Philippe Boucher

Philippe Boucher

Apple device management — Jamf, Intune, Mosyle. Notes from the field.

Notes from the field

All posts →

Auto-assigning Macs to a Jamf site from an Entra ID smart group

Jamf sites are static and smart groups don't move records into them. Here's a scheduled routine that reads an Entra-tied smart group and assigns each member to the right site through the API.

A self-updating pkg: install the latest app version from Azure Blob in a postinstall

Stop re-packaging an app on every release. Build a payload-free pkg once whose postinstall downloads the current installer from Azure Blob Storage — replacing one blob ships a new version to everyone.

Why Jamf encrypted script parameters break on modern macOS

A policy that worked for years suddenly logs 'bad magic number' after a macOS update. Here's why LibreSSL breaks Jamf's encrypted script parameters — and the openssl flags that fix it for good.

Zero-touch deployment, explained for non-IT people

What actually happens when a new hire's MacBook configures itself out of the box — and what it takes to set that up with Apple Business Manager.

Jamf, Intune, or Mosyle? Choosing the right MDM for your Apple fleet

The three platforms I deploy most often, compared honestly — and the questions that actually decide which one is right for your organization.