Much like we did in the last lesson with iOS devices for Mac OS, we can also configure and manage those
using profile manager.
And in this lesson, I'm going to talk a little bit more about that.
So what I've done here so far is grabbed a serial number off one of my machines, which is a two and
a half inch mid 2011 iMac.
It's just sitting here on my workbench and that's not the greatest machine anymore.
But back in the day, it was all right.
So it's a good one to practice on.
So I'm just going to go ahead and select the serial number from it.
And just like we did with the iOS devices, we need to go inside Apple school manager, Apple business
manager.
So we'll go ahead and sign in there.
So inside Apple school manager, we're going to go to device assignments and we're going to switch devices
like we did the same exact thing we did with iOS when to go ahead and paste that serial number in.
And here it found my serial number on my order number and it's asking me to assign it to an MDM server.
So I'll go ahead and assign it to my Udemy test server, just like we did with the iPad.
It's going to assign the device completed successfully and now let's jump inside profile manager here.
So let's go to devices and let's hit refresh.
All right, and there's our new device just appeared in the screen.
Now that we've got a device in here, just like and I've got another iMac in here as well that I was
playing with earlier, but now that I've got both of my devices listed, we can do much the same things
that we did with iOS.
We'll start with device groups.
And currently we've got a device group for iOS devices.
You dummy group.
I'm going to go ahead and create a new one.
We're going to call this one, you dummy Mac Group.
And like I said before, you can really name these anything you want.
It doesn't really matter.
Just needs to make sense to you and your organization.
So we'll go ahead and save that.
So I could probably rename this iOS group as well, but I'll just leave it alone for now so we don't
have any members.
So let's go ahead and add a member to this group.
And we'll go ahead, I'm going to have both of these I-Max.
Save those, so I've got my Mac group with my two devices and I'm just going to go in here and, you
know, we've looked at this before, but on the Mac side, a little bit different.
We'll go ahead and take a look at the settings here.
So I'm going to go ahead and edit.
And now we've got our settings here for iOS, TVs and Mac OS right here, so these things apply for
us.
So I was going to go ahead and do something like profile for Mac OS DEPLOYMENT'S.
And we'll go ahead and say no remove and we'll say never able to remove as well.
And really, the only setting I'm going to set, I mean, you'll definitely go through here and want
to set these and you can see again, just like they were for iOS, we ignore the Mac OS ones now ignore
the iOS ones and focus on ones that are for Mac OS and iOS or just Mac OS only.
So I'm just going to skip all the way down here to just the stuff that's Mac OS only in this case.
So we've got our own restrictions for Mac OS.
So one of the things that often comes up is that you want to give users access to some system preferences,
but not for others.
So this is a very common one.
So I'll just use this one, for example.
So we're going to restrict the items in system preferences.
I'm going to go ahead and select none because I'm going to actually configure this for a K-12 environment.
And I really only want a couple of things here.
I just want the students to be able to access accessibility settings.
I want them to be able to access the mouse settings.
And I'm going to do dictation and speech and Siri will do sound.
And see anything else in here, trackpad will do that one, too, is there's a laptop cart and I think
that's about it.
I think you'd like to keep them out of everything else here.
So we'll go ahead and keep that as far as apps go.
We're not going to let them use game center.
We're not going to autofill safari so that people aren't filling in the last person's ID information.
And I think that's probably good for now.
We'll just go ahead and save that.
I can change the desktop picture.
I will point this out to this is pretty cool.
You can lock this and you can also provide a desktop picture path so you can actually give it a path
to a desktop picture on the device.
Let's say, for example, you wanted to have a branded wallpaper or something like that.
This would give you the ability to do that and keep students from changing it because you never know
what kind of things they're going to find on the Internet and use on the wallpaper.
So I'm going to go ahead and just keep that check.
They're all here.
OK, so we've saved save those restrictions.
You know, I'm going to do one more thing, actually.
Let me go back in the edit again.
One other thing that comes up often for the the Mac is the doc.
So we're going to go ahead and configure the doc as well.
So you can see a lot of the things that you would configure directly on the Mac that we talked about,
you know, very early in the course.
You can do all through the profile manager as well, which is nice to make that custom experience.
