Fleet is both an endpoint reporting tool, built around osquery, and an MDM platform. When using Fleet as a reporting tool, one provided data point is which MDM platform hosts are enrolled in.
However if an MDM is not in Fleet’s hardcoded list it will show up as “Unknown” in the Fleet UI. This is exactly the scenario I ran into when I first started testing out Fleet last year.
Thankfully this is easy to fix with a simple PR since Fleet is open source.
Read on for the details…
I’ve always run an Apple Content Caching server at home because it is simple to setup and requires no maintenance, so why not!
With a house full of Apple devices we might as well take advantage of the functionality to speed up downloads.
I first started playing with Home Assistant because I wanted an easier interface to visualize my energy usage without logging into Smart Meter Texas.
With built-in integrations for UniFi networking and Pi-hole, a networking dashboard was the next thing on my list to tackle. There isn’t a built-in integration for Apple Content Caching, however with a custom sensor and a LaunchDaemon it is easy to get the data reporting in and visualized.
Read on for the details…
Last month I had the privilege to speak at the PSU MacAdmins Conference about how to plan an MDM migration.
This presentation was a follow-up to the talk I gave at MacDevOps:YVR in 2024 with more tips and checklists for how to manage your own migration.
It was my first time attending the conference and I had a blast meeting new MacAdmins in person and catching up with old friends.
Read on for my slide deck and a link to the conference video…
Munki is designed to ensure a specific or newer version of an application is installed on a macOS computer. A job it excels at.
CrowdStrike Falcon does a great job of upgrading, and downgrading, itself. This includes the ability for admins to change their desired installed version across the fleet from the CrowdStrike console.
So how does a MacAdmin use Munki to deploy Falcon without disrupting the ability to change the installed version across the fleet on the fly?
Read on for details on how we handle it.
While iPhones and iPads have always required internet connectivity to complete setup, Macs do not have this same requirement, allowing users to easily bypass Automated Device Enrollment (ADE).
Thankfully there is now a way to work around this limitation thanks to a new feature Apple added in macOS 13 Ventura.
Read on for the details…
Munki uses several different methods to decide what needs to be installed on a Mac. When deploying applications or files, an “installs” array is, in my opinion, the best way to make sure they remain installed and unaltered.
Munki automatically creates an installs array when you import an application or a DMG containing an application. But when you import a package, by default the receipts are used to determine installation status.
This means to have Munki check for the existence of items deployed by a package and not rely on the receipts, an installs array must be manually constructed.
Creating an installs array for multiple files can be tedious, so I wrote a script to simplify the process. Read on the for the details.
Last month I had the privilege to speak at the MacDevOps:YVR conference in Vancouver about an MDM migration I led late last year.
We utilized a new featured Apple added in macOS 14 Sonoma to drive our user experience and had great overall results.
I had a fantastic time meeting so many fellow MacAdmins in person, sharing my experiences and learning from the other amazing speakers.
Read on for my slide deck, a link to the video and an example script…
Apple added the ability to use Touch ID for sudo on the command line interface back in 2017 with High Sierra.
Since that time there have been numerous scripts published to make enabling this feature easier.
So with apologies to the United States Marine Corps…
This is my script. There are many like it, but this one is mine.
Read on for the details.
Earlier this year Camera Bits consolidated the different Photo Mechanic (PM) versions into a single “All-in-One” download.
The cataloging feature of Photo Mechanic Plus is now simply activated (or not) by the license used to activate the application. (This is exactly how Microsoft handles Office for Mac.)
There are now subscriptions as well as perpetual licenses available which all use the same download.
Thankfully the ability to programmatically activate and deactivate is still there so only a few changes are needed in our Munki scripts.
Read on for the required changes…
MacAdmins have grown accustomed to Microsoft adding new, useful managed preferences to AutoUpdate and Office over the years.
So it comes as a surprise when widely used preferences are removed seemingly on a whim with no warning.
Recently I’ve written about two unexpected changes to Microsoft AutoUpdate (MAU):
Yesterday a member in the MacAdmins Slack spotted a new Microsoft document that contains even more changes to MAU preferences.
Read on for a little commentary plus what I think are the most noteworthy changes…