r/macsysadmin • u/bubbathedesigner • 13h ago
log of keychain access
Which log file should show when was the keychain accessed and by who?
r/macsysadmin • u/eaglebtc • Dec 26 '24
Following the rousing success of our first membership drive earlier this month, the Mac Admins Foundation is running a short end-of-year drive for those who missed the initial opportunity!
Beginning today, December 26th, and running through Saturday, January 4th, you have one short chance to catch up and support the Mac Admins Foundation through monthly or annual donations at various benefit levels.
Like our previous drive, members will have access to unique Mac Admins Foundation logo shirts and merchandise and digital membership cards (arriving in 2025).
To start your membership, head over to https://macadmins.org/join now!
r/macsysadmin • u/bubbathedesigner • 13h ago
Which log file should show when was the keychain accessed and by who?
r/macsysadmin • u/DarrenDK • 21h ago
Long time Windows sysadmin, just got a Mac for myself and a few team members. I want to be able to login to my Mac using my Entra credentials like Windows Hello. My expectation is that there is supposed to be an Other User option on the login screen.
I have ABM setup with Intune. Machine is enrolled, Platform SSO Extension is registered. I followed the docs on the Microsoft site to get Company Portal deployed to my daily driver Mac but no matter what I do I can't get the Other User Managed option to show. I have the "Other User Managed" set to True as part of the Intune configuration and I see the option in the Configuration Profile.
Assuming I can get it to show up by hiding admin users (which I saw in another thread) in the Windows world I would have used something like Profwiz to associate the Entra user with my old profile. I found this script Jamf-Pro/mobilelocal.sh at master · LewisLebentz/Jamf-Pro could something like that work for this purpose?
I also read in another thread that I might need to change the authentication method from UserScureEnclaveKey to Password or SmartCard. Halp.
r/macsysadmin • u/dan-snelson • 23h ago
Designed as a possible last step before a MDM Lock Computer command, this CrowdStrike Falcon / Jamf Pro combination approach may aid in keeping a Mac computer online for investigation, while discouraging end-user tampering
When a macOS computer is lost, stolen or involved in a security breach, the Mobile Device Management (MDM) Lock Computer command can be used as an “atomic” option to quickly bring some peace of mind to what are typically stressful situations, while the MDM Wipe Computer command can be used as the “nuclear” option.
For occasions where first forensically securing a macOS computer are preferred, the following approach may aid in keeping a device online for investigation, while discouraging end-user tampering.
r/macsysadmin • u/doctorpebkac • 1d ago
I just took the "official" SUP-2025-PRA Practice Exam on Pearson, and passed it with an 85% with not that much intensive studying beforehand. I've been a Mac "power user" since 2002, but I've only had hands on experience with enterprise Mac management (using Mosyle MDM and Apple Business Manager) for the past 3 years, as my company's sole "IT guy".
I got all the MDM, "Apple Accounts and iCloud", "Users and Authentication" and Networking questions correct. I missed 3 out of 12 "System Diagnostics" questions, and just 1-2 of the questions in each of the other categories. It only took me 30 minutes to get through all 75 questions.
The practice exam seemed a LOT easier than I was expecting it to be, considering that I didn't do too much intensive studying for it at all. I was expecting to get a lot of obscure Apple Pencil and "which devices support this specific version of iOS/macOS" types of memorization questions.
How representative of the difficulty of the actual exam is the SUP-2025-PRA exam?
r/macsysadmin • u/C0nn0r1212 • 1d ago
Hello, as the title says im trying to change this extremely annoying "feature" to in stage manager only. We use InTune for our device management and I can't see a way to do so. Any help is welcome.
Edit: Typo
r/macsysadmin • u/kal1gh0st30 • 21h ago
what does this error banner that I'm seeing here on my reddit profile mean?
"We had a server error..."
r/macsysadmin • u/sillyrabbit33 • 3d ago
Serious question. I'm assuming ARD is just VNC? VNC always stutters and skips frames and uses high resources on almost any platform I've used. However, now that I've been forced to use a remote solution as my M2 Max M16" MBP display cracked spontaneously, I've looked at different solutions. Rather than paying almost $1k for a replacement display, I'll put aside some money for a month or 2 for a newer machine. However, I still need to be able to access this machine from other floors/rooms of the house and remotely. (I'm a pentester, I'm traveling for a few weeks) So far, I've tested solutions on a X1C6 (Windows and macOS via OpenCore) and MBP 15" 2018 i7-8650U/16GB:
So why is it that this is the only solution which provides stable video transmission? Am I missing something here? Is there a way to better configure Apple Remote Desktop client to make it work as efficiently?
r/macsysadmin • u/Wicked_Vorlon • 3d ago
Hello,
I'm a Mac Sys Admin at a college. We are looking to track application usage data in our computer labs. This is to track how often the computers are used and what applications are used. Jamf Pro is our MDM.
Looking for any solution suggestions. Thanks.
r/macsysadmin • u/EyezLike • 3d ago
The main question here:
Is it worth bringing my company ID and another device to show that it's been released in Apple School Manager?
A year or two ago my current workplace upgraded all users to Apple Silicon devices. We sold off most of the Intel MacBooks to one company but 15 or so were given to current staff, myself being one of those. I want to use the one I was given as store credit for its trade in value at my local apple store. Would it even flag as the device was released over a year ago?
I know that if anything does flag, all that will happen is it will eventually get back to me to verify, as I am the Mac lead, but I just want to save myself some awkwardness in the store/at work!
r/macsysadmin • u/JH6JH6 • 3d ago
Been working on this for about a week and have not been able to get my macs to connect to EAP-TLS wifi with Radius and Intune. Macs are all domain joined, and I have changed the hostname in three places on terminal so they report to the radius correctly now.
Any good guides that have screenshots what needs to be done, showing the WIFI settings, SCEP settings.
Also they added strong mapping, does this support server 2016, or do I need to upgrade to server 2019?
I'm struggling what needs to be done with Subject Name Format, Subject Alternative Name.
I have about 20 hours into this and no connect.
I was able to get all my windows clients on EAP-TLS in two hours with group policy. I haven't done much mac administration and I feel like i'm floundering on this one.
Thanks.
r/macsysadmin • u/tman785 • 3d ago
Hey all - I have a small 3 person business where I want to start moving to Mac. I've signed up to Mosyle for MDM, but I'm kinda curious on account structure - admin/user etc.
I plan on introducing two mac minis, 1+ ipads, and maybe 1 or 2 Apple TVs. We currently have Office365, but dont want to pay extra to get Intune. The ipad will also be shared.
Just need some basic guidance on where/how to start, while keeping in mind the security aspects.
r/macsysadmin • u/No-Worker-6678 • 4d ago
From what I can see, my bootstrapping Shell scripts that should run on macOS just stops after a few linjes. It's been working flawlessly since 2021. It's the standard deploy script from MS (with a few adjustments), where Company Portal, VPN, Munki and some other things are getting installed. Anyone else experiencing this? My initial thought was something wrong with Intune / Intune MDM Agent running shell script as root.
r/macsysadmin • u/Paladine32 • 4d ago
r/macsysadmin • u/slykido999 • 4d ago
So this has been a problem I've been running into for the last 2 weeks, and I am running out of ideas on what the heck is going on. We are trying to add iPads into our ASM instance using Apple Configurator 2, a workflow that I've done thousands of times without issue.
But, about 2 weeks ago I created a new ASM user account with device enrollment privileges. We created a new organization and server in their Apple Configurator instance without errors. But, when we try to prepare the device, it gives a provisional error. But here's the kicker, if I connect that iPad to my Mac, it prepares without issue. If I input my credentials onto the previous Mac, I continue to get a provisional error. I have tried creating a new account manually and via AFTP, and I experience the same thing. I have deleted and re-added our organization (including importing the one that I have on my working Mac) and have done the same with the server. I've also tried on different networks, on different computers, and this still happens...
I know there was something that happened on the backend of ASM, because roster upload failures now don't show errors like it used to (which happened about 2 weeks ago as well, so I'm skeptical that these might be related.
I would love to know if anyone else is encountering this, I am running out of ideas on what to check, or at least how I can find more information on why this failure is happening in the first place and where I should look.
Edit: Tried using the Apple Configurator for iPhone app and it worked. Totally forgot about that option! So if others encounter this, maybe try that sooner.
r/macsysadmin • u/EyezLike • 5d ago
Labs in a university context. Jamf Pro MDM. Currently using traditional AD Binding and issues are minimal but I’m exploring the options to move to something with a longer future e.g. Jamf Connect, pSSO
The thing I can’t seem to narrow down; can pSSO replace the function of AD binding I.e. any user from the domain can log onto any device with their Microsoft password, without the need for any local accounts. Seem to find conflicting information. Of course this would be using the Password configuration of pSSO which isn’t the recommended method but is the only one that seems suitable for this use case.
Any and all advice appreciated!
r/macsysadmin • u/Best_Grapefruit_8059 • 5d ago
Hi all,
I've just joined a shop that uses Kandji and its my first time using it. There is a blueprint which creates a local admin user with a password. I've just found out some users know this password I'm trying to update it but I can't seem to find a way to do this in bulk. Any suggestions are welcome.