So we're going to we're going to make the docs size a little smaller and I'm going to keep the magnification
off and I'm going to position the doc on the right.
That's where I prefer it.
Probably always best to kind of set it up the way that your users would prefer.
I don't know if anyone cares, but I'm going to use the doc on the right hand side.
And because this is an old iMac, I'm going to do the scale effect.
It's a little less computational heavy and will make the machine feel more responsive.
And then these are pretty cool as well, so you have the ability to customize your apps and items,
so apps are the things that are on the top in this case side of the of the bar and items are the ones
on the bottom.
So one of the things I'm going to do is I'm going to uncheck merge users.
Doc, that means that I'm going to override their doc settings with mine and I'm not going to allow
them to modify it because I want every person who sits on one of these machines to have the same experience
that I'm going to go in here and I'm going to say we'll go ahead and put a copy of their apps and their
documents on here as well.
That way they'll have an applications folder and a documents folder on their doc.
And then I'm just going to go ahead and select from here what I would like to have them on the on the
dock automatically.
I'm just going to do.
Want to do.
Zafari, let's let me kind of filter that out.
It's a little easier than having searched the whole thing and messages and we'll add that and we're
going to add mail.
We'll add that and we'll add notes.
All right.
So that's good enough.
I'm going to say OK to that.
You get the idea here.
So I've got them listed here and I can always add more if I wanted to remove them by selecting them
and hitting minus.
But this will basically set up a dock that is safari messages, mail and notes, along with your apps
and documents folder as well.
So we'll go ahead and save that.
And save those changes, so now both of these devices that are in my Mac group are going to have that.
The settings that we set up, the restrictions to the system preference and the doc settings as well.
So we have the ability here to do things like set the name, we can automatically enrolled the device.
We can also go through and skip over some of these, too.
So what I'll probably do is just leave these alone.
But you can play with this yourself and see, you know, ignore the things about, you know, Iooss
only.
But anything that says Mako's obviously are things that will would prompt the user on their first login.
So you can uncheck all those and and skip a lot of those things.
And you can also have it if you've got a user, let's say you want to hand out devices, maybe it's
a one to one thing where every student gets their own laptop or every user in your organization gets
a laptop when you go through the setup assistant when it's brand new out of the box, basically, it
will ask them to create a new account and by default, it makes that account the administrator on the
computer.
However, if you set this up, you can have it prompted the user for this type of account and you can
say standard.
So that will allow you to hand a device to a user, let them provision their own account as standard
rather than administrator, just as if they were to take the machine out of the box.
And it was their own personal device that they may have bought at the Apple store.
So you can also create a management class administrator account as well.
So that automatically gets set up to when you go through this system.
So this really allows you to on board your device and customize the entire out of box experience for
the Mac while giving the user what would a seat would seem to be a pretty normal Mac OS setup experience,
but still be able to control the types of accounts are creating and automatically put a administrator
user account on the device.
All right.
So let's go over to apps.
So one of the things that I did before I started the video was I went ahead and downloaded and applied
some more Mac apps.
So just to kind of clean this up a little bit, I'm just going to go ahead and filter this to just Mac
OS apps, because a lot of these have the same names, obviously, right?
We've got we've got different ones.
So here's what I've done is I've got pages, keynote I, book's author numbers and I movie.
I want to assign to these these Mac devices.
So people who who start using these Macs have those applications already installed and they don't have
to go and find them and download them on the App Store.
So very similar to what we did with the iOS thing is we're going to find our Mac group here and you
hit apps.
Plus.
And now we can go through and add these.
I'm just going to do the same thing.
I'm going to check my books author, I'm checking and you can see here just verifying that these are
for Mako's keynote.
Numbers.
And pages.
All right, so I've got pages, numbers.
I movie and I, book's author, are all set for these devices, so their installation mode is going
to be automatic, so those will automatically install after the user.
So the desktop you'll see a launch pad will will jump in the dock and it'll start downloading those
from the App Store and apply them to the device.
And at that point, we basically can take a new Mac out of the box or do software restore on it, and
as it goes through the setup assistant, very similar to what we saw with iOS, it will prompt you to
create your user account and then it will log into the machine and lock down the system preferences
and lock down and start installing those apps.
So that's setting up device groups in for Mac OS and assigning apps and settings for Mac devices.