This document discusses managing unmanaged Mac OS X devices with Configuration Manager (ConfigMgr) Vnext and Microsoft Intune. It covers: - Native management options in ConfigMgr Vnext for Mac OS X devices via the native SCCM client and MDM channel. - Managing Mac OS X devices via Microsoft Intune through the MDM channel. - Capabilities like hardware inventory, application deployment, settings management and compliance settings for Mac OS X devices in ConfigMgr Vnext and Intune. - Troubleshooting tips for Mac OS X management in ConfigMgr Vnext. The document contains demos of setting up Mac OS X support and enrollment in ConfigMgr Vnext, deploying applications

1. Manage those unmanaged OS X devices
with ConfigMgr Vnext and Microsoft Intune
Peter Daalmans
@pdaalmans
http://ref.ms/aboutme
Chris Nackers
@chrisnack
http://chrisnackers.com

2. #MMSMOA
@pdaalmans
Sn. Technical
Consultant,
IT-Concern Configmgrblog.com
Breda, Netherlands
Peter Daalmans

3. #MMSMOA
@chrisnack
Consultant,
Nackers
Consulting Chrisnackers.com
Breda, Netherlands
Chris Nackers
10 years

4. Agenda
• Native manageability options in Vnext
• Via native SCCM Client
• Via native MDM channel
• Manage Mac OS X via Microsoft Intune
• Via MDM channel

5. Native Manageability options Mac OS X Support
in ConfigMgr VNEXT

6. Native Manageability options
• Support for Mac OS X
• 10.6, 10.7, 10.8, 10.9, 10.10 and 10.11
• Hardware Inventory
• Application Deployment
• Settings Management

7. Enrollment of Mac OS X
What do we need?
• Public Key Infrastructure (AD CS)
• Site server with Internet FQDN
• HTTPS-enabled Management Point
• HTTPS-enabled Distribution Point
• Enrollment Point and Enrollment Proxy Point
• Client Settings configured
Installation/Enrollment
• Terminal-based install (Console/SSH)
• Manual certificate enrollment
• User-driven GUI in SCCM 2012 R2

8. Demo
Setting up support and enrolling
Mac OS-X device

9. Inventory
• Hardware inventory via Common Information Model (CIM)
• Installed programs via hardware inventory
• Inventory schedules handled by Default Client Policy

10. Application Management
• Native in ConfigMgr 2012 SP1 / R2 using CMMAC wrapper
(Community tool via:
http://www.flaschengeist-studios.com/cmapputil-helper/ )
• Supports APP, PKG, MPKG, DMG
• Detection via Application Bundle ID and Package ID
• Deployment to Devices, not Users
• Simulate Deployments are supported
• Must be a required deployment
• BITS not supported
• Global conditions not supported

11. Compliance Settings
• Creation of Items and Baselines
• Report compliance of preferences
• Remediate preferences
• Managing preferences is getting harder because of changes
since 10.8 and 10.9 and the ConfigMgr Client for Mac OS X
• Supports directly managing (system) preferences
• Supports discovery and remediation scripts

12. Compliance Settings
• System preferences are stored in LibraryPreferences
• So why can’t I manage user preferences?
• User preferences are stored in ~LibraryPreferences
(Users$USERLibraryPreferences)
• Configuration Manager client operates in Root context
• So the client will change Preferences of User Root (DCR is
submitted)
• Workaround = using Apple shell scripts
• defaults reads <preference> <setting> <value>
• defaults write <preference> <setting> <value>

13. Demo
deploy applications / inventory /
compliance settings

14. Troubleshooting
• Library/Application Support/Microsoft/CCM/Logs
• CCMClient-<date_time>.log
• Records activities that are related to the Mac client operations, which includes
application management, inventory, and error logging.
• ~/Library/Logs
• CCMAgent-<date_time>.log
• Records information that is related to client operations, which includes user
logon and logoff operations and Mac device activity.
• CCMNotifications-<date_time>.log
• Records activities that are related to Configuration Manager notifications
displayed on the Mac device .

15. Mac OS X management
Via Microsoft Intune

16. Management via Microsoft Intune
Mac OS X support for Microsoft Intune is announced at
Ignite!
• Security
• Web-based enrollment
• Passcode policies
• Disk encryption
• Configure
• Push WiFi/VPN profiles
• Push custom policies (via Apple Configurator)

17. What is next?
• Audit
• Hardware inventory
• Software inventory
• Device reports
• Management via MDM channel
• User get’s access via company portal
18

18. Demo
Mac Management via Microsoft
Intune

19. Resources
• Blog James Bannan: http://www.jamesbannanit.com
• Blog Kent Agerlund: http://kea.coretech.dk
• Mac Scripter: http://macscripter.net
• Technet: http://ref.ms/sccmmac
• Blog Peter Daalmans: http://configmgrblog.com (http://ref.ms/tools
for demo examples)
• Blog Chris Nackers: http://www.chrisnackers.com

20. Key takeaway
Do you have Mac and SCCM / Microsoft
Intune?
Manage them to be compliant!

21. Share your ideas
• Share your voice / ideas!
• http://microsoftintune.uservoice.com/
• http://configurationmanager.uservoice.com/

22. Questions

23. Thank you!

24. Evaluations: Please provide session feedback by clicking the EVAL button in the scheduler app (also
download slides). One lucky winner will receive a free ticket to the next MMS!
Session Title:
Discuss…
Ask your questions-real world answers!
Plenty of time to engage, share knowledge.
SPONSORS

25. Section Header
This is the next section

26. Title
Line1
Line2
Line3
Line4
Line5
Line6
• Bullet Level 1
• Bullet Level 2
• Bullet Level 3

27. Title
Code

28. Text Only with Border
• Level 1
• Level 2
• Level 3

29. Text Only without Border
• Level 1
• Level 2
• Level 3

30. Title
Text 1
• Level 1
• Level 2
• Level 3
Text 2
• Level 1
• Level 2
• Level 3

31. Section 1
Text
• Level 1
• Level 2
• Level 3
Section 2
Text
• Level 1
• Level 2
• Level 3
Title

32. Demo
Demo Title