Help CenterThe release of Admin By Request for macOS 5.0 brings a suite of significant updates that streamline client installation, improve app management, and introduce new security measures. These enhancements aim to provide better control for IT administrators while simplifying the user experience.
Key Features of macOS 5.0
Easier Client Installation
The process of installing the Admin By Request endpoint client has been made more straightforward. The installation now involves a step-by-step procedure that guides users through downloading and setting up the client. It includes automated checks, prompts for necessary permissions, and even integration with Mobile Device Management (MDM) solutions like Jamf, ensuring that Full Disk Access is granted where required.
Conventional App Installation
Prior to macOS 5.0, installing applications on a Mac involved different procedures based on the file type. Now, the installation process has been simplified to allow apps to be installed by simply dragging them to the Applications folder. Additionally, the new "Run As Admin" feature enables users to elevate privileges for a single application, making the installation process safer and more controlled by eliminating the need for full Admin Sessions.
Intuitive App Updates
Updating apps has also been improved. With macOS 5.0, pre-approved applications can now update themselves as soon as new versions are released by the manufacturer, eliminating the need for Admin Sessions. IT departments retain control over the update process by setting portal preferences that may require users to seek approval before updates are applied, ensuring that only tested and approved versions are installed.
Authentication via Multi-Factor Authentication (MFA)
A major security enhancement in macOS 5.0 is the introduction of Multi-Factor Authentication (MFA) for users requiring elevated privileges. This feature, initially available for users logged in through Azure Single Sign-On (SSO), ensures that identity validation is secure, using methods such as face recognition, smartcards, or credentials. MFA can also be enforced on pre-approved applications, adding an additional layer of security.
Support Assist Capability
The new Support Assist feature allows non-admin users to receive remote assistance for tasks they cannot perform themselves. While the feature doesn’t initiate remote control directly, it facilitates the use of third-party tools for technical support, adhering to the principle of least privilege to minimize security risks.
Control Local Admin Rights from the Portal
IT administrators now have the ability to manage local administrator rights directly from the Admin By Request portal. This feature makes it easy to revoke admin privileges from users who should not have them, streamlining the process of maintaining security across all endpoints.
Better Admin Auditing
Admin By Request for macOS 5.0 now offers enhanced auditing capabilities. Every auditable event, including sudo commands and application updates, is logged in the Auditlog or Events log. This comprehensive logging allows administrators to monitor all actions on the system and manage application approvals directly from the Auditlog.
Update Process Management
Admin By Request employs an Auto-Update process to deploy software updates. However, new versions are not rolled out immediately to all customers. Instead, updates are activated within 4 to 8 weeks of release, allowing time for feedback and issue resolution. Customers can opt to receive updates sooner by contacting support or downloading the latest version from the archive.
Conclusion
Admin By Request for macOS 5.0 introduces crucial improvements that enhance both security and user experience. From easier installation and application management to advanced security features like MFA and comprehensive auditing, macOS 5.0 ensures that IT departments can manage endpoints more efficiently while maintaining stringent security standards.