Best products from r/macsysadmin

As someone who has written several thousand lines of AppleScript, including a single application clocking in at over 3000 lines by itself, I cannot recommend Applescript 1-2-3 enough. The book is very clearly laid out, easy to read, and ramps up difficulty at a very mild pace. It's a few years old now, but not too much has happened to the language since the book's publication date. The only notable language addition that the book does not cover is the ability to create your own full-fledged libraries in Mavericks+.

Also, just to point out the inverse of Kingtheseus' point, it should be noted that any shell commands can be executed from within an AppleScript with a simple "do shell script" line.

While it is true that Apple is more prone to dropping features without warning than other companies, AppleScript has been around for 22 years –since System 7 in 1993. That's only 3 years younger than BASH, the shell that interprets most "Unix scripts".

Learning AppleScript has several benefits. Many OS X applications (particularly those that are "Mac first" or Mac exclusive) only expose certain functionality via AppleScript dictionaries, not shell script commands.

Applescripts can also have full Cocoa GUIs, has a type of variable (the "property") that stores its modified values across executions (a lot easier than writing a BASH shell script that stores and loads values from a text file,) you can display interactive GUI dialogs to users with a single line of code, easily package entire AppleScript "apps" that contain all sorts of program resources in a real app bundle, automate all native OS X GUIs (though that should always be a thing of last resort. Trust me.), and much, much more.

It is a wonderful language, and as a Casper sysadmin I have found it invaluable on numerous occasions.

Aside from the book, Script Debugger from Late Night Software is practically mandatory. It's been around nearly as long as AppleScript itself and is an invaluable tool for writing anything beyond a dozen-line quickie. Other useful tools include UI Browser from PFiddlesoft and Key Codes from Many Tricks, just in case you do need to script another application's GUI.

Here are the essential resources that will help you, particularly the top document which ifs free. Use your google skills if you need to find the same document for earlier versions of the OS. For some summary and additional information on this topic, see the original thread.

-
-


Free Basic Apple Training Documentation

Mac Management Basics 10.10-Deploying and Managing Multiple Mac Computers

-


Reference Books

Support Essentials

Server Essentials

Managing and Deploying IOS Devices

-


Websites

enterpriseosx.com

Apple Support Communities

Apple Web Resources Including Imaging

Advanced Topics


Macworld Reviews and Buying Advice

-

Mailing List


Mac Managers Mailing List

-


Essential Software

Your Best Friend for Remote Management of Macs

Carbon Copy Cloner

Cocktail

Iceberg

Take a look at the Community Resources sidebar. The guy at Krypted wrote this book about enterprise Mac security, which should help you a lot. He is also a senior program manager at JAMF, and was CTO at a MSP for 10+ years.

Rich Trouton's Blog has some excellent advice too, especially about FileVault2, day to day stuff, cutting edge stuff, and applications.

Greg Neagle is an expert as well.

I think you can still get a free version of Centrify. Put that in and it makes GPO management easier. OSX can bind to AD natively, but you get more funtionality with Centrify. Whichever you use though, this can be very helpful.

The last I checked Arcsight still did not have connectors for OSX. You might look into forwarding syslog to another machine that collects, and then have arcsight get them from there. Most all of your standard infosec tools will work on OSX (e.g. Nmap, Nessus).

Thank you for the in-depth reply. Using that list, I actually went with the Diamond BVU195 - supports OS X, reviews are pretty good. Thank you kind stranger.

For a portable dock, I've been fairly pleased with the Purgo 7in2. I wish the fit was a little tighter and the machining didn't make the dock keep up a little from the side of my MacBook Air.

https://www.amazon.com/dp/B07PCP5J4Z

I second the Dell USB-C docks; Lenovo Thunderbolt/USB-C docks (specifically Gen2) worked pretty well for us. We had some power delivery issues with Gen1.

The support essentials tests are pretty easy. There's an app called ReviseIT that has most of the questions (or similarly worded ones) that you can use in a practice test fashion.

