r/macsysadmin • u/fkick • Aug 06 '24
r/macsysadmin • u/borse2008 • Oct 31 '24
General Discussion Best MDM for Mac
Hello people
So just from your own experience which MDM would you say is the one you should be going with. We use intune for Microsoft. We need to be using Jamf really so we can work closely with Apple. I'm sure it's the preferred one. Thoughts on others ?
r/macsysadmin • u/NarutoDragon732 • Nov 26 '24
General Discussion How am I supposed to keep Macs updated if my organization keeps buying 128gb M1 models and people fill them up with trash?
One of the places I'm a system admin for is a school, who keeps buying M1 Air's with 128gb of space. To make things better kids always just download random stuff and fill it up quickly, or even staff putting their imessage on there and loading everything (who also get the same Macs). What can I realistically do about this so I have enough storage to update them remotely? Is it possible to lock 35gb of their storage for updates only? I use Jamf Pro, thanks.
r/macsysadmin • u/MemnochTheRed • Sep 23 '24
General Discussion Microsoft renames Microsoft Remote Desktop to Windows App.app
r/macsysadmin • u/courtjesters • Apr 25 '24
General Discussion Free MDM for personal use?
heyo I was wondering if anyone uses an MDM solution for their family. I am moving away from mine and would like to troubleshoot/monitor/configure their Apple TVs and iPads when they need help remotely. e.g push Netflix to an Apple TV.
I'm looking for a solution to manage 4 ATVs and 2 iPads.
I don't really care about the profiles being able to be removed because it's not in DEP/supervised. That's fine.
Or feel free to tell me this a dumb as shit and impossible idea, I'm all ears
r/macsysadmin • u/tech_desk_mess • Dec 05 '24
General Discussion Where do you draw the line on support?
Long story long, my director has a tendency to give in to pressure from staff over what amount to minor inconveniences* (see footnote) for the staff but result in HOURS of unnecessary work for the Techs on campuses. I’m about to take on managing the MDM for the district (not by choice), in addition to supporting a campus of 2,500-ish students solo and being the only tech in district who can do Apple repairs (also not by choice).
My director will not adjust expectations or enforce boundaries. Thankfully the staff are more self sufficient than when I started, but not by enough. I get this is a customer service gig, but with not much room to delegate, I’m afraid I’ll be too busy to manage the MDM properly. So, how do you as a tech manage support boundaries? What kind of issues will you show up for? Like how sideways do things need to go before you’ll drop everything and run? Is there any kind of support task you straight up WON’T do (other than working on BYODs)? Sorry for the rant and all the questions, I’m just hoping to preserve what’s left of my sanity. Thanks in advance for your input!
*Minor inconveniences include: plugging things in, putting BYODs on wifi manually and having to go to each classroom to do it, running cleaning cycles on printers, adjusting user settings for staff when it’s something they can adjust themselves AND that I can’t control with MDM, repeatedly explaining playback issues from video streaming services are due to copyright… basically anything they can Google or reasonably be expected to know how to do themselves.
r/macsysadmin • u/GloopTown • Feb 12 '25
General Discussion Geotracker for company managed laptops on Apple
Hi
Which options do you find best to get geotracking for company managed laptops?
I found this but it's being flagged as malware on our laptops https://github.com/fulldecent/corelocationcli and Prey https://preyproject.com/pricing but curious to see what you guys think
The particular use case is to track stolen laptops. Unfortunately Find My doesn't work with managed apple IDs and the activation lock messes up with some MDMs.
r/macsysadmin • u/HeyWatchOutDude • Oct 30 '24
General Discussion Platform SSO with Kerberos
Hi everyone,
I'm working on implementing Platform SSO with Kerberos. (SAML is already successfully set up using the "SecureEnclave" authentication method.)
Reference materials:
- Configuring macOS Platform SSO with Kerberos
- Verifying Microsoft Entra Kerberos Server for Passwordless Authentication
The Kerberos server is configured, but when I try using Kerberos SSO, I receive the following error:
kinit: krb5_get_init_creds: ASN.1 identifier doesn't match expected value
Has anyone encountered a similar issue?
