Deployment script and command reference for Incydr Basic and Advanced, CrashPlan Cloud, and other plans

How the Windows script works

The user detection script for Windows:

• Uses the device's operating system to determine the most recent logged-on username.
• Calculates the typical home directory for that username.

The user detection script then reports these two values to a standard output.

Tips to create a custom Windows script

Create a custom script and paste your script into your deployment policy. If you need help, contact your Customer Success Manager (CSM) for enterprise support.

When creating your custom script, be aware of the following:

• Every script must end by echoing values for two variables.

  echo C42_USERNAME=<value>
  echo C42_USER_HOME=<value>

• In the Code42 cloud, usernames must be email addresses.

  echo C42_USERNAME=%current_user%@example.com

• Optionally, you can also specify the the organization for the user. Use the registration key for the organization. If the organization is not defined, the user registers to the organization specified in the deployment policy.

  echo C42_ORG_REG_KEY=<value>

• You must provide values. Null values and empty strings will not work.
• If you cannot write a script to provide a workable value, write a message for the username field of the Code42 app sign in dialog, for example:

  echo C42_USERNAME=Enter name and click Sign in

• The values cannot include either single (') or double (") quotation marks.

Explorer.exe with ADSI domain lookup script

Professional Services filename: UserDetect_ADSIDomainLookup.bat

The following script detects users running explorer.exe and performs an Active Directory Service Interfaces (ADSI) search against Active Directory to obtain the mail attribute for the users. The script sets the home directory by adding the username to the \Users directory path in Windows. You can adjust this script to look for any attribute in Active Directory, such as userPrincipalName or custom attributes. This script requires an active connection to a Windows domain and PowerShell v.4.0 or later.

Copy to clipboardCopied!

<# : batch script
@echo off
setlocal
cd %~dp0
powershell -executionpolicy bypass -Command "Invoke-Expression $([System.IO.File]::ReadAllText('%~f0'))"
endlocal
goto:eof
#>
function Find-User {
     Write-Log "Starting user detection..."
     $username = (Get-Process -IncludeUserName -Name explorer | Select-Object -ExpandProperty UserName).Split('\')[1]
     Write-Log "User name found ($username)"
     $searcher = [adsisearcher]"(samaccountname=$username)"
     $C42_USERNAME = ($searcher.FindOne().Properties.mail)
     Write-Log "Email found via ADSI search ($C42_USERNAME)"
     $ExcludedUsers = @(
          'user1'
          'user2'
          'user3'
          'admin'
          'Administrator'
          'admin-*'
     )
     $ExcludedUsers | ForEach-Object { if ([string]::IsNullOrEmpty($C42_USERNAME) -or $username -like $_) {
          Write-Log "Excluded or null email address detected ($username).  Will retry user detection in 60 minutes, or when reboot occurs."
          Write-Output "Excluded or null email address detected ($username).  Will retry user detection in 60 minutes, or when reboot occurs."
          exit
          }
     }
     $wmiuser = Get-CimInstance Win32_UserAccount -Filter "Name = '$username'"
     $C42_USER_HOME = Get-CimInstance Win32_UserProfile -Filter "SID = '$($wmiuser.SID)'" | Select-Object -ExpandProperty LocalPath
     if (!$C42_USER_HOME) {
          Write-Log "User home query from WMI failed. Using fallback home detection method"
          $C42_USER_HOME = "$env:HOMEDRIVE\Users\$username"
          Write-Log "User home set by appending $username to home path ($C42_USER_HOME)"
     } ELSE {
          Write-Log "User home queried from WMI successfully ($C42_USER_HOME)"
     }
     Write-Log "Returning C42_USERNAME: $C42_USERNAME"
     Write-Log "Returning C42_USER_HOME: $C42_USER_HOME"
     Write-Host C42_USERNAME=$C42_USERNAME
     Write-Host C42_USER_HOME=$C42_USER_HOME
}

<# Helper functions below this point. Most likely these will not need to be edited. #>
$PROC_LOG = "$env:HOMEDRIVE\ProgramData\CrashPlan\log\userDetect_Result.log"
function Write-Log {
    [CmdletBinding()]
    Param
    (
        [Parameter(Mandatory=$true, Position=0)]
        [string]$LogMessage
    )
    Add-Content -Path $PROC_LOG -Value (Write-Output ("{0} - {1}" -f (Get-Date), $LogMessage))
}
Find-User

Azure AD script

Professional Services filename: UserDetect_Azure.bat 

This script detects a username that has joined the computer to Azure AD by looking at the Microsoft identity cache in the registry. This script requires PowerShell v.4.0 or later.

Copy to clipboardCopied!

