Hello,

Just want to make sure I'm not going crazy. I'm a windows admin, but we are trying to manage a few mac using Intune, and wanted to implement PSSO using secure enclave with Entra ID login for use with a few Macs that are used as shared device.

All in the implementations feel ... clunky to me, but we get it working. Users can connect with their Entra ID login.

However, when changing a password by SSPR, the local user password seems to not update.

Is that the intended behavior ? it doesn't seem so, from ms doc : macOS Platform single sign-on known issues and troubleshooting - Microsoft Entra ID | Microsoft Learn It seems it should synchronize in a few hours. It does not, in my experience.

Anyone has battled with this beast ?

>A security-hardened upgrade to Mac Admins’ new favorite “set-it-and-forget-it” DDM macOS update reminder, featuring corroborated DDM declaration validation and “Update Tonight” awareness

Overview

While Apple’s Declarative Device Management (DDM) provides Mac Admins with a powerful way to enforce macOS updates, its built-in notification is often too subtle for most administrators.

DDM OS Reminder intelligently resolves DDM-enforced macOS update deadlines, delivering a more prominent end-user reminder dialog.

🆕 5.0.0 Highlights

• Update Tonight awareness: Confirmed same-day Update Tonight scheduling for the target version pauses normal reminders until local midnight. Evidence must be logged by softwareupdated; pre-deadline thresholds, aggressive mode, and Force mode still apply. 
• DDM Emergency Fallback: Jamf Pro Script Parameters 5 and 6 can persist an emergency version/deadline requirement at /Library/Management/<rdnn>/dor-fallback-declaration.plist. Runtime can select it after recognized unresolved DDM states; confirmed DDM always wins.

Continue reading …

>SYM-Lite is a lean, purpose-built script for executing MDM-agnostic Installomator labels and Homebrew casks / formulas, as well as Jamf Pro-specific policy triggers, all through a unified swiftDialog selection and reporting interface.

Key Features

• Unified execution support — Installomator labels, Homebrew casks / formulas, and / or Jamf Pro policies in a single session
• Interactive selection UI — Checkbox dialog with per-item icons; selectable items start checked and previously installed items are automatically disabled
• Homebrew support — Casks and formulas run in the logged-in user context (with ~/Applications for non-admin users) and never hang on a sudo prompt
• Inspect Mode — Real-time progress monitoring in a moveable, minimizable window
• Silent mode — CSV-based automation support

Continue reading …