franton/CIS-Apple-Security-Casper

Stars
135
Rank 269,297 (Top 6 %)
Language
Shell
Created over 8 years ago
Updated over 6 years ago

franton/CIS-Apple-Security-Casper

franton

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Basic examples of scripts and EA's to implement the CIS Apple Security guidelines

CIS-Apple-Security-Casper

Basic examples of scripts and EA's to implement the CIS Apple Security guidelines for macOS 10.12 only! (some changes between 10.12 and earlier versions).

Think of this as a reference implementation. There are plenty things in CIS that can be done more readily with configuration profiles, some things that are ... contradictory and others that may not even be relevant to your needs. I'm not convinced 100% compliance is the way to go and allow people to be able to work.

Not everything in CIS is implemented here. This is partly due to some standards being implemented by profiles and others being out of date and effectively deprecated.

JSS-In-A-Box

The Casper Suite setup script

Mac-Patcher-and-Upgrader

A way of doing application and macOS updates while prompting the end user. Think patchoo but a lot more modern.

Extension-Attributes

These are the various extension attributes I use in Casper

Crowdstrike-API-Scripts

A collection of handy scripts to run via an MDM for Crowdstrike.

SwiftDeploy

Zero touch deployment method for Jamf Pro and SwiftDialog

JSS-Config-In-A-Box

JSS config migration script via API

MacMini-Server-AutoBuildScript

Script for an automated build of an OS X Casper Distribution Point

Remove-AV

Various scripts to force remove various AV products on macOS

BeyondTrust-Remote-API-Scripts

Xcode-Scripts

Handy scripts for Xcode

Set-DNS-info

Recursively sets the DNS settings for a specified network interface

JNUC-2022

Repo from my JNUC 2022 talk on "Almost" Zero Touch deployment

Set-Desktop-Background

Script to set OS X desktop background

Create-ICNS

Processes a sample .png file into an .icns file suitable for many projects.

WiFi-Scripts

A collection of various Wifi based scripts

Set-Authorised-SSH-Users

Sets authorised SSH user / user groups

Add-Users-as-Admin-JSS

Takes the output from a Casper extension attribute and adds them (if present) to the local admin user group.

Hello-IT-Scripts

Scripts to use with ygini's Hello IT

2017-SC-Talk

Migrate-Local-User-to-AD

JNUC-2024

VMWare_Fusion

Mount-Network-Share

Mounts a network share based on specified parameters

Policy-Scripts

Bootcamp-Selector

Script to be run as part of your Casper bootstrapping workflows to install a specific bootcamp image to a computer.

Fix-Home-Folder-Permissions

Self Service script to fix home folder permissions.

McAfee-Agent

This script can be used to either freshly install or upgrade the ePo agent on OS X clients.

Maya-Postflight-Installer

Script to manually install Maya and other Autodesk tools as part of a postflight pkg

Reset-Local-Admin-Password

Script to update a local admin account's password

Create-FV2-Only-User

Proof of concept script to create a user account based on a smart card login for FileVault 2 login purposes.

Add-User-Info-to-Inventory

Programs the computer inventory record in Casper with the current user's AD details.

Temporary-Remote-VNC-Access

Script to enable/disable VNC access and another to view only access that computer

Clear-Non-Local-Admin-Accounts

Runs on logout. Clears all non specifed accounts off a computer per our Open Access Policy

JSS-API-Wipe

Wipes a JSS server via it's API

Detect-USB-Stick

Run on logout. Detects if a USB device has been left attached to the computer and throws a warning.

Add-JSS-User-to-Group

Zen-and-the-Art

Zen and the Art of "borrowing" work - MacAdUk 2016

Oxford-University-Challenge

The interview challenge from Oxford University

Remove-Users-From-Admin-JSS

Go-Green

This script (run at a certain time) powers down a computer for environmental reasons

Centrify-AD-Bind

Mac-Name-Changer

Script to change the computer name on a mac. Meant to be run as a Casper Self Service policy.

Energy-Saver-Policy

Sets a computer Energy Saving Policy depending on specified parameter

Set-Ignore-Drive-Ownership

Self Service script to quickly set all attached drives to ignore ownership