├── README.md ├── LICENSE ├── AppStore.mobileconfig ├── AirDropDiscoverability.mobileconfig ├── SetupAssistant.mobileconfig ├── Slack.mobileconfig ├── 1Password.mobileconfig ├── Domains.mobileconfig ├── MicrosoftRemoteDesktop.mobileconfig ├── Pinpoint.mobileconfig ├── Safari.mobileconfig ├── Cyberduck.mobileconfig ├── Screensaver.mobileconfig ├── Finder.mobileconfig ├── Firewall.mobileconfig ├── MicrosoftOffice.mobileconfig ├── FastUserSwitching.mobileconfig ├── Privacy-FullDiskAccess-Munki.mobileconfig ├── Munki.mobileconfig ├── ManagedLoginItems.mobileconfig ├── Nudge.mobileconfig ├── MicrosoftAutoUpdate.mobileconfig └── HelloIT.mobileconfig /README.md: -------------------------------------------------------------------------------- 1 | # Configuration-Profiles 2 | Example configuration profiles for use by MacAdmins 3 | -------------------------------------------------------------------------------- /LICENSE: -------------------------------------------------------------------------------- 1 | MIT License 2 | 3 | Copyright (c) 2022 Kevin M. Cox 4 | 5 | Permission is hereby granted, free of charge, to any person obtaining a copy 6 | of this software and associated documentation files (the "Software"), to deal 7 | in the Software without restriction, including without limitation the rights 8 | to use, copy, modify, merge, publish, distribute, sublicense, and/or sell 9 | copies of the Software, and to permit persons to whom the Software is 10 | furnished to do so, subject to the following conditions: 11 | 12 | The above copyright notice and this permission notice shall be included in all 13 | copies or substantial portions of the Software. 14 | 15 | THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR 16 | IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, 17 | FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE 18 | AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER 19 | LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, 20 | OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE 21 | SOFTWARE. 22 | -------------------------------------------------------------------------------- /AppStore.mobileconfig: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | PayloadDisplayName 6 | App Store 7 | PayloadIdentifier 8 | com.example.profile.AppStore 9 | PayloadUUID 10 | D43C8A79-934E-4E2A-8DE5-F3371DAD5DEC 11 | PayloadDescription 12 | Prevents App Adoption messages on new computers. 13 | PayloadOrganization 14 | Example, Inc. 15 | PayloadRemovalDisallowed 16 | 17 | PayloadScope 18 | System 19 | PayloadType 20 | Configuration 21 | PayloadVersion 22 | 1 23 | PayloadContent 24 | 25 | 26 | PayloadType 27 | com.apple.appstore 28 | PayloadDisplayName 29 | App Store (v2) 30 | PayloadIdentifier 31 | com.example.profile.AppStore 32 | PayloadUUID 33 | 541F5810-2448-4F4F-A0A3-7717DEEC4074 34 | PayloadVersion 35 | 2 36 | restrict-store-disable-app-adoption 37 | 38 | 39 | 40 | 41 | 42 | -------------------------------------------------------------------------------- /AirDropDiscoverability.mobileconfig: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | PayloadDisplayName 6 | AirDrop Discoverability 7 | PayloadIdentifier 8 | com.example.profile.sharingd 9 | PayloadUUID 10 | 97C6192B-7695-4F9E-B90C-1B78CC18F551 11 | PayloadDescription 12 | Configures the discoverability preference of AirDrop. 13 | PayloadOrganization 14 | Example, Inc. 15 | PayloadRemovalDisallowed 16 | 17 | PayloadScope 18 | System 19 | PayloadType 20 | Configuration 21 | PayloadVersion 22 | 1 23 | PayloadContent 24 | 25 | 26 | PayloadType 27 | com.apple.sharingd 28 | PayloadDisplayName 29 | AirDrop (v 1) 30 | PayloadIdentifier 31 | com.example.profile.sharingd 32 | PayloadUUID 33 | 655D6B47-33AE-4B94-84FE-D62E57324B53 34 | PayloadVersion 35 | 1 36 | DiscoverableMode 37 | Contacts Only 38 | 39 | 40 | 41 | 42 | -------------------------------------------------------------------------------- /SetupAssistant.mobileconfig: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | PayloadDisplayName 6 | Setup Assistant 7 | PayloadIdentifier 8 | com.example.profile.SetupAssistant 9 | PayloadUUID 10 | 481E34F8-7BB7-4718-962F-EDD4FDDF0B91 11 | PayloadDescription 12 | Setup Assistant SkipKeys. 