For example, if a system extension is already pending user approval, installing the payload will activate the extension. But we know that's not always possible, so in macOS 11.3 and later, installing a system extension payload changes the state of the extension. When deploying and managing system extensions, to avoid unnecessary approval prompts to users, best practice is to deploy the configuration payloads to approve the extensions before apps attempt to load them. We've talked about system extensions for a number of years now, and we hope that developers you work with have already made the transition away from kernel extensions. For more information, watch the WWDC21 session "Manage devices with Apple Configurator." Now let's turn to improvements for ongoing management tasks. This requires administrator credentials and will also remove the Mac from Apple School Manager or Apple Business Manager. ![]() Like on iOS, there's a 30-day provisional period where a user can opt out of the Automated Device Enrollment by removing the MDM profile from the Profiles pane in System Preferences. You simply bring Apple Configurator for iPhone close to the Mac while it's in the Setup Assistant to start the process. Using Apple Configurator for iPhone requires Mac computers with the Apple T2 security chip or Apple silicon running macOS Monterey and an administrator or Device Enrollment Manager user to log in. Apple Configurator for iPhone makes it easy to assign any supported Mac running macOS Monterey to your organization's Apple School Manager or Apple Business Manager, allowing you to take advantage of all of the great device management features that Automated Device Enrollment enables. We know that some devices may be purchased or donated from outside of the normal channels that support Automated Device Enrollment and for these scenarios, we're introducing Apple Configurator for iPhone which will be available on the App Store. Automated Device Enrollment is designed for devices owned by the organization and works best with devices purchased directly from Apple or from participating Apple Authorized Resellers or carriers. ![]() Automated Device Enrollment lets organizations configure and manage devices from the moment the devices are removed from the box and enables you to use all available MDM functionality, including marking the MDM profile as nonremovable. Let's get started with initial enrollment. There are improvements in macOS Monterey throughout all aspects of the deployment life cycle, from initial enrollment, to deployment and ongoing management, and return to service. We'll recap some of the key points from these sessions, but we'll also share updates we've made since these sessions based on your feedback. And at WWDC21, we had a lot of sessions for you, covering a wide range of topics relevant to deployment and management of macOS. ![]() In deploying macOS Big Sur, we covered changes to deployment and management for Mac computers with Apple silicon and went deep into deployment workflows with a focus on the macOS Installer. ![]() And there are a number of platform changes, new management features, and lots of deployment workflow improvements for IT as well. MacOS Monterey brings powerful features designed to allow you to connect, share, and create like never before, get things done faster, and work seamlessly across Apple devices. I'm really excited to help you prepare your organization for macOS Monterey. Mike Boylan: Hi, my name is Mike Boylan, and I'm a senior consulting engineer in Apple's Worldwide Field Engineering team focused on macOS deployment and management.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |