macOS Management

Manage macOS users and devices with simple/automated actions in Hornbill. No need to jump between tools.

Package Details

• Vendor: Apple
• Target Platform: macOS
• Package Type: Server and Workstation Management

Why use this

Direct control of macOS users

Empower service desk analysts and IT ops teams with direct control over macOS user accounts and devices—from inside the Hornbill UI.

Example: Automate macOS password management to reduce calls to your service desk.

Benefits

• Reduce service desk call times
• Accelerate service restoration
• Reduce the number of deskside visits
• Cut IT ops workloads
• Automate macOS admin processes

How to get it

• You can try out ITOM for free (not for production use, limited runs) by installing the ITOM application from the Hornbill App Store.
• If you would like to explore ITOM and consider subscribing, please contact your account manager here.

Requirements

• Install the Hornbill Site Integration Server inside your firewall (if you don’t already have it)

Authentication

When creating jobs for operations contained within this package, they need to be run on the target machine as a user who has the correct privileges within your environment. To create and securely store keys:

• In the Configuration area of your Hornbill instance, navigate to Platform Configuration > Security > KeySafe;
• Click on the + Create New Key button, then select Username + Password;
• Give the KeySafe Key a Title (this is the name/identifier for the Active Directory account as you will see it when creating an IT Automation Job, or adding an IT Automation node to a Workflow);
• Optionally add a Description;
• Populate the Username field with the username for the account being used on the target machine;
• Populate the Password field with the password for the above account;
• Select Create Key to save.

Credentials

Accounts used when executing jobs against operations contained within this package must adhere to the following requirements:

• The target machine must have a local admin user that will be used for running the operations;
• Remote Login must be enabled for the above user (System Preferences > Sharing > Remote Login);
• Configuration for the user must be added to the sudoers file on the target machine, to allow the above user to sudo without a password (example: someadminuser ALL = (ALL) NOPASSWD:ALL).

Package Automations

See also

• Linux User Management
• Active Directory User Management
• Active Directory Group Management