• Bridge the Ethernet connection VMware Fusion is using
• Share the TDM-booted Mac via File Sharing in the Sharing pane of System Preferences on the machine running the VM (be sure to propagate permission by right-clicking the user you’re granting permission to and selecting “Apply Permissions to Enclosed Items”)
• Mount the share in your VM by connecting to the host machine (I did this with “Connect To Server” (Command + K) in the Finder’s Go menu) via the IP address (ex: afp://10.0.1.17)

You should now be able to see the Target Disk Mode Mac. I launched System Image Utility and it auto-detected it and built a NetBoot image with no problems.

I wrote two scripts, firstRun.sh and previousPolicyExecution.sh. Respectively, they are:

#!/bin/sh
#firstRun.sh

hardwareUUID=`/usr/sbin/system_profiler | grep “Hardware UUID” | awk {‘print $3′}`

if [ ! -f /Users/$3/JAMF/PolicyExecution/$hardwareUUID ]; then
mkdir –p /Users/$3/Library/JAMF/PolicyExecution/
touch /Users/$3/Library/JAMF/PolicyExecution/$hardwareUUID
else
echo “File identifier exists on this system or this policy has been executed.”
fi

#!/bin/sh
#previousPolicyExecution.sh

hardwareUUID=`/usr/sbin/system_profiler | grep “Hardware UUID” | awk {‘print $3′}`

if [ ! -f /Users/$3/JAMF/PolicyExecution/$hardwareUUID ]; then
mkdir –p /Users/$3/Library/JAMF/PolicyExecution/
touch /Users/$3/Library/JAMF/PolicyExecution/$hardwareUUID
jamf policy –trigger OncePerUserPerComputer
else
echo “Policy has already been executed on this computer.”
fi

Then I created three policies:

“New User On Computer” is triggered by login and executed once per user. It does whatever you want the policy to do (in my case, wrote a text file to /Users/Shared) and runs firstRun.sh as After.

“Existing User On Computer” is triggered by long and executed by ongoing and only executes previousPolicyExecution.sh.

“Executed By Existing User On Computer” is custom-triggered by “OncePerUserPerComputer,” which is called by previousPolicyExecution.sh, and executed by ongoing. It does whatever “New User On Computer” did.

If a user never existed on a machine, a folder is created in that user’s Library and populated by a file with the computer’s hardware UUID. If a user already existed on a machine, but had never executed the policy, that folder would be created and a custom trigger would deliver the payloads that the policy for a new user would have delivered. If a user exists on the system and has already run the policies, they wouldn’t do anything.

RemoveOffice2011.zip – Contains both Apple and shell scripts.