Andrea Pepper

generalnewbanner

Apple’s Private Cloud Compute powers Apple Intelligence with unmatched privacy. But is it enterprise-ready? Here’s what IT teams need to know.

Apple Intelligence: How secure is Private Cloud Compute for enterprise?

General V3AI

Toast Frame 5 fleet

MOFU - SMDM blog

COB CTA - Manage with ease

ABM showing device management assignment pane 

2025-06-12 17-01-13

2025-06-12 17-03-59

Apple unveiled a new UI in iOS 26, macOS 26 Tahoe, watchOS 26, iPadOS 26, visionOS 26, and new Apple Mobile Device Management updates.

WWDC 2025 recap: OS26, Liquid Glass, and DDM 

General

SAP list callout box

Discover which iOS and iPadOS apps are compatible with Single App Mode (SAM). If you’re setting up a kiosk or shared devices, use our list of SAM-compatible apps.

What apps are compatible with Apple's Single App Mode?

Toast Frame 4 user

General/TOFU - SMDM blog

If you need Python on modern macOS versions, you’ll need to:    Manually install the latest Python version.  Update scripts and tools to be compatible with Python 3, as Python 2 is no longer maintained.   

SimpleMDM product announcement: Dynamic groups 

At the time of writing, the latest version of Python is 3.14 

SMDM trial callout

his method is actually a troubleshooting hack 

Screenshot of the current output on my machine, which has the latest version of Python installed. 

2025-03-12 13-34-09

If your system has both Python 2 and Python 3 installed, use python3 --version to check the Python 3 version specifically.

Want to dive deeper into Python? Check out The Python Tutorial documentation. 

TLDR

Wondering if Apple still supports Python? Learn why Python 2 was removed from macOS, how to install Python 3, and best practices for admins and developers to stay secure and future-proof.

 Does Apple support Python?

pythonGeneral

 If you’re trying AutoPkg at home, remember to install Xcode or Xcode command-line tools! 

Check out AutoPkgr for a GUI! AutoPkg + AutoPkgr go together like peanut butter and jelly. 

You can find other recipes by browsing https://github.com/orgs/autopkg/repositories and add these recipes by running autopkg repo-add <repository-name>. H2 AutoPkg components AutoPkg consists of these components:  

2025-02-18 14-16-14

Want to dive deeper into the nuts and bolts of AutoPkg? Check out this MacAdmins session on AutoPkg. 

Discover AutoPkg and how it automates macOS software deployment for IT administrators. Learn how it integrates with Munki and more to streamline software updates. 

What is AutoPkg? 

what is autopkg social share

newherogeneral

This command asks AppleScript (via osascript) to get the Bundle ID of the specified application and works for both built-in applications like Safari and third-party applications.

For more osascript examples, read What are macOS Kernel and System Extensions?

This method is simple and works for any application installed on your Mac. Essentially, once you find the CFBundleIdentifier in the info.plist file of an application, you can see the Bundle ID.

Bundle ID Scribe - finder

Thanks to our forum friends over at stackoverflow.com for the console tips!

2024-03-20 14-02-34

Remember: The Bundle ID of an iOS app is usually in reverse domain style string (e.g., com.companyname.appname).

an excellent option because it doesn't require any utility applications. All you need are these elements: App Store Web browser Any text editor The URL prefix: https://itunes.apple.com/lookup?id=

2024-03-20 14-13-19

Method 2: Use App Store URL lookup

If any MDM solution already manages the device or app, you can typically fetch the bundle ID information using the MDM platform's Console.

Discover simple methods to find an app's bundle ID for iOS and macOS. Learn the steps to find it using utility tools like Terminal, Finder, or Console!

How to find the bundle ID for an application

What is a Shell Script? CAB

This line tells the system to use the Z shell (zsh) as the script's interpreter. Without the shebang, the script might run in the user’s default shell, which can lead to compatibility issues if the script is designed for a different shell. 

Other recommended editors include Visual Studio Code and Sublime Text. 

Default ZSH Hello world 

Instead of Nano, you can also use VIN within the Terminal interface if you’d like more robust options. 

Terminal window on macOS showing commands to make a script executable using chmod +x and run it, outputting "Hello, World!"

2025-01-22 21-53-34

comment hello world example

#!/bin/zsh 
# This is a simple script to print a message
echo "Hello, World!" # This line prints "Hello, World!" to the terminal 


#!/bin/zsh  if [ ! -d "/path/to/directory" ]; then    echo "Directory does not exist."    exit 1  fi

#!/bin/zsh 
if [ ! -d "/path/to/directory" ]; then 
  echo "Directory does not exist." 
  exit 1 
fi

Sudo allows users to run commands as the superuser (root) for performing administrative tasks with elevated privileges while ensuring security through password authentication and logging. 

Learn how to improve productivity & workflows with macOS shell scripts! Whether a beginner or a seasoned MacAdmin, find out how to automate tasks & manage systems. 

