05-18-2022 01:05 PM - edited 05-18-2022 01:40 PM
Hey there, i cant find the documentation. Can someone point me to where things are defined for the "login window" payload? Ideally when you mouse over items in the UI, it would give you a small description of what the property does. One can dream!
Specifically, "enable console login" and "enable external accounts". What do those options do? does anyone have a manual link?
Also this one under the access tab, Combine available workgroup settings:
Solved! Go to Solution.
Posted on 05-23-2022 12:07 PM
"Enable console login" - allows users to type >console for the username to get something akin to the single user boot GUI. If you don't know what this is, you definitely don't want to enable it!
"Enable external accounts" - for a time you could plug a drive into a Mac and if that drive were properly configured macOS would read the account info on it and allow you to log those accounts into the Mac you'd connected the drive to. Almost no one understood this tech and even fewer used it, so it was deprecated. You shouldn't be using this either.
"Combine available workgroup settings" - another rarely used macOS feature, think of it as a bit like implementing a resultant set of policy for an AD GPO; your time would be better spent looking at modern Identity Providers ... But I agree with you, at the least a mouseover with Apple's own not-much-more descriptive text, or at least an obvious help link in the Jamf Pro UI to the document @mainelysteve shared would got a long ways towards getting you the info you need.
Posted on 05-19-2022 07:59 AM
Documentation on the different payload settings is located here. Click on Table of Contents, expand MDM Settings then MDM Payload Settings.
Posted on 05-23-2022 12:07 PM
"Enable console login" - allows users to type >console for the username to get something akin to the single user boot GUI. If you don't know what this is, you definitely don't want to enable it!
"Enable external accounts" - for a time you could plug a drive into a Mac and if that drive were properly configured macOS would read the account info on it and allow you to log those accounts into the Mac you'd connected the drive to. Almost no one understood this tech and even fewer used it, so it was deprecated. You shouldn't be using this either.
"Combine available workgroup settings" - another rarely used macOS feature, think of it as a bit like implementing a resultant set of policy for an AD GPO; your time would be better spent looking at modern Identity Providers ... But I agree with you, at the least a mouseover with Apple's own not-much-more descriptive text, or at least an obvious help link in the Jamf Pro UI to the document @mainelysteve shared would got a long ways towards getting you the info you need.
Posted on 05-25-2022 12:26 PM
Alright thank you. I believe these were set by default so wanted to ask about them. Niche situations all of them it seems.