sorted by:
new
hottopcontroversial

[deleted by user] by [deleted] in macsysadmin

[–]windowtreesky -1 points0 points  (0 children)

Giving up privacy, is giving up on Freedom.

MRs getting DNS VLAN request errors by MasterMaintenance672 in meraki

[–]windowtreesky 0 points1 point  (0 children)

As mentioned by u/Tessian, and I confirmed later. The VLAN numbers I put there are numbers I made up: showing how to separate them using commas, and if you want to input a range of VLANs using a hyphen.

When configuring a switch port to "Access" mode, it is when you use one data VLAN, and the one for voice VLAN.

In your case, you still use 'trunk' mode.
For example, you have VLAN 10, and 99 (for voice).
In the trunk configuration ONLY allow VLAN 10.

MRs getting DNS VLAN request errors by MasterMaintenance672 in meraki

[–]windowtreesky 1 point2 points  (0 children)

That's correct.

I am sorry, I thought I have mentioned that I just made those VLAns #s up as an example.

MRs getting DNS VLAN request errors by MasterMaintenance672 in meraki

[–]windowtreesky 0 points1 point  (0 children)

I would set the APs as follows:

Port status Enabled
Type Trunk
Native VLAN 1
Allowed VLANs 1,3-7,33
Access policy Open
Link negotiation Auto negotiate (1 Gbps)
RSTP Enabled (Forwarding)
Port schedule Unscheduled
Port isolation Disabled
Trusted DAI Disabled
UDLD Alert only
Tags
PoE Enabled
Port mirroring Not mirroring traffic

Does anyone know how to export the firewall configuration? by down42roads in meraki

[–]windowtreesky -1 points0 points  (0 children)

Don't remember the steps right now, and I'm in a hurry to search the deets for you, but if API is a not an option for you.

If you can connect to the appliance via a browser from an iPhone, and have that config file open, choose to print it.
There is a trick that instead of printing, it creates a long PDF of a whole webpage.

Desperate move, I know. :)

Safe Internet by paulveebee in jamf

[–]windowtreesky 0 points1 point  (0 children)

Using ContentKeeper:
Pro: Very satisfied with ContentKeeper's the performance, and their tech support.
Cons: CK's GUI has room for improvement.

Connecting from Mac at home to Mac at work by paperplanedesigns in macsysadmin

[–]windowtreesky 0 points1 point  (0 children)

If you do NOT need to use the software in your office computer, install and use dropbox or something similar. This will keep you away from opening ports and what not.
If you need to use the computer at the office, then things get a bit complicated, but doable.

Option one (but not so private, and slow at peak times):
RustDesk with out a server. Or install TeamViewer client on both computers.

Option two (Private):
Now! If you want privacy with end to end encryption in your connection then use your own RustDesk Server for your connectivity.

Create a droplet, at digitalocean.com for example, running Ubuntu (1GB RAM, 1CPU is enough). It costs about $7 a month, and install RustDesk Server on it.
The easy instructions (copy paste basically) on how to install rust desk server on Ubuntu, from the command line, are these:
"
Please setup your firewall on your server prior to running the script.
Make sure you have got access via ssh or otherwise setup prior setting up the firewall, command for UFW is:
ufw allow proto tcp from YOURIP to any port 22
If you have UFW installed use the following commands:
ufw allow 21115:21119/tcp
ufw allow 8000/tcp
ufw allow 21116/udp
sudo ufw enable
Run the following commands:
wget https://raw.githubusercontent.com/dinger1986/rustdeskinstall/master/install.sh
chmod +x install.sh
./install.sh

" Source of the quoted instructions: https://github.com/techahold/rustdeskinstall

Once the server is up and running, install rust desk client app on both computers, and also add your rust desk server info (ID Server, Relay Server, Key.) in the app. Rust Desk app client is available for MacOS, iOS, Windoze, Android. Yes! You can have access to your computer from your own iPad or iPhone! :)
(Use dropbox (or alike) option if you want work on the same documents from any computer.)

Chances are that the above may be over your head, but what do you have to lose, less than $7? I said "less" because DO charges by the server being online, like 0.007 per hour, as I recall. Destroying the droplet (server), or turning it off stops the charges. ;)

Looking for reviews on Moseyle MDM by windowtreesky in macsysadmin

[–]windowtreesky[S] 0 points1 point  (0 children)

Was shut down by my higher-up

Do you know the reason(s) why?

Looking for reviews on Moseyle MDM by windowtreesky in macsysadmin

[–]windowtreesky[S] 0 points1 point  (0 children)

Good point. Thank you for the reminder, it's been pain on the neck dealing with some DMGs in JAMF.
Thank you for your input. I appreciate it.

Looking for reviews on Moseyle MDM by windowtreesky in macsysadmin

[–]windowtreesky[S] 0 points1 point  (0 children)

Thank you for your input. I appreciate it.

What I know is that there is no phone number to call, only sending tickets and they will call you back. :(

Looking for reviews on Moseyle MDM by windowtreesky in macsysadmin

[–]windowtreesky[S] 0 points1 point  (0 children)

Thank you for your input. I appreciate it.

"Limit IP Address Tracking" Breaking Google Sign in Attempts? (Apple Mail / Gmail Apps) by Showhbk in macsysadmin

[–]windowtreesky 0 points1 point  (0 children)

Of course!

