Managed Client: Active Directory users may not respect Dock settings from Workgroup Manager
Summary
Active Directory users may still be able to make changes to their Dock after configuring Dock settings in Workgroup Manager.
Products Affected
Mac OS X Server 10.4.7, Mac OS X Server 10.5, Active Directory
The Active Directory connector applies a default set of managed preferences that override the settings configured in Open Directory or Active Directory. These settings are stored in /Library/Preferences/DirectoryService/ActiveDirectory.plist on each client bound to Active Directory and appear as user-level preferences when viewed using System Profiler or the mcxquery command line tool in Mac OS X 10.5.
To force Active Directory users to use your Dock settings in Workgroup Manager, edit the ActiveDirectory.plist file on each managed client workstation. If available, Apple Remote Desktop can be used to send the Terminal command:
Mac OS X v10.5
Execute this Terminal command:
sudo /usr/libexec/PlistBuddy -c "delete AD\ MCX\ Template:mcx_application_data:com.apple.dock" /Library/Preferences/DirectoryService/ActiveDirectory.plist
Mac OS X v10.4
Execute this Terminal command:
sudo /Library/Receipts/AdditionalEssentials.pkg/Contents/Resources/PlistBuddy -c "delete AD\ MCX\ Template:mcx_application_data:com.apple.dock" /Library/Preferences/DirectoryService/ActiveDirectory.plist
Note: PlistBuddy is not installed by default in Mac OS X 10.4 although it can be found in a number of package receipts.