<# : batch script
@echo off
setlocal
cd %~dp0
powershell -executionpolicy bypass -Command "Invoke-Expression $([System.IO.File]::ReadAllText('%~f0'))"
endlocal
goto:eof
#>
function Find-User {
     Write-Log "Starting user detection..."
     $username = (Get-Process -IncludeUserName -Name explorer | Select-Object -ExpandProperty UserName).Split('\')[1]
     Write-Log "User name found: ($username)"
     $C42_USERNAME = (Get-ItemProperty HKLM:SOFTWARE\Microsoft\IdentityStore\Cache\*\IdentityCache\* | Where-Object {$_.SAMName -eq $username} | Select-Object -Unique -ExpandProperty UserName)
     Write-Log "Email found in registry: ($C42_USERNAME)"
     $ExcludedUsers = @(
          'user1'
          'user2'
          'user3'
          'admin'
          'Administrator'
          'admin-*'
     )
     $ExcludedUsers | ForEach-Object { if ([string]::IsNullOrEmpty($C42_USERNAME) -or $username -like $_) {
          Write-Log "Excluded or null email address detected ($username).  Will retry user detection in 60 minutes, or when reboot occurs."
          Write-Output "Excluded or null email address detected ($username).  Will retry user detection in 60 minutes, or when reboot occurs."
          exit
          }
     }
     $C42_USER_HOME = "$env:HOMEDRIVE\Users\$username"
     Write-Log "User home set by appending $username to home path ($C42_USER_HOME)"
     Write-Log "Returning C42_USERNAME: $C42_USERNAME"
     Write-Log "Returning C42_USER_HOME: $C42_USER_HOME"
     Write-Host C42_USERNAME=$C42_USERNAME
     Write-Host C42_USER_HOME=$C42_USER_HOME
}

<# Helper functions below this point. Most likely these will not need to be edited. #>
$PROC_LOG = "$env:HOMEDRIVE\ProgramData\CrashPlan\log\userDetect_Result.log"
function Write-Log {
    [CmdletBinding()]
    Param
    (
        [Parameter(Mandatory=$true, Position=0)]
        [string]$LogMessage
    )
    Add-Content -Path $PROC_LOG -Value (Write-Output ("{0} - {1}" -f (Get-Date), $LogMessage))
}
Find-User

Explorer.exe script

Professional Services filename: UserDetect_Explorer_AppendDomain.bat

The following script detects users running explorer.exe and appends the domain of the email address. The script sets the home directory by adding the username to the \Users directory path in Windows. This script requires PowerShell v.4.0 or later.

Copy to clipboardCopied!

<# : batch script
@echo off
setlocal
cd %~dp0
powershell -executionpolicy bypass -Command "Invoke-Expression $([System.IO.File]::ReadAllText('%~f0'))"
endlocal
goto:eof
#>
function Find-User {
     Write-Log "Starting user detection..."
     $username = (Get-Process -IncludeUserName -Name explorer | Select-Object -ExpandProperty UserName).Split('\')[1]
     Write-Log "User name found ($username)"
     $C42_USERNAME = $username + '@domain.com'
     Write-Log "Email assembled by appending domain ($C42_USERNAME)"
     $ExcludedUsers = @(
          'user1'
          'user2'
          'user3'
          'admin'
          'Administrator'
          'admin-*'
     )
     $ExcludedUsers | ForEach-Object { if ([string]::IsNullOrEmpty($username) -or $username -like $_) {
          Write-Log "Excluded or null email address detected ($username).  Will retry user detection in 60 minutes, or when reboot occurs."
          Write-Output "Excluded or null email address detected ($username).  Will retry user detection in 60 minutes, or when reboot occurs."
          exit
          }
     }
     $wmiuser = Get-CimInstance Win32_UserAccount -Filter "Name = '$username'"
     $C42_USER_HOME = Get-CimInstance Win32_UserProfile -Filter "SID = '$($wmiuser.SID)'" | Select-Object -ExpandProperty LocalPath
     if (!$C42_USER_HOME) {
          Write-Log "User home query from WMI failed. Using fallback home detection method"
          $C42_USER_HOME = "$env:HOMEDRIVE\Users\$username"
          Write-Log "User home set by appending $username to home path ($C42_USER_HOME)"
     } ELSE {
          Write-Log "User home queried from WMI successfully ($C42_USER_HOME)"
     }
     Write-Log "Returning C42_USERNAME: $C42_USERNAME"
     Write-Log "Returning C42_USER_HOME: $C42_USER_HOME"
     Write-Host C42_USERNAME=$C42_USERNAME
     Write-Host C42_USER_HOME=$C42_USER_HOME
}

<# Helper functions below this point. Most likely these will not need to be edited. #>
$PROC_LOG = "$env:HOMEDRIVE\ProgramData\CrashPlan\log\userDetect_Result.log"
function Write-Log {
    [CmdletBinding()]
    Param
    (
        [Parameter(Mandatory=$true, Position=0)]
        [string]$LogMessage
    )
    Add-Content -Path $PROC_LOG -Value (Write-Output ("{0} - {1}" -f (Get-Date), $LogMessage))
}
Find-User

Active Directory script

Professional Services filename: UserDetect_FirstLastName_ActiveDirectory.bat

The following script finds the real name of Active Directory users, joins the first name to the last name to create a username of firstname.lastname, and appends the domain of the email address. This script requires an active connection to a domain.

Copy to clipboardCopied!