13 | PayloadOrganization 14 | Example, Inc. 15 | PayloadRemovalDisallowed 16 | 17 | PayloadScope 18 | System 19 | PayloadType 20 | Configuration 21 | PayloadVersion 22 | 1 23 | PayloadContent 24 | 25 | 26 | PayloadType 27 | com.apple.SetupAssistant.managed 28 | PayloadDisplayName 29 | Setup Assistant (v1) 30 | PayloadIdentifier 31 | com.example.profile.SetupAssistant 32 | PayloadUUID 33 | DBC66AA4-ADB9-4272-B9D4-8B3ED51C79F2 34 | PayloadVersion 35 | 1 36 | SkipSetupItems 37 | 38 | Intelligence 39 | Welcome 40 | 41 | 42 | 43 | 44 | 45 | -------------------------------------------------------------------------------- /Slack.mobileconfig: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | PayloadDisplayName 6 | Slack 7 | PayloadIdentifier 8 | com.example.profile.Slack 9 | PayloadUUID 10 | E2A7CE0B-8E4A-455F-A2A2-348DA67B54A5 11 | PayloadDescription 12 | Disables Slack auto-updates and configures the default Workspace. 13 | PayloadOrganization 14 | Example, Inc. 15 | PayloadRemovalDisallowed 16 | 17 | PayloadScope 18 | System 19 | PayloadType 20 | Configuration 21 | PayloadVersion 22 | 1 23 | PayloadContent 24 | 25 | 26 | PayloadType 27 | com.tinyspeck.slackmacgap 28 | PayloadDisplayName 29 | Slack (v 3) 30 | PayloadIdentifier 31 | com.example.profile.Slack 32 | PayloadUUID 33 | 93888269-D758-4FE2-A6FB-2735DA589BCE 34 | PayloadVersion 35 | 3 36 | DefaultSignInTeam 37 | XXXXXXXXX 38 | AutoUpdate 39 | 40 | 41 | 42 | 43 | 44 | -------------------------------------------------------------------------------- /1Password.mobileconfig: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | PayloadDisplayName 6 | 1Password 7 | PayloadIdentifier 8 | com.example.profile.1Password 9 | PayloadUUID 10 | A7DF8922-5988-420D-958A-D84134B0F055 11 | PayloadDescription 12 | Managed Preferences for 1Password. 13 | PayloadOrganization 14 | Example, Inc. 15 | PayloadRemovalDisallowed 16 | 17 | PayloadScope 18 | System 19 | PayloadType 20 | Configuration 21 | PayloadVersion 22 | 1 23 | PayloadContent 24 | 25 | 26 | PayloadType 27 | com.agilebits.onepassword7 28 | PayloadDisplayName 29 | 1Password: 1.0 30 | PayloadIdentifier 31 | com.example.profile.1Password 32 | PayloadUUID 33 | 67FC5B17-612D-4312-BF25-B1486E08A6F6 34 | PayloadVersion 35 | 1 36 | CheckForSoftwareUpdatesEnabled 37 | 38 | AutoInstallSoftwareUpdatesEnabled 39 | 40 | 41 | 42 | 43 | 44 | -------------------------------------------------------------------------------- /Domains.mobileconfig: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | PayloadDisplayName 6 | Domains 7 | PayloadIdentifier 8 | com.example.profile.Domains 9 | PayloadUUID 10 | FA4F8D1C-C387-49E1-A86C-93F5A833F909 11 | PayloadDescription 12 | Highlights non-company domains red in Mail.app 13 | PayloadOrganization 14 | Example, Inc. 15 | PayloadRemovalDisallowed 16 | 17 | PayloadScope 18 | System 19 | PayloadType 20 | Configuration 21 | PayloadVersion 22 | 1 23 | PayloadContent 24 | 25 | 26 | PayloadType 27 | com.apple.domains 28 | PayloadDisplayName 29 | Domains (v 2) 30 | PayloadIdentifier 31 | com.example.profile.Domains 32 | PayloadUUID 33 | 9AAB1F76-342B-4525-A0B9-ED91DB6B776A 34 | PayloadVersion 35 | 2 36 | EmailDomains 37 | 38 | example.com 39 | example.net 40 | 41 | 42 | 43 | 44 | 45 | -------------------------------------------------------------------------------- /MicrosoftRemoteDesktop.mobileconfig: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | PayloadDisplayName 6 | Microsoft Remote Desktop 7 | PayloadIdentifier 8 | com.example.profile.Microsoft.RemoteDesktop 9 | PayloadUUID 10 | 5913C9A0-7F96-415A-B8ED-B902503EDAC7 11 | PayloadDescription 12 | Disables first run dialog. 13 | PayloadOrganization 14 | Example, Inc. 15 | PayloadRemovalDisallowed 16 | 17 | PayloadScope 18 | System 19 | PayloadType 20 | Configuration 21 | PayloadVersion 22 | 1 23 | PayloadContent 24 | 25 | 26 | PayloadType 27 | com.microsoft.rdc.macos 28 | PayloadDisplayName 29 | Microsoft Remote Desktop (v 2) 30 | PayloadIdentifier 31 | com.example.profile.Microsoft.RemoteDesktop 32 | PayloadUUID 33 | 7B46AC57-468B-4216-87B0-2BB483F53F42 34 | PayloadVersion 35 | 2 36 | ClientSettings.FirstRunExperienceLaunchedVersion 37 | 1 38 | 39 | 40 | 41 | 42 | -------------------------------------------------------------------------------- /Pinpoint.mobileconfig: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | PayloadDisplayName 6 | Pinpoint 7 | PayloadIdentifier 8 | com.example.profile.Pinpoint 9 | PayloadUUID 10 | 3620B479-9062-4B82-B169-84D55A266117 11 | PayloadDescription 12 | Configures Pinpoint geolocation settings. 