Stay ConnectedWelcome to the ”LaunchPad Jamf Admin Podcast,” sponsored by Rocketman Tech!
Join us for ~1-hour sessions exploring the latest news, updates, and trends in the Jamf and Apple ecosystem. Each episode features a keynote speaker, discussions on recent LaunchPad events, and interactive Q&A sessions. With a relaxed, conversational atmosphere, our podcast is perfect for staying current and connected. Stay updated, stay engaged, and navigate the Jamf and Apple world with us!
Copyright: © Copyright 2024 All rights reserved.
Join us for the JNUC 2024 Recap as the Rocketman Team walks you through the latest updates on macOS Sequoia, CIS Compliance, Blueprints, and Platform SSO with Jamf Pro, sharing our insights and opinions.
---------------------------------------------------
For more information about Rocketman Tech, or to schedule a meeting with one of our Jamf Experts, visit our website: https://www.rocketman.tech
Tom Bridge and Collin Elliot of the Mac Admins Foundations join us to discuss their 2024 initiatives, including Mac Admin Mentorship, Penn State MacAdmins Sponsorships, Mac Admins Open Source, and much, much more.
Sign up for next months LaunchPad: https://www.rocketman.tech/launchpad
---------------------------------------------------
For more information about Rocketman Tech, or to schedule a meeting with one of our Jamf Experts, visit our website: https://www.rocketman.tech
This month Rocketman Tech’s Chad Lawson and Chris Schasse will demonstrate their secret strategies for managing Jamf Pro servers by each giving tips and tricks to help you manage Jamf better.
Sign up for next months LaunchPad: https://www.rocketman.tech/launchpad --------------------------------------------------- For more information about Rocketman Tech, or to schedule a meeting with one of our Jamf Experts, visit our website: https://www.rocketman.tech
This month on LaunchPad, Rocketman Tech's Christopher Schasse and Robert Hammen, an Apple Platform Architect in the Aerospace industry give a recap of WWDC specifically for Mac Admins on what to expect over the next year with Apple and Jamf.
We delve deep into the WWDC sessions, saving you the hassle! The annual Worldwide Developers Conference (WWDC) hosted by Apple is an essential hub of information technology insights. In this session, we'll thoroughly dissect all the crucial Apple updates for Jamf Admins, casting a light on the future of iOS, macOS, Apple Business Manager, and all things Apple.
Supplemental Resources: https://rkmn.tech/macos15
Sign up for next months LaunchPad: https://www.rocketman.tech/launchpad
---------------------------------------------------
For more information about Rocketman Tech, or to schedule a meeting with one of our Jamf Experts, visit our website: https://www.rocketman.tech
Apple recommends using MDM commands to upgrade and update your fleet. But what can we do when MDM isn't working across all our fleet? Graham R. Pugh, Senior Systems Engineer, MSP Services at Jamf will discuss erase-install, a tool originally developed for erasing and reinstalling macOS that has since become more widely used for performing updates and upgrades without the need for admin rights, while making prerequisite checks and providing user feedback during the update process.
---------------------------------
Welcome to the ”LaunchPad Jamf Admin Podcast,” sponsored by Rocketman Tech!
Join us for ~1-hour sessions exploring the latest news, updates, and trends in the Jamf and Apple ecosystem. Each episode features a keynote speaker, discussions on recent LaunchPad events, and interactive Q&A sessions. With a relaxed, conversational atmosphere, our podcast is perfect for staying current and connected. Stay updated, stay engaged, and navigate the Jamf and Apple world with us!
This month we have guest presenter Kevin White discussing S.U.P.E.R.M.A.N. (or just `super`). S.U.P.E.R.M.A.N. is an open source script that provides administrators with a comprehensive workflow to encourage and enforce macOS software updates or upgrades for both Intel and Apple silicon Mac computers to explore Jamf's New macOS Onboarding experience.
---------------------------------
Launchpad Podcast is hosted by Rocketman Tech where we discuss recent news, updates and happenings in the Jamf and Apple world. Always relevant and always casual, we'll have a Keynote speaker, discuss current LaunchPad events, and invite group discussion, questions and topic requests throughout the ~1 hour meeting.
For the last four months we’ve been testing the macOS onboarding workflow and have developed tools and workflows to optimize this new Jamf feature. Join us as we go through the power of this new tool along with some of its caveats.