@echo off
setlocal

REM Gather user and home info.
for /f "TOKENS=1,2,*" %%a in ('tasklist /FI "IMAGENAME eq explorer.exe" /FO LIST /V') do if /i "%%a %%b"=="User Name:" set _currdomain_user=%%c
for /f "TOKENS=1,2 DELIMS=\" %%a in ("%_currdomain_user%") do set _currdomain=%%a & set currentuser=%%b
for /f "tokens=2*" %%a in ('net user "%currentuser%" /domain ^| find /i "Full Name"') do set DisplayName=%%b
set RealName=%DisplayName: =.%
set Domain=@domain.com

REM List of Excluded users that shouldn't be used for Code42 install.
FOR %%G IN ("user1"
            "user2"
            "user3"
            "admin"
            "Administrator") DO (
            IF /I "%currentuser%"=="%%~G" GOTO NOMATCH
)

:MATCH
REM Echo Values for Code42 Installer
echo C42_USERNAME=%RealName%%DOMAIN%
echo C42_USER_HOME=%HOMEDRIVE%\Users\%currentuser%
GOTO :EOF

:NOMATCH
echo Excluded or null user detected (%currentuser%).  Will retry user detection in 60 minutes, or when reboot occurs.
GOTO :EOF

Local account script

Professional Services filename: UserDetect_FirstLastName_NoActiveDirectory.bat

The following script retrieves names from a local account, joins the first name to the last name to create a username of firstname.lastname, and appends the domain of the email address. This script needs the Full Name field for a local account to be populated with a user's first name and last name separated by a space. This script requires PowerShell v4.0 or later.

Copy to clipboardCopied!

<# : batch script
@echo off
setlocal
cd %~dp0
powershell -executionpolicy bypass -Command "Invoke-Expression $([System.IO.File]::ReadAllText('%~f0'))"
endlocal
goto:eof
#>
function Find-User {
     Write-Log "Starting user detection..."
     $username = (Get-Process -IncludeUserName -Name explorer | Select-Object -ExpandProperty UserName).Split('\')[1]
     Write-Log "User name found ($username)"
     $fullname = (Get-CimInstance -Class Win32_UserAccount -Filter "LocalAccount='True'" | Where-Object -Property Name -like $username).FullName 
     Write-Log "Full name found ($fullname)"
     $C42_USERNAME = ($fullname -replace " ",".") + '@domain.com'
     Write-Log "Email assembled from full name ($C42_USERNAME)"
     $ExcludedUsers = @(
          'user1'
          'user2'
          'user3'
          'admin'
          'Administrator'
          'admin-*'
     )
     $ExcludedUsers | ForEach-Object { if ([string]::IsNullOrEmpty($username) -or $username -like $_) {
          Write-Log "Excluded or null email address detected ($username).  Will retry user detection in 60 minutes, or when reboot occurs."
          Write-Output "Excluded or null email address detected ($username).  Will retry user detection in 60 minutes, or when reboot occurs."
          exit
          }
     }
     $wmiuser = Get-CimInstance Win32_UserAccount -Filter "Name = '$username'"
     $C42_USER_HOME = Get-CimInstance Win32_UserProfile -Filter "SID = '$($wmiuser.SID)'" | Select-Object -ExpandProperty LocalPath
     if (!$C42_USER_HOME) {
          Write-Log "User home query from WMI failed. Using fallback home detection method"
          $C42_USER_HOME = "$env:HOMEDRIVE\Users\$username"
          Write-Log "User home set by appending $username to home path ($C42_USER_HOME)"
     } ELSE {
          Write-Log "User home queried from WMI successfully ($C42_USER_HOME)"
     }
     Write-Log "Returning C42_USERNAME: $C42_USERNAME"
     Write-Log "Returning C42_USER_HOME: $C42_USER_HOME"
     Write-Host C42_USERNAME=$C42_USERNAME
     Write-Host C42_USER_HOME=$C42_USER_HOME
}

<# Helper functions below this point. Most likely these will not need to be edited. #>
$PROC_LOG = "$env:HOMEDRIVE\ProgramData\CrashPlan\log\userDetect_Result.log"
function Write-Log {
    [CmdletBinding()]
    Param
    (
        [Parameter(Mandatory=$true, Position=0)]
        [string]$LogMessage
    )
    Add-Content -Path $PROC_LOG -Value (Write-Output ("{0} - {1}" -f (Get-Date), $LogMessage))
}
Find-User

Text file script

Professional Services filename: UserDetect_ReadFromFile_User.bat

The following script reads a text file (default location C:\Temp\C42_User.txt) for the user email addresses, and sets the home directory by adding the username to the \Users directory path in Windows. This script requires PowerShell v4.0 or later.

Copy to clipboardCopied!