13 | PayloadOrganization 14 | Example, Inc. 15 | PayloadRemovalDisallowed 16 | 17 | PayloadScope 18 | System 19 | PayloadType 20 | Configuration 21 | PayloadVersion 22 | 1 23 | PayloadContent 24 | 25 | 26 | PayloadType 27 | com.jelockwood.pinpoint 28 | PayloadIdentifier 29 | com.example.profile.Pinpoint 30 | PayloadDisplayName 31 | Pinpoint (v 1) 32 | PayloadUUID 33 | 73A6FEE1-8204-4899-B683-9CF6F3E1AB01 34 | PayloadVersion 35 | 1 36 | USE_ALTITUDE 37 | 38 | USE_GEOCODE 39 | 40 | DEBUG 41 | 42 | OPTIMISE 43 | 44 | YOUR_API_KEY 45 | h6hyGtT3KL89--EXAMPLE--ijSyaIXSY71MY7EL 46 | 47 | 48 | 49 | 50 | -------------------------------------------------------------------------------- /Safari.mobileconfig: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | PayloadDisplayName 6 | Safari 7 | PayloadIdentifier 8 | com.example.profile.Safari 9 | PayloadUUID 10 | C43749DC-F0FC-4DA6-825E-8F1173BDC7FD 11 | PayloadDescription 12 | Configures Safari 13 | PayloadOrganization 14 | Example, Inc. 15 | PayloadRemovalDisallowed 16 | 17 | PayloadScope 18 | System 19 | PayloadType 20 | Configuration 21 | PayloadVersion 22 | 1 23 | PayloadContent 24 | 25 | 26 | PayloadType 27 | com.apple.Safari 28 | PayloadDisplayName 29 | Safari (v 1) 30 | PayloadIdentifier 31 | com.example.profile.Safari 32 | PayloadUUID 33 | EAE98569-B1EF-4361-A04F-037D47CB9090 34 | PayloadVersion 35 | 1 36 | AskBeforeSubmittingInsecureForms 37 | 38 | AutoOpenSafeDownloads 39 | 40 | DefaultBrowserPromptingState2 41 | 1 42 | DefaultBrowserPromptingState3 43 | 2 44 | SendDoNotTrackHTTPHeader 45 | 46 | WarnAboutFraudulentWebsites 47 | 48 | 49 | 50 | 51 | 52 | -------------------------------------------------------------------------------- /Cyberduck.mobileconfig: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | PayloadDisplayName 6 | Cyberduck 7 | PayloadIdentifier 8 | com.example.profile.Cyberduck 9 | PayloadUUID 10 | 3EE84AE3-5809-4C86-B166-BB8CE5316498 11 | PayloadDescription 12 | Managed Preferences for Cyberduck. 13 | PayloadOrganization 14 | Example, Inc. 15 | PayloadRemovalDisallowed 16 | 17 | PayloadScope 18 | System 19 | PayloadType 20 | Configuration 21 | PayloadVersion 22 | 1 23 | PayloadContent 24 | 25 | 26 | PayloadType 27 | ch.sudo.cyberduck 28 | PayloadDisplayName 29 | Cyberduck (v 2) 30 | PayloadIdentifier 31 | com.example.profile.Cyberduck 32 | PayloadUUID 33 | FE811426-8DBD-477C-A66C-5EFC90DA2297 34 | PayloadVersion 35 | 2 36 | SUEnableAutomaticChecks 37 | 38 | SUSendProfileInfo 39 | 40 | donate.reminder.date 41 | 1565031508502 42 | donate.reminder.interval 43 | 999 44 | donate.reminder.suppress.enable 45 | 46 | update.check 47 | false 48 | 49 | 50 | 51 | 52 | -------------------------------------------------------------------------------- /Screensaver.mobileconfig: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | PayloadDisplayName 6 | Screensaver 7 | PayloadIdentifier 8 | com.example.profile.ScreenSaver 9 | PayloadUUID 10 | 9BDF47DE-723A-45FA-81A6-C553AC4BD42A 11 | PayloadDescription 12 | Managed Screensaver settings. 13 | PayloadOrganization 14 | Example, Inc. 15 | PayloadRemovalDisallowed 16 | 17 | PayloadScope 18 | System 19 | PayloadType 20 | Configuration 21 | PayloadVersion 22 | 1 23 | PayloadContent 24 | 25 | 26 | PayloadType 27 | com.apple.screensaver 28 | PayloadDisplayName 29 | Screensaver (v 2) 30 | PayloadIdentifier 31 | com.example.profile.ScreenSaver 32 | PayloadUUID 33 | D0D73ADB-0FBA-4C45-AE8D-9537146E1536 34 | PayloadVersion 35 | 2 36 | askForPassword 37 | 38 | askForPasswordDelay 39 | 5 40 | idleTime 41 | 600 42 | loginWindowIdleTime 43 | 300 44 | loginWindowModulePath 45 | /System/Library/Screen Savers/Monterey.saver 46 | moduleName 47 | Monterey.saver 48 | 49 | 50 | 51 | 52 | -------------------------------------------------------------------------------- /Finder.mobileconfig: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | PayloadDisplayName 6 | Finder 7 | PayloadIdentifier 8 | com.example.profile.Finder 9 | PayloadUUID 10 | 05056C82-7370-4DBD-9EDF-076EAF106768 11 | PayloadDescription 12 | Managed Finder settings. 