Jamf Nation Community

azbikowski · 04-28-2015

Is there a functional equivalent? On the Windows side of the house, we're setting up AppLocker to only allow applications from trusted publishers to run. Applications that aren't code signed will be reviewed and code signed using our internal CA. Thi...

azbikowski · 12-19-2014

I just noticed someone has 115 notifications from Self Service. Is there a way to automatically clear or expire the notifications after a period of time that I've missed somewhere along the way?

azbikowski · 10-23-2014

Heard a few issues I've run into myself so throwing out what I've found so far. I'm still testing some of this, so no promises. Filevault 2 Unlock out of Sync with Active DirectoryWe've run into a few laptops where Filevault doesn't sync up when the ...

azbikowski · 04-01-2014

Does anyone know of a good way to do this in an extension attribute or similar? I need to track down laptops that haven't yet been switched over to using AD accounts.

azbikowski · 12-17-2013

I'm wondering if there is a way to configure Accessibility settings via Casper or script? It seems like something that should be in Configuration Profiles, as that would be the way to establish a trusted security chain for configuring this. Before I ...

azbikowski · 12-16-2015

For your internal Certificate Authority (such as Active Directory Certificate Services) create or edit an existing Configuration Profile. There is a certificates section. You'll edit the certificates payload, upload your crt file to the JSS, and it w...

azbikowski · 11-19-2015

I've been reading about SCEP and NDES, but I think the part that confuses me is how do you actually GET the certificate? You need a certificate to get on the 802.1x network, but you can't get the certificate unless you're already on the network. That...

azbikowski · 11-19-2015

According to Microsoft's documentation your Network Devices Enrollment Services (NDS/NDES/whatever) should be a separate server from your Active Directory Certificate Services server. Before you get too far, figure out what your RADIUS servers are ex...

azbikowski · 08-10-2015

The certificate template for your Windows computers probably won't work. Macs don't put all the needed information into the certificate request, so you have to configure the template to build the information from Active Directory, On Mountain Lion an...

azbikowski · 05-04-2015

What browser(s) are you testing with? If Macs are joined to Active Directory, users are logging into Active Directory accounts, and everything else Kerberos is working properly, Safari should just work and authenticate. Firefox and Chrome require con...

Jamf Nation Community

User Statistics

User Activity

AppLocker like functionality for OS X

Clear OS X Self Service Notifications?

Active Directory Q&A

Determine if an account is a Mobile or Local Account

Configure System Preferences > Security & Privacy > Privacy > Accessibility

Re: Distribute .crt certificate to MacBook Airs

Re: 802.1x, AD certs, & iPads

Re: 802.1x, AD certs, & iPads

Re: How to set up machine based authentication for 802.1x Wi-Fi

Re: IronPort WSA authentications