Deploy OS X Images to Macs via SCCM Infrastructure

Question

Hi,

     I would like to enquires on Mac OS deployment and other features that Current Branch SCCM can support.

     Below are my queries :

     1) So far, how is Mac is being deployed in SCCM ? 

     2) Can the latest current branch provide full features for Mac support like Windows ?

     3) Without using addon, besides hardware inventory, application deployment, software updates ( patching ) and SCCM clients installation, what are features can the current branch SCCM provided ? such as join domain and group policy control.

     4) Will Microsoft recommend Parallels Mac Management for SCCM ? Is there any limitation if Parallels Mac Management for SCCM will to be integrated to the current SCCM setup ? Any risk or impact involved ?

     5) Anyone has use SCCM for Mac deployment in a secured environment ?

     All advise and comments are welcome. 

     Thanks everyone for your time.

Answer 1

ConfigMgr management of macOS is (kind of) documented at https://learn.microsoft.com/en-us/mem/configmgr/core/clients/deploy/deploy-clients-to-macs.

Only two functions are truly supported: software distribution and inventory. Imaging is not possible.

ConfigMgr management of macOS has not significantly changed since it was released about 7 years ago.

Joining a domain and group policy have nothing to do with ConfigMgr.

Microsoft's primary macOS management solution is Microsoft Intune.

Answer 2

Joining a domain is possible when performing OSD deployment in ConfigMgr for Windows Operating system deployment.

Not really. OSD just configures the OS to do this. Also, macOS can't join a domain. That can be made to use a computer object in AD, but it's not really a join as only Windows devices truly join a domain.

So can Mac deployment do it ?

Asked and answered. You cannot deploy macOS images.

Is Parallels Mac Management for SCCM is the best choice ?

Best is in the eye of the beholder and is up to you based on your requirements.

As for group policy control, I am referring to policy such as certificate that can push down to SCCM client installation.

That's not group policy as there is no such thing on macOS. As for whether ConfigMgr can native apply certificates or other configurations to macOS, that was also asked and answered: no. ConfigMgr can only deploy software and collect inventory on macOS systems.

Does it works the same way as Windows ?

Does what work the same way? The two OSes are very different is almost every way.

If Microsoft Intune is used, what are the features that is supported ?

There's no comprehensive list of features to my knowledge as Intune adds capabilities every month. You can start at https://learn.microsoft.com/en-us/mem/intune/enrollment/macos-enroll though.