Mac Admins Podcast
A rotating panel of Mac admins and consultants are joined by members of the Mac admin community to discuss the latest news, issues, and challenges of managing Apple devices. New episodes weekly. Join the community at macadmins.org.
Episode 418: Looking at PSSO after WWDC, with Michael Epping & Joel Rennich

We have all enjoyed seeing Apple make the noticeable shift to embracing modern cloud identity with the integrations we have seen over the past few years. From modern authentication at enrollment, Single Sign on extensions through to Federation of Managed Apple accounts and Platform Single Sign-on. The announcements at WWDC this year gave us more reasons to be excited, with a whole bunch of new capabilities announced. What does this really mean and can I start using this in production tomorrow?
Hosts:
Tom Bridge - @tbridge@theinternet.social Marcus Ransom - @marcusransomGuests:
<...
Episode 417: WWDC Wrap and First Look at Betas

We’re into the beta season! Apple has released a bunch of documentation, as well as a full suite of betas to go with everything we talked about last week on the Flashcast. We’ll be talking PSSO, MDM Migration, and the AxM APIs.
Hosts:
Tom Bridge - @tbridge@theinternet.social Marcus Ransom - @marcusransomLinks:
https://developer.apple.com/documentation/apple-school-and-business-manager-api https://registry.terraform.io/providers/neilmartin83/axm/latest/docs https://github.com/rodchristiansen/asbmutil https://bartreardon.github.io/2025/06/11/using-the-new-api-for-apple-business-school-manager.html https://github.com/apple/device-management/branches https://developer.apple.com/documentation/devicemanagement/enro...Episode 416: DDM with Bryce from Addigy

Declarative Device Management is just as easy as turning on the protocol, accepting the messages, and then responding over the new channel, right? Should be a couple weeks' work for any MDM, right? Well, we’re going deep on DDM’s nuts and bolts with Bryce from Addigy on their journey to DDM management. Let’s see how it really went?
Hosts:
Tom Bridge - @tbridge@theinternet.social Marcus Ransom - @marcusransomGuests:
Bryce Carlson - LinkedIn
Sponsors:
Kandji 1Password Nudge Security Watchman MonitoringIf you're interested in sponsoring the Ma...
Flashcast 15: WWDC 25

With WWDC announced for June 9 through 12 this year, we’re all looking forward to whatever new device management capabilities we get to see. Toss a coin to your MDM vendors (o' valley of plenty) for they are the ones that need to turn these wonderful new frameworks and features into something that we as Mac Admins can integrate into the workflows we need to create the magical end user experiences we strive for.
Hosts:
Tom Bridge - @tbridge@theinternet.social Marcus Ransom -Â @marcusransomGuests:
Selina Ali - LinkedIn
Sponsors:
...Episode 415: Codesigning and Building Software in 2025

Joel Rennich’s back with us to talk about code signing certificates,
Hosts:
Tom Bridge - @tbridge@theinternet.social Marcus Ransom - @marcusransomGuests:
Joel Rennich - LinkedIn
Links:
Dave Pike Set - MatharEpisode 414: The Why of Mac Admins Conferences

There are a lot of incredible conferences out there for Mac Admins to attend - MacSysAdmin, MacAdmins Conference at Penn State, X World, Objective by the Sea - but what’s the story behind the story? This week we’re talking with conference organizers about how they think about their events, the challenges that they face, and the future of these critical community events.
Hosts:
Tom Bridge - @tbridge@theinternet.socialGuests:
Patrik Jerneheim, MacSysAdmin - LinkedIn Mat X, MacDevOps YVR - LinkedIn Gretchen Kuwahara, MacAdmins at Penn State University - LinkedIn<...
Episode 413: Live from MacAD.uk 2025

