Setting up a new Mac

Last updated Aug 27, 2021

- Ethernet where possible, otherwise public wifi

- Create account as ladmin/the usual, no to everything

- Set signin to username+password fields instead of "list of users"

- Name the Mac

- Enable ARD + remote login, for ladmin only

- Turn off gatekeeper (open Security preference pane, authenticate, select "Allow apps from anywhere")

    If that option is gone (on newer OS's), open Terminal and become root and type

    spctl --master-disable

    followed by the return key.

- Install munki and reboot when prompted

- Log in as ladmin, go to http://munki.crossroadsacademy.org and do what it says 

- Install the STINKING Sharp drivers by hand (thumbdrive)

- Enroll to Meraki:

m.meraki.com

041-181-7860

https://m.meraki.com/?enrollment_code=041-181-7860

- Install/configure/activate ESET + MalwareBytes <- munki should handle this, just need to enter the serial number

- Run Managed Software Center and pick 

Word/Excel/PPT 

HP printer drivers 5.1

Install those + everything else it finds (Meraki, Splashtop, etc.) This will also do the correct wifi profile, printers, Java, VLC, TextWrangler, Chrome, Flash

- Install Apple software updates

    - Security patches, etc. can be installed without a password. Click "Update all" and then hit "Cancel" each time it prompts for an Apple ID, and it will install everything that it can. 

    - To update apps, use "configurator@crossroadsacademy.org" Apple ID

- Make Chrome the default browser when prompted.

FOR FACULTY MACS:

- Create local account for teacher following standard convention -- first and last name in "Full Name" box, first initial last name in "Account Name" box, default password (they can change later), and account should be "Standard."

- Sign in as that teacher. 

- Set up Google Drive

FOR STUDENT MACS:

- Join to AD

- Go into Directory Utility and disable the UNC mapping thing:

- Under "Sharing," enable remote management for administrators only

- Set up "Student" account as standard, no password, with parental controls, THEN go to Web tab and allow unrestricted, go to Other tab and disable changing password: