AD binding changing, how to handle student accounts in the future

[anickless]

Just read this article

https://www.jamf.com/blog/advisory-macos-ad-cve/?mkt_tok=NzA0LVZZUC01MjcAAAGCjXCd7i5w-LxW_Pn4Nx7jggE...

and wondering with students signing in and out of a laptop what we could do? NoMAD? or something else?

[cbrewer]

NoMAD Login is an option. Regular NoMAD requires a local account which won't work very well for multiple users. I think Jamf is currently working on some updates to both NoMAD and NoMAD Login.

Ideally, Apple addresses this in the next macOS version by allowing a login via a Managed Apple ID or allowing AD logins without binding.

[anickless]

Thanks, @cbrewer I have been looking into NoMAD login, but I agree I am hoping Apple can address it in some way that doesn't require additional layers to manage. I just am always curious if there is another way to address this.