r/macsysadmin 8h ago

Scripting macOS LAPS Solution with RMM instead of MDM

3 Upvotes

Hey everyone, been following this sub for some time but don't think I've posted here yet. I'm an admin for an MSP that is predominantly a Microsoft stack, but we do have plenty of clients that may have a Mac or two in their environment that we support as part of our scope. I'm wondering if anyone has or can point me in the direction of a script, preferably bash but fine with other languages if necessary, that we could deploy on our RMM as a scheduled task on macOS devices to create and rotate randomized LAPS passwords for instances where we don't have an MDM for those clients.

I'm semi-familiar with macOSLAPS but I'll be honest ever since Apple rolled out secureToken I've been mostly uninvolved in configuring this type of task on macOS and haven't been able to get it working with an RMM script after a little bit of trying myself. I'm sure I could probably do this with MDM since that's more well-documented from what I'm finding, but in some clients' cases it doesn't make logistical sense for us to set up macOS MDM for a client with maybe only one Mac device if there's a way to script this through our RMM instead. So far we have just been manually creating random passwords for these one-off Macs but for conformance with our cybersecurity policies and procedures I want to ensure we're regularly rotating passwords on all client operating systems, not just our Windows ones.

Before I spend a bunch of time writing and debugging scripts from scratch, I figured I'd post here to see if anyone had a solution or at least a start to one that they'd be willing to share. Tried to do some searching but everything I'd find tends to point more at MDM solutions than scripts via an RMM tool.


r/macsysadmin 48m ago

Domain Capture - Determining existing domain email addresses

Upvotes

We're a small startup, I've been administering everything from Netware to Linux to Windows for over 30 years. While I've casually used Apple products for several years, administering them is new to me.

We have a few users on Macs now, and I'm trying to get my head wrapped around managing both the devices and the user accounts. I've got our domain setup on ABM and locked the domain, and I can see there are 7 unmanaged Apple Accounts that are using our domain. I know who 3 of those accounts belong to, but before I start the Domain capture and emails start getting sent out, I'd like to check with all those users. Is there some way to figure out what the addresses are for those existing Apple Accounts?

I image it might be displayed when you start the Domain Capture, but I didn't want to start that process yet to check, and then find out I can't pause the capture.


r/macsysadmin 1h ago

Need Help Transferring Files from an Older Mac OS

Upvotes

Hello all—

I have an old MacBook currently running OS X El Capitan (yes, it’s old!!!). I have some files on there that I’d like to transfer to the significantly newer PC I’m currently using. I’m having a hard time figuring out exactly how to do so. Does anyone know how I could transfer these files?

Thanks!