Tom & Marcus are in Brighton this week with three friends: Neil Johnson, Cat McDonald, and Liam Donnelly. MacAD.UK 2025 was full of great talks, so let’s dial it in and talk with three of the best speakers.
Hosts:
Tom Bridge - @tbridge@theinternet.social Marcus Ransom -Â @marcusransomGuests:
Neil Johnson - LinkedIn Cat McDonald Liam Donnelly - LinkedInLinks:
https://www.macad.uk/Sponsors:
Kandji 1Password Nudge Security Watchman MonitoringIf you're interested in sponsoring the Mac Admins Podcast, please email podcast@macadmins.org for more information.
...Episode 412: Just Us - Latest News and Stuff

Erin Merchant’s back with the Mac Admins Podcast to help us get caught up with the latest news and events. We’re talking macOS 15.4 (and 15.4.1), the latest kerfuffles with Apple Intelligence, and we’re all wondering why Tom’s MacBook Pro keeps restarting in his backpack.
Hosts:
Tom Bridge - @tbridge@theinternet.social Marcus Ransom - @marcusransomGuests:
Erin Merchant - LinkedIn
Sponsors:
Kandji 1Password Nudge Security Watchman MonitoringIf you're interested in sponsoring the Mac Admins Podcast, please email podcast@macadmins.org for more information.
Get the...
Episode 411: The Art of Mac Malware Volume 2

Patrick Wardle’s a busy guy, and 2025 is no exception! No Starch Press just published volume two of the Art of Mac Malware on Detection, including a free PDF version. Objective by the Sea is back in October in the Balearics. iOS Security Research is a new area of focus, but there’s plenty to talk about. Welcome back, Patrick!
Hosts:
Tom Bridge - @tbridge@theinternet.social Marcus Ransom - @marcusransomGuests:
Patrick Wardle - LinkedIn
Links:
The Art of Mac Malware Volume 2Sponsors:
Kandji 1Password Nudge Security Watc...Episode 410: The 2025 Apple in the Enterprise Report Card

Jason Snell and Weldon Dodd are back on the Mac Admins Podcast to discuss this year’s Apple in the Enterprise Report Card. How did the last year go for Mac Admins with Apple Products? Well, let’s find out…
Hosts:
Tom Bridge - @tbridge@theinternet.social Marcus Ransom -Â @marcusransomGuests:
Jason Snell - @jsnell Weldon Dodd - LinkedInLinks:
https://sixcolors.com/Sponsors:
Kandji 1Password Nudge Security Watchman MonitoringIf you're interested in sponsoring the Mac Admins Podcast, please email podcast@macadmins.org for more information.
Get t...
Episode 409: What's a VAR for?

Kevin English and Tom Rice from SHI join the pod this week to talk about Value Added Resellers and their role in the Apple Ecosystem. Ever wonder how the models work for these folks? We’re here to tell you.
Hosts:
Tom Bridge - @tbridge@theinternet.social Marcus Ransom - @marcusransomGuests:
Tom Rice - LinkedIn Kevin English - LinkedInLinks:
https://shi.com/apple We Got Your Mac: https://www.wegotyourmac.com/listen/ Mac Eval Utility: https://9to5mac.com/2023/11/04/mac-evaluation-utility/Sponsors:
Kandji 1Password Nudge Se...Episode 408: Turning Frameworks into Functionality

With WWDC announced for June 9 through 12 this year, we’re all looking forward to whatever new device management capabilities we get to see. Toss a coin to your MDM vendors (o' valley of plenty) for they are the ones that need to turn these wonderful new frameworks and features into something that we as Mac Admins can integrate into the workflows we need to create the magical end user experiences we strive for.
Selina Ali, Senior Product Manager at Addigy is back on the podcast today to talk about what it’s like to wrap your head arou...
Episode 407: A New Conference, Mac Admins India

India doesn’t just have the largest population of any country in the world, it also has a thriving community of Mac Admins who are becoming more and more visible as time goes by. In addition to the popular MacAdmins India, with monthly hangouts and other events, this year we are excited to hear about the upcoming Mac Admins India conference. Karthik and Shyam join us to talk about their experiences being part of organising this community as well as what they have planned for the conference.
Hosts:
Tom Bridge - @tbridge@theinternet.social Marcus Ra...Episode 406: An App Catalog in the Cloud, with Root3

