RICHARD - Part One Mac OS

  1. Newest compatible operating system: macOS High Sierra 10.13.6 Tech Specs: MacBook Pro (15-inch, Late 2011) User Guide: MacBook Pro (15-inch, Late 2011) MacBook Pro (13-inch, Late 2011) Model Identifier: MacBookPro8,1 Part Numbers: MD314xx/A, MD313xx/A Newest compatible operating system: macOS High Sierra 10.13.6.
  2. Download the O’Reilly App. Get books, videos, and live training anywhere, and sync all your devices so you never lose your place.
  3. All versions of Mac OS X that were made to run on PowerPC systems (with the exception of Leopard) had a Mac OS 9 emulation layer called 'Classic'. It allowed Mac OS X to run Mac OS 9 applications that weren't updated to run natively on OS X (known as carbonization based on the Carbon API).

When it comes to managing Macs, Jamf Pro is currently the number one product to be used in this space when you want to fully control and manage those fruity macOS devices via the MDM channel. Just before Jamf Nation User Conference (JNUC) back in September Microsoft and Jamf announced the upcoming partnership, at JNUC Microsoft and Jamf explained their partnership and what integration was going to be build. Just before New Year the integration between Microsoft EMS (Intune + Azure AD) and Jamf was finally released.

Richard - part one mac os 11

Learning the Mac OS X Terminal: Part 1 Chris Stone Editor's note - After reading the chapters Chris Stone contributed to, I asked him to write a couple of articles for the Mac DevCenter because I believe that understanding the Terminal application adds value to Mac OS X. These tutorials give you a preview of what Chris has covered. Much like prior versions of Mac OS, you can easily create a bootable install drive for MacOS Mojave 10.14. These boot install drives allow for things like easily formatting a Mac to perform a clean install of macOS Mojave, installing macOS Mojave onto multiple Macs without them each having to download the installer, or even as a troubleshooting tool since it can be booted from by any.

Let’s have a look at this integration and look at why we want to integrate in part-1, how to configure it in part-2 and the end-user experience in part-3 of this blog series about Jamf Pro and Microsoft Intune. The current integration is only available in standalone Intune tenants.

As Brad Anderson mentioned in his blog on the 14th of December 2017, mutual customers of Jamf and Microsoft were asking for the ability that besides mobile devices and PCs also for Macs managed by Jamf could use the same Conditional Access policies, which are part of Azure AD. As we all know the Azure AD Condtional Access policies are the best way to control access to apps in Azure and Office 365 based on the compliance state which is managed with Microsoft Intune.

The goal of this integration is to create a good and save conditional access experience to apps and services in Azure and Office 365 for users, but also for administrators.

So, is Microsoft with this partnership stopping their investments of macOS management in Microsoft Intune? The answer is NO(!), Microsoft is investing heavily in this space and the most recent new feature this month is the ability to deploy Microsoft Office 365 ProPlus to Mac devices via Microsoft Intune. More on this in a later blog. It is also very worthwhile to watch the Ignite session of Chris Baldwin and Derrick Isoka about Android, macOS and iOS management in Microsoft Intune.

Richard - Part One Mac Os X

With Jamf Pro you are able to fully manage your macOS devices from the Jamf Pro cloud service. With Jamf Pro you are able to configure policies, deploy apps, deploy configuration profiles for VPN, SCEP, Certificates, VPN, disk encryption and much more, perform patch management, prestage imaging and deploy ebooks. Looking at it, a complete solution to fully control your macOS devices.

Microsoft Intune integration option

So if we look at the slide from the Ignite session, we can see the workflow of the integration EMS and Jamf Pro.

  1. A macOS device is managed by Jamf Pro.
  2. The same macOS device is registred with Microsoft Intune.
  3. Jamf sends macOS device inventory to Microsoft Intune.
  4. Intune evaluates the device inventory and calculates the compliance state of the macOS device
  5. Intune generates a compliance report and sets the compliance state in Azure AD.
  6. Conditional Access is enforced in Azure AD
  7. If a device is compliant, access to Office 365/Azure AD is allowed
  8. If a device is not compliant, access to Office 365/Azure AD is blocked
  9. Users are guided to remediate their device via the Intune Company Portal and Jamf Self Service application to get compliant and to get access again.

So, if you already have Jamf Pro licenses and you also have Office 365 and other Azure services that you want to control via Conditional Access you might want to also read the following two blogs which will be released soon.

Of course, if the current support for macOS in Microsoft Intune and Azure AD is enough for your company, you may not need Jamf Pro.

  • Jamf Pro and Microsoft EMS better together – part 1 (this blog)

Os Parts Online

RICHARD - Part One Mac OS

Comments