---------------------------------
Launchpad Podcast is hosted by Rocketman Tech where we discuss recent news, updates and happenings in the Jamf and Apple world. Always relevant and always casual, we'll have a Keynote speaker, discuss current LaunchPad events, and invite group discussion, questions and topic requests throughout the ~1 hour meeting.
This month we are having a special Ask an Expert: LaunchPad Live. We are excited to have an excellent panel available to answer all your burning questions.
Guest Experts include:
The Panelists: - Charles Edge: CTO at Bootstrappers.mn
Mark Buffington: Senior Consulting Engineer at Jamf
Isaac Ordonez: Director of Technology at Mann Consulting
Phil Stokes: macOS Malware Researcher at SentinelOne
---------------------------------
Launchpad Podcast is hosted by Rocketman Tech where we discuss recent news, updates and happenings in the Jamf and Apple world. Always relevant and always casual, we'll have a Keynote speaker, discuss current LaunchPad events, and invite group discussion, questions and topic requests throughout the ~1 hour meeting.
The macOS Security Compliance Project made meeting compliance on macOS easy for enterprise organizations implementing security baselines or benchmarks like NIST/CIS. Let's talk about how Jamf's new tool can make it even easier to select the appropriate security controls, edit your organizations customized values, export compliance documentation and generate guidance. We will show how easy it is to upload all configuration profiles, scripts and extension attributes into Jamf Pro with a single-click.
---------------------------------
Launchpad Podcast is hosted by Rocketman Tech where we discuss recent news, updates and happenings in the Jamf and Apple world. Always relevant and always casual, we'll have a Keynote speaker, discuss current LaunchPad events, and invite group discussion, questions and topic requests throughout the ~1 hour meeting.
Learn how Escrow Buddy can help you ensure your MDM has valid FileVault personal recovery keys for all your organization's Macs.
---------------------------------
Escrow Buddy is a brand-new open-source tool for Mac IT and security administrators who escrow FileVault personal recovery keys to their MDM. For Macs that do not have a valid recovery key in escrow, Escrow Buddy securely and transparently generates a new key during the standard macOS login process and triggers its escrow. In this session, Elliot Jordan will cover the reasons FileVault recovery keys might be missing from your MDM, share context on the pitfalls of existing password-prompt workflows aimed at solving the problem, and explain why Escrow Buddy offers a more evolved and scalable solution for modern Mac admins.
---------------------------------
Launchpad Podcast is hosted by Rocketman Tech where we discuss recent news, updates and happenings in the Jamf and Apple world. Always relevant and always casual, we'll have a Keynote speaker, discuss current LaunchPad events, and invite group discussion, questions and topic requests throughout the ~1 hour meeting.
Setup Your Mac aims to simplify initial device configuration by leveraging swiftDialog and Jamf Pro Policy Custom Events to allow end-users to self-complete Mac setup post-enrollment.
Apple’s Automated Device Enrollment helps streamline Mobile Device Management (MDM) enrollment and device supervision during activation, enabling IT to manage enterprise devices with “zero touch.”
Setup Your Mac aims to simplify initial device configuration by leveraging swiftDialog and Jamf Pro policy “Custom Events” to allow end-users to self-complete Mac setup post-enrollment. Attendees can prepare now by visiting snelson.us/sym and come ready to learn SYM racing stripes, gotchas and “one more thing.”
---------------------------------
Launchpad Podcast is hosted by Rocketman Tech where we discuss recent news, updates and happenings in the Jamf and Apple world. Always relevant and always casual, we'll have a Keynote speaker, discuss current LaunchPad events, and invite group discussion, questions and topic requests throughout the ~1 hour meeting.
The Rocketman team, along with guest Jamfers, discuss the amazing features, integrations, and changes to both Jamf and macOS. The discussion ranges from requiring filevault, platform SSO, Apple Watch Management, and a demo of Jamf Remote Assist (coming soon!).
---------------------------------
Launchpad Podcast is hosted by Rocketman Tech where we discuss recent news, updates and happenings in the Jamf and Apple world. Always relevant and always casual, we'll have a Keynote speaker, discuss current LaunchPad events, and invite group discussion, questions and topic requests throughout the ~1 hour meeting.
