Hello,
On our Mac fleet managed with Jamf Pro, we use Jamf Connect with Google SSO. We also have a local account called “localadmin” on each Mac, and only the IT administrators know the password.
We recently deployed Jamf Protect, and I would like to create an alert whenever someone logs in to the “localadmin” account on one of our Macs.
I have already tried creating a Custom Analytic and using a Jamf Pro script, but I haven’t been able to get it working properly.
Has anyone already implemented something similar with Jamf Protect?
Ideally, I would like to receive an alert whenever a successful login to the “localadmin” account occurs.
Any advice or examples of Custom Analytics would be greatly appreciated.
Thanks!