Apple Device Management

Working effectively with Apple platforms at a corporate or business level includes not only infrastructure, but a mode of thinking that administrators have to adopt to find success. A mode of thinking that forces you to leave 30 years of IT dogma at the door. This book is a guide through how to integrate Apple products in your environment with a minimum of friction. Because the Apple ecosystem is not going away. You'll start by understanding where Apple, third-party software vendors, and the IT community is taking us. What is Mobile Device Management and how does it work under the hood. By understanding how MDM works, you will understand what needs to happen on your networks in order to allow for MDM, as well as the best way to give the least amount of access to the servers or services that's necessary. You'll then look at management agents that do not include MDM, as well as when you will need to use an agent as opposed to when to use other options. Once you can install a management solution, you can deploy profiles on a device or you can deploy profiles on Macs using scripts.

With Apple Device Management as your guide, you'll customize and package software for deployment and lock down devices so they're completely secure. You'll also work on getting standard QA environments built out, so you can test more effectively with less effort.

Apple is forging their own path in IT. They trade spots with Amazon, Google, and Microsoft as the wealthiest company to ever exist. And they will not be constrained by 30 or more years of dogma in the IT industry. You can try to shoehorn Apple devices into outdated modes of device management, or you can embrace Apple's stance on management with the help of this book.

Auteur

Charles Edge is the Director of the Marketplace at Jamf. He holds 30 years of experience as a developer, administrator, network architect, product manager and CTO. He is the author of 20 books and more than 6,000 blog posts on technology, and has served as an editor and author for many publications. Charles also serves on the board of multiple companies and conferences, and frequently speaks at industry conferences around the world, including DefCon, BlackHat, LinuxWorld, the Apple Worldwide Developers Conference, and a number of Apple-focused conferences. Charles is also the author of krypted.com and a cohost of the MacAdmins Podcast.

Rich Trouton has been doing Macintosh system and server administration for twenty years and has supported Macs in a number of different environments, including university, government, medical research, advertising and enterprise software development. His current position is at SAP, where he works with the rest of the Apple CoE team to support SAP's Apple community.

Contenu
CHAPTER 1: THE EVOLUTION OF APPLE DEVICE MANAGEMENT NeXT

Mac + Unix = Mac OS X

Ecosystem Coexistence

iOS Device Management

iOS + Mac OS X = macOS

Imaging Is Dead?

macOS Unix = appleOS

Don't Forget The Apps

SERVERS

BALANCED APPLE SCORECARD

Access to organizational resources

Cradle to Grave device management

Directory Services

Endpoint Protection

World class support

Summary

CHAPTER 2: AGENT-BASED MANAGEMENT

Daemons and Agents

Services

LaunchDaemons and LaunchAgents

Create Your Own Daemon

Third Party Daemons

Use Lingon To See and change Daemons and Agents Easily

Working with Daemons and Agents in Scripts

Jamf

Munki

Chef

Puppet

Rootless

The Impact of UAMDM

Summary

CHAPTER 3: PROFILES

Use Apple Configurator to Create a Profile

View the Raw Contents of a Profiles

Install a Profile

View a Profile from iOS

View the Effects of a Profile on a Mac

Remove a Profile

Restrict Profile Installation on iOS

Use the Profiles Command on macOS

Summary

CHAPTER 4: A DEEP DIVE INTO MDM

Managed Preferences

Managed Client

APNs

Enrollment

UAMDM

How MDM Commands Work

Sending A Command

Profiles As Commands

Device Supervision

Summary

CHAPTER 4: EXPLORING MDM WORKFLOWS

Wiping a Device Using Profile Manager

Locking a Device Using VMware Workspace ONE

Resetting a Device Lock Using Jamf Pro

Disabling the Camera Using MobileIron

Installing a Package from Jamf Now

Pushing a Password Policy from Intune

Summary

CHAPTER 5: APPS, VPP, AND APPLICATION DISTRIBUTION

Install an ipa on iOS

Rewrapping an ipa

Install a .app on macOS

Install an installation Package on macOS

Summary

CHAPTER 6: THE APP AND OS DISTRIBUTION BUILD TRAIN

Autopkg

Autopkgr

Integrate Autopkgr With Jamf

Integrate Autopkgr With Other Products

Summary

CHAPTER 7: ACCESSING NETWORK SERVICES

Getting on the Network

802.1x

DEP and Guest Networks

Identity Providers and SaaS Apps

Accessing Files

Remote Control

Summary

CHAPTER 7: SECURING YOUR FLEET

Securing the Platform

Combat Malware on macOS

Xprotect

ClamAV

Third Party Solutions

Threat Management on iOS

Binary Whitelisting

Compliance

Centralized Log Capture and Analysis

Beyond Agents

Summary

CHAPTER 8: A CULTURE OF CONTINUAL TESTING

Manual Testing

Build A Testing Matrix

Automated Testing

Sikuli

Testplant

Expect Scripting

Kanban

Release Management

Summary

CHAPTER 9: THE FUTURE OF APPLE DEVICE MANAGEMENT

The Future Of Agents

Summary

APPENDIX 1: THE APPLE ECOSYSTEM

Antivirus

Automation Tools

Backup

Collaboration Suites and File Sharing

CRM DEP Splash Screens and Help Menus

Development Tools, IDEs, and Text Manipulators

Digital Signage and Kiosks

Directory Services and Authentication Tools

Identity Management

Imaging and Configuration Tools

Log Collection and Analysis

Management Suites

Misc

Point of Sale

Print Servers Remote Management

Security Tools</p&g...