<# : batch script
@echo off
setlocal
cd %~dp0
powershell -executionpolicy bypass -Command "Invoke-Expression $([System.IO.File]::ReadAllText('%~f0'))"
endlocal
goto:eof
#>
function Find-User {
     Write-Log "Starting user detection..."
     $C42_USERNAME = Get-Content $env:HOMEDRIVE\temp\C42_User.txt
     Write-Log "Email read from file ($username)"
     $ExcludedUsers = @(
          'user1'
          'user2'
          'user3'
          'admin'
          'Administrator'
          'admin-*'
     )
     $ExcludedUsers | ForEach-Object { if ([string]::IsNullOrEmpty($C42_USERNAME) -or $username -like $_) {
          Write-Log "Excluded or null email address detected ($username).  Will retry user detection in 60 minutes, or when reboot occurs."
          Write-Output "Excluded or null email address detected ($username).  Will retry user detection in 60 minutes, or when reboot occurs."
          exit
          }
     }
     $wmiuser = Get-CimInstance Win32_UserAccount -Filter "Name = '$username'"
     $C42_USER_HOME = Get-CimInstance Win32_UserProfile -Filter "SID = '$($wmiuser.SID)'" | Select-Object -ExpandProperty LocalPath
     if (!$C42_USER_HOME) {
          Write-Log "User home query from WMI failed. Using fallback home detection method"
          $C42_USER_HOME = "$env:HOMEDRIVE\Users\$username"
          Write-Log "User home set by appending $username to home path ($C42_USER_HOME)"
     } ELSE {
          Write-Log "User home queried from WMI successfully ($C42_USER_HOME)"
     }
     Write-Log "Returning C42_USERNAME: $C42_USERNAME"
     Write-Log "Returning C42_USER_HOME: $C42_USER_HOME"
     Write-Host C42_USERNAME=$C42_USERNAME
     Write-Host C42_USER_HOME=$C42_USER_HOME
}

<# Helper functions below this point. Most likely these will not need to be edited. #>
$PROC_LOG = "$env:HOMEDRIVE\ProgramData\CrashPlan\log\userDetect_Result.log"
function Write-Log {
    [CmdletBinding()]
    Param
    (
        [Parameter(Mandatory=$true, Position=0)]
        [string]$LogMessage
    )
    Add-Content -Path $PROC_LOG -Value (Write-Output ("{0} - {1}" -f (Get-Date), $LogMessage))
}
Find-User

Last logged on user script

Professional Services filename: UserDetect_Registry_AppendDomain.bat

The following script detects which user last logged in using the LastLoggedOnUser registry value in HKLM, and appends the domain of the email address. The script sets the home directory by adding the username to the \Users directory path in Windows.

Copy to clipboardCopied!

<# : batch script
@echo off
setlocal
cd %~dp0
powershell -executionpolicy bypass -Command "Invoke-Expression $([System.IO.File]::ReadAllText('%~f0'))"
endlocal
goto:eof
#>
function Find-User {
     Write-Log "Starting user detection..."
     $username = (Get-ItemProperty HKLM:\Software\Microsoft\Windows\CurrentVersion\Authentication\LogonUI | Select-Object -ExpandProperty LastLoggedOnUser).Split('\')[1]
     Write-Log "User name found ($username)"
     $C42_USERNAME = $username + '@domain.com'
     Write-Log "Email assembled by appending domain ($C42_USERNAME)"
     $ExcludedUsers = @(
          'user1'
          'user2'
          'user3'
          'admin'
          'Administrator'
          'admin-*'
     )
     $ExcludedUsers | ForEach-Object { if ([string]::IsNullOrEmpty($username) -or $username -like $_) {
          Write-Log "Excluded or null email address detected ($username).  Will retry user detection in 60 minutes, or when reboot occurs."
          Write-Output "Excluded or null email address detected ($username).  Will retry user detection in 60 minutes, or when reboot occurs."
          exit
          }
     }
     $wmiuser = Get-CimInstance Win32_UserAccount -Filter "Name = '$username'"
     $C42_USER_HOME = Get-CimInstance Win32_UserProfile -Filter "SID = '$($wmiuser.SID)'" | Select-Object -ExpandProperty LocalPath
     if (!$C42_USER_HOME) {
          Write-Log "User home query from WMI failed. Using fallback home detection method"
          $C42_USER_HOME = "$env:HOMEDRIVE\Users\$username"
          Write-Log "User home set by appending $username to home path ($C42_USER_HOME)"
     } ELSE {
          Write-Log "User home queried from WMI successfully ($C42_USER_HOME)"
     }
     Write-Log "Returning C42_USERNAME: $C42_USERNAME"
     Write-Log "Returning C42_USER_HOME: $C42_USER_HOME"
     Write-Host C42_USERNAME=$C42_USERNAME
     Write-Host C42_USER_HOME=$C42_USER_HOME
}

<# Helper functions below this point. Most likely these will not need to be edited. #>
$PROC_LOG = "$env:HOMEDRIVE\ProgramData\CrashPlan\log\userDetect_Result.log"
function Write-Log {
    [CmdletBinding()]
    Param
    (
        [Parameter(Mandatory=$true, Position=0)]
        [string]$LogMessage
    )
    Add-Content -Path $PROC_LOG -Value (Write-Output ("{0} - {1}" -f (Get-Date), $LogMessage))
}
Find-User

How the Mac script works

The user detection script for Mac:

• Uses the device's operating system to determine the most recent logged-on username.
• Calculates the typical home directory for that username.

The detection script then reports these two values to a standard output.

/usr/bin/python -c 'from SystemConfiguration import SCDynamicStoreCopyConsoleUser; import sys; username = (SCDynamicStoreCopyConsoleUser(None, None, None) or [None])[0]; username = [username,""][username in [u"loginwindow", None, u""]]; sys.stdout.write(username + "\n");'

echo "show State:/Users/ConsoleUser" | scutil | awk '/Name :/ && ! /loginwindow/ { print $3 }'

Tips to create a custom Mac script

Create a custom script and paste your script into your deployment policy. If you need help, contact your Customer Success Manager (CSM) for enterprise support.

When creating your custom script, be aware of the following:

• Every script must end by echoing values for two variables:

  echo "C42_USERNAME=<value>"
  echo "C42_USER_HOME=<value>"
  

• In the Code42 cloud, usernames must be email addresses.

  echo "C42_USERNAME=${user}@example.com"
  

• Optionally, you can also specify the the organization for the user. Use the registration key for the organization. If the organization is not defined, the user registers to the organization specified in the deployment policy.

  echo C42_ORG_REG_KEY=<value>

• You must provide values. Null values and empty strings will not work.
• If you cannot write a script to provide a workable value, write a message for the username field of the Code42 app sign in dialog, for example:

  echo "C42_USERNAME=Enter name and click Sign in"
  

• The values cannot include either single (') or double (") quotation marks.

Mac deploy.properties file location

When the Code42 app installer runs on Mac, it looks for the deploy.properties file in three locations, in the following order:

1. In the disk image, typically in:
   • Version 8.2 and later: /Volumes/Code42
   • Version 8.0 and earlier: /Volumes/Code42CrashPlan
2. In a Jamf Pro temp directory:
   • Version 8.2 and later: /tmp/mountpt/Code42
   • Version 8.0 and earlier: /tmp/mountpt/Code42CrashPlan
3. (Recommended location) In the directory /Library/Application Support/CrashPlan
   Installations for a single user use ~/Library rather than /Library.

Location 1, the disk image

Adding deploy.properties to the installer disk image is recommended for users starting an install manually, by clicking on the *.dmg file.

Test this option:
Not all deployment software mounts the disk image in the same location, making deploy.properties in the disk image hard to find.

Add deploy.properties to the disk image as follows:

1. Make a writable copy of the disk image.
2. Mount the writable copy.
3. Copy deploy.properties to the new image's root directory.
4. Unmount the image.
5. Return the image to the read-only state.

The following example shows the commands needed to add the deploy.properties file to the disk image. This example is for Code42 app version 8.2 and later. For Code42 app version 8.0 and earlier, the installer and volume name use Code42CrashPlan instead of Code42.

Copy to clipboardCopied!

hdiutil convert -format UDRW Code42_n.n.n_Mac.dmg -o C42_n.n.n_w.dmg
hdiutil attach C42_n.n.n_w.dmg
cp deploy.properties /Volumes/Code42/deploy.properties
hdiutil detach /Volumes/Code42
hdiutil convert -format UDRO C42_n.n.n_w.dmg -o C42_n.n.n_ro.dmg

Location 3, Application Support (recommended) 

For deployment with most software management tools, including Jamf Pro, Code42 recommends storing the file here:
/Library/Application Support/CrashPlan/deploy.properties

To install for a single user, rather than all users of a device, use  ~/Library rather than /Library.

To create the directory and write the file, we recommend a bash script like the following where you replace <deploy.properties> with the text from your deploy.properties file:

Copy to clipboardCopied!

#!/bin/bash
mkdir -p /Library/Application\ Support/CrashPlan
echo "<deploy.properties>" > /Library/Application\ Support/CrashPlan/deploy.properties

Prompt for email script

Professional Services filename: Email_prompt_for_email.sh

The following script creates a pop-up notification at Code42 app installation time prompting users to input their email address, which automatically registers the users in Code42 and starts backup. This script provides an alternative when no other scripts work and you want the end user to manually input their email address.

If you are deploying Code42 app version 8.0 or earlier, replace the line  tell application "Code42" with tell application "CrashPlan" in the sample below.

Copy to clipboardCopied!

function main () {
    writeLog "Starting user detection..."
    local user=$(echo "show State:/Users/ConsoleUser" | scutil | awk '/Name :/ && ! /loginwindow/ { print $3 }')
    writeLog "User name found ($user)"
    if [[ "$user" =~ ^(admin1|admin2|admin3)$ ]] || [[ -z "$user" ]]; then
        writeLog "Excluded or null username detected ($user). Will retry user detection in 60 minutes, or when reboot occurs."
        exit
    else
        local C42_USERNAME=$(ask 'CODE42 BACKUP - Please fill in your email address to continue: ')
        writeLog "Email found from user input ($C42_USERNAME)"
        local C42_USER_HOME=$(dscl . -read "/users/${user}" NFSHomeDirectory | cut -d ' ' -f 2)
        writeLog "Home directory read from dscl ($C42_USER_HOME)"
        writeLog "Returning C42_USERNAME=$C42_USERNAME"
        writeLog "Returning C42_USER_HOME=$C42_USER_HOME"
        echo "C42_USERNAME=$C42_USERNAME"
        echo "C42_USER_HOME=$C42_USER_HOME"
    fi
}
function writeLog () {
    echo "$(date) - $@" >> /Library/Logs/CrashPlan/userDetect_Result.log
}
function ask () {
    osascript <<EOF - 2>/dev/null
    tell application "Code42"
    activate
    text returned of (display dialog "$1" default answer "")
    end tell
EOF
}
main "$@"