How to create shell scripts in macOS

SMDM Team

SimpleMDM Favicon

Brock Bingham headshot

Senior content engineer, PDQ

Stylized product illustration

Slideshow showing the above steps in SimpleMDM. 

Disable Roaming & Data in SimpleMDM Workflow

Roaming

Control data costs with SimpleMDM! Restrict roaming and disable personal hotspots easily to ensure compliance and prevent overages.

How to disable iOS voice & personal hotspots

How to disable iOS voice, data roaming & personal hotspots 

How to disable iOS voice, roaming, & personal hotspots

Remember that a beta OS has not been finalized; it's still in development. As you work with it, you will likely encounter a few bugs.

You can use preconfigured Test Scenarios from Apple to help you test. 

When using AppleSeed for IT, create your account with the Apple Account email associated with the Administrator Role in your organization's Apple Business Manager account. 

Slideshow showing how to install the beta system on macOS through Settings > General > Software Update > Beta Updates. 

macOS Settings Beta Workflow

Slideshow showing how to install the beta system on iOS through Settings > General > Software Update > Beta Updates. 

iphone settings beta workflow

This method is available to accounts eligible for Apple's beta program and have the option enabled in Apple Business Manager.

Beta Enrollment SMDM Workflow 

This feature currently requires a minimum of macOS14.0, iOS 17.0, and iPadOS 17.1 to be successfully deployed. 

As the self-declared queen of software updates, this is my favorite part of the process. Seriously, they give me so much serotonin it's addicting.

Keep your updates on track with a simple 30-day testing-to-production routine. Test each new release for 30 days before rolling it out to production, deferring updates to catch and fix issues. 

Stay ahead of Apple’s next big updates! Learn how to beta test operating systems, prepare your fleet for smooth rollouts, and explore how SimpleMDM streamlines deployment for MacAdmins.

How to test Apple's next operating systems

How to test Apple's nest operating system Social Share 

There are two ways to update a password: Changing and resetting. 

very time you reset a password, immediately log out of that account and log back in with the new password.

Screenshot showing password requirements. 

pw reset 1

Screenshot showing the "Allow user to reset password using Apple Account" option in System Settings > Users & Groups >i. 

reset pw 2

Screenshot showing the "If you forgot your password, you can…Restart and show password option" pop-up.

reset pw 3

At the login screen, if you see an option to enter a Recovery Key, click it.  Input your FileVault key to reset the password and follow the prompts.    

Screenshot showing the prompt that displays when first turn on FileVault: "Your iCloud account can be used to unlock your disk and reset your password if you forget it."  

pw reset 4

To enable FileVault for the first time: 

For more FileVault resources, see:

Screenshot showing the security section of the device information page in the SimpleMDM.

pw reset 5

Slideshow showing the above steps in SimpleMDM.

SMDM FileVault Recovery Key Flow 

Learn how to change or reset your Mac password using multiple methods, from admin account to Apple Account. Get step-by-step guidance to regain access quickly and get back to business! 

How to reset Mac passwords

General V3

What is an MDM profile? CAB 1

For more on lifecycle management of Apple devices, see our guide on how to manage Activation Lock for enterprise environments.

To learn more about enrollment, see: What is Apple's Automated Device Enrollment (ADE)? How to enroll in Apple Automated Device Enrollment (ADE)

(Configuration profiles tend to be prebuilt in most MDM solutions, so you don't have to build them yourself!)  

What is an MDM profile? CAB last 

What's an MDM profile? Learn how it works within MDMs and why it's a non-negotiable tool for managing and securing mobile devices in enterprise environments.

What is an MDM profile?

What is an MDM profile? Social Share

Security teal

Network-specific configuration profiles

Check out our previous blog on securing iOS devices with configuration profiles for more on Passcode Policy.

Screenshots of SimpleMDM showing Configs > Profiles > Create Profile > Passcode Policy > Set parameters.

Passcode Policy Scribe

Screenshot of a completed Passcode Policy profile. 

macosconfigprofile1

This feature can be managed on the device through System Settings > Privacy & Security > FileVault.

Recovery Key: During setup, users can create a recovery key to unlock the disk if they forget their login password. Administrators can configure an institutional recovery key in enterprise environments to unlock devices.

Screenshots of SimpleMDM showing Configs > Profiles > Create Profile > FileVault > Set parameters.

Filevault Scribe

Screenshot of a completed FileVault profile. 

macosconfigprofile2

The Firewall can be managed on an individual device through System Settings > Network > Firewall.

Screenshots of SimpleMDM showing Configs > Profiles > Create Profile > Firewall > Set parameters.

Firewall Scribe

Screenshot of a completed Firewall profile. 

macosconfigprofile3

In System Settings> under the Security & Privacy pane, Gatekeeper can be configured to allow or block apps from specific sources. 

