Providing Zero Touch Guided Setup for Camera, Microphone, and Screen Sharing Video
LaunchPad Jamf Admin PodcastShow Notes
TCC is the macOS system for providing applications access to system services while ensuring transparency, consent, and control. Apple has made sure that admins or attackers cannot automatically provide applications access to user files, external drives, or hardware like camera and microphone, for obvious security reasons.Yet with zero touch provisioning our goal is to provide our teams with the ability to do their jobs right out of the box. So how do we guide people through the process of enabling these services for applications like Zoom or Teams that they need in a remote world? In this presentation we will show our workflow for walking people through these processes during our automated onboarding process and a shell script function for verifying that they have what they need.
--------------------------------- Launchpad Podcast is hosted by Rocketman Tech where we discuss recent news, updates and happenings in the Jamf and Apple world. Always relevant and always casual, we'll have a Keynote speaker, discuss current LaunchPad events, and invite group discussion, questions and topic requests throughout the ~1 hour meeting.
More from LaunchPad Jamf Admin Podcast
Join us for a recap of JNUC by the notorious Talking Moose (AKA Bill Smith) as he goes through the incredible updates from this year’s JNUC.
Declarative Device Management is changing how we manage Apple devices, and DDM Explorer is the fastest way to get up to speed. Mark Buffington, a leading contributor to the project, will walk through how the app helps you explore Apple's DDM framework, build your own declarations, and deploy them via Jamf Pro.
pseudo (open source) is designed to help admins enforce Platform SSO registration and/or Touch ID enablement during macOS onboarding - without chasing users down. In this LaunchPad episode, Kevin White (Macjutsu) explains how pseudo works, the PPPC requirements, and what to watch for when deploying it at scale. Guest: Kevin White - Instigator, Macjutsu
The conversation covers: - Apple Silicon-only support - Rosetta 2 behavior during upgrades - Intel app inventory - Apple’s shift from MDM to DDM - software update management changes - DDM Explorer - network and certificate management in DDM - remote sysdiagnose collection - Managed Migration Assistant - Managed App Framework - native app and process blocking - PPPC deprecation - declarative privacy consent - FileVault and Platform SSO improvements - macOS Mail and Exchange Web Services concerns - beta enrollment - testing strategy - and better Apple feedback workflows.
macOS onboarding has evolved far beyond basic setup screens. Matt Jerome (Senior Engineer, Fanatics) walked through a few of the major players in the macOS onboarding space and how they help IT teams deliver a smooth, secure, and user-friendly first-day experience. Resources and links:https://rocketman.tech/lr-pb Upcoming meetup:https://rocketman.tech/lp-pb Also on YouTube:https://rocketman.tech/ly-pb