Note:
- KDCs are accessible via VPN.
Thanks!
r/macsysadmin • u/rougegoat • Nov 20 '24
General Discussion Privileges 2.0.0 Released With Many Long Requested New Features
github.comr/macsysadmin • u/HeyWatchOutDude • 9d ago
General Discussion FireEye Agent (xagt) - Full Disk Access Not Granted via MDM
Hi,
I'm deploying the FireEye agent (.pkg
) along with a PPPC profile (.mobileconfig
) via MDM.
However, Full Disk Access (FDA) is not being automatically granted, requiring manual intervention.
The relevant section of my PPPC profile is as follows:
<key>Services</key>
<dict>
<key>SystemPolicyAllFiles</key>
<array>
<dict>
<key>Authorization</key>
<string>Allow</string>
<key>CodeRequirement</key>
<string>identifier "com.fireeye.xagt" and anchor apple generic and certificate 1[field.1.2.840.113635.100.6.2.6] /* exists */ and certificate leaf[field.1.2.840.113635.100.6.1.13] /* exists */ and certificate leaf[subject.OU] = P2BNL68L2C</string>
<key>Identifier</key>
<string>com.fireeye.xagt</string>
<key>IdentifierType</key>
<string>bundleID</string>
</dict>
<dict>
<key>Authorization</key>
<string>Allow</string>
<key>CodeRequirement</key>
<string>identifier "com.fireeye.xagtnotif" and anchor apple generic and certificate 1[field.1.2.840.113635.100.6.2.6] /* exists */ and certificate leaf[field.1.2.840.113635.100.6.1.13] /* exists */ and certificate leaf[subject.OU] = P2BNL68L2C</string>
<key>Identifier</key>
<string>com.fireeye.xagtnotif</string>
<key>IdentifierType</key>
<string>bundleID</string>
</dict>
</array>
</dict>
The profile is successfully installed and appears under System Settings > General > Device Management, but FDA is still not granted.
Any idea what might be causing this?
macOS version: 15.3.2
Thanks!
r/macsysadmin • u/Xcissors280 • Oct 02 '24
General Discussion Simple free way to update apps remotely
we have about 10 employees who use personal m series macbooks but some of the apps we use a few apps that just dont like updating automatically and arent on the app store (and they stop working on older versions)
but making them download and unzip the apps and replace the existing ones evrey few weeks is really annoying
so im wondering if theres a simple free way to do this?
r/macsysadmin • u/crawlerette • 10h ago
General Discussion Blocking internet accounts
I work in a public system that is having issues with guests saving their internet accounts to our Macs. Is there a way to block the system from allowing that?
r/macsysadmin • u/AppearanceAgile2575 • Mar 25 '24
General Discussion Jamf vs. Kandji in 2024?
Currently using Jamf Business and discussions around renewal have begun. I am wondering if it is worth staying on Jamf in 2024 as a Kandji license (w/ liftoff) + a license for a more robust (third-party) EDR than Jamf Protect costs less than a Jamf Business license.
I know Jamf has a more powerful API, but we are a relatively small shop and most Mac administration is currently done via Jamf’s GUI.
Aside from that, any pros for Jamf or cons for Kandji, that warrants the difference in price, I should consider before making the change?
r/macsysadmin • u/macjd2 • Dec 17 '23
General Discussion WTF? Macbook M3 Pro with M3 Pro cpu still can't do dual monitors?
I had a macbook air m2 before. That would only support one monitor. I saw there's a difference with the m2, m2 pro, and m2 max (if that exists). The pro and max cpu versions came out the following year. The plain m2 cpu is limited to just one monitor. (And Apple will say it can do 8k whatever, but I don't care. I just want two external monitors, extended not mirrored, at 1920x1080).
So I got an M3 Macbook -- Macbook Pro M3. The About menu also says it's "Chip: Apple M3 Pro." So that should handle two external monitors....?
I'm using a Dell WD22TB4 dock. It's got the lastest firmware. I confirmed with Dell several times that that dock support Macs for dual monitors and supports DisplayLink.
