MacOSXInstall

  • Install MacOS X
  • Configure the firewall (q.v. the iChat configuration below)
    • System Prefs -> Security -> Firewall -> Allow Only Essential Services
    • Click the Advanced button and, check "Enable stealth mode."
    • If using "Set access for specific services and applications" to support iChat or other applications, remember to set these other applications to allow incoming connections:
      • Vine Server (for Evermore Remote)
  • Turn off BlueTooth
  • Run System Update, rebooting after each set of updates, until there are no more
  • Install iLife (if desired)
  • Run System Update to get iLife updates
  • Improve login security: System Preferences > Accounts > Login Options
    • Set automatic login disabled
    • Set "Display login window as" to "Name and password."
    • Show Restart, Sleep, and Shutdown buttons.
    • Do not show password hints.
    • Do not enable fast user switching
  • Set the date to display in the menu bar. Note that this can be accomplished from the System Preferences in the next Mac OS X release (Snow Leopard). From the command line (Terminal) type:

    defaults write -g AppleICUTimeFormatStrings -dict-add 2 "MM'/'dd' 'HH':'mm':'ss"

    It can be set back using:

    defaults write -g AppleICUTimeFormatStrings -dict-add 2 "HH':'mm':'ss"

    Note: I am not sure this is working correctly in Snow Leopard.
  • Check iChat settings (if you want to use iChat). Sometimes, iChat does not connect properly to AIM on the default port set by Apple.
    • Set the port in iChat Preferences > Accounts > Server Settings. Ports to try include 443 and 5190.
    • Video chat is often even more challenging to get working and, may require changes to the firewall settings. Specifically (in Mac OS X 10.4 or later), open TCP ports:

      5190, 5220, 5222, 5223 and, 5298

      ... and UDP ports:

      5060, 5190, 5297, 5298, 5353, 5678, 16384-16403

      In Mac OS X 10.5, you set the firewall to "Set access for specific services and applications," add iChat and, set it to "Allow incoming connections."
  • Install apps:
    • 7zX
    • Burn (CD/DVD burning app)
    • Carbon Copy Cloner
    • ClamXAV (anti-virus)
      • Launch, install engine
      • Get updated defs
      • Note that this is a manual virus scanner, not resident.
    • Firefox
      • Set Firefox as default browser
      • Set home page (to Google)
      • Install NoScript (if appropriate)
    • Thunderbird
      • Install Enigmail, if the user has use for it. Note that this requires GPG (see below).
    • Flash Player
    • Shockwave Player
    • Fugu (SCP/FTP client)
    • HandBrake (video transcoding)
    • iSquint (video transcoding) NO LONGER SUPPORTED
    • iTunes-LAME (rip CDs into iTunes using LAME)
    • XiphQT - plug-in adds OGG Vorbis and Theora support to QuickTime.
      • To install the XiphQT component system-wide: copy it into Library/Components in your system's root folder.
    • (Optional) PodToMac (shareware application that allows users to copy digital media files from an attached iPod into iTunes).
    • (Optional) iPhone Explorer - the same people who make PodToMac offer this freeware app, which allows copying of files to and from an attached iPhone.
    • Lockdown (security app)
      • (Optional) Configure Lockdown to take and email an iSight picture on trigger.
    • MacTracker (inventory management, technical specs)
    • OnyX (Maintenance, settings tweaks)
      • In OnyX Parameters > Login, "enable show message in the login window": If found, please call 623-934-9010.
    • (Optional) TinkerTool - allows you to tweak various settings (GUI behaviors, font settings, etc.). I am installing this but, not changing anything currently.
    • AppleJack - This is nice to have installed if there is a disk or permissions problem. It can be run from a shell in single-user mode to run the standard battery of repairs.
    • TotalFinder adds tabbed browsing to Finder, which is useful, particularly if you are not using PathFinder. Update: it turns out this is only free during development release. After that, it will be $15 and, you might as well buy PathFinder.
    • OSX Rootkit Hunter
    • RSyncX (Dead project?)
    • VineServer (VNC for Evermore Remote)
      • Set password.
      • Set display name to something short and descriptive.
      • Disable "advertise server via Bonjour."
      • Set system server display name and password (not sure if this is necessary)
    • VLC (video player)
      • Allow to check for updates automatically
    • Fairmount (mounts DVDs so they are readable without encryption)
    • Flip4Mac (A.K.A. "Windows Media Components for QuickTime" - plays WMV files)
    • SWF & FLV Player
      • Allow to check for updates on startup
    • Wimpy FLV Player (Optional - I now mostly just install the previous SWF & FLV Player)
    • Grand Perspective (graphical display of disk utilization - I usually install this in the Utilities directory)
    • Cameras (preferences pane that allows you to set different defaults when connecting different digital cameras and other imaging devices)
    • TrueCrypt (if user has use for it)
    • X11
    • Inkscape (requires X11)
    • Gimp (requires X11)
    • OpenOffice
    • (Optional) GPG Tools replaces GNU Privacy Guard.
    • (Optional) Secret Socks (GUI tool for setting up SSH socks proxies)
    • UnRARX GUI for decompressing RAR files
    • Dashboard Widgets:
    • Consider paid apps:
  • Launch installed apps to get past the "this app has been downloaded from the Internet, are you sure?" messages.
  • Launch iTunes
    • Use iTunes to handle audio content from the Internet (?)
    • Do not find music files
  • Configure Evermore Remote
    • Put script in Applications folder
    • Set system name in script
    • Make alias
    • Set eXecute perms
    • Add alias to Dock
  • Configure Dock icons as desired
    • Finder, Dashboard, Thunderbird, Firefox, (Safari), iChat, Address Book, iCal, iTunes, iPhoto, iMovie, Evermore Remote (to right of dotted line)
    • Automatically hide and show Dock
  • Run System Profiler and export the system info, save to customer folder (on the Evermore file server)
  • Add system to Evermore master MacTracker list
  • Configure TimeMachine (optional)
  • Make backup image with Carbon Copy Cloner
  • (Optional) Configure Windows XP dual-boot with BootCamp:
    • Launch BootCamp Assistant (in Applications > Utilities)
    • Set partitioning
    • Insert Windows install media when prompted
    • Be sure to install to the correct partition ("Partition3 (BOOTCAMP) [FAT32]")
    • Reformat the partition to NTFS.
    • Install Windows
    • Image Windows partition with Partition Image, booting from System Rescue CD or, Ghost from the EvermorePE disc.