To make it easier to distribute this service I wrote an installer script that creates a launchd and a script. Please have a look on this article before you deploy API Credentials on local machines. Now I have created a new extension Attributes as a text field.įinally, we need a script that updates our extension attribute when it is called from launchd.Īfter the next erase, my extension attributes were updated and now I am able to monitor computers with this value. I created a new JAMF Pro user that only has the following rights:
Since the erase process of macOS is processed very quickly, there is not enough time to execute a jamf policy and I had to switch to a somewhat dirty way. Now I was ready and could create a launchdaemon to monitor this file. I probably made the big breakthrough with a file that is created in the preboot volume shortly before the reboot. The application itself is located in the CoreServices folder: /System/Library/CoreServices/Erase\ Assistant.app/ First I analysed what happens on the file level and which processes are called. The idea is that I have a service (launchdaemon) that notices when I run the Erase Assistant and then updates a JAMF extension attribute I created. What can we do to ensure that an erase operation is logged in our client management system? The only question is whether we want to deactivate this helpful feature, especially when many users are in the home office.
Of course, JAMF offers us a way to prevent this function. Apple has unfortunately failed to implement a kind of postflight action for this process.If the user bypasses the DEP process after the reset (offline enrolment), we would only notice this because our device does not deliver an inventory or a checkin. The disadvantage of this solution is that you as an administrator do not notice anything. Open System Preferences -> Click on “System Preferences” Similar to iOS, Mac users can now reset their Mac themselves in the system preferences. With the release of macOS Monterey, Apple has implemented a really helpful feature for me.
0 kommentar(er)
