Profile Manager and LoginHooks

I spend a few hours today troubleshooting login hooks that are deployed with Profile Manager.

Basically, it doesn't seem to work out of the box, but I think i found a way to cheat.

If you go to the Login Window pane of PM, there is a place where it says you can upload login/logout hooks. did that, ensuring they were executable. Then, in small print on that screen, it says you have to set EnableMCXLoginScripts to True and set MCXScriptTrust. I set that to anonymous. Tried making those changes in the com.apple.loginwindow.plist on the client. At each restart, the keys I had added were deleted.

So I tried adding those keys using a custom payload in PM. Also failed.

So, I went back to custom payload in PM and made a payload for com.apple.loginwindow that has keys for my loginhook and logout hook with the strings pointed to the files on the client computers. This does mean that you need to use ARD to deploy the actual scripts to your clients, or in my case make them part of a Netrestore image. But, this PM workaround hack does let you have a library of scripts on your clients and use PM to determine which ones are actually in use on each system (laptop vs desktop for example)