Every once in a while we experience a network problem on an iOS or iPadOS device that requires deeper troubleshooting. For example, a VPN client that is not connecting and has limited logging capability. On the other side, the network team is saying: “It’s not us, it’s the client.” The only way to approach this is with data. On a macOS device you would fire up tcpdump and get what you need, but what about iOS and iPadOS?

Controlling the idle time before the Screen Saver activates is a common sense security practice. It is one of the first items that auditors ask for. For a long time we have been able to control this setting via MDM profiles, but Ventura introduced a welcome change. Let’s take macOS Monterey as an example. In the screenshot below, a profile is being applied to set the Screen Saver to activate if the device is idle for 900 seconds (15 minutes).

Screen Recording during Enrollment and setup. We often have to create screen recordings for training, documentation or troubleshooting purposes. I was surprised at a mac admins meeting when someone asked how they should do it and using a cell phone to record was suggested. Yes, you could do that in a pinch, but the quality is not great, especially for training material or for a larger audience. The other idea included video capture devices and external streaming hardware and software, like you would use for live streaming a gaming session.

CUPS has changed! And it may have gone unnoticed to some. One of the many challenges of integrating a new OS is testing compatibility with all of your existing software stack. Sometimes you know what to expect. For example, an architecture change like Intel to Apple Silicon, or KEXT to System Extensions. But it is the quiet changes that can hurt you the most. The sometimes undocumented deprecations in API, cyphers, etc.

macOS Ventura is here! Ready or not! The day we have been preparing for is finally here! For the last five months we have been testing, preparing, and testing again. Now, eleven Betas and two Release Candidates later, we have arrived. For many though, Ventura is coming whether they want it or not. For years we have been accustomed to getting an “Install OS Name.app” being downloaded to /Applications and then starting the update from that location.

What is new with macOS Ventura and security We are all looking forward to the new features and stability of the new macOS, but with it usually come new challenges for Mac admins. Let’s just examine two of them. Login Items Software Updates Login Items It is an essential part of many software packages to be able to start services behind the scenes. Most of these are necessary and benign.

“macOS Ventura is coming…." It is only July, but don’t let that lure you into a false sense of security. Before you know it, it will be October, and your org will be asking, “When can I install the shiny new OS?” “Maybe not today." Here are some things that you can be doing to prepare now. Download and install the betas - yes all the betas. Prepare an install plan, use the AppleSeed for IT if you have it.