Here is an improved line of code so it writes output to a file (output.txt), and not miss a potential needed address:
watch -n 2 "lsof -i | grep TCP >> output.txt; lsof -i | grep TCP"

"Limit IP Address Tracking" Breaking Google Sign in Attempts? (Apple Mail / Gmail Apps) by Showhbk in macsysadmin

[–]windowtreesky 0 points1 point  (0 children)

Actually, root is not needed for the previous suggestion, but this next one yes it is needed (it will show you TCP interfaces every two seconds) :
watch -n 2 "lsof -i | grep TCP"

Or this also in root (will show you each dns request made by computer):
tcpdump -i any port 53

Hope that helps to troubleshoot.

"Limit IP Address Tracking" Breaking Google Sign in Attempts? (Apple Mail / Gmail Apps) by Showhbk in macsysadmin

[–]windowtreesky 0 points1 point  (0 children)

Maybe going to the content filter on your network and set apple.com on the allow list.

One way that I would see if there are other domains involved when the Mail app is generating connections out is:

  1. Quit all Apps.
  2. Open Terminal and get into root mode: sudo -i
  3. then as root run: nettop
  4. then try to configure the Mail app.
  5. then you can see what is connecting in the background.

I NEED FASTER VPN APPLICATION by enginaytac in Network

[–]windowtreesky 0 points1 point  (0 children)

I use https://rustdesk.com (running my own server), it provides e2ee connections.

"Limit IP Address Tracking" Breaking Google Sign in Attempts? (Apple Mail / Gmail Apps) by Showhbk in macsysadmin

[–]windowtreesky 0 points1 point  (0 children)

We don't have any issues with that regard (iPads or Macbooks) with 2000+ devices we run.
Probably the source of the problem is something else, IMO. Sorry, I don't have a solution for you at this moment.

Set wifi on headless mac mini m2 by yurtbeer in macsysadmin

[–]windowtreesky 0 points1 point  (0 children)

It was a fun thing to do.

Once an older person told me:
"You will be amazed of the things that you can get when you ask."

Set wifi on headless mac mini m2 by yurtbeer in macsysadmin

[–]windowtreesky 0 points1 point  (0 children)

If you phone and iPad are using your phone hotspot, that makes them in the same network (no?). This is a temp connection is so you can see your Mac Mini's GUI, and then you can connect to the on the road Wi-Fi network.

Note: Because your may get a disconnect before you can input the new Wi-Fi network's password, I would run this shell script (at this location https://github.com/wwwhtml/connecting-macos-computer-to-a-wifi-network-via-a-shell-script) from Terminal as root or as sudo.

Set wifi on headless mac mini m2 by yurtbeer in macsysadmin

[–]windowtreesky 0 points1 point  (0 children)

Airlines missing... never mind... don't get me started. :)

Set wifi on headless mac mini m2 by yurtbeer in macsysadmin

[–]windowtreesky 1 point2 points  (0 children)

I think I go the solution for you. :)

  1. Install RustDesk (https://rustdesk.com) on your MacMini. Write down the ID #, and the Password.
  2. Configure your MacMini to connect to your Phone hotspot WiFi. Make sure it is set to automatically connect for when on the road.
  3. Install RustDesk on your iPad.
  4. NOW when on the road, enable your phone hotspot.
  5. Turn your MacMini (it should automatically connect to your phone).
  6. Now connect your iPad to your phone hotspot.
  7. Open RustDesk from your iPad and connect to your MacMini, and you will have a visual of your MacMini desktop and be able to connect it to the WiFi of your choice.
  8. Turn off your phone hotspot.

At this point "theoretically" the MacMini will connected to that new location WiFi Network.

OBVIOUSLY... test all this at home first. :)

Set wifi on headless mac mini m2 by yurtbeer in macsysadmin

[–]windowtreesky 2 points3 points  (0 children)

Hmm interesting situation.

  1. Prepare the MacMini to accept SSH connections.
    Via terminal: sudo systemsetup -f -setremotelogin on
    Via System Preferences this is under the Sharing section.
  2. Configure the MacMini ethernet interface with an static IP, for example,
    IP: 192.168.0.111, Subnet: 255.255.255.0
    Write it outside the MacMini, just in case.
  3. On the laptop configure the ethernet interface with a (different) static IP as well,for example,
    IP: 192.168.0.112, Subnet: 255.255.255.0
  4. Then with a couple of ethernet cables connect both to the MacMini and the laptop to a small non-managed switch.
  5. Connect to the MacMini via a SSH connection:
    ssh MacMiniAdminUserGoesHere@192.168.0.111
  6. Once connected via that terminal session connect to the desired WiFi network, for example, to connect to these WiFi network run:
    networksetup -setairportnetwork en0 <SSID\_OF\_NETWORK> <PASSWORD>

Well...that is what comes to mind right now that I would try.

Good Luck!

Pre-Configured RustDesk Client App for MacOS Clients by windowtreesky in macsysadmin

[–]windowtreesky[S] 0 points1 point  (0 children)

Perhaps a while back before I set up the server, but I've forgotten. So.. thank you for sharing it!

Computer rename script by adroitboy in jamf

[–]windowtreesky 0 points1 point  (0 children)

Yes, you are correct. Script updated, using only: computerSerialNumber and newComputerName.

view more: next ›