Menu
The Self Service for macOS tool improves application and system setup and automates software maintenance for Drexel-owned Macs. Self Service for macOS provides users with an easy way to get and install pre-configured, Drexel-licensed software; lets Drexel IT support teams remotely repair and update malfunctioning software; and reduces the need. Notifications in Self Service display in the Notifications list in the Self Service toolbar. A badge appears on the Notifications icon when new items or software updates are added to Self Service. You can also display notifications in Notification Center as banners or alerts in macOS.
Organizations today increasingly deploy Mac devices. Due to this overall influx, the amount of Active Directory (AD) password reset requests for Mac devices has grown exponentially, as well. Thus, the IT teams of these organizations are forced to spend a lot of time handling repetitive tickets. To solve this issue, organizations can now adopt a self-service password management solution, such as ADSelfService Plus. This tool solution provides Mac users a self-service web portal manage their own passwords and accounts, without depending on the IT team, reducing administrative time spent on repetitive requests.
Streamlining the Solution
In the past, the web portal from ADSelfService Plus had to be accessed from a dedicated, secure system. This is no longer the case; ADSelfService Plus has introduced the Mac login agent for password resets. The login agent is an extension of the web client, which allows Mac users to reset their Active Directory passwords right from their login screen. The login agent is not a complete substitute the web portal, but allows users to reset passwords from the comfort of their own systems.
What Can the Login Agent Do?
The login agent is run by the Mac OS as a part of the lock screen.Clicking the “Reset Password/Unlock Account” button opens a secure browser, from which AD users can authenticate themselves, and reset their forgotten passwords.
Easily access the login agent from the desktop by keying in the keyboard shortcuts “CONTROL+SHIFT+EJECT” or “CONTROL+SHIFT+POWER”, depending on the Mac version.
How Do I Enable the Login Agent?
Installing the Mac login agent is simple and quick. You can bulk install client software to the users' machines from a centralized ADSelfService Plus console, through domain or OU-based filters, or a CSV file with the necessary details of the Mac devices. ADSelfService Plus also allows administrators to customize the icon and text associated with the login agent. For more customization details, click here.
The ADSelfService Plus Mac Login Agent Advantage
Self Service Macos
The login agent for Mac users, from ADSelfService Plus, is advantageous to both users and administrators alike.
- Allows Mac users to reset their password and unlock their account directly from their device, without having to search for a secure terminal to access the ADSelfService Plus portal.
- Reduces the workload of administrators and help desk personnel.
- Decreases turnaround time, to increase user productivity.
- Minimizes cost incurred on Active Directory password reset requests.
Password self-service
Free Active Directory users from attending lengthy help desk calls by allowing them to self-service their password resets/ account unlock tasks. Hassle-free password change for Active Directory users with ADSelfService Plus ‘Change Password’ console.
One identity with Single sign-on
Dash For Macos
Get seamless one-click access to 100+ cloud applications. With enterprise single sign-on, users can access all their cloud applications with their Active Directory credentials. Thanks to ADSelfService Plus!
Password/Account Expiry Notification
Intimate Active Directory users of their impending password/account expiry by mailing them these password/account expiry notifications.
Macos Service Battery
Password Synchronizer
Synchronize Windows Active Directory user password/account changes across multiple systems, automatically, including Office 365, G Suite, IBM iSeries and more.
Password Policy Enforcer
Hp laserjet 1022 driver for mac os mojave. Ensure strong user passwords that resist various hacking threats with ADSelfService Plus by enforcing Active Directory users to adhere to compliant passwords via displaying password complexity requirements.
Directory Self-Update & Corporate Search
Macos List Services
Portal that lets Active Directory users update their latest information and a quick search facility to scout for information about peers by using search keys, like contact number, of the personality being searched.
![Self service for macos download Self service for macos download](/uploads/1/2/6/2/126285409/774207823.jpg)
Introduction
Mac Self-Service is a functionality within the Mac Desktop Service built and maintained to empower CERN users by giving them easy access to applications and configurations through the Self-Service application. It also enables CERN users to acquire Mac App Store applications through the Apple Volume Purchasing Program. Access to licensed software is restricted to Macs that are regurarely on site.
Mac Self-Service is based on the pull philosophy. CERN users join the Self-Service by enrolling their Mac in the CERN MDM, which requires logging-on with their CERN credentials and then downloading and installing the Self-Service application. This enables the users to select the applications they would like to install or the settings they would like to apply on their Mac.
The enrolment and the Self-Service app use Single-Sign-On. SSO to these services works with username and password or with an existing kerberos token. The SSO for these services does not work with user certificates.
If the device on which you intend to install this software is owned by an external university or institute, please ensure that you have the right to authorise the enrollment.
To enrol you Mac in the Mac Self-Service, click here:https://mdm.cern.ch/enrol
Enrolling with macOS 10.12.6 or earlier
Sandbox secuirty software for macos. On macOS versions up to 10.12.6 the package CernSelfService.pkg will be downloaded directly. Once the download is complete you can (double) click the package to open it with the Installer and follow the installations instructions.
Enrolling with macOS 10.13 or newer
On newer versions of macOS two profiles are downloaded and installed (first a 'CA Certificate' and then an 'MDM Profile'), for each of these the user is asked several times for confirmation. Once you have downloaded and installed the CA Certificate go back to your browser to download and install the MDM Profile. The framework and the Self-Service app are then pushed from the server in the background. Due to this it might take a few minutes until the Self-Service app is installed on newer versions of macOS.
Using the Self-Service
When starting the Self-Service for the first time users should run the policy 'Trust CERN CA Certificates' to ensure that the Mac trusts the certificates issued by CERN's Certification Authority, needed for the installation of products via the Self-Service. Appcleaner mac el capitan.
Access to licensed software is only granted to properly registered Macs that have been on site recently. Even for Macs that are on site there is delay of a few minutes between the enrollment and the check for eligibility, which means that licensed software is not visible directly after the enrollment. Macs that are registered in the network database as 'visitor-xyz' are not eligible for licensed software.
On the technical level, the Self-Service works based on the MDM agent, which is installed during the enrolment process. The MDM agent runs with local admin privileges in order to automate installations, manage software dependencies and gather information about the hardware and software, which helps the Mac Desktop Service team provide a better service. The Mac Desktop Service team is committed to ensure confidentiality of this information.
Updates to the applications installed through the Self-Service are handled by mechanisms provided by these applications themselves - in exactly the same way as when these applications are installed outside of the Self-Service. Although technically possible, the Mac Desktop Service team does not push any updates, settings or applications to the Macs enrolled in the Self-Service.
However, in case you would like to remove Self-Service, and you have not installed any CERN licensed software, simply execute the following command in terminal :
sudo jamf removeframework
sudo jamf removeframework
Please 'Quit' the Self-Service app.
The Self-Service app goes into weird state when kept open for too long, and will probably use a large fraction of your Macs network bandwidth. To avoid that the Self-Service app wastes too many resources please quit the app when you are done.
About Migration Assistant, Restoring from Time Machine and Replaced Motherboards
When a new Mac is set up using the migration assistant directly or via Time Machine or when a Mac has its motherboard replaced that Mac might also receive the Self-Service.app and the jamf framework, but the Self-Service server will not accept any connection from that Mac since the new Mac is unknown to the server. The same holds for any other intervention that changes the serial number and/or the UDID of the Mac. For these devices we recommand to run the 'sudo jamf removeframework' and then enroll the new Mac by visiting https://mdm.cern.ch/enrol.