Cut the time it takes to provision a new Mac from hours to seconds

How long does it take you to provision a Mac for a new starter? What about rebuilding an existing device that requires different network configurations or software? What if you could cut this process down from hours to seconds – or even to the point where you don’t have to touch the device at all?

If you’re looking to save yourself time when setting up fresh Macs for employees, zero-touch deployment should be a priority – and Apple tools and mobile device management can help you achieve it.

To demonstrate the hassle of manually setting up a new Mac and user profile (which can take up to an hour depending on the amount of software installs required), here's a simplified example of a typical IT administrator checklist, detailing everything that needs to be done before a device can be deployed into the workplace:

Manual setup of a new user

1. Create user on directory service, and assign privileges
2. Create Mail account(s), CRM accounts etc.
3. Set up IMAP; map Sent, Trash, Drafts folders etc.
4. Create Mail signature.
5. Create server shortcuts from IT support, as well as any additional shortcuts.

Manual setup of a new Mac

1. Turn on the device, and run through all the standard start-up steps (AppleID, TouchID, Apple Pay etc)
2. Set up Admin user.
3. Run system software update.
4. Bind to OD (Open Directory), and/or AD (Active Directory).
5. Add access to corporate services and security requirements
6. Install software.

• Microsoft Office 365.
• Printer drivers for all printers.
• Adobe Creative Cloud.

1. Set wallpaper and edit dock.

Comparatively, you can use zero-touch deployment to cut down this process from hours to seconds.

What is zero-touch deployment?

Zero-touch deployment is the end result of leveraging a mixture of tools that enable devices to be provisioned, integrated and configured automatically, eliminating almost all of the manual setup process. By the time they’re delivered to desk, devices will have the correct security policies preloaded, be prepped to install the correct system specifications and configured to suit the tasks they’ll be used for, and have the necessary creative applications awaiting installation.

This is achievable by using some simple tools to create:

- Configuration profiles and software packages – effectively a base image.

- Policies against users and user groups, so when someone joins the team they get the same deployment.

So, which Apple tools support zero-touch deployment?

Apple’s Profile Manager simplifies management, streamlining deployment and configuration of Mac computers in your organisation – it can be used as an MDM (mobile device management) solution in its own right, but many organisations use this tool in conjunction with third party MDM solutions to better support larger estates.

It allows admins to configure and roll out settings to Apple devices and users across their network, and quickly set up lots of devices with the apps, settings and documents they need. It also helps organisations enforce password polices, define the kind of networks devices can connect to, disable certain features and deactivate system preferences in macOS. Similarly, devices can be remotely locked or wiped with Profile Manager, handy if staff lose their Mac or iPhone.

Fortunately, before you’ve even invested in a third party management platform, Apple supply some of the tools you’ll need to make hands-off deployment and disk imaging on macOS a success. System Image Utility provides users with the functionality to create and configure three types of network disk image: NetBoot, NetInstall and NetRestore, as well modular images that contain the operating system and allow users to download and install the apps they need.

Remote Desktop is Apple’s open standards-based desktop management software utility; it lets admins remotely control and configure systems, install software, provide assistance to end users, create reports and automate management tasks. You can leverage Remote Desktop to check that all automatic, remote and zero-touch configurations have been implemented successfully, or for ongoing remote management of the devices once they’re deployed.

Using computer lists, administrators can define a group of computers and manage them according to type, physical location, use, and more. From there, you can choose to set up a remote Mac and create a dedicated Task Server to gather information and distribute it with sanctioned admins. The Task Server is always on, and serves as an automated administrator that can install packages and configure client settings without central control from Remote Desktop.

The process of setting up a new user’s Mac can be further simplified by:

1. Adding a new user to your Mac management tool of choice, integrated with Apple’s Device Enrolment Program (DEP).
2. Assigning the Mac to the user in the management tool, so that when it’s turned on, it pulls down everything the user requires.

To save even more time, admins even have the option of uploading a list of devices rather than adding them one by one – ideal for larger scale rollouts.

While Apple laid the groundwork for Mac management with Profile Manager and other tools, it’s essential to consider a third party solution such as Jamf Pro if you’re looking to manage your Mac estate on a larger scale. Not only that, but a trusted partner (like Jigsaw24) can help you skip the steep learning curve and handle all the tough technical stuff to ensure your management solution is running at maximum efficiency.

If you'd like to find out more about building user profiles on Mac, give us a call on 03332 409 365 or email solutions@Jigsaw24.com. For all the latest news and reviews, follow us on Twitter @WeAreJigsaw24 and ‘like’ us on Facebook.