Apple configurator jamf pro#

Item '1.1 Verify all Apple provided software is current' is disabled by default.

Policy: Some recurring trigger to track compliance over time. The script writes to /Library/Application Support/SecurityScoring/org_security_ist by default.Ĭreate a single Jamf Policy using all three scripts.ġ_Set_Organization_Priorities - Script Priority: BeforeĢ_Security_Audit_Compliance Script Priority: Beforeģ_Security_Remediation - Script Priority: BeforeĢ_Security_Audit_Compliance - Script Priority: After OrgScore1_1='true' or OrgScore1_1='false' 2_Security_Audit_ComplainceĬonfigure the following variables in the script: The values default to 'true,' meaning if an organization wishes to disregard a given item they must set the value to false by changing the associated comment: 1_Set_Organization_PrioritiesĪdmins set organizational compliance for each listed item, which gets written to plist. Script 1_Set_Organization_Priorities will need additional configuration prior to deployment.

Apple configurator jamf pro#

Usable with smart group logic (2.6_Audit_Count greater than 0) to immediately determine computers not in compliance.Īdd the following scripts to your Jamf Pro Reads contents of /Library/Application Support/SecurityScoring/org_audit file and records count of items to Jamf Pro inventory record.

Reads contents of /Library/Application Support/SecurityScoring/org_audit file and records to Jamf Pro inventory record. Create Extension Attributes using the following scripts:.Refers to document CIS_Apple_OSX_10.15_Benchmark_v1.0.0.pdf, available at USAGE: CIS for macOS Catalina - Script and Configuration Profile Remediation INFO: