* 3.4 Ensure Security Auditing Retention Is Enabled * 2.5.3 Ensure Location Services Is Enabled * 2.4.9 Ensure Remote Management Is Disabled * 2.4.6 Ensure DVD or CD Sharing Is Disabled * 2.4.4 Ensure Printer Sharing Is Disabled * 2.4.3 Ensure Screen Sharing Is Disabled * 2.4.1 Ensure Remote Apple Events Is Disabled * 2.2.2 Ensure time set is within appropriate limits * 2.2.1 Ensure Set time and date automatically Is Enabled * 2.1.1 Ensure Bluetooth Is Disabled If No Devices Are Paired The script slightly the organisations have a much simpler method forĭeploying and checking preferences rather than editing a script. The CIS Benchmarks if a site was not configured properly then the These scripts will make every attempt to replace a local file in orderįor it to leverage the preferred preferences.
If present they replace any copy in /Library/Application TheĪudit and Remediation scripts both look for the configuration profile,
Manifest for a custom Config Profile, or use the scripted option. Script 1_Set_Organization_Priorities will need additionalĬonfiguration prior to deployment.
#CIS BENCHMARK MACOS PRO#
(2.6_Audit_Count greater than 0) to immediately determine computersĪdd the following scripts to your Jamf Pro Support/SecurityScoring/org_audit file and records count of items to Set as Data Type "Integer." Reads contents of /Library/Application Support/SecurityScoring/org_audit file and records to Jamf Pro Set as Data Type "String." Reads contents of /Library/Application Refers to document CIS_Apple_macOS_12.0_Monterey_Benchmark_v1.0.0.pdf,Ĭreate Extension Attributes using the following scripts: CIS for macOS Monterey - Script and Configuration Profile
0 kommentar(er)
