Q: Is it possible to create a Local Administrator user when using Profile Manager to push out configuration settings
Hi,
We are exploring the use of OS X profile manager as a way to manage our Enterprise macs.
One of the requirements put forth by the team, is to create an Administrator user, as part of the OS X Profile that is pushed down to the client. The rationale is that this would be a way for the IT team to get in, if the user fubar'd their Mac
I did not see this anywhere within the Profile Manager configuration options and so am asking the people who use this as part of their everyday toolset, to enquire if such a option is indeed available.
Thanks and Regards,
Madan Sudhindra
Mac mini, OS X El Capitan (10.11.4)
Posted on Apr 21, 2016 12:40 PM
No, not with Profile Manager.
How are you currently deploying your enterprise macs? As institutionally imaged or as BYOD devices? If imaged, then the image should contain a consistent local admin account. If the image also enables Apple Remote Desktop or SSH, you have a method of mass controlling and managing the devices. If BYOD style, then you are out of luck as the end user is the only one with the keys to the device.
You might want to take a look at JAMF's Casper Suite. Once devices are enrolled you have the ability to create accounts (however the common method is to create a management account on enrollment). If you are deploying with a BYOD approach, you should also look into Apple's DEP program (https://deploy.apple.com) as DEP plus JAMF (or other MDMs) is a very powerful tool for light to zero touch deployment of systems.
Reid
Apple Consultants Network
Author - "El Capitan Server – Foundation Services"
Author - "El Capitan Server – Control & Collaboration"
Author - "El Capitan Server – Advanced Services"
:: Exclusively available in Apple's iBooks Store
Posted on Apr 21, 2016 1:29 PM