A lot was announced at JNUC 2023 this year! Join us as we talk through some of the biggest announcements, our speculations on how they will be implemented, along with some must-see presentations.
---------------------------------
Launchpad Podcast is hosted by Rocketman Tech where we discuss recent news, updates and happenings in the Jamf and Apple world. Always relevant and always casual, we'll have a Keynote speaker, discuss current LaunchPad events, and invite group discussion, questions and topic requests throughout the ~1 hour meeting.
Description: You might be saying to yourself, "Dynamically updating a Static Group is impossibly dumb, because, that's what Smart Groups are for...", but, here is my dilemma: I need to assess an endpoint state for which there are no good client-side attributes to collect.
In this particular case (if you must know, Microsoft modern vs. basic authentication) there is no definitive data on the endpoint that accurately reflects the sheer number of highly-variable user login behaviors in my environment. It's not that it's too hard, it just can't be accurately done (&, yes, I've talked to Microsoft... https://techcommunity.microsoft.com/t...)
The user login data I need (i.e., email addresses that are using basic auth) is available, however, in the Exchange logs. Because our Messaging team can ship me that log data I can use it to create Static Groups. When that data is updated I can dynamically change the membership of my designated Static Group, thus, Dynamic Static Groups™
---------------------------------
Launchpad Podcast is hosted by Rocketman Tech where we discuss recent news, updates and happenings in the Jamf and Apple world. Always relevant and always casual, we'll have a Keynote speaker, discuss current LaunchPad events, and invite group discussion, questions and topic requests throughout the ~1 hour meeting.
TCC was introduced with macOS Mojave and stands for Transparency, Consent, and Control. This allows the user to have control over what applications can access, including Location Services, Bluetooth, and Full Disk Access, to name a few. However, the three we are focusing on for this presentation is camera, microphone, and screen recording, since these three cannot be controlled via an MDM.
Follow up resources for this session can be found at https://www.rocketman.tech/post/you-down-with-tcc
The full presentation that was delivered at Penn State Mac Admins can be found at https://www.youtube.com/watch?v=3gC1MaFKKAs
---------------------------------
Launchpad Podcast is hosted by Rocketman Tech where we discuss recent news, updates and happenings in the Jamf and Apple world. Always relevant and always casual, we'll have a Keynote speaker, discuss current LaunchPad events, and invite group discussion, questions and topic requests throughout the ~1 hour meeting.
A recap of WWDC and what to expect over the next year with Apple and Jamf.
We scour WWDC sessions so you don’t have to! The Worldwide Developers Conference (WWDC) is an information technology conference held annually by Apple. In this presentation we go over all of the relevant Apple updates for Jamf Admins as we look to the future of what to expect with iOS, macOS, Apple Business Manager, and everything else Apple is doing. If you’re looking to stay up-to-date with what’s happening with Apple, you won’t want to miss this session!
---------------------------------
Launchpad Podcast is hosted by Rocketman Tech where we discuss recent news, updates and happenings in the Jamf and Apple world. Always relevant and always casual, we'll have a Keynote speaker, discuss current LaunchPad events, and invite group discussion, questions and topic requests throughout the ~1 hour meeting.
An explanation of how On-Prem to Jamf Cloud migrations work.
On-Prem to Jamf Cloud migrations can be a bit of a mystery. Join us as Drew Duggan, the Senior Sales Engineer at Jamf, joins us for a Q&A to demystify the process.
---------------------------------
Launchpad Podcast is hosted by Rocketman Tech where we discuss recent news, updates and happenings in the Jamf and Apple world. Always relevant and always casual, we'll have a Keynote speaker, discuss current LaunchPad events, and invite group discussion, questions and topic requests throughout the ~1 hour meeting.
How to get started deploying macOS updates with S.U.P.E.R.M.A.N. and a Q&A with the creator Kevin White.
In this session, we will be showing a base setup for S.U.P.E.R.M.A.N. and then taking a technical deep dive into how it works. We will then be doing an interview with the creator, Kevin White, where we ask some common questions on the way it was set up, the way it can be configured, and any security concerns with setting things up one way over another. We’re also going to discuss whether Rocketman’s setup is the best way, or if there’s a better way Kevin recommends, and open up Q&A for the audience.
