![]() Then make your own custom scripts and profiles, using what Jamf has supplied as a reference, implementing them in a targeted manner. These were updated by Eirin McDonald in January 2019 for the latest set of recommendations, and can be found on the Jamf GitHub.Ī good way to use these is by selecting the particular settings that work well and are relevant in your organization. Jamf has, in cooperation with CIS, created scripts to test and configure the recommendations. The latest CIS macOS Benchmark is still relevant. The best way to understand the recommendations is by flipping through them, reading the reasoning behind them and trying the commands. The benchmark has a neat list of shell commands to test your settings and change them. They categorize their recommendations into three categories, recognizing that some will negatively impact usability and perhaps aren’t necessary in most organizations either. Their CIS Apple macOS 10.13 Benchmark is for High Sierra, but most of the recommendations are relevant to Mojave as well. The nonprofit organization Center for Internet Security (CIS) regularly releases security recommendations for operating systems and software. Create a Policy to run the SimpleNudge.sh script uploaded earlier on Recurring Check-in Once every day (probably most effective, but you may choose another interval, according to preference) with the Smart Computer Group created above as its Target under Scope.Upload SimpleNudge.sh under Computer Management – Scripts. ![]() Remind users to update using this simple setup I created a very simple solution based on jamfHelper: SimpleNudge.sh – only 15 lines of code. If you, like me, prefer simple solutions based on Jamf’s existing toolset – look no further. ![]() One well-known solution is Nudge, which works well, but may be a bit too comprehensive for some. On recent versions of macOS, reminding the user to update using Apple’s Software Update dialog in System Preferences is often preferable to other update strategies. Create a Smart Computer Group called Has Apple Software Updates Available with the Criteria Software Updates Available is True.Using the following script RecommendedUpdates.sh. Data Type: String, Inventory Display: General, Input Type: Script. In Computer Management – Management Framework – Extension Attributes, create a new Extension Attribute called Software Updates Available.Using Graham Pugh’s method of checking for available updates, I created an Extension Attribute and a Smart Group, so I can still notify users of updates, without causing softwareupdated to hang. Unfortunately, I have had to disable collection of available software updates under Computer Management – Management Framework – Inventory Collection – Collect available software updates, since it does not currently work properly. To be able to send notifications that encourage users to run Software Update, I used to rely on a smart group that was dependent upon Jamf’s inventory update.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |