The management of MacOS is such a PITA
The management of MacOS is such a PITA
The "it just works" magic doesn't apply in business environments
43 comments
-
-
The "it just works" magic doesn't apply
in business environments-
It’s a thing of the past anyway. Their software is neglected and buggy. They can’t keep it well polished up because each release needs to have more slop in it.
-
-
I teach computer engineering, and Macs have gone from wonderful to the bane of labs in the last decade. Students never have the right dongle, the permissions are a mess, compilers are locked down. It’s sad actually. Macs took over cs departments and a lot of tech usage, but they seem to have entirely turned their back on that audience
-
And lord forbid you want to run an unsigned app.
-
We went from Macs being "immune" to malware to Macs being infested with it to this. Walled gardens have their benefits, but flexibility and choice aren't among them.
There's an open source audio tool I wanted to use, but the unsigned executable got bounced. It turns out I'd been fooled into downloading a malware-infested version of it. In that single case I appreciated it.
-
-
Apple is heavily incentivized to lock down the macOS platform and infringe on your privacy in the process.
-
-
Maybe Apple didn't get the memo that we are all using TLS for everything nowadays.
-
The first time I saw IT tooling on Windows (as a Mac / Linux guy), I was floored. Comparing that to Apple Remote Desktop (which hasn’t evolved in two decades) made me realize how far behind Apple was / is in these areas.
-
Heh yea, "Windows is an enterprise OS with consumer features, MacOS is a consumer OS with (half-assed) enterprise features" ~Me
At least Linux will let you get there, might not be out of the box, but you can configure your way there, MacOS is very rigid when it comes to enterprise management
-
-
Are you using JAMF or another management environment? Devices automatically enroll once purchased and pull down the management settings upon boot. It's essential for enterprise environments.
-
We are, but it's not very helpful when the device can't reach out to the MDM servers because it's become disconnected from the WiFi for one reason or another
Oh and apparently you can't use an Ethernet USB dongle from the lock screen either, thanks Apple so wonderful and secure/s
-
-
What's this gotta do with business environments? Is everybody with a Mac now a "businessman"?
-
In a business environment a common thing is a user getting locked out of their local user account.
Resolvable by issuing an unlock account command remotely and maybe a reset password. Kinda hard to issue those commands remotely if the device isn't connected to the network, but on Windows I can have them connect to any WiFi network and it's back online in the MDM console. MacOS otoh won't let you connect to WiFi from the lock screen or even let you use an Ethernet USB adapter
-
That's only when FileVault is on, though, yeah?
-
OK, so the opposite of Mac businessman. Good to know. Thank you.
-
-
-
That sounds like a pretty rare problem
Why can you not shutdown or restart on the locked screen on windows and at least some linux distributions? The button is there, but its only used to suspend the pc
-
?
You totally can, on every computer I've ever owned running Windows since NT (and most running some variant of Linux). The only reason it would not be there is if some turkey disabled it in Group Policy for some reason. The power button offers you power off, restart, suspend, and hibernate if you have hibernation enabled.
-
43 comments
Android doesn't allow that either nowadays. It's just a matter of security. You wouldn't want an unauthorized person to connect you to an insecure network or let them stop you from receiving important messages. Whether it's worth it to force the user to log in is debatable though.
I honestly don't see a reason why I would need to connect to a WiFi from the lock screen.
For personal usage, there isn't
In a business (remote) environment, it's extremely useful so the device can connect back with the MDM console so I can (easily) get the employee back into their laptop after they lock themselves out of the account.
Without it, I have to do annoying shit like walking them through dropping into Single-user mode or some shit. Very annoying and a 5 minute process just became like a 1-2 hour ordeal depending on user skill level.