Root3 is joining us this week to talk about patch management and building a catalog of applications, and their support app.
Hosts:
Tom Bridge - @tbridge@theinternet.social Marcus Ransom - @marcusransomGuests:
Jordy Witteman, Apple Principal Consultant, Root3 - LinkedIn Martin van Diemen, CEO, Root3 - LinkedInLinks:
https://www.root3.nl/en/ https://github.com/root3nl/SupportApp https://appcatalog.cloud/ Hacking with Swift: https://www.hackingwithswift.com/ Swift with Majid: https://swiftwithmajid.com/Sponsors:
Kandji 1Password iMazing Smallstep Watchman MonitoringIf...
Episode 405: Just Us

It’s just us this week, as we talk through the March beta cycle, the iPhone 16e, what we hope is coming any day for the MacBook Air, and everything else that the cat drug in.
Hosts:
Tom Bridge - @tbridge@theinternet.social Marcus Ransom - @marcusransom Rebecca Latimer - LinkedInLinks:
https://www.macadmins.org/news/2025/3/14/mac-admins-foundation-announces-the-charles-s-edge-jr-new-speakers-grant https://www.macrumors.com/2025/03/07/m3-ultra-chip-gpu-benchmark/ https://www.macrumors.com/2025/03/06/m3-ultra-chip-first-benchmark-result/ https://twocanoes.com/products/mac/dfu-blaster/Sponsors:
Kandji 1Password iMazing Smallstep Watchman MonitoringIf you're interested in sp...
Graham Gilbert on the Path to Staff Engineer

Career progression in IT can feel a bit unclear at times. Start as a Helpdesk, get to be a CPE, what happens next? How does development actually work? What do most organizations do to tier their people? How do you move up as an individual contributor? We’re talking with Graham Gilbert of Airbnb about what it’s like to move up toward the rarified air of staff engineer and beyond.
Hosts:
Tom Bridge - @tbridge@theinternet.social Marcus Ransom - @marcusransomGuests:
Graham Gilbert - LinkedIn
Links:
Eisenhower Matrix: http...Vulnerability Management with Kandji

Arek Dreyer from Kandji is back to talk through some updates to Kandji’s platform focused on Security, and he’s brought a friend, Matt Day. From Vulnerability management on through to Behavior Detection, there’s a lot going on in the marketplace today, and Kandji’s got some new tools to work with!
Hosts:
Tom Bridge - @tbridge@theinternet.social Charles Edge - @cedge318 Marcus Ransom - @marcusransomGuests:
Arek Dreyer - LinkedIn Matt Day - LinkedInLinks:
https://www.kandji.io/blog/vulnerability-management
https://www.matildas.com.au/news...
Robert Hammen on Making Changes

Jobs are great, and we’re not just talking Steve here. Some of us are even fortunate enough to have a job. In the current economic climate, changing jobs isn’t always something that can be planned, so holding onto a job is often our primary concern. But how do we know when we have outgrown our current role? What are some of the signs that it’s time to start looking? How do we know if we are jumping out of the frying pan and into the fire? What are some of the strategies that we can use to mak...
Episode 400

Who doesn’t like a nice round number? Much like watching the odometer on the car tick over, we decided to make something special of episode 400, even if it technically might be the 410th episode we recorded… Please allow us to indulge ourselves by having a look back on the almost nine years we have been doing this. We are so humbled y’all are still here!
Hosts:
Tom Bridge - @tbridge@theinternet.social Marcus Ransom - @marcusransom Emily Kausalik-Whittle - @smashismLinks:
https://en.wikipedia.org/wiki/Dataman https://en.wikipedia.org/wi...Episode 399: Omnissa in 2025

