Making sure Preview.app is the default PDF reader

Malware can sometimes come in the form of a PDF that contains embedded scripting language. Luckily, Apple's Preview.app, which is the default PDF reader on macOS, does not support most of Acrobat's features that can enable this type of malware. It is also much lighter than Acrobat Reader, and a great application. Making sure Preview.app … Continue reading Making sure Preview.app is the default PDF reader

Catalina compatible Jamf Self Service policy to grant users temporary admin rights

If your organization mandates that users run as standard users, one way of allowing them to install software and perform operations where admin privileges are necessary, is to let them grant themselves temporary privileges. There are a few solutions out there already. With the introduction of macOS Catalina, Apple announced they were deprecating Python and … Continue reading Catalina compatible Jamf Self Service policy to grant users temporary admin rights

Create a local record with information from Jamf, for later use in scripting

When running shell scripts on client machines through Jamf, information about the machine and user in question is sometimes needed to get things done right.Among the most frequently used pieces of information:The currently logged-in user: Often used to run shell commands as the user using sudo -u $loggedInUser, since many settings and commands will only … Continue reading Create a local record with information from Jamf, for later use in scripting

Adding Apple-supported options not yet present in Jamf to MDM configuration profiles

Setting user-unmodifiable options is one of the main purposes of an MDM solution such as Jamf. On Apple Devices, this is mostly done through configuration profiles. Apple has a frequently updated document describing all the different options for macOS and their other operating systems: the Configuration Profile Reference. If you are new to the subject, … Continue reading Adding Apple-supported options not yet present in Jamf to MDM configuration profiles