Checkpoint 2.6.2

This version includes several bug fixes and improvements.

Checkpoint 2.6.1

Choose your columns. Right-click the table's header row to show, hide or reorder columns; the arrangement is kept across launches. Beyond the defaults, hidden until asked for: model, order number, purchase source and date added from the Apple side; site, department, building, room, FileVault and passcode state from Jamf Pro; managed, supervised and compliance state where the product reports them. Every one reads what the lookup already fetched, so showing a column costs no extra request.

Filter to match. New pickers for model, order number, purchase source, department, building and compliance, a date filter on when a device was added to its Apple organization, and two new conditions: no longer managed, not supervised.

As always, a column or filter the connected product has no source for is not offered at all.

Checkpoint 2.6.0

Jamf Pro: the department, building and room assigned to a device are now shown in the inspector, over a direct connection or the Platform API. The user and location details Jamf Pro reports alongside them are masked in the activity log.

Reading them needs Read Departments and Read Buildings; without either, that row is left out rather than shown as an identifier.

Checkpoint 2.5.2

Fixed

• A lookup of a few serials across several Apple organizations read every organization in full first — a minute each on a large tenant. Small lookups now ask per device, as they already did with one organization.
• An Apple action discarded every organization's cached read, so the refresh afterwards re-read organizations nothing had changed.
• Several organizations are now read at the same time rather than one after another, so the wait is the slowest rather than the sum.
• An organization that could not be read reported its devices as missing instead of saying so.
• Where Apple actions cannot apply — no device in an organization, the organization no longer configured, or a selection spanning two — the reason is stated instead of the controls being dimmed.
• An Apple organization with cleared credentials no longer counts as configured, and deleting one no longer leaves the organization popup blank.
• Fewer sign-ins and one less service-list read per lookup.

Added

• Filter by which Apple organization a device is in, when several were searched.

Checkpoint 2.5.0

Added

• Search several Apple organizations in one lookup. Choose All Organizations in the organization popup and the table names the organization each device was found in.
• Activation Lock state, from Apple Business or Apple School Manager: Enabled, Disabled or Unknown, naming whether it is an MDM lock — for which a bypass code is escrowed, so clearing it does not need the owner — or a user lock, which does. Checkpoint reports the state only: it never reads or stores bypass codes, and does not clear locks.

Changed

• Apple actions act in one organization at a time. A single device always resolves to one; a selection spanning two disables them and says which organizations are involved.

Checkpoint 2.4.0

Added

• Device compliance for Jamf Pro, read through its Device Compliance integration and shown with the vendor that reported it. Intune compliance shipped in 2.3.0; the two now read the same way.
• Passcode state for Intune iPhones and iPads, filling the same row and filter as the Jamf products.
• A built-in update check: daily and on demand from the app menu, with release notes and an in-app download. It can be turned off in Settings.

Changed

• On a Platform API connection, declaration status now comes from the platform's declaration reporting rather than being parsed out of the status report.
• Settings opens on the connection in use, names the connection being edited, and warns when its product is changed.

Fixed

• Testing a Platform API connection now uses an edited region and environment ID instead of the saved ones.

Checkpoint 2.3.0

Added

• Microsoft Intune support. Cross-reference Apple Business or Apple School Manager against an Intune tenant, connected by an Entra app registration: lookups, compliance, encryption and enrollment detail, MDM commands, record deletion, and a link into the Intune console. See Intune.

Changed

• Columns and commands are chosen per product throughout, so a connection only offers what its API can serve.

Existing connections, credentials and settings are unaffected.

Checkpoint 2.2.0

Added

• Sort by any column. Rows keep the order the serials were entered until you click a header.
• Filter on how long ago a device last enrolled, reported inventory or made contact.
• Open a Jamf School device in its console, from the row, the context menu or a double-click.
• Dismiss the message about an unconfigured service; Settings brings it back.
• Arrow keys move through the results after a lookup.

Fixed

• A lookup no longer reads every device in every ADE token before it starts, and no longer repeats that on each run. It is read once, when a device is selected, and the remaining preparatory reads run together. Reading the Apple organization is unaffected.

Checkpoint 2.1.2

Adds the installed OS, which should have shipped with 2.1.0.

• Reports the installed OS for Macs and mobile devices: a version and build from Jamf Pro, a named OS and version from Jamf School, which reports no build.
• Shown as a table column and an inspector row, and available as a filter. The filter groups by version, so a Mac and an iPad on the same release fall together.
• Jamf School returned the OS all along and Checkpoint discarded it; it is now carried through.

No new requests — every connection already returned this with the lookup.

Checkpoint 2.1.1

Fixed

• Device identifiers carried in a declarative status report are now masked when the activity log is copied or exported. The log records these as {"key": "device.identifier.udid", "value": "…"}, naming the device in the value rather than under a key, so the UDID was not recognised and came through a masked export intact.

Anyone who exported a log from 2.1.0 while viewing a Jamf Pro device should treat it as containing UDIDs.

---

Requires macOS 15 or later. Signed and notarized.