Matt from Omnissa joins the Mac Admins team to talk about Omnissa’s latest developments for Workspace ONE, and life after the Broadcom divestment.
Hosts:
Tom Bridge - @tbridge@theinternet.social Marcus Ransom - @marcusransomGuests:
Matt Coppinger - LinkedIn
Links:
2406 release Notes
Microsoft - Best Practices for Deploying Platform SSOSponsors:
Kandji 1Password iMazing Smallstep Watchman MonitoringIf you're interested in sponsoring the Mac Admins Podcast, please email podcast@macadmins.org for more information.
Get the latest about the Mac Admins Podcast, fo...
Episode 398: App Installers and Jamf Pro

Apple has done a great job of providing first-party applications to achieve pretty much anything you would want to do using their devices. From iMovie to Final Cut Pro, contentious changes to the Photos app, and the productivity tools like Pages, Numbers, and the awesome power of Keynote. Despite this, we generally need to provide much more than this to our users, installing applications from many different vendors with wildly varying approaches to installation, configuration and updates. There are almost as many approaches to managing the installation and patching of third-party software as there are vendors, and today we...
Software Bill of Materials with Workbrew

The team at Workbrew has been focused on getting into full production, and they’ve gotten a huge head of steam going in 2024. They’re with us today to talk about SBOMs - Software Bill of Materials - and security in your work environments. Patching remains a really integral part of doing Mac Admin work right, and this critical concept is one we’re going deep on.
Hosts:
Tom Bridge - @tbridge@theinternet.social Marcus Ransom - @marcusransomGuests:
John Britton, Workbrew - LinkedIn Mike McQuaid, Workbrew - LinkedInLinks:<...
CrashPlan's Andrew Orrison talks Backup

Andrew Orrison from CrashPlan joins the pod to talk about a couple topics: how they’ve moved to be their own organization from being part of Code42, and how they use the Mac Admins Slack as a way to support the community.
Hosts:
Tom Bridge - @tbridge@theinternet.social Marcus Ransom - @marcusransomGuests:
Andrew Orrison - LinkedIn
Links:
Mac Admins Slack Vendor Guidelines Parablu acquisition Lady Washington (Ship)Sponsors:
Kandji 1Password Watchman MonitoringIf you're interested in sponsoring the Mac Admins Podcast, please email po...
Episode 395: iMazing is Amazing

Ari from iMazing joins the podcast to talk about iMazing Profile Editor, a tool near and dear to Mac Admins for its wide understanding of the MDM Specification and ability to create signed profiles easily for distribution in the MDM of your choice.
Hosts:
Tom Bridge - @tbridge@theinternet.social Becky Scott - LinkedInGuests:
Ari Leviatan - LinkedIn
Links:
https://github.com/ProfileManifests/ProfileManifests https://www.elliotjordan.com/posts/profilemanifestsmirror/ https://github.com/Jamf-Custom-Profile-Schemas/ProfileManifestsMirror https://xkcd.com/1053/ https://imazing.com/cli https://imazing.com/configurator Rosey...Episode 394: Family Device Control, Part 2

Collin Elliott is back to talk to more about controlling the family devices in your midst.
Hosts:
Tom Bridge - @tbridge@theinternet.social Becky Scott -Â LinkedInGuests:
Collin Elliott -Â LinkedInLinks:
Episode 376: https://podcast.macadmins.org/2024/08/14/episode-376-family-device-control-with-collin-elliott/ https://support.opendns.com/hc/en-us/articles/228006487-FamilyShield-Router-Configuration-InstructionsSponsors:
Kandji 1Password Watchman MonitoringIf you're interested in sponsoring the Mac Admins Podcast, please email podcast@macadmins.org for more information.
Get the latest about the Mac Admins Podcast, follow us on Twitter! We're @Ma...
Good bye and good riddance 2024

