Full Circle: The Journey To Consumerism. Charles Edge

Transcription

1 Full Circle: The Journey To Consumerism Charles Edge

2 Have we spent the last decade over-complicating our deployments?

3 Have we spent the last decade over-protecting our users?

4 What do you call solid gold bananas?

5 Before we get started, who runs anti-virus on an iphone?

6 Who harshly judges those who do?

7 Consumerism = Buzz Word

8 Remember what Ed said about taking an ipad through border security

9 Consumerisation = Mobilization

10

11 Why Mobilization? It s the future

12 The future for your environment

13 The future for your career

14 On my flight over

15 I m a PC

16 Just not Enterprise enough

17 Good

18 I know I am supposed to be welcoming

19 But on our terms, right?

20 Some mandate antivirus on ios

21 Dumb Quotes

22 Why would I do anything for that orifice called the CIO? -Steve Jobs

23 I m going to build devices that are irresistible for consumers, and CIOs will just have to deal with it. -Steve Jobs

24 This is not a hobby, it's a real business. -Tim Cook

25 It will be by working with companies like IBM, Cisco, and Box and others to give customers a full solution. -Tim Cook

26 Kevin showed the Cisco enhancements for Wi-Fi

27 IBM

28 Deloitte

29 Agenda The last decade Binding vs SSO Imaging Scenario ing Next up

30 Apple in the Enterprise Active Directory plug-in SMB and DFS support Policy-based Management (MCX) Full disk encryption Exchange support SAML support in Safari

31 Replicating that dogma Active Directory plug-in -> Open Directory SMB and DFS support -> Clustered AFP Services w/ Xsan MCX -> White papers on extending the AD Schema Full disk encryption -> Build FileVault and court Checkpoint Exchange support -> OS X Server Mail/Calendar/Contact Services And attempting services alliances with 3rd parties

32 But we were always playing catch-up

33 Nick mentioned agentless

34 MDM: A Game Changer

35 Why MDM? Instant Apple support Auditable Cost Wipe/Lock/Activation Lock DEP

36 An Ecosystem Add VPP And B2B VPP No more packaging Subscriptions Apple School Manager

37 And then Will MDM eventually be the only management tool for the Mac? The future of LaunchDaemons and LaunchAgents Speaking of MDM

38 A Server Product Showcase MDM Cache all the things Is that all macos Server is? Started with a thesis

39 Server Services Rhapsody

40 Digging into the data

41 Digging into the data

42 Server is about enabling clients

43 Not trying to own backend network services

44 To bind or not to bind

45 Once upon a time, we did days of scripting per customer to bind

46 And planned complex domain/ou structures

47 And extended schemas

48 Then the Internet got smarter

49 SAML

50 1 factor vs 2

51 Do or do not, it s not that hard (aka interesting) any more either way

52 If you don t bind

53 Software that intermediates binding

54 Onelogin 3 free apps Unlimited users Took about 15 minutes to master Took about 15 more minute to be a reseller

55 Okta For Developers 3 apps 100 users Free forever For IT Unlimited apps 100 Users 30 day trial

56 Apple Enterprise Connect Kerberize w/out AD Automatic key renewal Sync AD passwords w/ local accounts Obtain certificates Site/OU aware

57 NoMAD Kerberize w/out AD Automatic key renewal Sync AD passwords w/ local accounts Get x509 certs AD Site aware Aaaaannnnd One-click Jamf Self Service Warn about expiring passwords

58 MDM Push binds Push 802.1x Custom defaults domain keys Login/startup/scripts Lack of in-depth Kerberos/scripty logic, so best in web-based workflows or with a patch management solution

59 Is imaging dead?

60 Remember that thing Kevin said about SIP2?

61 Rich <3 APFS

62 Mostly dead

63 But, it s easy now, so who cares

64 Thin imaging

65 Some must put a fully formed device on a desk

66 But you can t image an ios device enrolled in MDM, so that can be annoying

67 Some orgs still image

68 And

69 Device-based VPP + DEP

70 Network and Portable Homes

71 Versus Backup

72 It was never backup

73 Scripting All The Things

74 Swift

75 As Joel said, it s getting more mature

76 APIs are more important than ever

77 Like the MDM API

78 But you learned to think programmatically!

79 Packages?

80 All apps CAN be selfcontained.apps

81 Scenarios!

82 A school lab where machines need to get reset every morning

83 A school where students need their profiles moving with them

84 A school where students need their desktops moving with them

85 A rapidly growing startup with highly technical staff that uses mostly web apps

86 Environments that need to audit CIS or other very specific regulatory security requirements

87 A small business with 5 devices that just needs to check some boxes on a security form

88 Layered management

89 But most importantly: What s next for you?

90 Engineering

91 MDM

92 Logistics

93 Development

94 Management

95 Managing larger deployments

96 Much logistics

97 If your candidate doesn t win, you could move

98 Other platforms

99 Questions