March 2025 – MacAdmins Meeting

March 2025 – MacAdmins Meeting

March 19th, 2025 – University of Utah, MacAdmins Meeting


mac_mgrs_crowd

The University of Utah MacAdmins Meeting is held virtually monthly on the 3rd Wednesday of each month at 11 AM Mountain Time. Presentations cover Apple technology and integration in a heterogeneous university enterprise environment. This month’s meeting will be held on Wed, March 19th, 2025, at 11 AM MT, and we will provide live broadcasts and archives that will be made available 2-3 days after the meeting.

iMazing Profile Editor 2 Beta – Ari Leviatan, DigiDNA


iMazing Profile Editor from DigiDNA has become the go-to tool for Apple system administrators looking to create and manage Apple configuration profiles. The company has recently launched the public beta for version 2.0 of the app, introducing significant new features and enhancements that streamline workflows for IT professionals.

In this presentation, Ari Leviatan, DigiDNA’s Director of B2B Engineering, will showcase several of these newly added workflows and demonstrate how administrators can take full advantage of them. One of the key highlights is the new payload import options, which allow admins to manage a library of configurations and simplify the process of configuring unfamiliar applications.



For those who need to set—but not enforce—certain preferences, version 2.0 introduces two valuable features: export-to-script functionality and MCX (Managed Client) payload support. Exporting profiles to scripts allows admins to apply configurations dynamically via command-line tools, while MCX support enables the definition of default settings that users can modify.

Additionally, the presentation will cover the MDM enrollment feature introduced in version 3.1 of iMazing, DigiDNA’s flagship app. This feature helps administrators streamline large-scale MDM migration projects by preserving user data when enrolling devices, significantly reducing downtime and reconfiguration efforts.

About Ari Leviatan

Ari Leviatan is a Director of B2B Engineering with DigiDNA, makers of the popular iOS device management app iMazing. He oversees all device configuration initiatives, including the development of iMazing Profile Editor and the collaboration on the ProfileManifests project, which powers it. From time to time, you’ll also find him actively engaging with users of the company on the Mac Admins Slack community.  

  • Video – To view the archived presentation video, click here.
  • Video – To view the demonstration video, click here.
  • Slides – To view the archived presentation slides, click here.


The (Mis)Education of macOS Security Internals – Stuart Ashenbrenner , Huntress


Join us for an insightful presentation on macOS security internals, where we’ll explore the built-in security mechanisms Apple provides out of the box. Steuart Ashenbrenner, a macOS researcher at Huntress, will take you through Apple’s multi-layered approach to security, covering malware detection, blocking mechanisms, and remediation tools.

When you power on a brand new Mac, ready or not, you get some pre-installed security tools. Over the years, Apple has evolved and expanded its security posture on disks. We will dive into the internals of Apple’s built-in security tools: TCC, File Quarantine, Gatekeeper, XProtect, and XProtect Remediator. 

Topics include:
🔹 File Quarantine & Gatekeeper – How macOS handles unknown applications
🔹 Transparency, Consent, and Control (TCC) – Managing app permissions & MDM challenges
🔹 XProtect & Remediation – Apple’s approach to threat detection and mitigation

With real-world insights, live demonstrations, and a focus on practical implications for MacAdmins, this session will provide valuable takeaways for securing and managing macOS environments.

We will discuss how they work, how they interact with each other, how MacAdmins can leverage the information they expose, and if these tools are enough to stand on their own in your tech stack.

About Stuart Ashenbrenner

Stuart Ashenbrenner is a Principal macOS Security Researcher at Huntress. He has spoken at conferences about macOS security, including Objective by the Sea and MacDevOpsYVR. His previous experience includes macOS Detections Engineer at Jamf and as a software engineer. His non-work time is consumed with being a girl dad and coaching basketball.

  • Video – To view the archived presentation video, click here.
  • Slides – To view the archived presentation slides, click here.

Open Discussion


Questions, comments, problems, and fixes.

Directions


This meeting will not be held in person but virtually via Zoom video communications architecture.

With Zoom, we will implement the following security best practices:
 
  • Require a Password to Join This meeting will require a password to join. Information will be emailed via a campus internal list, but if you are external and want to attend the meeting, please use the Contact Us form to receive details. Otherwise, the archive of the meeting will be available 2-3 days after the live meeting.

  • Waiting Room When joining the meeting, you will be placed in the Waiting Room by default, and the hosts will give you access to the live meeting.

  • Miscellaneous We will also implement other settings and safeguards to secure the meeting.

Archived Presentation(s)


  • Archives of the presentations will be available on this web page.
No Comments

Leave a Reply