I am a Jamf-certified Apple device management consultant. I work at a managed service provider (MSP). This blog is where I write down what I learn.
What I write about#
I write about real projects. I share scripts, configuration profiles, DDM declarations, extension attributes and smart group logic. I also write about my mistakes. Mistakes teach more than successes.
Who this is for#
This blog is for Mac admins. You may want to copy something and use it. You may want to understand why it works. You may want to avoid a mistake that I already made. Each post tries to help with all three.
How to read the status badges#
Each post can have a status badge:
- Tested: I ran the work on a real Mac and it behaved as described.
- Needs verification: The work is mostly proven, but some checks are still open. The post lists them.
- Draft: The work is not finished. Do not rely on it.
I update posts when I learn more. Each update adds an entry to the changelog at the top of the post. The entry gives the date and the change.
WARNING
Test every script and profile in a non-production environment first. You are responsible for what you deploy.
A note on safety#
All examples are generic. They contain no client data. I do not publish tenant URLs, credentials, serial numbers or names of clients.
If you find an error, tell me. I will fix it and add a changelog entry.