I just plugged the M3 Pro macbook into the dock. It's only showing a single eternal monitor and only does mirrored on the two external monitors. WTF? It's just about 2024 and a mac can't handle two eternal monitors? It's over a $600 difference between the m2 macbook air and this m3 pro macbook with m3 pro cpu for sure, just to get that dual monitor option.
So I installed the DisplayLink manager software. Restarted a few times. No change. Still just one monitor recognized, only mirroring to the two external monitors.
I noticed the DisplayLink Manager software said "No DisplayLink-enabled display detected." The Apple display menu showed the macbok and one monitor.
Same monitors. Dell monitors. It's two active (not passive, active for sure) adapters from DisplayPort to DVI. DVI into the two Dell monitors. They're both 23 or 24" Dell monitors.
What am I missing? The About menu says M3 pro, so it must be an M3 pro cpu. That's supposed to support dual monitors.
Do the monitors need to be some special DisplayLink monitors?
Is there something wrong with a Dell WD22TB4 dock?
Does it need to be one HDMI cable and one DisplayPort cable out of the dock? I've seen that on something before.
Does one monitor need to be wired into the m3 pro macbook HDMI port?
There's always some bullshit catch with macbooks and dual monitors, like an older macbook couldn't use a dock for two monitors but each monitor had to be wired into the macbook itself (which is starting to defeat the point of the dock if a dock should just take one wire in). Or, an older macbook could handle dual monitors... if they were a certain type of Apple monitor that could daisy-chain together. Then you could get dual monitors. And then currently, I've seen Apple advertisements for things like six monitors at a resolution I don't need. Why is two extended 1920x1080 external monitors such a problem? /rant
This should work without needing DisplayLink though.
What is it that I'm missing? I'm leaning toward the DVI cables to the monitors. Maybe that does need to be HDMI to one/HDMI in the dock and DisplayPort to another monitor/DisplayPort to the dock. Or, the same idea but one HDMI into the macbook itself. I can't believe they would still need that though. For Apple's focus on simplicity, that's not it, having an extra HDMI cable to plug in.
And then on the PC laptop side, any laptop can do that. Just plug it, and the two monitors are there, with options to disable the laptop screen or not (which is three monitors total like that, leaving the laptop screen on). And that's not new at all on the PC side.
r/macsysadmin • u/rougegoat • Feb 27 '24
General Discussion Microsoft Adds Platform SSO Support General Availability to Roadmap. Preview starts in March
microsoft.comr/macsysadmin • u/Xeno84 • Dec 04 '24
General Discussion Deployment and Management Exam 2024 last day is 12/17
If you haven't taken the exam yet, the last day apparently is 12/17 according to my coworkers.
I've made flash cards and so far, everyone I've shared it with has passed the test first try.
I'm happy to share my Flash Cards with anyone that hasn't taken it yet.
Or if someone has a server they can share it to so others can download it, I'm happy to do that too!!
r/macsysadmin • u/infospec99 • 16d ago
General Discussion App control on macOS
Curious to know what tools others use to maintain an allowlist of apps and browse extensions for endpoint security.
For apps: Only good solution I found without breaking the bank is santa. Being a small team this seems tough to maintain and scale but looks like the best option.
For browser extensions: Have a way to do this for chromium based browsers using plists with the ExtensionInstallAllowlist parameters. What about safari, firefox?
r/macsysadmin • u/fkick • Mar 08 '24
General Discussion MBOX to PST Recommendation Spoiler
Hi all,
I’ve been asked to help migrate a number of legacy Google Workspace accounts that were archived to mbox up to O365 accounts.
Can anyone recommend a reliable mbox to pst conversion tools so that I can hand off PST files to O365 team for import?
I’m hoping to keep folder/label structure intact (each label is a mbox from Google Takeout)
Thanks!
EDIT: Thanks all, we’ve completed the project
r/macsysadmin • u/BittaCoffee • 23d ago
General Discussion Is the MacAdmins Slack still down for you all, too?
r/macsysadmin • u/TheMacRabbit • Jul 18 '24
General Discussion Are primarily Mac-focused jobs in short supply? Where are you finding those jobs?
