It is definitely a case of Apple creating a problem that DEP is the only
real solution for. This was supposed to be fully implemented in 10.13.2,
but they actually pulled out the DEP requirement for now (they say it
will be added in the spring). For ...
It appears that regular MDM is not going to work to disable SKEL, it
must be DEP-initiated SKEL. In fact, MDM itself does not appear to be
trusted or functional until the user approves it (unless, again, it was
enabled by DEP). I have no idea how thi...
Same for me. Has anyone reached out to Apple regarding this? For me, it
no longer appears in System preferences, and If you search for the pref
pane, and try to launch it, you get a message that "You can't open the
Touch ID preference pane because it...
I haven't noticed this specifically, but I have noticed that sometimes
our machines get into a state where they are no longer actually talking
to AD even though they think they are connected (I haven't tried to kill
and restart opendirectoryd as a wo...
While I can't confirm if that is considered best practice, it is exactly
what we are doing for our machine issued AD certificates. With that
said, we also still have occasional issues with machines randomly no
longer connecting to wifi (which we can'...
