Papercut and AD

Good read if you are new to Papercut and AD

Force OSX to use SMB1

You can force connections to default to SMB1 via an nsmb.conf file placed in /etc

sudo echo “[default]” >> /etc/nsmb.conf
sudo echo “smb_neg=smb1_only” >> /etc/nsmb.conf

How to Disable System Integrity Protection (rootless) in OS X El Capitan

Apple has enabled a new default security oriented featured called System Integrity Protection, often called rootless, in OS X 10.11 onward. The rootless feature is aimed at preventing Mac OS X compromise by malicious code, whether intentionally or accidentally, and essentially what SIP does is lock down specific system level locations in the file system while simultaneously preventing certain processes from attaching to system-level processes.

While the System Integrity Protection security feature is effective and the vast majority of Mac users should leave rootless enabled, some advanced Mac users may find rootless to be overly protective. Thus, if you’re in the group of advanced Mac users who do not want SIP rootless enabled on their OS X installation, we’ll show you how to turn this security feature off.

For those wondering, System Integrity Protection locks down the following system level directories in OS X:

/System
/sbin
/usr (with the exception of /usr/local subdirectory)

Accordingly, rootless may cause some apps, utilities, and scripts to not function at all, even with sudo privelege, root user enabled, or admin access.

Turning Off Rootless System Integrity Protection in OS X El Capitan 10.11 +

Again, the vast majority of Mac users should not disable rootless. Disabling rootless is aimed exclusively at advanced Mac users. Do so at your own risk, this is not specifically recommended.

1. Reboot the Mac and hold down Command + R keys simultaneously after you hear the startup chime, this will boot OS X into Recovery Mode
2. When the “OS X Utilities” screen appears, pull down the ‘Utilities’ menu at the top of the screen instead, and choose “Terminal”
3. Type the following command into the terminal then hit return:

csrutil disable; reboot

1. You’ll see a message saying that System Integrity Protection has been disabled and the Mac needs to restart for changes to take effect, and the Mac will then reboot itself automatically, just let it boot up as normal

You can also issue the command by itself without the automatic reboot like so:

csrutil disable

By the way, if you’re interested in disabling rootless, you may also want to disable Gatekeeper while you’re in the command line too.

If you plan on doing something else in the Terminal or OS X Utilities screen you may want to leave off the auto-reboot command at the end, and yes, in case you were wondering, this is the same recovery mode used to reinstall OS X with Internet Recovery.

Once the Mac boots up again, System Integrity Protection will be disabled entirely in OS X.

Checking the Status of Rootless / System Integrity Protection in OS X

If you want to know the status of rootless before rebooting or without rebooting the Mac into recovery mode, just issue the following command into the Terminal:

csrutil status

You’ll either see one of two messages, enabled indi:

$ csrutil status
System Integrity Protection status: enabled.

or

$ csrutil status
System Integrity Protection status: disabled

If at any time you wish to change the status of rootless, another reboot into Recovery Mode is required.

How to Re-Enable Rootless System Integrity Protection in OS X

Simply reboot the Mac again into Recovery Mode as directed above, but at the command line use the following syntax instead:

csrutil enable

Just as before, a reboot of the Mac is required for changes to take effect.

As previously stated, the vast majority of Mac users should leave rootless enabled and embrace System Integrity Protection, as most OS X users have no business in the system level directories anyway. Adjusting this feature is really aimed at advanced Mac users, whether IT, sysadmins, network administrators, developers, tinkerers, security operations, and other related highly technical fields.

Turn off Autocorrect – OSX

If you’ve decided that you no longer want to use Auto-Correction in OS X, follow these steps:

1. Open System Preferences (choose Apple > System Preferences).
2. Choose Keyboards.
3. Click the Text tab.
4. Deselect the tick in Correct Spelling Automatically.

Duplicate Users in OSX

Mac OS X has a template for users, it’s located in /System/Library/User Template/.lproj (in most cases, will be English.) In that folder, there’s the whole basic structure of a user directory.
These folders only can be read/written by root, so you have to access it in a root shell.

If you want to use the “copy home directory method”, you could do this:
1. Create a new user.
2. Copy the sub-folders you need of your current ~/Library to the new one; especially you’ll probably need to copy the folders Application Support (data from apps) and Preferences (app preference files), and delete unwanted stuff from it afterwards.

Papercut Secondary Server

Check DNS settings of Mac, especially if a .local domain

Switch between extended and mirrored on Macs

• Press Command-F1 to toggle between video mirroring and extended desktop
• Press Command-F2 to detect displays

Disable Restore Windows

How to disable the Restore Previous Windows Functions in the MAC OS

1. Close all Word documents if you can
2. Click on the Apple symbol and select System Preferences.
3. Select General in the window that opens.
4. Ensure that Restore windows when quitting and re-opening apps. Underneath, you will also have an option that allows you to select a number of documents to open. I change this figure to zero. Save the changes.
5. Now you will need to click on the Apple symbol and System Preferences again. This time, choose Shut down.
6. Deselect the checkbox beside Reopen windows when logging back in. Complete Shut Down and Restart.
7. Upon restart,  try launching Word again. This time it should just open up the new document screen.

Enable DNS Yosemite

sudo discoveryutil mdnsactivedirectory yes

Full credit to stackexchange

OS X Mavericks v10.9.1: Repeated prompts to unlock “Local Items” keychain

After logging in, you are repeatedly prompted to unlock the “Local Items” keychain in multiple apps.

Note: This article is about the “Local Items” keychain, not the “Login” keychain. Please see this article for issues with “Login” keychain password.

Follow these steps to prevent prompts to unlock the Local Items keychain.

1. In Finder Select Go > Go to folder (⇧⌘G)
2. In the window that appears, type the following:

   ~/Library/Keychains/

3. Click OK.
4. Look for a folder with a name similar to this “A8F5E7B8-CEC1-4479-A7DF-F23CB076C8B8“.
   Note: Each folder has a unique number.
5. Move this folder to the Trash.
6. Immediately choose Apple Menu () > Restart… to restart your Mac.

After restarting the computer, a new folder is created in the Keychains folder with a name similar to “4B29A0BB-599D-47FC-A2D1-42B5592B130B“. There is no need to repeat the steps in this article, or to delete this folder. The new folder is expected and corrects the symptom described in this article.