August 2023 – MacAdmins Meeting

10 Aug August 2023 – MacAdmins Meeting

August 16th, 2023 – University of Utah, MacAdmins Meeting

The University of Utah, MacAdmins Meeting is held monthly virtually on the 3rd Wednesday of each month at 11 AM Mountain Time. Presentations cover Apple technology and integration in a heterogeneous university enterprise environment. This month’s meeting will be held on Wed, August 16th, 2023 at 11 AM MT and we will provide live broadcasts and archives that will be made available 2-3 days after the meeting.

WWDC 2023 & New Enterprise Features – Chris Coffelt, Apple

This presentation covers the recent releases from the 2023 Apple World Wide Developers Conference and will recap the announcements from WWDC, reviews what’s new for Managed Apple IDs, managing software updates, new deployment options, and new management features for macOS, iOS, iPadOS, and watchOS.



Managed Apple IDs
Apple has introduced significant updates to Managed Apple IDs, catering to organizational needs. These enhancements encompass broader iCloud support for Managed Apple IDs, encompassing iCloud Keychain for password management, syncing passkeys for Face ID or Touch ID, and syncing data within apps. A new enrollment framework allows users to employ both personal and Managed Apple IDs on a single device, while account-driven Device Enrollment extends this capability with improved management features. Furthermore, Managed Apple IDs can now be used to sign in to managed apps across iOS, iPadOS, and macOS. Enhanced Access Management policies offer greater control over sign-ins and app usage, while the integration of custom identity providers provides more options for organizations to create and sync Managed Apple IDs

New Management Options
Several new features and enhancements in managing Apple devices, specifically focusing on macOS, iOS, and iPadOS. Managed Apple IDs have been improved with updates to Continuity, Apple Wallet, and iCloud Keychain. OpenID Connect support is being added to Apple School Manager and Apple Business Manager for greater identity federation. iCloud Keychain is integrated with Managed Apple IDs, allowing businesses to go passwordless with passkeys. Declarative Device Management has been enhanced to deploy applications, certificates, and manage service configuration files. Software Update now supports enforced updates with improved user transparency. Apple Watch can be enrolled into MDM, expanding device management. Managed Device Attestation, introduced in iOS, is now available on macOS, enhancing security by providing device assurances. New attributes are added to attestation certificates, including SIP Status, secure boot status, and more. Application management on macOS has been improved, allowing packages to install multiple applications, each of which can be managed individually. Return to Service for iOS and iPadOS streamlines the device erasure and setup process. Easy student sign-in and improved Shared iPad login processes have been introduced for educational environments. These updates aim to enhance device management, security, and user experiences across Apple devices.

About Chris Coffelt

Chris Coffelt has been with Apple for 8 years as a Systems Engineer supporting educational institutions. Before joining Apple, he was in public education for 16 years as an IT Director for school districts in Colorado and California.

     Note – Please be aware that in accordance with Apple’s policy, this presentation will not be recorded or accessible after the live broadcast. Viewing it during the live session will be the sole option for watching.  

Apple TV Management, Distribution & Usage – Collin Elliott, Attentive

This presentation highlights the practical management, distribution & applications of Apple TVs in Enterprise and Education. Apple TV’s integration with the Apple ecosystem offers tangible benefits for communication and learning enhancement.In Enterprise, Apple TV enables seamless content sharing, impacting meetings, training, and communication through its user-friendly interface and security features. Similarly, in Education, Apple TV transforms classrooms with interactive learning and collaboration possibilities, adaptable to various teaching scenarios.

Managing Apple TV in an enterprise and education involves a comprehensive approach to ensure seamless deployment, security, and optimal functionality. The process begins with device enrollment, where Apple TVs are integrated into a Mobile Device Management (MDM) solution like Apple School Manager or Apple Business Manager, providing centralized control. Configuration profiles are then created and deployed through the Mobile Device Management (MDM), allowing customization of settings such as Wi-Fi networks, security preferences, and restrictions. This ensures a consistent and controlled user experience across all devices.

About Collin Elliott

Collin is currently a Senior Client Platform Engineer at Attentive. He previously managed endpoints for Gopuff as well as multiple large churches. He has deployed thousands of macOS, iOS/iPadOS, tvOS, Windows, and AndroidOS devices. He has been married for almost 14 years and has 5 kids. He loves baseball, LEGO, and technology.

• Video – To view the archived presentation video, click here.
• Slides – To view the archived presentation slides, click here.

A Deep Dive Into Apple OS Updates via MDM – Bryce Carlson, Product Manager, Addigy

Find out what makes Apple OS updates tick under the hood, and find out what services and binaries are related to their inner workings. We will also briefly touch on a few of the changes Apple has talked about from WWDC in relation to OS updates and the coming Declarative Device Management (DDM) path for updates.

MDM Watchdog
MDM Watchdog is a solution from Addigy that safeguards the health and responsiveness of your macOS fleet by addressing and resolving stuck devices, ensuring seamless device management and communication. Works with any MDM solution.

MDM Watchdog is a tool designed to address issues related to software updates, specifically focusing on ensuring that devices are properly enrolled in an MDM server, have valid identity certificates, and are able to communicate effectively with the MDM server to receive and execute software update commands. MDM Watchdog monitors and troubleshoots these processes to ensure that devices are not stuck in a state where they are not receiving or executing software update commands properly.

Declarative Device Management

macOS Declarative Device Management is a powerful framework that revolutionizes how IT administrators manage macOS devices in an organization. It introduces a streamlined approach to device configuration by enabling administrators to define settings and configurations in declarative-style profiles. These profiles are comprehensive blueprints that encompass various aspects of device management, including system preferences, security settings, network configurations, and more.

Unlike traditional device management methods that often involve scripting and manual adjustments, Declarative Device Management provides a structured and efficient way to ensure consistency and compliance across a fleet of macOS devices. IT teams can create profiles using Apple’s Property List (plist) format or ProfileCreator, a user-friendly tool. These profiles can be easily applied during initial device setup or later through the use of Mobile Device Management (MDM) solutions.

This approach offers several advantages, including simplified deployment of standardized settings, the ability to enforce security measures uniformly, and efficient updates of configurations without disrupting end-users. By abstracting the complexity of scripting and focusing on a declarative model, macOS Declarative Device Management empowers IT administrators to manage and maintain macOS devices more effectively, enhancing security, productivity, and user experience across the organization.

About Bryce Carlson

Bryce has been in the Apple management space since 2011 and worked in the K-12 and Higher Education space before moving on to Apple MDM vendors. Currently, he is a Product Manager at Addigy for the MDM stack and Microsoft integrations. His favorite Mac is the iMac G4 17″.

• Video – To view the archived presentation video, click here.
• Slides – To view the archived presentation slides, click here.

Open Discussion

Questions, comments, problems, and fixes.

Directions

Due to the coronavirus (aka Covid-19) crisis, this meeting will not be meeting in person but will currently be done virtually using Zoom video communications architecture.