13 | PayloadOrganization 14 | Example, Inc. 15 | PayloadRemovalDisallowed 16 | 17 | PayloadScope 18 | System 19 | PayloadType 20 | Configuration 21 | PayloadVersion 22 | 1 23 | PayloadContent 24 | 25 | 26 | PayloadType 27 | com.apple.finder 28 | PayloadDisplayName 29 | Finder (v3) 30 | PayloadIdentifier 31 | com.example.profile.Finder 32 | PayloadUUID 33 | 81F3D0C5-1542-4B06-A2E7-9D26B0A1E463 34 | PayloadVersion 35 | 3 36 | FXRemoveOldTrashItems 37 | 38 | ProhibitBurn 39 | 40 | ProhibitConnectTo 41 | 42 | ProhibitEject 43 | 44 | ProhibitGoToFolder 45 | 46 | ShowExternalHardDrivesOnDesktop 47 | 48 | ShowHardDrivesOnDesktop 49 | 50 | ShowMountedServersOnDesktop 51 | 52 | ShowRemovableMediaOnDesktop 53 | 54 | WarnOnEmptyTrash 55 | 56 | 57 | 58 | 59 | 60 | -------------------------------------------------------------------------------- /Firewall.mobileconfig: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | PayloadDisplayName 6 | Firewall 7 | PayloadIdentifier 8 | com.example.profile.Firewall 9 | PayloadUUID 10 | 5A0F1CED-C83C-4777-932A-8FB1145C8004 11 | PayloadDescription 12 | Managed Firewall settings. 13 | PayloadOrganization 14 | Example, Inc. 15 | PayloadRemovalDisallowed 16 | 17 | PayloadScope 18 | System 19 | PayloadType 20 | Configuration 21 | PayloadVersion 22 | 1 23 | PayloadContent 24 | 25 | 26 | PayloadType 27 | com.apple.security.firewall 28 | PayloadDisplayName 29 | Firewall (v 2) 30 | PayloadIdentifier 31 | com.example.profile.Firewall 32 | PayloadUUID 33 | 8013AB14-1533-4AD7-A065-3EFE676778FC 34 | PayloadVersion 35 | 2 36 | EnableFirewall 37 | 38 | AllowSigned 39 | 40 | AllowSignedApp 41 | 42 | BlockAllIncoming 43 | 44 | EnableStealthMode 45 | 46 | Applications 47 | 48 | 49 | BundleID 50 | com.example.araxi.Workshop 51 | Allowed 52 | 53 | 54 | 55 | BundleID 56 | com.example.Preps8 57 | Allowed 58 | 59 | 60 | 61 | 62 | 63 | 64 | 65 | -------------------------------------------------------------------------------- /MicrosoftOffice.mobileconfig: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | PayloadDisplayName 6 | Microsoft Office 7 | PayloadIdentifier 8 | com.example.profile.Microsoft.Office 9 | PayloadUUID 10 | D16C36EA-0612-416D-85C4-5DF278A458BE 11 | PayloadDescription 12 | Microsoft Office managed settings with the Volume License Serializer (not O365) in use. 13 | PayloadOrganization 14 | Example, Inc. 15 | PayloadRemovalDisallowed 16 | 17 | PayloadScope 18 | System 19 | PayloadType 20 | Configuration 21 | PayloadVersion 22 | 1 23 | PayloadContent 24 | 25 | 26 | PayloadType 27 | com.microsoft.office 28 | PayloadDisplayName 29 | Microsoft Office (v2) 30 | PayloadIdentifier 31 | com.example.profile.Microsoft.Office 32 | PayloadUUID 33 | E61E199C-5562-4A95-9AA6-64FBB0E93625 34 | PayloadVersion 35 | 2 36 | DefaultsToLocalOpenSave 37 | 38 | HasUserSeenEnterpriseFREDialog 39 | 40 | kCUIThemePreferenceThemeKeyPath 41 | 0 42 | OfficeActivationEmailAddress 43 | Example, Inc. 44 | OfficeAutoSignIn 45 | 46 | TermsAccepted1809 47 | 48 | VisualBasicMacroExecutionState 49 | DisabledWithWarnings 50 | DisableVisualBasicToBindToPopen 51 | 52 | 53 | 54 | 55 | 56 | -------------------------------------------------------------------------------- /FastUserSwitching.mobileconfig: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | PayloadDisplayName 6 | Fast User Switching 7 | PayloadIdentifier 8 | com.example.profile.FastUserSwitching 9 | PayloadUUID 10 | C0CF2CE1-5E6E-4AEA-A393-96F32C6CAEDF 11 | PayloadDescription 12 | Enables and configures Fast User Switching. 13 | PayloadOrganization 14 | Example, Inc. 15 | PayloadRemovalDisallowed 16 | 17 | PayloadScope 18 | System 19 | PayloadType 20 | Configuration 21 | PayloadVersion 22 | 1 23 | PayloadContent 24 | 25 | 26 | PayloadType 27 | .GlobalPreferences 28 | PayloadDisplayName 29 | Fast User Switching (v1) 30 | PayloadIdentifier 31 | com.example.profile.GlobalPreferences 32 | PayloadUUID 33 | 49086BD4-7314-415A-A784-2A94C77B8112 34 | PayloadVersion 35 | 1 36 | MultipleSessionEnabled 37 | 38 | userMenuExtraStyle 39 | 0 40 | 41 | 42 | PayloadType 43 | com.apple.controlcenter 44 | PayloadDisplayName 45 | Menu Bar (v1) 46 | PayloadIdentifier 47 | com.example.profile.ControlCenter 48 | PayloadUUID 49 | 67A8D3DE-5FD7-40AC-9F56-A7333DB12358 50 | PayloadVersion 51 | 1 52 | UserSwitcher 53 | 2 54 | 55 | 56 | 57 | 58 | -------------------------------------------------------------------------------- /Privacy-FullDiskAccess-Munki.mobileconfig: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | PayloadDisplayName 6 | Privacy - Full Disk Access - Munki 7 | PayloadIdentifier 8 | com.example.Privacy.AllFiles.Munki 9 | PayloadUUID 10 | 0744F4F8-5D7E-4A28-9D2D-19074AC9DBE3 11 | PayloadDescription 12 | Allows Munki to access to all protected files, including system administration files. 