Blog

Creating Privacy Preferences Policy Control profiles for macOS

A great dive by Rich Trouton into using MDM to manage the new privacy dialogs in macOS 10.14 Mojave: What this means is that you may be able to whitelist your most common interactions and prevent them from displaying dialogs.  Read all about it on Rich’s Der Flounder blog.

Blog

Mojave’s New Security and Privacy Protections Face Usability Challenges

Nice article by Rich Mogull @ TidBits on the new privacy settings in macOS 10.14 Mojave: For most Mac users, the most obvious and significant changes are the enhanced notifications and protections for managing access to core privacy-related data stores: Location, Contacts, Calendars, Reminders, and Photos. Read the article here. (h/t to scriptingosx)

Blog

Create a Windows 10 Bootable USB Flash Drive on a Mac

To troubleshoot an issue with Windows 10 (especially boot-related issues), it can be handy to boot to Windows 10 that is not installed on a Boot Camp partition. It is relatively straightforward to create a bootable USB Flash drive to boot to the Windows 10 installer, and then open up a DOS prompt for troubleshooting….

READ MORE

Blog

Fixing authentication failure in Startup Security Utility

After migrating my 2018 MacBook Pro from a 2017 MacBook Pro, I found that I could no longer authenticate in the Startup Security Utility on the recovery partition of 10.13 (High Sierra). The 2018 MacBook Pro had FileVault turned on and the 2017 MacBook Pro did not. I investigated some different methods to resolve this, and…

READ MORE

Blog

MacAdmin Sticker Pack Now Available on iOS!

At this year’s PennState MacAdmin conference, we gave out over 500 sticker packs to attendees, and folks loved them. Since we had the graphics and people enjoyed them so much, we created stickers for iMessage on iOS and put them up in the App Store. Show your #macadmin love by download the stickers now on…

READ MORE

Blog

Automating macOS and Package installation from the Recovery Partition

With the death of netboot and imaging, there is a need for automated refreshing of the macOS and initial package installation. Apple is moving towards using DEP and MDM, but that is not applicable for all scenarios, and tools such a bootstrappr and installr have come up to fill a need. These command line tools run…

READ MORE

Blog

Disable SIP quickly

Booting into Recovery mode can take a while since the UI has to load and a full disk check is done.  There is a way to get into SIP faster: by going into single user mode in the recovery partition: To disable SIP quickly, reboot the Mac. At the startup chime, press Command-s-r (a good…

READ MORE

Blog

PSU MacAdmins 2018

The 2018 MacAdmins conference is coming up fast and we are pulling out all the stops. We have a bunch of new updates and products to show off: Winclone 7 Pro: Enterprise Boot Camp Windows 10 Deployment. We have some exciting new developments on using Microsoft images and services to deploy Windows 10 to Macs, including…

READ MORE

Blog

Imaging Boot Camp with SCCM

I am really proud of the work we did on getting Macs to boot into a WinPE environment and imaging via MDT / SCCM. Check out the web seminar I did earlier this week that shows setting up a package to boot macs to WinPE.

READ MORE

Blog

Road to Winclone 7

Today we released Winclone 7, and it is the most ambitious release yet. Winclone images, migrates, and restores Boot Camp partitions on the Mac, both for consumers and for mass deployment in enterprise environments.

READ MORE

Blog

Introducing Certificate Request

We are releasing a new app here at Twocanoes Software, and this is one that is especially exciting for me. The app is called Certificate Request and it makes it a breeze to get digital certificate from Active Directory to your key on your Mac.

READ MORE

Blog

TCM 1.1: Screen Sharing

We just released TCM 1.1 with a huge new feature: Screen Sharing. We have seen a bunch of folks in education loving it and see TCM as “Apple Classroom for Macs”. It was missing one key feature, though: screen sharing. So with the release of TCM 1.1, instructors and IT folks can automatically start screen sharing and connect to student macs with a click of a button.

READ MORE

Blog

Switching between File-based (WIM) and Block-Based imaging in Winclone 6

Winclone 6 can clone and restore in 2 different modes: file-based (WIM) or block-based.  The differences are covered in the kbase article here. By default, Winclone 6 creates images using file-based imaging. If there are issues with the meta-data on a file (such as corrupt permissions, date, etc), Winclone may fail to complete the clone….

READ MORE

Blog

Getting a Machine Kerberos Ticket on macOS without binding

The TCS Cert Request tool can be used to request a certificate from Active Directory Certificate authority.  A normal operation is to request a certificate as either a user or the computer. Both require a valid Kerberos ticket. Getting a kerberos ticket as an macOS user is easy. You just need to know the user…

READ MORE

Blog

How the AD Certificate Profile got into macOS when I was at Apple

I have created a macOS command line tool called “tcscertrequest” that submits requests to a Microsoft Certificate Authority from the macOS command line. The request is sent the same way it would be sent from a Windows computer so no modifications to the Windows infrastructure is required to work with the Mac. The history of…

READ MORE

Blog

SecureBoot & the 2017 iMac Pro

SecureBoot One of the areas that Apple has made big improvements with the release of the 2017 iMac Pro is the introduction of SecureBoot.  SecureBoot is a process where the firmware validates the bootloader prior to loading.  It is at the start of the chain of trust that ensures that code that gets run (drivers, kernel,…

READ MORE

Blog

Missing Windows Drivers

When moving Boot Camp from one computer to another, missing drivers can cause problems. Anything from the keyboard and mouse not working to Windows not booting. In fact, newer Macs require a SSD driver for Windows to boot correctly. Thankfully, you can inject drivers right into a Winclone image so that when you restore the…

READ MORE