Or push a policy to create a temp account. (Better yet… use Jamf with random admin passwords with rotation and use Remote to have audit-able ssh. Your super-long master admin account password is hard to type correctly and you can give the new temp account info to a desk-side tech and not have to reveal the master password that works on every laptop in the enterprise. Tip: If you’re sending desk-side support out to the user and don’t want to share the master admin login. Consider creating a temporary admin account on the machine that’s having issues. If you don’t have physical access to the machine try to ssh in… ssh (or IP address) I get different results when I run id as an admin on OS X 10.6 than I do when running as an admin on OS X 10.5.Say a user reports they forgot their password and you have an admin login on their machine. It appears to me that this might differ depending upon the version of OS X you are running. The script does let you specify which groups a user should belong to. passwd /Users/$USERNAME $PASSWORDĭseditgroup -o edit -t user -a $USERNAME $GROUPĮcho "Created user #$USERID: $USERNAME ($FULLNAME)" create /Users/$USERNAME NFSHomeDirectory /Users/$USERNAMEĭscl. create /Users/$USERNAME PrimaryGroupID 20ĭscl. create /Users/$USERNAME UniqueID "$USERID"ĭscl. create /Users/$USERNAME RealName "$FULLNAME"ĭscl. create /Users/$USERNAME UserShell /bin/bashĭscl. list /Users UniqueID | awk '' | sort -ug | tail -1)ĭscl. If ] then echo "Please run $0 as root." & exit 1 fi SECONDARY_GROUPS="admin _lpadmin _appserveradm _appserverusr" # for an admin user #SECONDARY_GROUPS="" # for a non-admin user # This makes the difference between admin and non-admin users. # A list of (secondary) groups the user should belong to # = Typically, this is all you need to edit = # Written by Clinton Blackmore, based on work at
# (tested with 10.5 and 10.6 likely works with 10.4 but not earlier) # This script creates a user account under Mac OS X
Admittedly, this isn't designed for running a command at a time from ssh it is moreso designed to be a script run when compiling a package-based image of OS X (as created by Casper Imaging or InstaDMG).
I've leveraged the different answers here to come up with what I think is a nice script to create user accounts.
0 kommentar(er)