First initial and last name script

Professional Services filename: UserDetect_and_modify_firstinitial_dot_lastname.sh

The following script detects the locally logged-in users' first and last names and edits the string to create a username of firstinitial.lastname.  

Copy to clipboardCopied!

function main() {
    writeLog "Starting user detection..."
    local user=$(echo "show State:/Users/ConsoleUser" | scutil | awk '/Name :/ && ! /loginwindow/ { print $3 }')
    writeLog "User name found ($user)"
    if [[ "$user" =~ ^(admin1|admin2|admin3)$ ]] || [[ -z "$user" ]]; then
        writeLog "Excluded or null username detected ($user). Will retry user detection in 60 minutes, or when reboot occurs."
        exit
    else
        realname="$(dscl . -read /Users/$user RealName | cut -d: -f2)"
        if [[ ($realname =~ ',') ]]; then
            writeLog "Real name contains a comma, assuming last, first format."
            realname="$(echo $realname | sed -e 's/[[:space:]]*//g' |  grep -v "^$" | tr '[:upper:]' '[:lower:]' | awk -F , '{print substr($2,1,1) "." $1}')"
        else
            realname="$(echo $realname | sed -e 's/^[[:space:]]*//; s/[[:space:]]*$//; s/^\(.\)[^ ]* /\1./' | grep -v "^$" | tr '[:upper:]' '[:lower:]')"
        fi
        local C42_USERNAME="$realname@domain.com"
        writeLog "Email assembled from real name: $C42_USERNAME"
        local C42_USER_HOME=$(dscl . -read "/users/${user}" NFSHomeDirectory | cut -d ' ' -f 2)
        writeLog "Home directory read from dscl ($C42_USER_HOME)"
        writeLog "Returning C42_USERNAME=$C42_USERNAME"
        writeLog "Returning C42_USER_HOME=$C42_USER_HOME"
        echo "C42_USERNAME=$C42_USERNAME"
        echo "C42_USER_HOME=$C42_USER_HOME"
    fi
}
function writeLog () {
    echo "$(date) - $@" >> /Library/Logs/CrashPlan/userDetect_Result.log
}
main "$@"

First name and last name script

Professional Services filename: UserDetect_and_modify_firstname_dot_lastname.sh

The following script detects the locally logged-in users' first and last names and edits the string to create a username of firstname.lastname.  

Copy to clipboardCopied!

function main() {
    writeLog "Starting user detection..."
    local user=$(echo "show State:/Users/ConsoleUser" | scutil | awk '/Name :/ && ! /loginwindow/ { print $3 }')
    writeLog "User name found ($user)"
    if [[ "$user" =~ ^(admin1|admin2|admin3)$ ]] || [[ -z "$user" ]]; then
        writeLog "Excluded or null username detected ($user). Will retry user detection in 60 minutes, or when reboot occurs."
        exit
    else
        realname="$(dscl . -read /Users/$user RealName | cut -d: -f2)"
        if [[ ($realname =~ ',') ]]; then
            writeLog "Real name contains a comma, assuming last, first format."
            realname="$(echo $realname | sed -e 's/[[:space:]]*//g' |  grep -v "^$" | tr '[:upper:]' '[:lower:]' | awk -F , '{print $2 "." $1}')"
        else
            realname="$(echo $realname | sed -e 's/^[[:space:]]*//; s/[[:space:]]*$//; s/ /./' | grep -v "^$" | tr '[:upper:]' '[:lower:]')"
        fi
        local C42_USERNAME="$realname@domain.com"
        writeLog "Email assembled from real name: $C42_USERNAME"
        local C42_USER_HOME=$(dscl . -read "/users/${user}" NFSHomeDirectory | cut -d ' ' -f 2)
        writeLog "Home directory read from dscl ($C42_USER_HOME)"
        writeLog "Returning C42_USERNAME=$C42_USERNAME"
        writeLog "Returning C42_USER_HOME=$C42_USER_HOME"
        echo "C42_USERNAME=$C42_USERNAME"
        echo "C42_USER_HOME=$C42_USER_HOME"
fi
}
function writeLog () {
    echo "$(date) - $@" >> /Library/Logs/CrashPlan/userDetect_Result.log
}
main "$@"

Text file script

Professional Services filename: UserDetect_from_text.sh

The following script reads the username from a text file (located by default at /tmp/Code42test.txt). Use when no other logical way of finding the username can be determined and no user interaction is desired. 

