Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

Consistent hardening of macOS

Hi all,

We need to harden the limited number of macOS devices we have on our network to be consistent with regards to features, disabled features, etc... I know one way is to use a standard profile that has all our requirements selected and then install those profiles on the other devices but I'm wondering if there is a way to harden the devices without creating profiles using macOS server and maybe use a pre-built script on each device. Is that possible? Are there hardening scripts for macOS

Posted on Mar 2, 2018 9:47 AM

Similar questions

2 replies

Mar 12, 2018 6:19 AM in response to rccharles

Thanks so much. So a question that comes to mind is this - our macOS devices will be minimal - not mass deployments in our organization. However, to be consistent across all devices with regards to disabled features, security settings, etc... would it be best to (1) use profile manager and install the same profile on all macOS devices we do get or (2) use Apple's disk imaging utility?

Thanks

rccharles

Level 6

12,957 points

Mar 6, 2018 7:02 AM in response to zeetwoeight2018

https://www.macworld.com/article/2048160/how-the-nsa-snoop-proofs-its-macs.html

https://www.liquidvpn.com/nsa-guide-securing-mac/

Consistent hardening of macOS