Dock standardrize
  1. Login as a local admin, build a reference dock.
  2. Open Terminal type sudo -s
  3. Enter your current account’s password when prompted
  4. Copy the modified dock preference file to the User Template in your Mac’s System folder:cp ~/Library/Preferences/ /System/Library/User\ Template/en_AU.lproj/Library/Preferences/Note the en_AU is your system lanuguage preference, you can find it in the system Preference > Language & Region.
  5. When a new user login, the system will copy this file to the user ~/Library/Preferences/ folder, similar like copy files under C:\users\Default in windows when a new user logged, if the user already logged in, you will need to copy it into that user’s folder. The path is /Users/username/
Change desktop and login screen/Desktop background

This procedure needs to be followed on Macs running the new Mojave upgrade. The filename and its location have changed in the new operating system.

Here’s what you need to do.

  1. Go to mac menu, about this MAC > Click Displays tab, check the resolution and edit the new wall paper to the same resolution. Or you can do it another way : go to System preferences > Desktop & Screen Saver, click the plus on left bottom, browse to the picture you want, click Choose. Then do a full screenshot by press Shif-command-3, this will be saved on the desktop.
  2. Navigate to /Library/Desktop Pictures folder on your Mac.
  3. Find the file named “Mojave.heic”. This is the login screen background image.
  4. Rename “Mojave.heic” to something like “Mojave.heic.old”.
  5. Copy and paste the image that you want to use as the background to the /Library/Desktop Pictures folder.
  6. Edit the picture if needed to conform to the original background’s size, DPI, and other parameters.
  7. Rename this file as “Mojave.heic”.
Disable lock screen in system menu

In the Microsoft Windows operating system, the desktop will lock automatically when the screensaver is activated. Microsoft provides numerous ways to manage this particular setting.

Unfortunately Apple does not provide us the way to manage this, so if a user locked a MAC on a public computer in the Library and left without unlock and logging out, the only way to resolve this would be a force shutdown.

The work around for this would be disable lock screen in the system menu.

Disable System Integrity Protection from Recovery mode. Reboot the Mac while holding down Command + R. From the recovery environment, open the terminal and enter:

csrutil disable

Reboot the Mac normally, login with local admin, open the Terminal:

We will make a backup first:

cp /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/HIToolbox.framework/Versions/A/Resources/English.lproj/StandardMenus.nib/objects.xib ~/Desktop 

Edit with a Text editor, I will use Vim an example:

vi /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/HIToolbox.framework/Versions/A/Resources/English.lproj/StandardMenus.nib/objects.xib search for “Lock Screen”. Remove the whole block of code encompassing the Lock Screen menu item.

<object class="IBCarbonMenuItem" id="311">

      <string name="title">Lock Screen</string>

      <string name="keyEquivalent">q</string>

      <boolean name="notPreviousAlternate">TRUE</boolean>

      <int name="keyEquivalentModifier">1310720</int>

      <ostype name="command">lock</ostype>


NOTE that there is an id tag within that block of code that need to be removed, tag 311. This also has a separate entry which has to be removed as well. If it is not removed, macOS will still think the Lock Screen entry is within the objects.xib and freeze, breaking the Finder (experience talking). Make sure no more entries for “Lock Screen” and “311” are in the file. Then, save and close.

<reference idRef="311"/>

Reboot the Mac back into Recovery Mode and re-enable SIP by executing csrutil enable from the terminal, followed by another reboot.

Now for any new user who first log in the MAC, the lock screen menu option should be gone, for the old users, you would need to delete below file and system will rebuild one:

Disable Wifi

As more and more students are using mobile phones, they may connect MAC to their hot spot to bypass the school proxy.

networksetup -setairportpower en1 off


Enable right click

By default your system use the right button as primary button as well, you will need to enable this for right click.

If your mouse is the old HID mouse, which looks like:

The process is similar to the dock scandalisation, except the configuration file is


You will need to change the value “Button2 = 1” into “Button2=2”.

Then copy to /System/Library/User\ Template/en_AU.lproj/Library/Preferences/

If your mouse is the new multi touch mouse, which looks like:


change  “MouseButtonMode = OneButton” into “MouseButtonMode = TwoButton”

Note that the mouse setting in the preferences may not reflect the active setting, just test with right click see if it work.

With Active Directory

Add to domain and Give Domain groups local administrative privileges on the MAC.

dsconfigad -add -computer computerID -username admin -password admin_password -groups "Domain Admins,Enterprise Admins"
  • The computerID is used to register in Ad.
  • Username is of domain admin group which has join privilege
  • groups are Domain groups which will be granted local administrative privileges on the MAC, and also enable this.


Generate a system image

Boot into Recovery mode, select disk Utility,