Presented at London Apple Admins (July 2016). Key points: - Focus on your users - Use Apple Tools - Leverage Apple Professional Services - Consider MicroMDM if using Munki

1. FULL-STACK DEP
MODERN MAC DEPLOYMENT

2. @FTIFF
Mac Consultant for large enterprises
https://maclovin.org

3. IT
CONSUMERIZATION

4. 33%
30%
36% Strongly Agree or Agree
Neutral
Disagree or strongly disagree
I don’t worry about my organization’s IT policies.
I just use the technologies I need to do my work.
Source: Accenture (March 2011)
ITCONSUMERIZATION

5. 13%
42%
45%
Strongly Agree or Agree
Neutral
Disagree or strongly disagree
I think the hardware devices and software applications that I
personally use are more useful than the ones provided by work.
ITCONSUMERIZATION
Source: Accenture (March 2011)

6. TOWARDS ZERO IT INTERVENTION

7. PROCUREMENT
DEP
SOFTWARE INSTALL
SECURITY
USAGE

8. PROCUREMENT DEP SOFTWARE INSTALL SECURITY USAGE

9. PROCUREMENT DEP SOFTWARE INSTALL SECURITY USAGE
Retail
Local Talent
World-Wide presence
Joint Venture
Online
Easy ordering
Need one contract per country
IBM
Comprehensive program
Starts with 2’000 devices / year
APR
Best discounts
Can accommodate for special requests
Personalised help

10. PROCUREMENT DEP SOFTWARE INSTALL SECURITY USAGE
VPP
Leverages Apple’s Infrastructure
Reclaim software
MDM
Deploy certificates
Deploy Profiles
Casper Suite
MicroMDM*
Wi-Fi
SCEP Server
WPA2 Enterprise
Enrollment Network
⚠ Login Window
Leverage
Apple Professional
Services

11. *MICROMDM
@groob @mosen
https://micromdm.io/
(GUI)+
‣ DEP Enrollment
‣ Initial install of App (e.g. Munki)
‣ RESTful API and SDK
PROCUREMENT DEP SOFTWARE INSTALL SECURITY USAGE

12. SOFTWARE INSTALLPROCUREMENT DEP SECURITY USAGEDEP
@ftiff
CasperSplash
Inspired by IBM
Helps to wait until some apps are installed
Displays company info
AutoPkg*
‘Cookbook’ workflow
Leverage Community
Definitions on github
Limit admin errors
Easy
start by using the
“AutoPkgr” GUI
App Store
Empower your users
Leverage VPP

13. SOFTWARE INSTALLPROCUREMENT DEP SECURITY USAGEDEP
*CASPERSPLASH
https://github.com/ftiff/CasperSplash
@ftiff

15. SECURITYPROCUREMENT DEP SOFTWARE INSTALL USAGEDEP
Kerberos
No more binding!
Sync local password with AD
Enterprise Connect*
Gala
System
Password policies
Educate users to Lock screen
FileVault
Sophos
Malware is coming
Use a non-intrusive anti-virus

16. SECURITYPROCUREMENT DEP SOFTWARE INSTALL USAGEDEP
*ENTERPRISE CONNECT
Apple Professional Services
@ftiff
‣ Manage Kerberos Tickets
‣ Sync Local Password with AD
‣ Automatically mount shares
‣ Execute Scripts

17. USAGEPROCUREMENT DEP SOFTWARE INSTALL SECURITYDEP
Support
Encourage users to go to Apple
Outsource Tier-1 or Tier-2
Training
Create an internal Genius Bar
Use Apple Retail Store workshops
Tier-0
Use Self-Service app
Easy Reinstall with macOS Recovery
Apple
Get an AppleCare OS Support*
Use Apple Professional Services*

18. Apple Professional Services: Enterprise
iOS & Mac
Readiness
Wireless
Readiness
Integration
Shared
Devices
OS Update
Accelerator
FastTrack iOS
Deployment
App Dev
Review &
Boot Camp
Enterprise
Connect
✅ ✅
✅
APPLE PROFESSIONAL SERVICES: ENTERPRISE

19. Operating System Select Preferred Alliance
iOS, OS X client, and OS X Server using graphical user interface
OS X and OS X Server using command-line interface Incident
Troubleshooting automated administrative tasks and scripts Incident
Troubleshooting cross-platform integration (security, file, and print
services)
Incident
Troubleshooting directory service integration and profile management Incident
Troubleshooting Active Directory integration Incident
File system and RAID configuration
<
APPLECARE OS SUPPORT

20. THANK YOU!