Salt Stack - salt-grains-environment
During my adventures with Salt Stack, I was having issues wrapping my head around how I was going to control what environment my dev machines were in. I even thought that pillar[environment] returning None was a bug. Turns out, I just needed to think more about what process would work in my environment.
GPO - Not Applying User Policy
We spent the day working on an issue where our User Policy wasn’t being applied to the User AD Object logging into a computer. We confirmed the usual steps:
- User AD Object is in the OU where the GPO is applied.
- GPO is enabled.
- Security Filtering is not filtering out the User AD Object.
The policy was simply not showing up on the computer (would not display with `gpresult /r`). After some more digging, we found the issue:
Salt Stack - salt-osx-grains
Additionally, I decided that it would be useful to store the computer’s Company Asset Number in nvram, and make that available in grains.
Adventures with Salt Stack
I have been in IT for over 15 years. most of that tenure has been managing Windows - mostly in the Desktop/Laptop realm. This means that I’ve got a lot of experience with AD, GPO, SCCM, scripting, etc.
Recently, I took over the management of Apple Desktops/Laptops for the organization that I work for. Before now, Apples were the outlier — just give the user admin rights and good luck. Now that it’s my purview, I’m opting for more centralized management technique. Something to, as closely as possible, mimic GPO (for managing settings) and SCCM (for managing software) for Windows.
PowerShell - Install Firefox
My solution installs a particular version and language of Firefox. If the language is not specified, it will check for a current install and match that language, defaulting to en-US.