Copy to clipboardCopied!

function main() {
    writeLog "Starting user detection..."
    local user=$(echo "show State:/Users/ConsoleUser" | scutil | awk '/Name :/ && ! /loginwindow/ { print $3 }')
    writeLog "User name found ($user)"
    if [[ "$user" =~ ^(admin1|admin2|admin3)$ ]] || [[ -z "$user" ]]; then
        writeLog "Excluded or null username detected ($user). Will retry user detection in 60 minutes, or when reboot occurs."
        exit
    else
        local C42_USERNAME=$(cat /tmp/Code42test.txt)
        writeLog "Email read from file: $C42_USERNAME"
        local C42_USER_HOME=$(dscl . -read "/users/${user}" NFSHomeDirectory | cut -d ' ' -f 2)
        writeLog "Home directory read from dscl ($C42_USER_HOME)"
        writeLog "Returning C42_USERNAME=$C42_USERNAME"
        writeLog "Returning C42_USER_HOME=$C42_USER_HOME"
        echo "C42_USERNAME=$C42_USERNAME"
        echo "C42_USER_HOME=$C42_USER_HOME"
   fi
}
function writeLog () {
    echo "$(date) - $@" >> /Library/Logs/CrashPlan/userDetect_Result.log
}
main "$@"

Last logged on user script

Professional Services filename: UserDetect_last_plus_domain.sh

The following script checks the last known logged in users and narrows down the list to the currently logged-in user. 

Copy to clipboardCopied!

function main () {
       writeLog "Starting user detection..."
    local user=$(last | egrep 'console.*still' | egrep -v 'root|admin|reboot|shutdown|local|_mbsetupuser' | awk '{print $1}' | sort -u | head -n1)
    writeLog "User name found ($user)"
    if [[ "$user" =~ ^(admin1|admin2|admin3)$ ]] || [[ -z "$user" ]]; then
        writeLog "Excluded or null username detected ($user). Will retry user detection in 60 minutes, or when reboot occurs."
        exit
    else
        local C42_USERNAME="${user}@domain.com"
        writeLog "Username assembled by appending domain ($C42_USERNAME)"
        local C42_USER_HOME=$(dscl . -read "/users/${user}" NFSHomeDirectory | cut -d ' ' -f 2)
        writeLog "Home directory read from dscl ($C42_USER_HOME)"
        writeLog "Returning C42_USERNAME=$C42_USERNAME"
        writeLog "Returning C42_USER_HOME=$C42_USER_HOME"
        echo "C42_USERNAME=$C42_USERNAME"
        echo "C42_USER_HOME=$C42_USER_HOME"
    fi
}
function writeLog () {
    echo "$(date) - $@" >> /Library/Logs/CrashPlan/userDetect_Result.log
}
main "$@"

Scutil script

Professional Services filename: UserDetect_scutil_user_plus_domain.sh

The following script uses the system configuration utility (scutil) to detect the logged-in user. The client's email domain needs to be appended to the resulting username to get a valid Code42 username. 

Copy to clipboardCopied!

function main () {
    writeLog "Starting user detection..."
    local user=$(echo "show State:/Users/ConsoleUser" | scutil | awk '/Name :/ && ! /loginwindow/ { print $3 }')
    writeLog "User name found ($user)"
    if [[ "$user" =~ ^(admin1|admin2|admin3)$ ]] || [[ -z "$user" ]]; then
        writeLog "Excluded or null username detected ($user). Will retry user detection in 60 minutes, or when reboot occurs."
        exit
    else
        local C42_USERNAME="${user}@domain.com"
        writeLog "Username assembled by appending domain ($C42_USERNAME)"
        local C42_USER_HOME=$(dscl . -read "/users/${user}" NFSHomeDirectory | cut -d ' ' -f 2)
        writeLog "Home directory read from dscl ($C42_USER_HOME)"
        writeLog "Returning C42_USERNAME=$C42_USERNAME"
        writeLog "Returning C42_USER_HOME=$C42_USER_HOME"
        echo "C42_USERNAME=$C42_USERNAME"
        echo "C42_USER_HOME=$C42_USER_HOME"
    fi
}
function writeLog () {
    echo "$(date) - $@" >> /Library/Logs/CrashPlan/userDetect_Result.log
}
main "$@"

DSCL script

Professional Services filename: UserDetect_using_DSCL.sh

The following script obtains the user's email address from the domain records stored on the client using the Directory Service command line utility (DSCL). The Mac must be domain-bound.  

