The GDPR and information security concerns is causing organizations to become more aware of the different privacy settings in macOS and common applications. usr/bin/sudo -u "loggedInUser " /usr/local/orgutils/swda setHandler –UTI –app /Applications/Preview.app usr/bin/sudo -u "loggedInUser " /usr/local/orgutils/swda setHandler –UTI –app /System/Applications/Preview.app # Check OS version and change PDF reader to Preview.app (in a new location on Catalina) "Įcho "Preview.app is the default PDF reader " If ] thenĮcho "Preview.app is not the default PDF reader. # Check if Preview.app is the default PDF reader, exit gracefully if it is OsVersion= $(/usr/bin/sw_vers -productVersion | awk -F. # Check if Preview.app is the default PDF reader and change it back if it isn't You can deploy it to a custom location in a package created with an app like Packages, and use a Jamf Extension Attribute in combination with a daily policy to make sure it stays default.įrom my testing so far, Adobe Reader and Acrobat will not prompt the user with a pop-up to change it back, though they will passively advertise switching in a box in their application (please let me know in the comments below if you know of a way to disable this).Įxport PATH=/usr/bin:/bin:/usr/sbin:/sbin On Mojave and Catalina, you can use SwiftDefaultApps to change the default PDF reader. Making sure Preview.app is the default PDF reader for users that do not really need anything more advanced for everyday use, is a good security precaution – even for users that need the full version of Acrobat for specific purposes. It is also much lighter than Acrobat Reader, and a great application. Luckily, Apple’s Preview.app, which is the default PDF reader on macOS, does not support most of Acrobat’s features that can enable this type of malware. Malware can sometimes come in the form of a PDF that contains embedded scripting language. Create a Smart Computer Group called Has Apple Software Updates Available with the Criteria Software Updates Available is True.Using the following script RecommendedUpdates.sh. Data Type: String, Inventory Display: General, Input Type: Script. In Computer Management – Management Framework – Extension Attributes, create a new Extension Attribute called Software Updates Available.Using Graham Pugh’s method of checking for available updates, I created an Extension Attribute and a Smart Group, so I can still notify users of updates, without causing softwareupdated to hang. Unfortunately, I have had to disable collection of available software updates under Computer Management – Management Framework – Inventory Collection – Collect available software updates, since it does not currently work properly. To be able to send notifications that encourage users to run Software Update, I used to rely on a smart group that was dependent upon Jamf’s inventory update.
0 Comments
Leave a Reply. |