Click on Pictures to View

To view a larger version of an image within a post, just click on the picture you want to view :)

Wednesday, September 30, 2015

How to Install McAfee Agent 4.x on a Mac

Here's a how-to about installing and "awakening" the McAfee Agent on a Mac computer.  McAfee articles and other sources are listed at the bottom.

First log on to the Mac as an administrator

Copy the file install.sh from this location:

<Your McAfee ePO Directory>\DB\Software\Current\EPOAGENT3700MACX\Install\0409

and paste it on the Mac's desktop.

Open a Terminal window (type "Terminal" in the spyglass)

Navigate to the desktop by typing cd desktop and press enter

Type sudo chmod +x install.sh and press enter

Type the administrator password when prompted...

Begin the installation by typing sudo ./install.sh -i and press enter

Type the administrator password again if prompted

The terminal will show notification once the installation is complete.

Wake up the agent by typing sudo /Library/McAfee/cma/bin/cmdagent -p

Enter the administrator password if prompted





Sources and Useful Links:

How to Uninstall & Reinstall the McAfee Agent on a Mac:

https://kc.mcafee.com/corporate/index?page=content&id=KB61125

How to Start, Stop and Restart the McAfee Agent on a Mac:

https://kc.mcafee.com/corporate/index?page=content&id=KB71313&actp=LIST

How to Use Command Line Switches with McAfee Agent on a Mac:

https://kc.mcafee.com/corporate/index?page=content&id=KB52707

How to Start and Stop McAfee Agent Services on Yosemite:

https://kc.mcafee.com/corporate/index?page=content&id=KB83950

Article about Managed and Unmanaged Agents of Macs in the ePO Orchestrator:

https://thegr8thurston.wordpress.com/2010/04/16/managing-mac-osx-mcafee-agents/

Friday, September 25, 2015

Can't Ping VLAN (ELAN) from Outside the Local LAN?

So here's a short post.

I installed a Cisco layer 3 switch and moved all the configs for the local LAN's VLANs, ip routing, from the old switch and router etc. over to the new switch.

Everything seemed fine and dandy upon completion, and I could ping back to Headquarters from the remote site, and could get internet and intranet access, etc.

However, it turned out that Headquarters (or any other remote site than the one where I installed the switch) reported they could not ping the ELAN for that site.
So all data, voice and wireless VLANs for that site were pingable from Headquarters, but the ELAN was not pingable.

Back on site, everything seemed to be working, and I could ping everything from within the local LAN.  It just seemed that from OUTSIDE my local LAN, ELAN was unreachable.


Solution:


I double-checked the EIGRP routing statement on the layer three switch with a simple "show run."
Sure enough the ELAN IP address was missing from the EIGRP statement.

Once I added that in, I was able to ping the ELAN from outside the LAN and it was available for Telecomm's purposes.


So if you can ping inside the network, but not FROM outside the network, check your routing statement!

...also, if you are adding in equipment, make sure your configs are correct!


Short Info on ELANs:

http://www.c-sharpcorner.com/Interviews/answer/851/what-is-a-vlan-what-is-an-elan-what-is-the-difference




Friday, September 11, 2015

Customize Windows 7 Profile for OS Deployment

Here is how I customized the Windows 7 profile for mass deployment using an SCCM 2012 Task Sequence.

After some research, I wrote a .cmd script to modify the parts of the user profile I wanted customized.

The script does the following:

1) Renames old Windows 7 default user account picture filename
  • Ren "C:\ProgramData\Microsoft\User Account Pictures\user.bmp" user.bmp.bak

2) Copies the custom picture from the distribution point to the computer (sets the default account pic)
  • Copy "%~dp0user.bmp" "C:\ProgramData\Microsoft\User Account Pictures" /Y

3) Takes ownership of old Windows 7 default background filename as Administrators Group
  • Takeown /f C:\Windows\Web\Wallpaper\Windows\img0.jpg /A

4) Grant SYSTEM full control of the old default background filename
  • Echo Y | icacls "C:\Windows\Web\Wallpaper\Windows\img0.jpg" /grant "SYSTEM":F

5) Copies the custom picture from the distribution point to the computer (sets the default background)
  • Copy "%~dp0img0.jpg" "C:\Windows\Web\Wallpaper\Windows" /Y

6) Deletes the games folder from the startup menu for all users
  • Rd /s /q "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games"



I put all of those in a notepad text file with REMARK lines between them so I remember what each line does, then saved it as a .cmd file. (The below script also calls a second command script at the bottom)



I then copied all the relevant files that were needed (custom pictures, .cmd scripts, etc) to my distribution point(s).

After verifying that the script would run okay locally, I created a PACKAGE containing the .cmd file in SCCM 2012, and then added an "Install Package" line within my task sequence.

Package:

Task Sequence :


*Don't forget to tick the box that says "Allow this program to be installed from the Install Package task sequence without being deployed" option on the Advanced tab of the package program properties dialog box.

After running the task sequence, the computer had a new custom default profile picture for all local and domain users, a custom default background wallpaper for all local and domain users, and removed games folder from start menu.  The second script also sets the Control Panel view to "Classic" for all users, sets specific Windows icons on the desktop for all users, and sets the specified theme as well (actually, I removed the theme part from the second script because ours is managed via GPO so I don't know how well that part works with the changed background to custom image, or if it overwrites it, to be honest).

With this method of deploying the user profile picture and background, the end user can still opt to further customize their pictures themselves as well.





For further information on the second .cmd script, called in the script I wrote, see this article:

https://www.itsupportguides.com/windows-7/windows-7-default-profile-with-configmgr/


Sources:

https://social.msdn.microsoft.com/Forums/windowsdesktop/en-US/1703c3f4-a2ea-4c4a-a73f-a93e6d51b2bb/windows-7-user-profile-creation-overwrites-custom-wallpaper

http://www.askvg.com/simple-trick-to-replace-default-built-in-flower-profile-picture-for-all-user-accounts-in-windows-7/

https://community.spiceworks.com/how_to/22362-how-to-set-a-default-user-logon-picture-windows-7

http://www.bonusbits.com/wiki/HowTo:Change_the_Default_Background_and_User_Image_on_Windows_7e