Screenshots of SimpleMDM showing Configs > Profiles > Create Profile > Gatekeeper Policy > Set parameters.

Gatekeeper Policy Scribe

Screenshot of a completed Gatekeeper Policy profile. 

macosconfigprofile4

Recovery Lock replaces a Firmware Password for all Silicon Macs. If you have older Intel machines in your fleet manufactured in 2018 or earlier, deploy a Firmware Password configuration profile instead. 

Screenshots of SimpleMDM showing Configs > Profiles > Create Profile > Recovery Lock Password > Set parameters. Apple Silicon is the only Mac architecture option in Set parameters. 

Recovery Lock Password Scribe

Screenshot of a completed Recovery Lock Password profile. 

macosconfigprofile5

Learn how seasoned MacAdmins can secure macOS devices using configuration profiles like Passcode Policy, FileVault, Firewall, Gatekeeper, and Recovery Lock Password. Compliance is power!

How to secure your company's macOS devices — with configuration profiles

PSSO V1 vs V2

Protip for Platform SSO

PSSO - 1

PSSO - 2

PSSO4

PSSO5

PSSO plist 

<?xml version="1.0" encoding="UTF-8"?> 
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> 
<plist version="1.0"> 
  <dict> 
    <key>AppPrefixAllowList</key> 
<string>com.apple.,com.microsoft.</string> 
    <key>Enable_SSO_On_All_ManagedApps</key> 
    <integer>1</integer> 
    <key>admin_debug_mode_enabled</key> 
    <integer>1</integer> 
    <key>browser_sso_interaction_enabled</key> 
    <integer>1</integer> 
  </dict> 
</plist> 
 

PSSO6

PSSO7-INTUNE

psso profile group assignment scribe 

SSO-SharedAppConpanyPortalDeployment

Protip: Double check the target endpoint after app deployment to confirm that you see the company portal app in /Applications. PSSO registration will not pop up until this app is present on the machine. 

PSSO7

Protip: You can open managed software update center on the endpoint computer to watch app installations to see when Company Portal shows up. 

PSS08

PSSO9

scribe - Manual PSSO pop up flow

scribe - PW Auth standard user flow

scribe - Secure Enclave Flow 

PSSO10

PSSO11

You can also double check your on-prem network allowlist against Use Apple products on enterprise networks.

Configure Platform Single Sign-On (PSSO) with Microsoft Entra ID on macOS. Get setup requirements, authentication methods, and deployment tips for seamless integration.

How to configure Platform Single Sign-on 

News Article 2 Background

And for even more tools, check out these GitHub resources on Tools for MacAdmins and Awesome MacAdmin tools list.  

Other workshops on SSO included:

Zach, Hayley, and Pepper at MacAdmins PSU 2024.

SMDM Cuties!

Recap of the PSU MacAdmins Conference 2024! Discover key takeaways, including innovative work strategies, essential tools, phishing resistance, and Platform SSO insights.

PSU MacAdmins Conference 2024 recap 

PSU MacAdmins

General IT Article Background

Safari Workflow - Step 5

how to find your D-U-N-S number

Click Save then on the next screen select Download Token

To link Apple Business Manager to SimpleMDM, a certificate must be exchanged between the accounts to establish a secure, trusted relationship.

Once an MDM server is assigned in ABM sync it with SimpleMDM

. Once this step is complete, the device count in the SimpleMDM ADE interface updates to the correct count. These devices have not been added to SimpleMDM yet, but now SimpleMDM is aware of them in the ADE portal.

How to Add ADE Enrollment with ABM steps

ADE CTA

Master enrolling in Apple's ADE with SimpleMDM’s comprehensive guide. Learn how to create an Apple Business Manager account, link to SimpleMDM, and assign devices.

How to enroll in Apple Automated Device Enrollment (ADE)

News3

The list of reasons to use Automated Device Enrollment just keeps growing!

If you have an AppleSeed for IT account, read more in the new Software Update document. 

SimpleMDM brings you the TL;DR of Apple WWDC 2024, including Apple Intelligence news, Platform SSO enhancements, the iPhone mirroring app, and more.

Andrea Pepper

Stories by Andrea Pepper

Apple Intelligence: How secure is Private Cloud Compute for enterprise?

GENERAL IT

WWDC 2025 recap: OS26, Liquid Glass, and DDM

GENERAL IT

What apps are compatible with Apple's Single App Mode?

GENERAL IT

Does Apple support Python?

GENERAL IT

What is AutoPkg?

GENERAL IT

How to find the bundle ID for an application

GENERAL IT

How to create shell scripts in macOS

GENERAL IT

How to disable iOS voice, roaming, & personal hotspots

PRODUCT

How to test Apple's next operating systems

GENERAL IT

How to reset Mac passwords

GENERAL IT

What is an MDM profile?

GENERAL IT

How to secure your company's macOS devices — with configuration profiles

SECURITY