Securing and Wiping MacBooks

[Zoatibix]

Hello,

 

We have ten macbook airs that students can remove from a locker by swiping their ID Badges. They can then use the MBA to do coursework, etc then return it to the locker.

 

I've been trying to set our systems up to let me remotely lock and/or wipe the MBAs. However, while this works fine within the campus it doesn't work off site (I took one home to test.)

 

Looking on our Mac Server there are no services available over the internet. Am I right in suspecting this might be related?

 

I've got a third-party certificate set up. along with an external IP address and an entry on our Firewall which should pass connections through to the Mac Server.

 

(We're in a similar position with DEP, btw.)

 

Another thing I'd like to do is set a firmware password. I've tried doing this as part of the workflow in Deploy Studio but was getting the 'Folder of Denial' when the MBAs first rebooted. I removed the firmware password, let the machine finish the Deploy Studio install and get it a good luck reboot. Some of the macs are still giving the folder error.

 

If anybody can suggest a fix for one or both of these problems I'd be very grateful.

 

Thank you.

 

Zoatibix

[DalekSec]

Are you open to a 3rd party MDM? I'm trailing Mosyle and that seems to do everything you've asked for!

[Zoatibix]

I think so, we're currently trialling Parallels. That does a 'better job' of managing MACs through SCCM but much of what it does I can already do via Deploy Studio / Profile Manager.

 

The main thrust of that is to enable the remote deployment of software to MAC suites rather than rely on Deploy Studio workflows and/or Apple Remote Desktop (I'm told the latter can be a bit flaky pushing out software. Not sure if that has been addressed.)

 

I'm hesitant to suggest to my boss that we purchase somethign else if it's just a misconfiguration on our end, of course.

 

 

Thanks for the reply.

[ovek]

Check out Jamf PRO Cloud as well.

[free780]

Back to OP. Can you get to https://macserver.org.com from the outside?