Copy to clipboardCopied!

function main() {
    writeLog "Starting user detection..."
    local user=$(echo "show State:/Users/ConsoleUser" | scutil | awk '/Name :/ && ! /loginwindow/ { print $3 }')
    writeLog "User name found ($user)"
    if [[ "$user" =~ ^(admin1|admin2|admin3)$ ]] || [[ -z "$user" ]]; then
        writeLog "Excluded or null username detected ($user). Will retry user detection in 60 minutes, or when reboot occurs."
        exit
    else
        local C42_USERNAME=$(dscl . -read  /Users/${user} EMailAddress | cut -d ' ' -f 2)
        writeLog "Username read from dscl ($C42_USERNAME)"
        local C42_USER_HOME=$(dscl . -read "/users/${user}" NFSHomeDirectory | cut -d ' ' -f 2)
        writeLog "Home directory read from dscl ($C42_USER_HOME)"
        writeLog "Returning C42_USERNAME=$C42_USERNAME"
        writeLog "Returning C42_USER_HOME=$C42_USER_HOME"
        echo "C42_USERNAME=$C42_USERNAME"
        echo "C42_USER_HOME=$C42_USER_HOME"

    fi
}
function writeLog () {
    echo "$(date) - $@" >> /Library/Logs/CrashPlan/userDetect_Result.log
}
main "$@"

Jamf plist script

Professional Services filename: macuserdetection-plist.sh

The following script is helpful if you use Jamf for device management. The script places a plist on the local machine that is populated with the username associated with the device from Jamf. This script is a good option if you have a username associated with a specific device in JAMF, but you do not have assurance that the usernames on the local device match the username part of the email address. This script requires additional setup in Jamf.

Copy to clipboardCopied!

function main () {
    writeLog "Starting user detection..."
    local user=$(echo "show State:/Users/ConsoleUser" | scutil | awk '/Name :/ && ! /loginwindow/ { print $3 }')
    writeLog "User name found ($user)"
    if [[ "$user" =~ ^(admin1|admin2|admin3)$ ]] || [[ -z "$user" ]]; then
        writeLog "Excluded or null username detected ($user). Will retry user detection in 60 minutes, or when reboot occurs."
        exit
    else
        local C42_USERNAME=$(defaults read /Library/Managed\ Preferences/com.code42.email.plist code42ActivationEmail)
        writeLog "Username read from plist ($C42_USERNAME)"
        local C42_USER_HOME=$(dscl . -read "/users/${user}" NFSHomeDirectory | cut -d ' ' -f 2)
        writeLog "Home directory read from dscl ($C42_USER_HOME)"
        writeLog "Returning C42_USERNAME=$C42_USERNAME"
        writeLog "Returning C42_USER_HOME=$C42_USER_HOME"
        echo "C42_USERNAME=$C42_USERNAME"
        echo "C42_USER_HOME=$C42_USER_HOME"
    fi
}
function writeLog () {
    echo "$(date) - $@" >> /Library/Logs/CrashPlan/userDetect_Result.log
}
main "$@"

To use this script:

1. Place the script into your deployment policy.
   You may need to update the script depending on your Jamf version and configuration. Earlier versions of Jamf put the plist in ~/Library/Preferences/, but later versions put it in /Library/Managed Preferences/.
2. In Jamf, create a new configuration profile or edit an existing one.
3. Go to Custom Settings (or Application & Custom Settings, depending on your Jamf version), and upload the following com.code42.email.plist file.
   This is a sample plist file. If you prefer, you can create your own, as long as the EMAIL variable is present as a key that matches what the deployment policy is set up to read.

Copy to clipboardCopied!

​​​​<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
    <key>code42ActivationEmail</key>
    <string>$EMAIL</string>
</dict>
</plist>

4. Scope the Privacy Preferences Policy Control (PPPC) to the users.
   Use appropriate scoping. Whether you scope to users or machines depends on your environment. JAMF must have an email on file for whatever you scope the profile to.
5. Deploy as normal.

Tips to create a custom Linux script

Create a custom script and paste your script into your deployment policy. If you need help, contact your Customer Success Manager (CSM) for enterprise support.

When creating your custom script, be aware of the following:

• Every script must end by echoing values for two variables:

  echo C42_USERNAME=<value>;
  echo C42_USER_HOME=<value>;
  

• In the Code42 cloud, usernames must be email addresses.
• Optionally, you can also specify the the organization for the user. Use the registration key for the organization. If the organization is not defined, the user registers to the organization specified in the deployment policy.

  echo C42_ORG_REG_KEY=<value>

• You must provide values. Null values and empty strings will not work.
• If you cannot write a script to provide a workable value, write a message for the username field of the Code42 app sign in dialog, for example:

  echo C42_USERNAME=Enter name and click Sign in;
  

• The values cannot include either single (') or double (") quotation marks.

Linux commands and arguments

Deployment policy command arguments need to be imported into your software management tool. 

Commands and arguments are detailed here in case you need to modify them for some reason, or to help you deploy without a device management tool.

• To install a Code42 app for all users of a device, sign in to an account with root access and issue a command like the following:

Copy to clipboardCopied!

tar -xvf Code42_n.n.n_Linux.tgz
sudo code42-install/install.sh -q -d "DEPLOYMENT_URL=https://host
  &DEPLOYMENT_POLICY_TOKEN=0fb12341-246b-448d-b07f-c6573ad5ad02
  &SSL_WHITELIST=7746278a457e64737094c44eeb2bbc32357ece44
  &PROXY_URL=http://host/filename.pac"

• To install for one user only:
  • Version 8.2 and later: Append the -u command with a user name. For example: -u "first.last"
  • Version 8.0 and earlier: Sign in as that user and specify-qdu.