Notes from Custom app distribution and device management lab (Wednesday, June 9th 2021)

Question: Will Apple be eliminating the use of kernel extensions on macOS Monterey?

Answer: No. In general, restrictions are the same as on Big Sur but as Apple adds new APIs for system extensions, new restrictions may be added for kernel extensions. If kexts are whitelisted by MDM, behavior is the same as on Big Sur.

Question: Does Apple have any plans to support “managed” migration assistant so supervised devices can easily transfer user data from old to new macs without compromising MDM enrollment. Managed with a profile to ensure only specific data can be migrated would be very helpful.

Answer: Not at this time, please submit feedback if you want this feature.

Question: Is there any additional guidance from Apple on the installation and use of multiple solutions using System Extensions and/or Network Extensions when it comes to co-habitation? For example, is it supported by Apple to have two "Network Filters" (each managed by a separate application) installed and active?

Answer: Having two network filters installed and active is supported by Apple. Consult with your vendor or vendors for best practices.

Question: Can admins enforce software update deferrals for X number of days after they’re released by Apple, rather than X number of days after a given device first sees the software updates?

Answer: Software deferral is based on the date metadata associated with the update and that's in macOS today.

Question: Can admins force Mac users to install software updates on macOS Monterey without interrupting users with a surprise reboot? Desired state is to gracefully prompting users to install mandatory updates, but also have those updates have an admin-chosen deadline where the updates get installed automatically without further deferral.

Answer: There are a number of changes in macOS Monterey which address these concerns. Please see the "Manage software updates in your organization" session video. One change is that you can schedule using the marketing version number instead of a product key. For example, you can now specify "macOS 12.1" instead of a specific product key.

Question: Are printer drivers still supported in macOS Monterey?

Answer: Yes.

Question: Since Apple Silicon Macs technically can support NetBoot, can NetBoot be restored as a device provisioning tool?

Answer: NetBoot is not supported as a mechanism for macOS provisioning on Apple Silicon Macs.

Question: What are Apple’s plans, if any, to support Azure AD workplace join as a replacement for on-premise Active Directory binding?

Answer: Apple can't comment on future plans. Please submit feedback if you want this feature. Apple does offer the Kerberos extension for connecting to on-premise Active Directory.