13 | PayloadOrganization 14 | Example, Inc. 15 | PayloadRemovalDisallowed 16 | 17 | PayloadScope 18 | System 19 | PayloadType 20 | Configuration 21 | PayloadVersion 22 | 1 23 | PayloadContent 24 | 25 | 26 | PayloadType 27 | com.apple.TCC.configuration-profile-policy 28 | PayloadDisplayName 29 | Privacy - Full Disk Access - Munki (v1) 30 | PayloadIdentifier 31 | com.example.Privacy.AllFiles.Munki 32 | PayloadUUID 33 | 17FCB39B-6965-42D8-BFF7-0CF057A10360 34 | PayloadVersion 35 | 1 36 | Services 37 | 38 | SystemPolicyAllFiles 39 | 40 | 41 | Allowed 42 | 43 | CodeRequirement 44 | identifier munkishim and anchor apple generic and certificate 1[field.1.2.840.113635.100.6.2.6] /* exists */ and certificate leaf[field.1.2.840.113635.100.6.1.13] /* exists */ and certificate leaf[subject.OU] = T4SK8ZXCXG 45 | Identifier 46 | /usr/local/munki/managedsoftwareupdate 47 | IdentifierType 48 | path 49 | 50 | 51 | 52 | 53 | 54 | 55 | 56 | -------------------------------------------------------------------------------- /Munki.mobileconfig: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | PayloadDisplayName 6 | Managed Software Center 7 | PayloadIdentifier 8 | com.example.profile.Munki 9 | PayloadUUID 10 | 272700F4-25A3-4CF6-8C31-6C38EBB05CA7 11 | PayloadDescription 12 | Managed Software Center settings. 13 | PayloadOrganization 14 | Example, Inc. 15 | PayloadRemovalDisallowed 16 | 17 | PayloadScope 18 | System 19 | PayloadType 20 | Configuration 21 | PayloadVersion 22 | 1 23 | PayloadContent 24 | 25 | 26 | PayloadType 27 | ManagedInstalls 28 | PayloadDisplayName 29 | Managed Software Center (v3) 30 | PayloadIdentifier 31 | com.example.profile.Munki 32 | PayloadUUID 33 | 29B3B683-49EB-4999-9AAA-B9BD2F265953 34 | PayloadVersion 35 | 3 36 | AdditionalHttpHeaders 37 | 38 | Authorization: Basic VVNFUk5BTUU6UEFTU1dPUkQ= 39 | 40 | AppleSoftwareUpdatesOnly 41 | 42 | AggressiveUpdateNotificationDays 43 | 7 44 | HelpURL 45 | https://knowledgebase.example.com/how-to-use-managed-software-center/ 46 | InstallAppleSoftwareUpdates 47 | 48 | SoftwareRepoURL 49 | https://munki.example.com/repo 50 | SuppressAutoInstall 51 | 52 | SuppressLoginwindowInstall 53 | 54 | SuppressUserNotification 55 | 56 | UnattendedAppleUpdates 57 | 58 | 59 | 60 | 61 | 62 | -------------------------------------------------------------------------------- /ManagedLoginItems.mobileconfig: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | PayloadDisplayName 6 | Managed Login Items 7 | PayloadIdentifier 8 | com.example.profile.ServiceManagement 9 | PayloadUUID 10 | FFE6F97C-7D20-49BF-B39F-D1200BF78075 11 | PayloadDescription 12 | Managed Login Items 13 | PayloadOrganization 14 | Example, Inc. 15 | PayloadRemovalDisallowed 16 | 17 | PayloadScope 18 | System 19 | PayloadType 20 | Configuration 21 | PayloadVersion 22 | 1 23 | PayloadContent 24 | 25 | 26 | PayloadType 27 | com.apple.servicemanagement 28 | PayloadDisplayName 29 | Managed Login Items (v 2) 30 | PayloadIdentifier 31 | com.example.profile.ServiceManagement 32 | PayloadUUID 33 | 301E237D-1144-4910-B2DA-2A0E9FA8FA82 34 | PayloadVersion 35 | 2 36 | Rules 37 | 38 | 39 | RuleType 40 | TeamIdentifier 41 | RuleValue 42 | T4SK8ZXCXG 43 | Comment 44 | Mac Admins Open Source 45 | 46 | 47 | RuleType 48 | TeamIdentifier 49 | RuleValue 50 | EQHXZ8M8AV 51 | Comment 52 | Google LLC 53 | 54 | 55 | RuleType 56 | TeamIdentifier 57 | RuleValue 58 | UBF8T346G9 59 | Comment 60 | Microsoft Corporation 61 | 62 | 63 | RuleType 64 | TeamIdentifier 65 | RuleValue 66 | BJ4HAAB9B3 67 | Comment 68 | Zoom Video Communications, Inc. 69 | 70 | 71 | RuleType 72 | Label 73 | RuleValue 74 | com.grahamgilbert.crypt 75 | Comment 76 | Crypt2 77 | 78 | 79 | RuleType 80 | LabelPrefix 81 | RuleValue 82 | com.googlecode.munki. 