Based on repository activity, growth velocity and community engagement.
24
Growth5/30
Activity0/25
Popularity10/25
Trust10/20
301
Stars
High
Sentiment
Votes
301
README.md
UMAD (macadmin's Slack #umad)
[U]niversal
[M]DM
[A]pproval
[D]ialog
Embedded Python
As of v2.0, UMAD now uses its own embedded python (currently v3.8). This is due to Apple's upcoming removal of Python2.
FoundationPlist has been replaced by Python 3's version of plistlib
Nibbler has been updated to support python 3.
Building embedded python framework
To reduce the size of the git repository, you must create your own Python. To do this, simply run the ./build_python_framework script within the repository.
This process was tested on Catalina only.
./build_python_framework
Cloning relocatable-python tool from github...
Cloning into '/tmp/relocatable-python-git'...
remote: Enumerating objects: 28, done.
remote: Counting objects: 100% (28/28), done.
remote: Compressing objects: 100% (19/19), done.
remote: Total 78 (delta 12), reused 19 (delta 9), pack-reused 50
Unpacking objects: 100% (78/78), done.
Downloading https://www.python.org/ftp/python/3.8.0/python-3.8.0-macosx10.9.pkg...
...
Done!
Customized, relocatable framework is at /Library/umad/Python.framework
Moving Python.framework to umad munki-pkg payload folder
Taking ownership of the file to not break git
Purpose
A Professional Tool to help users with getting pre-existing devices enrolled into MDM.
Screenshots
DEP
Manual
UAMDM
Simplified Diagram
Notes
You will need to use munki-pkg to build this package.
Because of the way git works, umad will not contain the Logs folder required for the postinstall to complete.
In order to create a properly working package, you will need to run the following command:
munkipkg --sync /path/to/cloned_repo/mdm/umad
OS Support v1
The following operating system and versions have been tested.
This is the number, in days, of when to start the initial UI warning. When this set of days passes, the user will be required to hit an "I Understand" button, followed by the "Close" button to exit out of the UI.
If a user does not have a DEP capable device, they will have the option to manually enroll.
<i>Authentication may be required for manual enrollment.</i>
This is the bolded text that takes place of the DEP or UAMDM screenshot.
If a user does not have a DEP capable device, they will have the option to manually enroll.
<i>Authentication may be required for manual enrollment.</i>
This is the first set of text above the enrollment button.
<string>--manualenrollh1text</string>
<string>Want this box to go away?</string>
Manual enrollment h2 text
If a user does not have a DEP capable device, they will have the option to manually enroll.
<i>Authentication may be required for manual enrollment.</i>
This is the second set of text above the enrollment button.
<string>--manualenrollh2text</string>
<string>Click on the Manual Enrollment button below.</string>
Manual enrollment URL
Configure the Manual Enrollment button with a custom URL.
You can modify the LaunchAgent adding your custom path or just replace the included nag_ss.png with your own .png.
(remember to name the file nag_ss.png if you are not using a custom path)
Use this setting if you <b>DO NOT</b> want to restore the umad GUI to the front of a user's window.
<string>--notimer</string>
Paragraph 1 text
This is the text for the first paragraph. 160 character limit.
<string>--paragraph1</string>
<string>If you do not enroll into MDM you will lose the ability to connect to Wi-Fi, VPN and Managed Software Center.</string>
Paragraph 2 text
This is the text for the second paragraph. 160 character limit.
<string>--paragraph2</string>
<string>To enroll, just look for the below notification, and click Details. Once prompted, log in with your username and password.</string>
Paragraph 2 text
This is the text for the third paragraph. 160 character limit.
<string>--paragraph3</string>
<string>To enroll, just look for the below notification, and click Details. Once prompted, log in with your OneLogin username and password.</string>
Profile identifier
This is the profile identifier for < 10.13 machines to check for enrollment. Should you not set this value, umad will attempt to look for a profile installed on the machine with the PayloadType of com.apple.mdm
The time, in seconds, to check if the device is enrolled into MDM.
<string>--timermdm</string>
<string>5</string>
User Approved MDM paragraph 1 text
This is the text for the first paragraph on the user Approved MDM UI.
<string>--uamdmparagraph1</string>
<string>Thank you for enrolling your device into MDM. We sincerely appreciate you doing this in a timely manner.</string>
User Approved MDM paragraph 2 text
This is the text for the second paragraph on the user Approved MDM UI.
<string>--uamdmparagraph2</string>
<string>Unfortunately, your device has been detected as only partially enrolled into our system.</string>
User Approved MDM paragraph 3 text
This is the text for the third paragraph on the user Approved MDM UI.
<string>--uamdmparagraph3</string>
<string>Please go to System Preferences -> Profiles, click on the Device Enrollment profile and click on the approve button.</string>
User Approved MDM screenshot path
You can customize the uamdm screenshot path. Option 2, just replace the included uamdm_ss.png with your own .png. Make sure you name the .png the same as the original and place it back into umad/Resources/ .
