I help a lot of organizations integrate Macs into their one to one environments, and I've noticed a trend that just doesn't make sense to me. Almost every admin I work with wants to do the same thing; erase the OS that Apple ships and lay down their own "clean" copy of the OS. But is this really a necessary step? In my mind, no.Read More
One of the problems facing many Mac administrators in Active Directory environments is how to give their users admin rights on their machines. When configuring Active Directory, it's easy to specify one or many AD groups that should have admin access, but this only works when the Mac is able to contact the domain controller to verify group membership. Furthermore, this can be a security risk, because this gives everyone in an AD group admin rights to every machine. How can you give each user admin rights to their machine only, and without the need to be in contact with the domain controller?Read More
One of the questions I get asked a lot in "new frontier" companies with a young, tech savvy user base is "How do we convince our users to enroll into device management?" Users in these organizations generally have admin rights to their machines, and they mostly manage themselves. They will likely google their problem before opening a ticket with IT, and the last thing they want is to be locked down or restricted in any way. It's not a technology or policy issue; it's a marketing problem.Read More
With the release of the Casper Suite 9.0, JAMF also released a new tool called the JDS (JAMF Distribution Server). The JDS is no-fuss software that runs on either OS X Server or Linux that acts as an HTTPS distribution point, and includes automated syncing between JDSs, all managed by the JSS.Read More
Ok, so this one is a little more "fun" than my usual content, but I've been wanting to do a video for a while now and I figured this was a good start.