Successfully reported this slideshow.
We use your LinkedIn profile and activity data to personalize ads and to show you more relevant ads. You can change your ad preferences anytime.

Full Stack DEP: Modern Mac Deployment

18,856 views

Published on

Presented at London Apple Admins (July 2016).
Key points:
- Focus on your users
- Use Apple Tools
- Leverage Apple Professional Services
- Consider MicroMDM if using Munki

Published in: Technology
  • Be the first to comment

  • Be the first to like this

Full Stack DEP: Modern Mac Deployment

  1. 1. FULL-STACK DEP MODERN MAC DEPLOYMENT
  2. 2. @FTIFF Mac Consultant for large enterprises https://maclovin.org
  3. 3. IT CONSUMERIZATION
  4. 4. 33% 30% 36% Strongly Agree or Agree Neutral Disagree or strongly disagree I don’t worry about my organization’s IT policies. I just use the technologies I need to do my work. Source: Accenture (March 2011) ITCONSUMERIZATION
  5. 5. 13% 42% 45% Strongly Agree or Agree Neutral Disagree or strongly disagree I think the hardware devices and software applications that I personally use are more useful than the ones provided by work. ITCONSUMERIZATION Source: Accenture (March 2011)
  6. 6. TOWARDS ZERO IT INTERVENTION
  7. 7. PROCUREMENT DEP SOFTWARE INSTALL SECURITY USAGE
  8. 8. PROCUREMENT DEP SOFTWARE INSTALL SECURITY USAGE
  9. 9. PROCUREMENT DEP SOFTWARE INSTALL SECURITY USAGE Retail Local Talent World-Wide presence Joint Venture Online Easy ordering Need one contract per country IBM Comprehensive program Starts with 2’000 devices / year APR Best discounts Can accommodate for special requests Personalised help
  10. 10. PROCUREMENT DEP SOFTWARE INSTALL SECURITY USAGE VPP Leverages Apple’s Infrastructure Reclaim software MDM Deploy certificates Deploy Profiles Casper Suite MicroMDM* Wi-Fi SCEP Server WPA2 Enterprise Enrollment Network ⚠ Login Window Leverage Apple Professional Services
  11. 11. *MICROMDM @groob @mosen https://micromdm.io/ (GUI)+ ‣ DEP Enrollment ‣ Initial install of App (e.g. Munki) ‣ RESTful API and SDK PROCUREMENT DEP SOFTWARE INSTALL SECURITY USAGE
  12. 12. SOFTWARE INSTALLPROCUREMENT DEP SECURITY USAGEDEP @ftiff CasperSplash Inspired by IBM Helps to wait until some apps are installed Displays company info AutoPkg* ‘Cookbook’ workflow Leverage Community Definitions on github Limit admin errors Easy start by using the “AutoPkgr” GUI App Store Empower your users Leverage VPP
  13. 13. SOFTWARE INSTALLPROCUREMENT DEP SECURITY USAGEDEP *CASPERSPLASH https://github.com/ftiff/CasperSplash @ftiff
  14. 14. SECURITYPROCUREMENT DEP SOFTWARE INSTALL USAGEDEP Kerberos No more binding! Sync local password with AD Enterprise Connect* Gala System Password policies Educate users to Lock screen FileVault Sophos Malware is coming Use a non-intrusive anti-virus
  15. 15. SECURITYPROCUREMENT DEP SOFTWARE INSTALL USAGEDEP *ENTERPRISE CONNECT Apple Professional Services @ftiff ‣ Manage Kerberos Tickets ‣ Sync Local Password with AD ‣ Automatically mount shares ‣ Execute Scripts
  16. 16. USAGEPROCUREMENT DEP SOFTWARE INSTALL SECURITYDEP Support Encourage users to go to Apple Outsource Tier-1 or Tier-2 Training Create an internal Genius Bar Use Apple Retail Store workshops Tier-0 Use Self-Service app Easy Reinstall with macOS Recovery Apple Get an AppleCare OS Support* Use Apple Professional Services*
  17. 17. Apple Professional Services: Enterprise iOS & Mac Readiness Wireless Readiness Integration Shared Devices OS Update Accelerator FastTrack iOS Deployment App Dev Review & Boot Camp Enterprise Connect ✅ ✅ ✅ APPLE PROFESSIONAL SERVICES: ENTERPRISE
  18. 18. Operating System Select Preferred Alliance iOS, OS X client, and OS X Server using graphical user interface OS X and OS X Server using command-line interface Incident Troubleshooting automated administrative tasks and scripts Incident Troubleshooting cross-platform integration (security, file, and print services) Incident Troubleshooting directory service integration and profile management Incident Troubleshooting Active Directory integration Incident File system and RAID configuration < APPLECARE OS SUPPORT
  19. 19. THANK YOU!

×