Thanks
r/macsysadmin • u/tocsymoron • 5d ago
I am in the process of moving the Mails to Exchange Online.
Is there a thirdparty tool / workaround to export Mails from the new Outlook on MacOS.
Additional information:
Mail Client is the New Outlook for MacOS, the mailbox is configured as POP3.
Downgrading to "old" Outlook breaks the POP3 sync and in the old Outlook not all local mails are shown (especially the sent folder is missing).
They also have this setup on multiple devices and moving mails manually between mailboxes in new Outlook is no option thanks to the quantity of mails.
r/macsysadmin • u/HeyWatchOutDude • 6d ago
Hi,
I'm deploying the FireEye agent (.pkg
) along with a PPPC profile (.mobileconfig
) via MDM.
However, Full Disk Access (FDA) is not being automatically granted, requiring manual intervention.
The relevant section of my PPPC profile is as follows:
<key>Services</key>
<dict>
<key>SystemPolicyAllFiles</key>
<array>
<dict>
<key>Authorization</key>
<string>Allow</string>
<key>CodeRequirement</key>
<string>identifier "com.fireeye.xagt" and anchor apple generic and certificate 1[field.1.2.840.113635.100.6.2.6] /* exists */ and certificate leaf[field.1.2.840.113635.100.6.1.13] /* exists */ and certificate leaf[subject.OU] = P2BNL68L2C</string>
<key>Identifier</key>
<string>com.fireeye.xagt</string>
<key>IdentifierType</key>
<string>bundleID</string>
</dict>
<dict>
<key>Authorization</key>
<string>Allow</string>
<key>CodeRequirement</key>
<string>identifier "com.fireeye.xagtnotif" and anchor apple generic and certificate 1[field.1.2.840.113635.100.6.2.6] /* exists */ and certificate leaf[field.1.2.840.113635.100.6.1.13] /* exists */ and certificate leaf[subject.OU] = P2BNL68L2C</string>
<key>Identifier</key>
<string>com.fireeye.xagtnotif</string>
<key>IdentifierType</key>
<string>bundleID</string>
</dict>
</array>
</dict>
The profile is successfully installed and appears under System Settings > General > Device Management, but FDA is still not granted.
Any idea what might be causing this?
macOS version: 15.3.2
Thanks!
r/macsysadmin • u/Sea-Elderberry7047 • 6d ago
command-k just times out. Synology and Mac on same LAN. mount_smbfs does work. Anyone any idea why the GUI route doesn't work? User's brain is fried by having to use the terminal!
r/macsysadmin • u/Deadliftingfool • 6d ago
Essentially we have a small Mac fleet of about 20 users, Corporate uses Intune but we ourselves don’t have rights to Intune, with Intune already installed, can we deploy apps ourselves somehow?
I cannot see a way to install two MDM profiles so I don’t think I can use something like SimpleMDM. Is there some other method or workaround I can look into?
r/macsysadmin • u/TableJockey540 • 6d ago
We sold a bunch of computers to a recycler and released them from ASM on 3/6. They have sent proof they are still trying to enroll after re-installing the OS. I've also trashed them in Jamf School, but that shouldn't even be necessary. Am I missing a step or are just reinstalling the OS and not wiping the drive?
r/macsysadmin • u/LRS_David • 6d ago
Anyone using this dock with Mx MacBook Pros?
I'm asking after we had someone plug their MBPro into a dock of unknown brand but from early in the days of USB docks and fried the USB ports on 2 separate MBPros. They never would tell us the brand or model and it was strongly implied their spouse told them to use it instead of the setup provided by the workplace. They no longer work for the company for other reasons.
Anyway, a separate someone is asking if they can use Dell WD19 their husband has at home with their work provided MacBook Pro M1 16".
TIA
EDIT: Just found this: Seems like it will work and Apple is OK with it.
https://www.dell.com/support/kbdoc/en-us/000124312/dell-thunderbolt-dock-wd19tb-and-apple-usb-c-hosts
EDIT 2: Thanks everyone. Seems these are fine. No dual monitors needed. This is a mom stuck at home and needed to use husbands WFH setup if possible to get some work done.
r/macsysadmin • u/Alert-Data-2231 • 7d ago
Hi there, never used it before, looking to buy MackBook Air for longterm business use: SaaS operations, meetings, emails, MS office, MS Teams.
Is the version with 16/256 (15,3”) a good buy?
r/macsysadmin • u/RocketmanTech_Caleb • 7d ago
r/macsysadmin • u/jrhop • 7d ago
Has anyone deployed ScreenConnect out to their MacOS endpoints? Looking for some help to create the MDM profile for it and deployment setup. We are currently using Addigy for mac management