83 | Comment 84 | Managed Software Center 85 | 86 | 87 | 88 | 89 | 90 | 91 | -------------------------------------------------------------------------------- /Nudge.mobileconfig: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | PayloadDisplayName 6 | Nudge 7 | PayloadIdentifier 8 | com.example.profile.Nudge 9 | PayloadUUID 10 | 800B7E83-13CE-4F0E-9A32-0E1DD712029D 11 | PayloadDescription 12 | Nudge configuration. 13 | PayloadOrganization 14 | Example, Inc. 15 | PayloadRemovalDisallowed 16 | 17 | PayloadScope 18 | System 19 | PayloadType 20 | Configuration 21 | PayloadVersion 22 | 1 23 | PayloadContent 24 | 25 | 26 | PayloadType 27 | com.github.macadmins.Nudge 28 | PayloadDisplayName 29 | Nudge (v5) 30 | PayloadIdentifier 31 | com.example.profile.Nudge 32 | PayloadUUID 33 | E8DAEAB6-E898-4120-ACA0-AC237D144FA8 34 | PayloadVersion 35 | 5 36 | optionalFeatures 37 | 38 | acceptableApplicationBundleIDs 39 | 40 | us.zoom.xos 41 | 42 | attemptToFetchMajorUpgrade 43 | 44 | disableSoftwareUpdateWorkflow 45 | 46 | enforceMinorUpdates 47 | 48 | 49 | osVersionRequirements 50 | 51 | 52 | aboutUpdateURL 53 | https://support.apple.com/en-us/HT213843 54 | majorUpgradeAppPath 55 | /System/Library/CoreServices/Software Update.app 56 | requiredInstallationDate 57 | 2023-08-24T12:00:44 58 | requiredMinimumOSVersion 59 | 13.5 60 | targetedOSVersionsRule 61 | default 62 | 63 | 64 | userExperience 65 | 66 | allowGracePeriods 67 | 68 | noTimers 69 | 70 | randomDelay 71 | 72 | 73 | userInterface 74 | 75 | actionButtonPath 76 | /System/Library/CoreServices/Software Update.app 77 | iconDarkPath 78 | /Library/CompanyName/logoDark.png 79 | iconLightPath 80 | /Library/CompanyName/logoLight.png 81 | screenShotDarkPath 82 | /Library/CompanyName/Nudge/screenShotDark.png 83 | screenShotLightPath 84 | /Library/CompanyName/Nudge/screenShotLight.png 85 | updateElements 86 | 87 | 88 | _language 89 | en 90 | actionButtonText 91 | Update Computer 92 | customDeferralButtonText 93 | Other 94 | mainContentHeader 95 | Your computer will restart during this update 96 | mainContentSubHeader 97 | Updates can take between 30 minutes to 1 hour to complete 98 | mainContentText 99 | Apple has released a security update for your computer and a fully up-to-date device is required to ensure that IT can accurately protect company data. 100 | 101 | If you do not update your computer, you may lose access to some services necessary for your day-to-day tasks. 102 | 103 | To begin the update, simply click on the Update Computer button above to launch Software Update and install all available updates. 104 | 105 | To be reminded later, select a deferal option below. 106 | mainHeader 107 | Your computer requires a security update 108 | subHeader 109 | A friendly reminder from the Example, Inc. IT team 110 | 111 | 112 | 113 | 114 | 115 | 116 | 117 | -------------------------------------------------------------------------------- /MicrosoftAutoUpdate.mobileconfig: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | PayloadDisplayName 6 | Microsoft AutoUpdate 7 | PayloadIdentifier 8 | com.example.profile.Microsoft.AutoUpdate 9 | PayloadUUID 10 | 24300898-51AC-4926-9018-EAC3093191E5 11 | PayloadDescription 12 | Microsoft AutoUpdate2 managed settings. 13 | PayloadOrganization 14 | Example, Inc. 15 | PayloadRemovalDisallowed 16 | 17 | PayloadScope 18 | System 19 | PayloadType 20 | Configuration 21 | PayloadVersion 22 | 1 23 | PayloadContent 24 | 25 | 26 | PayloadType 27 | com.microsoft.autoupdate2 28 | PayloadDisplayName 29 | Microsoft AutoUpdate (v 2) 30 | PayloadIdentifier 31 | com.example.profile.Microsoft.AutoUpdate 32 | PayloadUUID 33 | 40C2BD22-ED48-45B5-8670-42EE3A08E179 34 | PayloadVersion 35 | 2 36 | StartDaemonOnAppLaunch 37 | 38 | HowToCheck 39 | AutomaticDownload 40 | UpdateCheckFrequency 41 | 360 42 | ChannelName 43 | Custom 44 | ManifestServer 45 | https://officecdnmac.microsoft.com/pr/Defer.3/ 46 | UpdateCache 47 | https://mau.example.net/cache/ 48 | AcknowledgedDataCollectionPolicy 49 | RequiredDataOnly 50 | UpdateDeadline.DaysBeforeForcedQuit 51 | 5 52 | UpdateDeadline.StartAutomaticUpdates 53 | 3 54 | Applications 55 | 56 | /Applications/Company Portal.app 57 | 58 | Application ID 59 | IMCP01 60 | LCID 61 | 1033 62 | 63 | /Applications/Microsoft Excel.app 64 | 65 | Application ID 66 | XCEL2019 67 | LCID 68 | 1033 69 | 70 | /Applications/Microsoft