⭐️ Awesome free and useful macadmin tools 👨🏻‍💻

Contents

• Deployment
• MDM
• User Experience
• Configuration and Monitoring
• System Updates
• Software Installation
• Security
• Active Directory / Open Directory
• Scripts and Repos

Deployment

• MDS - Deploy a Mac in 7 Seconds (Twocanoes Software)
• macvdmtool - This tool lets you get a serial console on an Apple Silicon device and reboot it remotely, using only another Apple Silicon device running macOS and a standard Type C cable (AsahiLinux)
• bootstrappr - A bare-bones tool to install a set of packages on a target volume (munki)
• installr - A tool designed for use in Recovery boot to do a "fresh" install of macOS and additional packages (munki)
• idevicerestore - Restore/upgrade firmware of iOS devices

MDM

• device-management - Device management schema data for MDM (apple)
• MicroMDM - Mobile Device Management server (micromdm)
• munkimdm - Flask app for connecting Munki and MicroMDM (munkimdm)
• NanoMDM - Minimalist Apple MDM server heavily inspired by MicroMDM (micromdm)

User Experience

• DEPNotify (Jamf) - Small light weight notification app that was designed to let your users know what's going on during a DEP enrollment (Joel Rennich)
• IBM Notifier - macOS agent used to display custom notifications and alerts to the end user (IBM)
• Setup-Your-Mac (Jamf) - Setup Your Mac aims to simplify initial device configuration by leveraging swiftDialog and Jamf Pro Policy Custom Events to allow end-users to self-complete Mac setup post-enrollment. (dan-snelson)
• Baseline - An MDM agnostic zero touch solution for macOS (SecondSonConsulting)
• dockutil - command line tool for managing dock items (kcrawford)
• Xcreds - IdP Password Syncing (Twocanoes Software)
• Privileges - For Mac users in enterprise environments, this application gives users control over the administration of their machine by elevating their level of access to administrator privileges on macOS. Users can set a timeframe in the application's settings to perform specific tasks, such as installing or removing an application. (SAP)
• swiftDialog - The info box is the area underneath where --icon is displayed using a secondary shade and is useful for displaying any incidental information like system information (bartreardon)
• SwiftDefaultApps - Replacement for RCDefaultApps, written in Swift (Lord-Kamina)
• outset - Automatically process packages and scripts during boot, login, or on demand (macadmins)
• PrivilegesDemoter - Allow users to self manage admin privileges, while reminding them to operate as standard whenever possible (sgmills)

Configuration and Monitoring

• iMazing Profile Editor - Create, Edit, and Sign Apple Configuration Profiles (iMazing)
• ProfileCreator - macOS app to create standard or customized configuration profiles (ProfileCreator)
• LowProfile - A Mac utility to help inspect Apple Configuration Profile payloads (ninxsoft)
• PPPC-Utility - Application for creating configuration profiles containing the Privacy Preferences Policy Control payload for macOS (jamf)
• SwiftDefaultApps - Replacement for RCDefaultApps, written in Swift (Lord-Kamina)
• tccutil - Command line tool to modify OS X's accessibility database (TCC.db) (jacobsalmela)
• Apple Configurator - (Apple)
• Ansible - Open-source software provisioning, configuration management, and application-deployment tool enabling infrastructure as code (Red Hat)
• Zabbix - Open-source software tool to monitor IT infrastructure such as networks, servers, virtual machines, and cloud services (Zabbix)
• Inventory - Inventory module for MunkiReport (munkireport)
• Sal - Modular reporting for Endpoints (salopensource)
• extensionsmanager - This project is to provide single pane of glass telemetry into extensions on macOS (krypted)
• UI BROWSER - ultimate assistant for Apple’s Accessibility and AppleScript GUI Scripting technologies. It helps you to explore, monitor, and control the user interface of most applications running on macOS (Late Night Software)
• LogUI - lightweight log browser (Eclectic Light)

