Admin Password management (MDM Command - macOS)
What
The Admin Password Management feature in FileWave allows administrators to remotely change the admin password on macOS devices enrolled via Automated Device Enrollment (DEP). This functionality utilizes MDM commands to securely update the admin account password without requiring physical access to the device. The admin account must have been created during enrollment using DEP profile options.
When/Why
When to Use:
- Enhancing Security: Regularly update admin passwords to maintain strong security protocols.
- Responding to Security Threats: Immediately change the admin password if a security breach or unauthorized access is suspected.
- Staff Changes: Update passwords when personnel with admin access leave the organization.
- Policy Compliance: Enforce password changes to comply with organizational security policies or regulatory requirements.
Why Use This Feature:
- Remote Accessibility: Change admin passwords remotely across multiple devices without physical intervention.
- Efficiency: Save time by simultaneously updating passwords on numerous devices from a central console.
- Security Assurance: Reduce the risk of unauthorized access by keeping admin credentials up-to-date.
- Centralized Management: Maintain control over admin accounts across all DEP-enrolled macOS devices from FileWave Central.
How
Prerequisites
- DEP Enrollment: Devices must be enrolled via Automated Device Enrollment (DEP).
- Apple OS/Hardware: Devices must be Apple Silicon macOS systems running macOS 15.0 or higher
- Admin Account Creation: The admin account must have been created during DEP enrollment using the profile options.
Note that if you create the admin account as required for this feature then you should consider: Bootstrap Token Management on macOS
Steps to Change the Admin Password
- In FileWave Central select the device and right click -> MDM -> Change Admin Password...
Important Notes
- Encryption and Security: The new password is securely transmitted using MDM protocols.
- User Impact: Changing the admin password may affect scripts or services that rely on admin credentials.
- Communication: Consider notifying other IT staff about the password change to prevent access issues.
The Admin Password Management feature empowers administrators to maintain strong security across all DEP-enrolled macOS devices efficiently. By leveraging FileWave Central to manage admin passwords remotely, organizations can ensure compliance with security policies, respond swiftly to potential threats, and maintain centralized control over their device fleet.
By utilizing this feature thoughtfully and adhering to best practices, you can significantly enhance your organization’s security posture while streamlining administrative tasks.