OneNote.app 71 | 72 | Application ID 73 | ONMC2019 74 | LCID 75 | 1033 76 | 77 | /Applications/Microsoft Outlook.app 78 | 79 | Application ID 80 | OPIM2019 81 | LCID 82 | 1033 83 | 84 | /Applications/Microsoft PowerPoint.app 85 | 86 | Application ID 87 | PPT32019 88 | LCID 89 | 1033 90 | 91 | /Applications/Microsoft Remote Desktop.app 92 | 93 | Application ID 94 | MSRD10 95 | LCID 96 | 1033 97 | 98 | /Applications/Microsoft Teams.app 99 | 100 | Application ID 101 | TEAMS10 102 | LCID 103 | 1033 104 | 105 | /Applications/Microsoft Word.app 106 | 107 | Application ID 108 | MSWD2019 109 | LCID 110 | 1033 111 | 112 | /Applications/OneDrive.app 113 | 114 | Application ID 115 | ONDR18 116 | LCID 117 | 1033 118 | 119 | /Applications/Skype for Business.app 120 | 121 | Application ID 122 | MSFB16 123 | LCID 124 | 1033 125 | 126 | /Library/Application Support/Microsoft/MAU2.0/Microsoft AutoUpdate.app 127 | 128 | Application ID 129 | MSau04 130 | LCID 131 | 1033 132 | 133 | 134 | 135 | 136 | 137 | 138 | -------------------------------------------------------------------------------- /HelloIT.mobileconfig: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | PayloadDisplayName 6 | Hello-IT 7 | PayloadIdentifier 8 | com.example.profile.hello-it 9 | PayloadUUID 10 | C50658D9-C059-4E62-B1C3-AB9375F7AAC7 11 | PayloadDescription 12 | Configures settings for the Hello-IT menubar application. 13 | PayloadOrganization 14 | Example, Inc. 15 | PayloadRemovalDisallowed 16 | 17 | PayloadScope 18 | System 19 | PayloadType 20 | Configuration 21 | PayloadVersion 22 | 1 23 | PayloadContent 24 | 25 | 26 | PayloadType 27 | com.github.ygini.hello-it 28 | PayloadDisplayName 29 | Hello-IT (v 2) 30 | PayloadIdentifier 31 | com.example.profile.hello-it 32 | PayloadUUID 33 | EA64567F-0251-478B-A9E9-BF7E14211C75 34 | PayloadVersion 35 | 2 36 | settings 37 | 38 | content 39 | 40 | 41 | functionIdentifier 42 | public.script.item 43 | settings 44 | 45 | script 46 | com.example.hello-it.hostname.sh 47 | args 48 | 49 | format 50 | %C 51 | 52 | title 53 | Determining Computer Name... 54 | 55 | 56 | 57 | functionIdentifier 58 | public.script.item 59 | settings 60 | 61 | repeat 62 | 600 63 | script 64 | com.example.hello-it.munki.pendingmscupdates.sh 65 | title 66 | Calculating Updates... 67 | 68 | 69 | 70 | functionIdentifier 71 | public.script.item 72 | settings 73 | 74 | repeat 75 | 900 76 | script 77 | com.github.wardsparadox.hello-it.computerdetails.uptime.sh 78 | title 79 | Calculating Uptime... 80 | 81 | 82 | 83 | functionIdentifier 84 | public.submenu 85 | settings 86 | 87 | title 88 | Network Information 89 | content 90 | 91 | 92 | functionIdentifier 93 | public.test.http 94 | settings 95 | 96 | URL 97 | https://raw.githubusercontent.com/ygini/Hello-IT/master/staticfiles/internet_test.txt 98 | imageBaseName 99 | network 100 | mode 101 | md5 102 | originalString 103 | ccf41dc8262810b99142b5627d27c25e 104 | repeat 105 | 120 106 | title 107 | Internet Connection 108 | 109 | 110 | 111 | functionIdentifier 112 | public.script.item 113 | settings 114 | 115 | network 116 | 117 | script 118 | com.example.hello-it.public-ip.sh 119 | title 120 | Determining Public IP... 121 | 122 | 123 | 124 | functionIdentifier 125 | public.script.item 126 | settings 127 | 128 | network 129 | 130 | script 131 | com.example.hello-it.ip.sh 132 | title 133 | Determining Internal IP... 134 | 135 | 136 | 137 | 138 | 139 | 140 | functionIdentifier 141 | public.separator 142 | 143 | 144 | functionIdentifier 145 | public.open.application 146 | settings 147 | 148 | imageBaseName 149 | ManagedSoftwareCenter 150 | app 151 | Managed Software Center 152 | title 153 | Install Software 154 | 155 | 156 | 157 | functionIdentifier 158 | public.open.application 159 | settings 160 | 161 | imageBaseName 162 | CiscoAnyConnect 163 | app 164 | Cisco AnyConnect Secure Mobility Client 165 | title 166 | Connect to VPN 167 | 168 | 169 | 170 | functionIdentifier 171 | public.separator 172 | 173 | 174 | functionIdentifier 175 | public.submenu 176 | settings 177 | 178 | title 179 | Google Workspace 180 | content 181 | 182 | 183 | functionIdentifier 184 | public.open.resource 185 | settings 186 | 187 | imageBaseName 188 | GoogleGmail 189 | URL 190 | https://mail.google.com 191 | title 192 | Email 193 | 194 | 