System Updates

• nudge - A tool for encouraging the installation of macOS security updates (macadmins)
• MIST - A Mac command-line tool that automatically downloads macOS Installers / Firmwares (ninxsoft)
• S.U.P.E.R.M.A.N. - S.U.P.E.R.M.A.N. optimizes the macOS software update experience (Macjutsu)
• SOFA - SOFA | A MacAdmin's Simple Organized Feed for Apple Software Updates
• mist-cli - A Mac command-line tool that automatically downloads macOS Firmwares / Installers

Software Installation

• Munki - Managed software installation for macOS (Walt Disney Animation Studios)
• MunkiReport - A reporting tool for munki (munkireport)
• AutoPKG - Automating packaging and software distribution on macOS (autopkg)
• Installomator - Installation script to deploy standard software on Macs (installomator)
• Homebrew - The Missing Package Manager for macOS (or Linux) (Homebrew)
• Platypus - Developer tool that creates native Mac applications from command line scripts such as shell scripts or Python, Perl, Ruby, Tcl, JavaScript and PHP program (sveinbjorn)
• Packages - Whenever you need to create an installation package or distribution for Mac OS X 10.5 or later, Packages is the powerful and flexible solution you're looking for. (WhiteBox)
• Simple-Package-Creator - Automator application that will allow the selection of a self-contained application and creates an installer package that enables the installation of the application with pre-set permissions into /Applications - (rtrouton)
• quickpkg - wrapper for pkgbuild to quickly build simple packages from an installed app, a dmg or zip archive (scriptingosx)
• Apparency - Inspect App info - (Mothers Ruin Software)

Security

• Objective-See's Tools - Free, open-source, tools to secure your Mac (Objective-See)
• Signing Manager - System for securing code and package signing certificates (Twocanoes Software)
• Santa - A binary authorization system for macOS (Google)
• osxcollector - A forensic evidence collection & analysis toolkit for OS X (Yelp)
• SilentKnight - automatic checking of security systems (Eclecticlight)
• manageSecureTokens - (TravellingTechGuy)
• SuspiciousPackage - (Mothers Ruin Software)
• Crescendo - Crescendo is a swift based, real time event viewer for macOS. It utilizes Apple's Endpoint Security Framework. (SuprHackerSteve)
• escrow-buddy - A macOS authorization plugin that helps MDM administrators ensure valid FileVault keys are escrowed for all their Macs (macadmins)

Active Directory / Open Directory

• Kerberos SSO User Guide - - (Apple)
• NoMAD - macOS menu bar application that provides all the functionality of being bound to AD, and more, without having to be bound (Joel Rennich)
• macosLAPS - Swift binary that will change a local administrator password to a random generated password. Similar behavior to LAPS for Windows (joshua-d-miller)
• bugle - A command-line tool to post and listen to distributed notifications to execute scripts (ABridoux)
• LDAP Admin Tool - simple and easy to use GUI administration tool for Ldap management, control and development

Scripts and Repos

• jamf-recovery-lock - Python script to set Recovery Lock key for Apple M1 computers (shbedev)
• reissueFVKey - Скрипт перевыпуска и отправки ключа восстановления FileVault на небольшой Flask-сервер (-)
• Search-Scripts-In-Jamf - Search for a string in all the scripts and or extension attributes in your Jamf Pro instance (laurentpertois)
• brutalkeychain - Recover lost keychain passwords (krypted)
• python-jamf - library for connecting to a Jamf Server that maps directly to the Jamf Pro Classic API (University of Utah - Marriott Library - Apple Infrastructure)
• Jamf Open Source Community - - (Jamf)
• diskspace - macOS command line tool to return the available disk space on APFS volumes (scriptingosx)
• FastScripts 3 - All your scripts at your fingertips (red sweater)
• CIS-Script - This CIS Script is build to report and remediate based on the your organisation score (mvdbent)
• IOSSecuritySuite - iOS platform security & anti-tampering Swift library (securing)