Apple @ Work is exclusively brought to you by Mosyle, the only Apple Unified Platform. Mosyle is the only solution that integrates in a single professional grade platform all the solutions necessary to seamlessly and automatically deploy, manage & protect Apple devices at work. Over 45,000 organizations trust Mosyle to make millions of Apple devices work ready with no effort and at an affordable cost. Request your EXTENDED TRIAL today and understand why Mosyle is everything you need to work with Apple.
For many Mac admins, the ideal balance between security and productivity comes down to how you handle local admin rights on your fleet. Too much access creates risk. Too little access creates daily annoyance. Apple has done a great job of making it so you can operate as a Standard User day to day, but there are times when local admin rights are needed. SAP’s Privileges app has been a popular way to thread that needle by letting users elevate themselves to admin status when needed, and then return to a standard user when they are done. It gives IT teams more control while giving end users the ability to solve their own problems without waiting for a help desk ticket to be approved.
With the release of Privileges 2.4, SAP is adding new tools that make it even more flexible and reliable in enterprise environments.
Some of my favorite gear Abode Home Security System Abode is the best home security system and includes compatibility with HomeKit.
About Apple @ Work: Bradley Chambers managed an enterprise IT network from 2009 to 2021. Through his experience deploying and managing firewalls, switches, a mobile device management system, enterprise grade Wi Fi, thousands of Macs, and thousands of iPads, Bradley will highlight ways in which Apple IT managers deploy Apple devices, build networks to support them, train users, share stories from the trenches of IT management, and explore ways Apple could improve its products for IT departments.
What’s new in Privileges 2.4
The 2.4 release brings a handful of features that give IT teams more flexibility while tightening security. A new initial expiration interval option lets admins set a default time limit for elevated rights before a user picks their own. If you want admin access to last 10 minutes by default but allow up to 60, you can do that now.
Privileges can now queue unsent logging events if a Mac is offline. Instead of losing syslog or webhook data, it stores events locally and sends them in order when the device is back online. This is a big win for environments that depend on complete audit trails. Over the past few years, I’ve continued to say that extracting logs from macOS is one of the key things IT teams need a handle on.
There is also an option to require biometric authentication without a password fallback. You can now enforce Touch ID as the only way to confirm admin elevation.
Some of my favorite gear Aqara Smart Lock U50 Upgrade your doors with Apple Home Key and the Aqara U50.
... continue reading