195 | 196 | functionIdentifier 197 | public.open.resource 198 | settings 199 | 200 | imageBaseName 201 | GoogleMeet 202 | URL 203 | https://meet.google.com 204 | title 205 | Meet 206 | 207 | 208 | 209 | functionIdentifier 210 | public.open.resource 211 | settings 212 | 213 | imageBaseName 214 | GoogleDrive 215 | URL 216 | https://drive.google.com 217 | title 218 | Drive 219 | 220 | 221 | 222 | functionIdentifier 223 | public.open.resource 224 | settings 225 | 226 | imageBaseName 227 | GoogleCalendar 228 | URL 229 | https://calendar.google.com 230 | title 231 | Calendar 232 | 233 | 234 | 235 | functionIdentifier 236 | public.open.resource 237 | settings 238 | 239 | imageBaseName 240 | GoogleContacts 241 | URL 242 | https://contacts.google.com 243 | title 244 | Contacts 245 | 246 | 247 | 248 | functionIdentifier 249 | public.open.resource 250 | settings 251 | 252 | imageBaseName 253 | GoogleDocs 254 | URL 255 | https://docs.google.com 256 | title 257 | Docs 258 | 259 | 260 | 261 | functionIdentifier 262 | public.open.resource 263 | settings 264 | 265 | imageBaseName 266 | GoogleSheets 267 | URL 268 | https://sheets.google.com 269 | title 270 | Sheets 271 | 272 | 273 | 274 | 275 | 276 | 277 | functionIdentifier 278 | public.submenu 279 | settings 280 | 281 | title 282 | Online Services 283 | content 284 | 285 | 286 | functionIdentifier 287 | public.open.resource 288 | settings 289 | 290 | imageBaseName 291 | Service1 292 | URL 293 | https://1.example.com 294 | title 295 | SaaS Service 1 296 | 297 | 298 | 299 | functionIdentifier 300 | public.open.resource 301 | settings 302 | 303 | imageBaseName 304 | Service2 305 | URL 306 | https://2.example.net 307 | title 308 | SaaS Service 2 309 | 310 | 311 | 312 | functionIdentifier 313 | public.open.resource 314 | settings 315 | 316 | imageBaseName 317 | Server3 318 | URL 319 | https://3.example.org 320 | title 321 | SaaS Service 3 322 | 323 | 324 | 325 | functionIdentifier 326 | public.open.resource 327 | settings 328 | 329 | imageBaseName 330 | Kanboard 331 | URL 332 | https://kanboard.example.com 333 | title 334 | Project Management 335 | 336 | 337 | 338 | 339 | 340 | 341 | functionIdentifier 342 | public.submenu 343 | settings 344 | 345 | title 346 | Service Status 347 | content 348 | 349 | 350 | functionIdentifier 351 | public.open.resource 352 | settings 353 | 354 | imageBaseName 355 | Apple 356 | URL 357 | https://www.apple.com/support/systemstatus/ 358 | title 359 | Apple Status 360 | 361 | 362 | 363 | functionIdentifier 364 | public.open.resource 365 | settings 366 | 367 | imageBaseName 368 | Google 369 | URL 370 | https://www.google.com/appsstatus 371 | title 372 | Google Workspace Status 373 | 374 | 375 | 376 | functionIdentifier 377 | public.open.resource 378 | settings 379 | 380 | imageBaseName 381 | Adobe 382 | URL 383 | https://status.adobe.com 384 | title 385 | Adobe Status 386 | 387 | 388 | 389 | functionIdentifier 390 | public.open.resource 391 | settings 392 | 393 | imageBaseName 394 | Slack 395 | URL 396 | https://status.slack.com 397 | title 398 | Slack Status 399 | 400 | 401 | 402 | functionIdentifier 403 | public.open.resource 404 | settings 405 | 406 | imageBaseName 407 | AuthorizeNet 408 | URL 409 | https://status.authorize.net 410 | title 411 | Authorize.net Status 412 | 413 | 414 | 415 | 416 | 417 | 418 | functionIdentifier 419 | public.submenu 420 | settings 421 | 422 | title 423 | Quick Links 424 | content 425 | 426 | 427 | functionIdentifier 428 | public.open.resource 429 | settings 430 | 431 | imageBaseName 432 | Newsletter 433 | URL 434 | https://newsletter.example.com 435 | title 436 | Staff Newsletter 437 | 438 | 439 | 440 | functionIdentifier 441 | public.open.resource 442 | settings 443 | 444 | imageBaseName 445 | Company 446 | URL 447 | https://www.example.com 448 | title 449 | Company Homepage 450 | 451 | 452 | 453 | functionIdentifier 454 | public.open.resource 455 | settings 456 | 457 | imageBaseName 458 | Benefits 459 | URL 460 | https://benefits.example.com 461 | title 462 | Benefit Website 463 | 464 | 465 | 466 | 467 | 468 | 469 | functionIdentifier 470 | public.separator 471 | 472 | 473 | functionIdentifier 474 | public.quit 475 | 476 | 477 | 478 | 479 | 480 | 481 | 482 | --------------------------------------------------------------------------------