#macOSBigSurChanges
macOS Big Sur 11.0
This article will contain the latest on the following
Features
Changes
Updates
Apple Links
Patch Notes
Security Info
Apple Links
WWDC Links
MacAdmin Blog Links
Bookmark it
#MacAdmins #WWDC20 #WWDC2020 #macOSBigSur
mrmacintosh.com/macos-big-sur-…
macOS Big Sur 11.0
This article will contain the latest on the following
Features
Changes
Updates
Apple Links
Patch Notes
Security Info
Apple Links
WWDC Links
MacAdmin Blog Links
Bookmark it
#MacAdmins #WWDC20 #WWDC2020 #macOSBigSur
mrmacintosh.com/macos-big-sur-…
What's new in managing Apple Devices on Big Sur!
1/11
Automated Device Enrollment Auto Advance for Mac
1. Plug in Power and Ethernet
2. Boot Mac
4. DEP starts automatically
3. Land at login
#MacAdmins #WWDC20
1/11
Automated Device Enrollment Auto Advance for Mac
1. Plug in Power and Ethernet
2. Boot Mac
4. DEP starts automatically
3. Land at login
#MacAdmins #WWDC20
2/11
Downloaded Profiles for Mac
1. Downloaded Profile Protections
2. You need to approve the profile in the Profiles Pane. The approval requires an admin password.
3. The profile only remains in the profiles pane for 8 min
#MacAdmins #WWDC20
Downloaded Profiles for Mac
1. Downloaded Profile Protections
2. You need to approve the profile in the Profiles Pane. The approval requires an admin password.
3. The profile only remains in the profiles pane for 8 min
#MacAdmins #WWDC20
3/11
Content Caching Improvements
1. Content Cashing now supports Internet Recovery!!!
2. Initial Boot image is not included
3. Full 6GB Recovery Image is cached!
#MacAdmins #WWDC20
Content Caching Improvements
1. Content Cashing now supports Internet Recovery!!!
2. Initial Boot image is not included
3. Full 6GB Recovery Image is cached!
#MacAdmins #WWDC20
4/11
Bootstrap Tokens
1. Bootstrap expanded?
2. "This is a really useful feature if you used Network Accounts" ?
3. Bootstrap came with 10.15 for Mobile Accounts. Does this mean Bootstrap will work for Local Accounts?
3. Ability to authorize software Updates?
#MacAdmins #WWDC20
Bootstrap Tokens
1. Bootstrap expanded?
2. "This is a really useful feature if you used Network Accounts" ?
3. Bootstrap came with 10.15 for Mobile Accounts. Does this mean Bootstrap will work for Local Accounts?
3. Ability to authorize software Updates?
#MacAdmins #WWDC20
5/11
Managed Software Update
1. iOS Style Software Updates > Mac
2. New MDM Commands for Software Update
3. Forcing Client Macs to Accept Software Updates & Restart
4. Defer major OS Updates for 90 Days
5. Defer minor OS Updates not mentioned
#MacAdmins #WWDC20
Managed Software Update
1. iOS Style Software Updates > Mac
2. New MDM Commands for Software Update
3. Forcing Client Macs to Accept Software Updates & Restart
4. Defer major OS Updates for 90 Days
5. Defer minor OS Updates not mentioned
#MacAdmins #WWDC20
6/11
Networksetup limitations for standard users
1. Admins and Standard users had the same abilities to view and modify network settings from CLI
2. Standard = Only Read Network settings, turn wifi on/off & change access point
3. Admins can still use sudo
#MacAdmins #WWDC20
Networksetup limitations for standard users
1. Admins and Standard users had the same abilities to view and modify network settings from CLI
2. Standard = Only Read Network settings, turn wifi on/off & change access point
3. Admins can still use sudo
#MacAdmins #WWDC20
7/11
Mac Serial Number Format Change
1. Serial Numbers contained info on when and where the devices was built
2. Change was made to address identifiable info being used maliciously
3. New completely random 10 character serial numbers across all product lines
#MacAdmins #WWDC20
Mac Serial Number Format Change
1. Serial Numbers contained info on when and where the devices was built
2. Change was made to address identifiable info being used maliciously
3. New completely random 10 character serial numbers across all product lines
#MacAdmins #WWDC20
8/11
Supervision for User Approved MDM
1. Previously, User Approved MDM didn't have the same capabilities as Supervised Macs / Automated Device Enrolled Macs (DEP).
2. User approved MDM (UAMDM) now = Supervision!!!
3. This is HUGE
#MacAdmins #WWDC20
Supervision for User Approved MDM
1. Previously, User Approved MDM didn't have the same capabilities as Supervised Macs / Automated Device Enrolled Macs (DEP).
2. User approved MDM (UAMDM) now = Supervision!!!
3. This is HUGE
#MacAdmins #WWDC20
9/11
Preventing silent profile installs from the CLI
1. Installing a profile via command line can no longer be installed via profiles binary.
2. The profile will be treated as a "downloaded profile" if installed via profiles binary CLI command.
3. see 2/11
#MacAdmins #WWDC20
Preventing silent profile installs from the CLI
1. Installing a profile via command line can no longer be installed via profiles binary.
2. The profile will be treated as a "downloaded profile" if installed via profiles binary CLI command.
3. see 2/11
#MacAdmins #WWDC20
10/11
Lights Out Management for Mac Pro
1. LOM is back from the dead
2. LOM was previously used to control Xserve power features
3. Used to manage the new Mac Pro at scale = On/OFF Restart
4. LOM controller Mac required
5. Mac Pros must be on the same subnet
#MacAdmins #WWDC20
Lights Out Management for Mac Pro
1. LOM is back from the dead
2. LOM was previously used to control Xserve power features
3. Used to manage the new Mac Pro at scale = On/OFF Restart
4. LOM controller Mac required
5. Mac Pros must be on the same subnet
#MacAdmins #WWDC20
11/11
New macOS MDM Updates
1. Gather Managed App Feedback and App LIst
2. Install & Remove Managed Apps
3. Specify short name for local account
4. Content Caching Information
5. Associated Domains option to allow direct Downloads
#MacAdmins #WWDC20
New macOS MDM Updates
1. Gather Managed App Feedback and App LIst
2. Install & Remove Managed Apps
3. Specify short name for local account
4. Content Caching Information
5. Associated Domains option to allow direct Downloads
#MacAdmins #WWDC20