---------------------------------
Launchpad Podcast is hosted by Rocketman Tech where we discuss recent news, updates and happenings in the Jamf and Apple world. Always relevant and always casual, we'll have a Keynote speaker, discuss current LaunchPad events, and invite group discussion, questions and topic requests throughout the ~1 hour meeting.
TCC is the macOS system for providing applications access to system services while ensuring transparency, consent, and control. Apple has made sure that admins or attackers cannot automatically provide applications access to user files, external drives, or hardware like camera and microphone, for obvious security reasons.
Yet with zero touch provisioning our goal is to provide our teams with the ability to do their jobs right out of the box. So how do we guide people through the process of enabling these services for applications like Zoom or Teams that they need in a remote world? In this presentation we will show our workflow for walking people through these processes during our automated onboarding process and a shell script function for verifying that they have what they need.
---------------------------------
Launchpad Podcast is hosted by Rocketman Tech where we discuss recent news, updates and happenings in the Jamf and Apple world. Always relevant and always casual, we'll have a Keynote speaker, discuss current LaunchPad events, and invite group discussion, questions and topic requests throughout the ~1 hour meeting.
The Rocketman Tech Team has migrated from using installation scripts and AutPkgr to using Jamf’s built in App Installers to deploy software patches for thousands of Macs. Senior Jamf Engineer at Rocketman, Hugo Immediato, will give a full assessment of what worked well, what can be improved, and whether it can work for your environment.
---------------------------------
Launchpad Podcast is hosted by Rocketman Tech where we discuss recent news, updates and happenings in the Jamf and Apple world. Always relevant and always casual, we'll have a Keynote speaker, discuss current LaunchPad events, and invite group discussion, questions and topic requests throughout the ~1 hour meeting.
Beginning with Catalina (10.15), Apple changed the default login shell from Bash to Zsh. Many admins, ourselves included, have been slow to move to this new shell. Why should we? It turns out there are few advantages to Zsh over Bash. In this session we’ll show off a few ways we’ve been able to leverage Zsh to write better scripts, and even regain some of what we lost when Python went away.
---------------------------------
Launchpad Podcast is hosted by Rocketman Tech where we discuss recent news, updates and happenings in the Jamf and Apple world. Always relevant and always casual, we'll have a Keynote speaker, discuss current LaunchPad events, and invite group discussion, questions and topic requests throughout the ~1 hour meeting.
At the beginning of 2022, Jamf announced that Basic Authentication would be deprecated by the end of the year. Although they have seemed to push back this date indefinitely, it's still important to update your scripts to Token Bearer Authentication.
In this video I'll provide you with:
1. A shell function you can drop into your existing scripts.
2. The method and command to call the function and fetch your token from the Jamf Pro API.
3. The simple search/replace process to convert your existing Basic calls to Bearer.
Blog post referenced in this video:
https://www.rocketman.tech/post/from-basic-to-bearer-a-map-to-migration-magic
---------------------------------
Launchpad Podcast is hosted by Rocketman Tech where we discuss recent news, updates and happenings in the Jamf and Apple world. Always relevant and always casual, we'll have a Keynote speaker, discuss current LaunchPad events, and invite group discussion, questions and topic requests throughout the ~1 hour meeting.
Rocketman DevOps Engineer Chad Lawson shares some tricks he has up his sleeve for managing Jamf environments. Chad goes over the following additions to the now open source Jamf Toolkit:
- Detecting when someone has enabled camera or microphone access for an app
- Configuring Policy Scripts with Configuration Profiles
- Storing sensitive information in the Keychain
- Protecting files and other data with encryption
To access the notes and code snippets from this session, visit https://rkmn.tech/ByteSizedMeetup
---------------------------------
Launchpad Podcast is hosted by Rocketman Tech where we discuss recent news, updates and happenings in the Jamf and Apple world. Always relevant and always casual, we'll have a Keynote speaker, discuss current LaunchPad events, and invite group discussion, questions and topic requests throughout the ~1 hour meeting.
In this video we look behind the curtain at our custom migration workflow for migrating from one MDM (such as JumpCloud, WorkspaceONE, MobileIron) to Jamf Pro!
---------------------------------
Launchpad Podcast is hosted by Rocketman Tech where we discuss recent news, updates and happenings in the Jamf and Apple world. Always relevant and always casual, we'll have a Keynote speaker, discuss current LaunchPad events, and invite group discussion, questions and topic requests throughout the ~1 hour meeting.
