vs. admin softwareupdate via ARD

    Hello,
    I've searched here and have not been able to find a similar post. I have an office of about 25 Tiger clients (10.4.6) which get their directory information via LDAP from a Tiger server(10.4.6). If I run softwareupdate from the GUI as an admin account or even from the command line as admin, softwareupdate looks to the local server, which is running the softwareupdate service. If, however, I run softwareupdate as root (which I have to do via ARD, from what I can tell) it checks Apple's servers and wants to download from them. This is a source of frustration because I don't want to have to visit every machine, nor do I prefer to download updates on my admin machine and then push the package out with ARD.
    I'm wondering if using softwareupdate via root is designed to work this way, or if it's a bug. If it's a bug, I'll report it to Apple.
    If this has happened to any of you, please resond with your solution.
    By the way, if I send this command:
    sudo -u admin softwareupdate -i -a
    via ARD as root user, I am prompted for a password, which I'm not sure how to enter. The task just fails.
    Thanks in advance!
    Sean
    PowerBook G4 / 15 / 1.67GB / SD   Mac OS X (10.4.6)  

    It sounds like your group is pushing out Workgroup Management (MCX) from your MacOS X Server box, specifically they are setting the Software Update server. But it sounds like they are setting this as a policy based on groups, rather than on computers. So since root is not in any of the groups managed by the MCX settings, when you run Software Update it is not set, and is defaulting to the built-in address.
    If you really wanted to do it without making changes (if they don't want to put that in for "guest" computers and every other one), then you could use:
    defaults write /Library/Preferences/com.apple.SoftwareUpdate CatalogURL http://your.softwareupdateserver.com:8088/
    note that that last goes all on one line, and is taken from afp548.com.

  • Internet dead slow to stop with leopard keychain update

    Hi all. I have an imac intel 2 and connect to my base station via an ethenet connection and a macbook connecting via wireless. I have installed leopard on the imac but not on the macbook. My internet connection on the imac was fine until I updated the keychain software update and noticed a slower connection. To test this I updated itunes on the imac and on the macbook. The itunes was about 40meg and here was the download speed roughly. The imac connected via ethernet took 20mins to download and the macbook took 2 mins to download. Help apple because something in the keychain update has killed my internet connection. Even surfing is slower. Any help or suggestions would be great. thanks russ

    A few people have reported the same issue (me included) - Apple suggest rebooting your iMac in safe mode and then restarting - it worked for me and Internet is now fine and dandy.
    http://docs.info.apple.com/article.html?artnum=306879

  • Live Update of ARD "Info" Fields ?

    Hello I am using a script to update the 4 "info" fields available in ARD like so:
    defaults write /Library/Preferences/com.apple.RemoteDesktop Text1 "Foo"
    My issue is that the update doesn't get reflected until one of two things happens:
    A. I restart ARD using kickstart.
    B. Open and Close the "Computer Settings" panel in the Remote Management pane of sharing.
    Doing one of these two things every time I update this field is going to be impractical.
    Is there an elegant way to nudge ARD into updating the "info" columns like the "Computer Settings" pane is able to do?
    Thanks in advance for any help.

    Just have a couple thoughts. I've had better luck with using kickstart proper than defaults for changing ard info fields and actually having the agent recognize the change. Also, if you're able to get it to update via kickstart, you could just append that to your script. I routinely send the following via Send UNIX Command as root for at-a-glance access to the serial number:
    /System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/Resources/ki ckstart -configure -computerinfo -set2 -2 "$(system_profiler SPHardwareDataType | awk '/Serial Number/{print $NF}')" && sleep 2 && /System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/Resources/k ickstart -restart -agent -console ;
    The 'sleep 2' was tacked in as sometimes kickstart apparently exits before it's actually done. The consecutive commands are appended using && rather than ; so the agent restart step isn't done unless the -setX -X one succeeds. Also note that if all works as planned, the ARD task never actually finishes as you're interrupting the remote ARD agent mid-stream; just wait for the clients to all return "Starting..." twice and then hit stop on that active task.
    In any case, you can change the -set2 -2 to choose an info field, then substitute in your Foo commands in place of "$(system_profiler SPHardwareDataType | awk '/Serial Number/{print $NF}')"
    Hope that helps some. Let us know how you've made out.
    Cheers, Joel

  • My ipod touch will no longer download new apps after i updated via apple store.How can i get the updates deleted or correct the problem moving forward?

    My ipod touch will no longer download new apps after I updated via apple store.It freezes now when I attempt to download and blanks the app off entirely . How can I reverse the updates or correct the problem moving forward?

    Basics from the manual are restart, reset, restore.
    Try those

Maybe you are looking for

  • Login Issue in Portal system using SSO

    Dear All, We have Expressnet system version 7 - windows +SQL DB. If the user can able to login to EP using SSO. My question is single user is present in different Data Source in LDAP during this case how the user can able to login. Ex username: Priya

  • How can this encoding be saved in SQL Server 2008

    hi all, We are using Sql Server 2008, it has this collation set "SQL_Latin1_General_CP1_CI_AS". Please have a look at this file: https://drive.google.com/file/d/0BxWAyvJA9ZjCdkFNN3BXZUw3dEE/view?pli=1 its a text file in text format (ascii test data f

  • Apps in "purchased" are not mine!

    Many apps are showing up in my "purchased" apps for iPhone and iPad which I am certain I have not downloaded. Has this happened to anyone else? Also, is there any way to find out from apple the IP screws where these were downloaded from, or perhaps t

  • Re submit

    THe page has submitted and user used back button and try to resubmit it is giving following error. hOw can we fix this. I have already read the forums but don't know what is the issue. ORA-20503: Current version of data in database has changed since

  • Production Deployment

    Hello, I'm new to stored procedures and packages, and looking for a some direction. My application is constantly changing and enhancing, and I see that when I write my procedures, i explicitly declare what the inputs and outputs are. Considering a ve