Many of these short scripts are from various sources…
But a large number, are from the Apple Leopard Security Configuration, 2nd Edition, guide… These are some of the scripts that I have found useful at work, and for quick and easy use from ARD (Apple Remote Desktop).
To Force the system to download & install all updates from the Apple Software Update Server
# Updating from Internet Software Update Server
# -----------------------------------
# Download and install software updates.
softwareupdate --download --all --install
To Force the system to download & install all updates from the Apple Software Update Server, on a package by package basis.
# Updating from Internet Software Update Server
# Updating Manually from Installer Packages
# -----------------------------------
# Download software updates.
softwareupdate --download --all
# Install software updates.
installer -pkg $Package_Path -target /Volumes/$Target_Volume
Running Disk Utility to Repair Disk Permissions via command line
# -----------------------------------
# Repair disk permissions.
diskutil repairPermissions /Volumes/$Target_Boot_Drive
Add Access Warnings to the Login Window
sudo defaults write /Library/Preferences/com.apple.loginwindow LoginwindowText “Warning Text”
Hide Users below User # 500
sudo defaults write /Library/Preferences/com.apple.loginwindow Hide500Users
-bool YES
# Change an account’s password.
# Don’t use the following command on a computer that could possibly have
# other users logged in simultaneously.
sudo dscl . passwd /Users/$User_name $Oldpass $Newpass
Remove Password hints.
defaults write /Library/Preferences/com.apple.loginwindow RetriesUntilHint -int 0
# Set the login options to display name and password in the login window.
defaults write /Library/Preferences/com.apple.loginwindow SHOWFULLNAME -bool yes
# Disable Show the Restart, Sleep, and ShutDown Buttons.
defaults write /Library/Preferences/com.apple.loginwindow PowerOffDisable -bool yes
Disable fast user switching.
defaults write /Library/Preferences/.GlobalPreferences MultipleSessionEnabled -bool NO
Disable Recent Applications
# -----------------------------
# Disable display of recent applications.
defaults write com.apple.recentitems Applications -dict MaxAmount 0
Securing Desktop & Screen Saver Preferences
# Set idle time for screen saver. XX is the idle time in seconds.
defaults -currentHost write com.apple.screensaver idleTime -int XX