Ever wonder how to securely do API calls through a script on a user’s computer, without compromising the API credentials? Spoiler alert: Using Parameters, Base64, and Encryption is not enough.
Let’s think WAY outside the box. Like, what if our Jamf Policy scripts don’t even make their API calls within the Macs themselves?
---------------------------------
Launchpad Podcast is hosted by Rocketman Tech where we discuss recent news, updates and happenings in the Jamf and Apple world. Always relevant and always casual, we'll have a Keynote speaker, discuss current LaunchPad events, and invite group discussion, questions and topic requests throughout the ~1 hour meeting.
Another year, another beach, another WWDC! Apple introduces Ventura, iOS 16, and a lot of exciting new features for Mac Admins. Watch as we go through the highlights and caveats of everything that Apple introduced this week.
---------------------------------
Launchpad Podcast is hosted by Rocketman Tech where we discuss recent news, updates and happenings in the Jamf and Apple world. Always relevant and always casual, we'll have a Keynote speaker, discuss current LaunchPad events, and invite group discussion, questions and topic requests throughout the ~1 hour meeting.
Join us as William Smith (Talking Moose) discusses Jamf's newest and highly anticipated feature, App Installers. This feature brings true patch management to Jamf Pro that takes care of packaging and deployment of software to user's Macs.
---------------------------------
Launchpad Podcast is hosted by Rocketman Tech where we discuss recent news, updates and happenings in the Jamf and Apple world. Always relevant and always casual, we'll have a Keynote speaker, discuss current LaunchPad events, and invite group discussion, questions and topic requests throughout the ~1 hour meeting.
Chad Lawson, Rocketman Tech's DevOps Engineer, goes through why using Token Bearer Authentication with Jamf's API is more secure than the traditional Basic Authentication that we've been using for years, how to actually use this method, and some caveats involved.
For more information about Rocketman Tech, our Github, or to schedule a meeting, visit our website: https://rkmn.tech/YT
For follow up resources to this presentation, visit https://www.rocketman.tech/post/migrating-jamf-classic-api-scripts-to-token-authentication
---------------------------------
Launchpad Podcast is hosted by Rocketman Tech where we discuss recent news, updates and happenings in the Jamf and Apple world. Always relevant and always casual, we'll have a Keynote speaker, discuss current LaunchPad events, and invite group discussion, questions and topic requests throughout the ~1 hour meeting.
Hugo Immediato, Rocketman Tech's Senior Jamf Engineer, goes over how to update macOS with using the Software Update MDM Command with Deferrals, and what is required to do so. In this presentation we go over:
- What a Bootstrap Token is, and how to escrow it to Jamf
- How to upgrade your EndPoints to Monterey
- How the MDM Software Update Command works
---------------------------------
Launchpad Podcast is hosted by Rocketman Tech where we discuss recent news, updates and happenings in the Jamf and Apple world. Always relevant and always casual, we'll have a Keynote speaker, discuss current LaunchPad events, and invite group discussion, questions and topic requests throughout the ~1 hour meeting.
Our very own Chad Lawson, Rocketman Tech's DevOps Engineer, has created a utility that shows a lot of great information on your Jamf Pro server, including every policy that a package, script, and smart group is a part of and, more importantly, packages, scripts and smart groups that are not part of any policy. This is an essential tool for cleaning up your Jamf Pro server.
---------------------------------
Launchpad Podcast is hosted by Rocketman Tech where we discuss recent news, updates and happenings in the Jamf and Apple world. Always relevant and always casual, we'll have a Keynote speaker, discuss current LaunchPad events, and invite group discussion, questions and topic requests throughout the ~1 hour meeting.
In this LaunchPad session, we go through the latest Monterey updates for Mac System Administrator's that we've researched, including:
- Erase all Contents and Settings
- Deferrals for Remote MDM Updates
- Apple Configurator 2 for iOS
- Mac Sharing Mode
- Improvements to System Extensions
- FileVault Screen Improvements
---------------------------------
Launchpad Podcast is hosted by Rocketman Tech where we discuss recent news, updates and happenings in the Jamf and Apple world. Always relevant and always casual, we'll have a Keynote speaker, discuss current LaunchPad events, and invite group discussion, questions and topic requests throughout the ~1 hour meeting.
