Retaining Enrolment User Information On AirWatch via the API

Standard

post_airwatch

AirWatch only keeps a record of the devices currently enrolled user, if the device is re-enrolled by/for someone else the details are overwritten.

Worse is that if your devices are not supervised, it’s trivial to unenroll a device. This then leaves a device record on AirWatch but with no user information.

To counter this, I’ve written the below API script that will add the enrolment users information to the devices notes. A new note is created with each scripts run, meaning that if a device is enrolled by another user, we’ll have a record & these notes are not deleted when a device is unenrolled.

This is detailed below.

Continue reading

Deleting Unenrolled Devices via the AirWatch API

Standard

post_airwatch

We’ve started to look at enabling “Compliance Policies” within AirWatch.

However, these are scoped to “Assignment Groups” (was “Smart Groups”, another thing that seems to be mid-rename) & “Assignment Groups” do not have criteria for a devices “Enrolment Status”.

Below is an API script that I am using to automate device deletion if a device meets certain conditions & the method to the madness.

Continue reading

Accessing AirWatch’s REST API with Python

Standard

post_airwatch

As mentioned in my previous post, I have been doing some work with AirWatch’s REST API & at the same time I have been learning Python.

This post is to show how you can access AirWatch’s REST API with Python to return devices information, as well as serve as a template for the scripts I use to access AirWatch’s REST API.

Continue reading

How To Get The LocationGroupId For An Organisation Group For AirWatch API Calls

Standard
post_airwatch

I’ve recently been doing some work with AirWatch’s REST API.

One call required me to pass the LocationGroupId for an Organization Group, this is not readily available & the below are some methods that can be used to get the LocationGroupId for an Organization Group.

Continue reading

Microsoft Office 2016 For Mac Serialisation Changes

Standard
Microsoft-Office-2016-for-Mac_thumb800

Soon Microsoft are to release an update to the Office 2016 Volume License installer on VLSC.

This update is 15.17 & is the first that has a few changes that may affect the way you deploy Office 2016.

These changes are going to be later enforced in 15.20 & onwards. Below are some details on the changes, some of the why & how via the power of the MacAdmins.org Slack & the awesome @pbowden that some of us have had a sneak peek.

Continue reading

Deploying & Updating Safari Extensions For Safari 9+

Standard
Extension

I’ve blogged a few times about how to not only create, but also deploy & update “Safari Extensions”.

With the release of Safari 9 Apple have stopped all automated deployment methods, & I’m partly to blame.

Continue reading

Making Downloaded JSS Configuration Profiles Readable

Standard

configProfile

If you manually download a Configuration Profile from the JSS, you’ll see that the profile largely reads as gobbledegook.

Luckily a couple of bash commands later & you’ll have a readable profile.

Continue reading

iPhone is disabled. Try again in 23,053,554 minutes

Standard
iphine-disabled-crop

Way back in Jan 2014 grabbed a test iPhone & after charging I was greeted with the above.

After various exclamations along the lines of “Holy fishsticks, Batman!” we did get the iPhone enabled & this did not involve a time machine or me waiting the 23,053,554 minutes for the device.

Below is how & some guess work as to what happened.

Continue reading

Some Mac App Store Apps “Damaged” Prompting For “Redownload”

Standard
AppStore

Early today people launching some Mac App Store purchased apps where greeted with errors upon launching them.

This has been pretty widely reported, & after reading a few other articles I started to panic. After which I wanted to try see how this would affect us Mac admins & if I could help detect affected apps.

Continue reading

Microsoft Remote Connectivity Analyzer

Standard
Screenshot 2015-11-07 22.04.57

Sometimes being an Apple admin in an org with a largely Microsoft infrastructure can be a bit of a chore.

It’s not uncommon to hear of Windows admins dismissing issues as being an “Apple” issue without actually expending any effort to look into the issues at all.

However, I’ve been fortunate in that I’ve been able to bend the ear of several sympathetic Windows admins & this has lead to posts such as “How To: Check Your Active Directory Domains Time” & “OSX & AD Certificate Requests, some tips”.

This post is another of those ilk & one that came up quite recently in the MacAdmins.org Slack & I mentioned this in my JNUC 2015 talks Q&A too, thought it would be a good time to share.

Continue reading