Mac admin solutions you won't find in the docs.

Original articles and guides for Mac admins — solutions and insights I've worked out in production, and couldn't find written down anywhere else.

Latest

All posts →

⌘jamf

Nov 5, 2026jamfokta

Connect Jamf Pro to the Okta LDAP Interface

Jamf Pro fails the Okta LDAP test in under a second until the LDAP Interface app allows a password for the service account. The mappings below are the ones that search.

AB.pkg

Jul 6, 2026abmpackagingscripting

A self-updating pkg for Apple Business Manager's built-in MDM: install the latest app version from Azure Blob in a postinstall

ABM's built-in device management pins every custom package to a SHA-256 hash and can't run scripts. A payload-free pkg whose postinstall pulls the current installer from Azure Blob gets you evergreen installs anyway.

⌘sync

Jun 21, 2026jamfautomation

Auto-assigning Macs to a Jamf site from an Entra ID smart group

Jamf sites are static and smart groups don't move records into them. Here's a scheduled routine that reads an Entra-tied smart group and assigns each member to the right site through the API.

⌘-p 4

Jun 18, 2026jamfscripting

Why Jamf encrypted script parameters break on modern macOS

A policy that worked for years suddenly logs 'bad magic number' after a macOS update. Here's why LibreSSL breaks Jamf's encrypted script parameters — and the openssl flags that fix it for good.

#boot

Jun 8, 2026mdmautomation

What actually happens during zero-touch Mac enrollment

A sealed MacBook configures itself in twenty minutes with nobody from IT touching it. That's not magic — it's a specific chain of network calls, and when zero-touch 'doesn't work,' it's almost always one broken link. Here's the chain.

⌘a/b/c

Jun 1, 2026jamfintunemosyle

Jamf, Intune, or Mosyle? The differences that actually decide it

Every MDM demo looks the same. The real differences show up three weeks in — in how each one does smart groups, scripting, identity, and compliance. A field comparison of the three I run most, with the specifics that matter.