In this presentation, Hugo Immediato, Rocketman Tech's Senior Jamf Engineer, goes through the various ways of updating macOS Monterey with Jamf Pro.
---------------------------------
Launchpad Podcast is hosted by Rocketman Tech where we discuss recent news, updates and happenings in the Jamf and Apple world. Always relevant and always casual, we'll have a Keynote speaker, discuss current LaunchPad events, and invite group discussion, questions and topic requests throughout the ~1 hour meeting.
In this session Hugo Immediato, Rocketman Tech's Senior Jamf Engineer goes through the new integration for Jamf Pro with TeamViewer that allows cross-platform, remote screen sharing straight from the Jamf Pro dashboard.
---------------------------------
Launchpad Podcast is hosted by Rocketman Tech where we discuss recent news, updates and happenings in the Jamf and Apple world. Always relevant and always casual, we'll have a Keynote speaker, discuss current LaunchPad events, and invite group discussion, questions and topic requests throughout the ~1 hour meeting.
Hugo Immediato, Rocketman Tech's Senior Jamf Engineer brings us through the most important WWDC updates for Mac Admins, and what we can expect from the latest macOS, Monterey.
---------------------------------
Launchpad Podcast is hosted by Rocketman Tech where we discuss recent news, updates and happenings in the Jamf and Apple world. Always relevant and always casual, we'll have a Keynote speaker, discuss current LaunchPad events, and invite group discussion, questions and topic requests throughout the ~1 hour meeting.
Rocketman has made some amazing tools, available on their GitHub (https://github.com/Rocketman-Tech). In this presentation, Chad Lawson shows us how he created these tools, and how you can use them on your server.
---------------------------------
Launchpad Podcast is hosted by Rocketman Tech where we discuss recent news, updates and happenings in the Jamf and Apple world. Always relevant and always casual, we'll have a Keynote speaker, discuss current LaunchPad events, and invite group discussion, questions and topic requests throughout the ~1 hour meeting.
In this LaunchPad session, we discuss the best practices for documentation within Jamf Pro hosted by Chris Schasse, founder of Rocketman Tech.
---------------------------------
Launchpad Podcast is hosted by Rocketman Tech where we discuss recent news, updates and happenings in the Jamf and Apple world. Always relevant and always casual, we'll have a Keynote speaker, discuss current LaunchPad events, and invite group discussion, questions and topic requests throughout the ~1 hour meeting.
This video goes through the importance of signing Packages and Configuration Profiles, how to setup an Apple Developer account to do so, and the caveats that go with it.
---------------------------------
Launchpad Podcast is hosted by Rocketman Tech where we discuss recent news, updates and happenings in the Jamf and Apple world. Always relevant and always casual, we'll have a Keynote speaker, discuss current LaunchPad events, and invite group discussion, questions and topic requests throughout the ~1 hour meeting.
In this video, we go through the differences between system and kernel extensions, why kernel extensions got deprecated in Big Sur, and the caveats behind deploying system extensions. Then Todd Ness gives an abbreviated version of his JNUC Presentation. You can find the full presentation at https://www.youtube.com/watch?v=TF9alaH2myk&t=0s
---------------------------------
Launchpad Podcast is hosted by Rocketman Tech where we discuss recent news, updates and happenings in the Jamf and Apple world. Always relevant and always casual, we'll have a Keynote speaker, discuss current LaunchPad events, and invite group discussion, questions and topic requests throughout the ~1 hour meeting.
Join us for our first LaunchPad session as we go through too many topics in a short period of time:
Webooks: Chad Lawson shows us how to easily setup Webhook integrations with Jamf Pro using services like Zapier or Integromat.
Auto Advance through Setup Assistant: The time has finally come for a completely automated provisioning process for school labs! But what are the caveats, and does it really behave like the old imaging workflows with Deploy Studio?
Jamf Connect with Okta: We go through the pros and cons of using Jamf Connect with Okta.
---------------------------------
Launchpad Podcast is hosted by Rocketman Tech where we discuss recent news, updates and happenings in the Jamf and Apple world. Always relevant and always casual, we'll have a Keynote speaker, discuss current LaunchPad events, and invite group discussion, questions and topic requests throughout the ~1 hour meeting.
Our TOPPODCAST Picks 