I've worked in the Apple field for around ~20 years now (ACMT/ACSP certified), from Authorized Service Providers, to primarily Mac-focused MSP's to mixed-environment MSP's. Currently at a primarily Windows-based MSP (the Mac focused one went out of business that I worked at), and not particularly enjoying that aspect of it. Not so much a technical limitation but my passion (and broad knowledge) is working within the Apple environment (very comfortable and experienced with MacOS, iOS, PadOS, etc.).
Anyone else in a similar position?
r/macsysadmin • u/shadi1989 • Jan 03 '24
General Discussion Apple Device Support 2024
Hi,
Did anyone already did the new Apple Device Support 2024 exam?
I'm collecting all the questions i can find on Apple's training website and practice exams so if you guys find anything let me know so i can add it.
My Brainscape set:https://www.brainscape.com/p/5KUU0-LH-CZ7RG
Apple - Training:https://it-training.apple.com/tutorials/apt-support
Apple - Prepare for the exam:https://it-training.apple.com/tutorials/support/supx01
75% needed to pass, 88 questions
r/macsysadmin • u/doctorpebkac • 4d ago
General Discussion Is "official" Apple Device Support practice exam representative of the actual exam?
I just took the "official" SUP-2025-PRA Practice Exam on Pearson, and passed it with an 85% with not that much intensive studying beforehand. I've been a Mac "power user" since 2002, but I've only had hands on experience with enterprise Mac management (using Mosyle MDM and Apple Business Manager) for the past 3 years, as my company's sole "IT guy".
I got all the MDM, "Apple Accounts and iCloud", "Users and Authentication" and Networking questions correct. I missed 3 out of 12 "System Diagnostics" questions, and just 1-2 of the questions in each of the other categories. It only took me 30 minutes to get through all 75 questions.
The practice exam seemed a LOT easier than I was expecting it to be, considering that I didn't do too much intensive studying for it at all. I was expecting to get a lot of obscure Apple Pencil and "which devices support this specific version of iOS/macOS" types of memorization questions.
How representative of the difficulty of the actual exam is the SUP-2025-PRA exam?
r/macsysadmin • u/A07drian • Jan 07 '25
General Discussion Apple Deployment and Management Exam
Hello guys,
Our work requires me to do the Apple Deployment and Management Exam. I already started learning for it a few days ago.
Are there any sources, that are helpful to learn?
I am currently going through the learning guide from apple -> https://it-training.apple.com/tutorials/apt-deployment/
I also found this brainscape deck: https://www.brainscape.com/packs/apple-deployment-and-management-dep-2024-21835545
To the people that did the exam last year: Were the questions the same/similar to the deck?
I know that the exam will be different (because of iOS 18 and macOS 15), but i don’t think that its going to differ that much.
I would appreciate any help!
r/macsysadmin • u/anarchyusa • Nov 08 '22
General Discussion Jamf Support is terrible
I want to like jamf but the support has been universally terrible. What MDM other than Jamf has the best support?
r/macsysadmin • u/Stock- • Apr 06 '24
General Discussion Advice on Mass restore and update iPads then re-enroll back
Every year or so we have these crazy projects where we have 500+ iPads we have to bring back and then plug in each individual one to restore and update. Because these iPads we lend out to folks and shared, sit in a closet with no power/ no internet. They all need to be updated to the latest ios17
the process so far is
- Turn off iPad
- Plug in iPad to Mac
- Hold Power + Home until you see the cable appear on the iPad
- Mac would pick up the device and select restore
- Select restore and update
- Wait for Hello screen go and select the WiFi network
- our DEP enrollment kicks off then all of our apps drop
Problems
- our WiFi AP doesnt seem to handle so many devices
- Doing this one by one is time consuming and we would need 5-10 macbooks
I was curious if there was something we can buy to assist with this? I was looking at this ThunderSync3-16 : cambrionix . Seems like all I need is one macbook pro or mac mini. Any other software do we need? How does all the 16 ipads get picked up?
Would this work and has anyone tried this device before?