If you want to study the book, you can grab it here: https://www.amazon.com/macOS-Support-Essentials-10-14-Troubleshooting/dp/0135390583

We've used these with our 2018 touchbar pros (as well as the models without touchbar) and are able to use them with the machine closed like you asked... though this one is HDMI and not DVI:
https://www.amazon.com/Satechi-Aluminum-Multi-Port-Adapter-Pass-Through/dp/B075FW7H5J/ref=pd_cp_147_1?pd_rd_w=x8dQh&pf_rd_p=ef4dc990-a9ca-4945-ae0b-f8d549198ed6&pf_rd_r=3R3ZM131TA04Q0TJEH2S&pd_rd_r=34da322e-1311-4e24-8fce-94688cf50a53&pd_rd_wg=LLAZK&pd_rd_i=B075FW7H5J&psc=1&refRID=3R3ZM131TA04Q0TJEH2S

The problem is that most of these adapters (not just this brand) seem to still be trying to catchup to the tech. These adapters (again, not just this brand) all run pretty hot and seem to run into problems as far as connection goes. A lot of the time the solution is to unplug it and put it into a different USB C port on the machine and it can usually resolve the issues. That said, a lot of our users seem to burn through theirs and they become VERY finicky to the point that if they bend a certain way the monitors no longer connect until the adapter is repositioned just right.

With that in mind, I'm still on my original one, so as long as the user won't be moving it or placing the adapter so the cable bends at awkward angles it should be fine (well, more of the standard hit-or-miss).

yes, in fact on pretty much the last three to four Mac OS revisions. The Canon imageclass MF733 cdw is the model I would recommend
https://www.amazon.com/Canon-Color-imageCLASS-MF733Cdw-Wireless/dp/B07SLLTD2V

Put this in quite a few small businesses and offices the last few years and the thing is almost bullet proof on a Mac.

The “fleet” option that you’re looking for does exist in enterprise and in small business. Typical price is usually $4k and up. For consumer grade you can go with stand alone he (e.x StarTech.com 6 Bay USB 3.0/ eSATA Duplicator and Eraser Dock for 2.5" & 3.5" SATA SSD HDD - 1:5 Standalone Cloner & Wiper Docking Station (SATDOCK5U3ER) https://www.amazon.com/dp/B00QL1ADXQ/ref=cm_sw_r_cp_api_i_BXKODbQ0NVXDA) or set up a dedicated Mac and script out a dd to do the same thing. A developer based solution will pretty much just out dd into a wrapper and front end and then charge you for it.

We use
https://www.amazon.com/dp/B07F94KD1L/ref=cm_sw_r_cp_awdb_t1_1HAQDbV1EK7PC

But I haven't looked into the difference between these models. Maybe weve been overpaying by $200 for each dock we buy haha. Definitely investigating this today

I have three of these in my Xserve3,1 right now. To get them to work, you'll need to use jumpers to slow it down. Works great!

:) fair. I plug in one cord when I sit at my desk. And it’s this $45 hub. VAVA 8-in-1 USB C Hub with 1 Gbps Ethernet Port, 100W Pd Charging Port, 4K HDMI Port, SD/TF Card Reader, USB 3.0 Port for MacBook & USB C Laptops https://www.amazon.com/dp/B07KCDQLCY/ref=cm_sw_r_cp_api_i_06G6CbNKEMTZ8

I use this Belkin docking station at work with 2 displays, one connected via DisplayPort and the other connected via a DisplayPort to thunderbolt cable and it works great. I'm using a 13" MacBook Pro without touch bar.

I use a Microsoft Sculpt with Karabiner Elements to remap the modifiers back to Apple's "standard" positions. I find Xah Lee's keyboard blog to be a great source for keyboard info. I'd suggest checking out his Best Ergonomic Keyboards 2018 list.

I've been using this one for awhile and it's been great.

https://www.amazon.com/dp/B071G83L1J

Anker is great quality stuff. I never had an issue with these at all. Anker USB C Hub Adapter, 5-in-1 USB C Adapter with 4K USB C to HDMI, Ethernet Port, 3 USB 3.0 Ports, for MacBook Pro 2019/2018/2017, ChromeBook, XPS, and More (Space Gray) https://www.amazon.com/dp/B071G83L1J/ref=cm_sw_r_cp_tai_.9nQDbSSJC44B

I use this: https://www.amazon.com/gp/product/B071G83L1J/

It's pretty much an all in one for us.

Also, this book is a very good introduction: https://www.amazon.com/Enterprise-Administrators-Guide-Books-Professionals-ebook/dp/B004VH5Z4O/ref=sr_1_1?ie=UTF8&qid=1505581020&sr=8-1&keywords=mac+administration+apress

I like the Aukey stuff: https://www.amazon.com/AUKEY-Ethernet-Delivery-Charging-Chromebook/dp/B07RZ3M52P/ref=sr_1_3?keywords=aukey+usb+c+hub+ethernet&qid=1571332067&s=electronics&sr=1-3

I deploy these : https://www.amazon.com/Anker-Adapter-Ethernet-MacBook-ChromeBook/dp/B071G83L1J/

Have never had to replace one. I purposefully do not get ones with power for... reasons.