Enterprise Connect vs NoMAD

@DanJ_LRSFC This depends on what you mean by "forced mass password reset" - if you mean all users are just required to change their password, and you did not change their password through the console, then yes, when the user signs in to NoMAD, they will be presented with a screen informing them that they must change their password. If "Local Password Sync" is enabled in NoMAD (able to be pushed through a profile) then it will synchronize the keychain password and local password.

If you mean changing the password for all the users and then informing the user of the new password, I believe the absolute latest version 1.0.4 watches AD for password changes and will inform the user if you enable that functionality (I believe the preference item is called UPCAlert).

@bpavlov I agree that it's useful to learn Keychain, however, expecting end users to learn it I think might be a little hopeful. You can also create a script that helps them fix their own keychain, that way you just ask the users to run the self service item. We did this at my last company.

We had Apple Enterprise Connect setup, and although it is pretty slick, it does have a limitation which made me look into NoMAD. Our password policy is not a domain level policy, which limits Enterprise Connect in seeing the countdown to the password expiration. My initial test with NoMAD fixes that issue. Our staff and students will require different configuration profiles. The student passwords don't expire. I know NoMAD has other similarities, so I will continue testing.

I really like NoMAD as it give us the ability to run our MacBooks unbound. However, I have one issue with the fact that NoMAD does not see the network change when my users connect to VPN. When a computer is offline or connected to public wireless, as expected, NoMAD shows "Not Connected" . When the computer connects to the LAN, NoMAD immediately goes green and displays the "Connected" message. If the same computer connects to our corp VPN, NoMAD remains in an unconnected state. I believe this is because our VPN is an SSL gateway that requires a plug-in rather than a client. Mac OS does not see a network location change when it connects. Does anyone know of a way to manually force NoMAD to look for a domain connection without Mac Os detecting a network location change?