Lets look back on 2024 and remember the year that was. There will be lots of laughing, maybe some eye rolling. Probably also some tears.
Hosts:
Tom Bridge - @tbridge@theinternet.social Marcus Ransom - @marcusransom James Smith - LinkedInLinks:
Management profile settings and OS upgrade implications | Der Flounder Episode 359: Mac@Cisco – A Mac Admins Perspective Episode 362: ACES Conference with Justin Esgar Episode 370: Jedda Wignall on Managed Device Attestation Best Practices for Deploying Platform SSO with Microsoft Entra ID–Michael Epping, Mark MorowczynskiSponsors:
Kandji 1Password Watchman MonitoringIf...
Michael & Mark on Entra ID

Entra ID is the current inheritor of the mantle of Active Directory. No, don’t be afraid, we’re not going to do any binding on this show. We’re going to give you the brass tacks for what Microsoft is using Entra for, how Mac Admins should think about it, and how it fits into the modern world for Mac Admins.
Hosts:
Tom Bridge - @tbridge@theinternet.social Marcus Ransom - @marcusransomGuests:
Michael Epping, Senior Program Manager, Microsoft – LinkedIn Mark Morowczynski, Principal Security Researcher, Microsoft – LinkedInLinks:
Extending the AD schema (pay...Episode 391: Mac Admins Foundation

This year, the Mac Admins Foundation is hosting a fundraising drive to build the future of the organization and shore up the financial future of the foundation.
Hosts:
Tom Bridge - @tbridge@theinternet.socialGuests:
John Mahlman - LinkedIn Rebecca Latimer - LinkedIn Erin Merchant - LinkedIn Chris Dawe - LinkedInLinks:
https://www.macadmins.org/ https://xkcd.com/979/Sponsors:
Kandji 1Password Watchman MonitoringIf you're interested in sponsoring the Mac Admins Podcast, please email podcast@macadmins.org for more information.
...
Patrick Wardle on Objective for the We, DoubleYou, & More

Patrick Wardle from DoubleYou and the Objective See Foundation joins us to talk about their recent event in Kyiv, as well as everything Mac Security, along with Mikhail, his collaborator at DoubleYou.
Hosts:
Tom Bridge - @tbridge@theinternet.social Marcus Ransom - @marcusransomGuests:
Patrick Wardle - LinkedIn Mikhail Sosonkin - LinkedInLinks:
Art of Mac Malware, Volume 2: https://nostarch.com/art-mac-malware-v2 OBTS v7.0: https://objectivebythesea.org/v7/index.html https://x.com/patrickwardle/status/1851026703683813771 https://x.com/lorenzofb/status/1836820420747563260 https://www.trellix.com/blogs/research/macos-malware-surges-as-corporate-usage-grows/Sponsors:
Kandji 1Password...Episode 389: North Pole Security & Santa

Santa’s got new digs up at North Pole Security! Join us as we talk with Russell and Pete from North Pole about what Santa’s move means, how it’s developing in the future, and what’s coming next for this powerful Mac Security Tool.
Hosts:
Tom Bridge - @tbridge@theinternet.social Marcus Ransom - @marcusransomGuests:
Pete Markowsky , North Pole Security - LinkedIn Russell Hancox, North Pole Security - LinkedInLinks:
MacSysAdmin 2024 - Santa Past, Present, and Future - A Christmas Carolhttps://www.yout...
Episode 388: Behind the Masque of Network Relays with Matt Vlasach

Who loves VPNs? Folks in the network security team, please put your hands down - we weren’t asking you… Wouldn’t it be great if there was a way that we could offer privacy and protection out there in that wretched hive of scum and villainy we call the internet? Wouldn’t it be even better if it was baked into the operating system so each vendor wasn’t just making things up as they go? Apple announced iCloud private relay in 2021, and in 2023 we got what I guess you could call the “Enterprise version” - Network Relays. Today we have...
Neurodiversity in the Workplace with Rowan Quigley

Do you find that life is like trying to understand code without comments? Many of us are discovering later in life that there is a word that explains why the unwritten rules of life just don’t seem to make sense. Rowan Quigley recently presented at JNUC in Nashville around how workplaces can embrace Neurodiversity, catering for neurodivergent folks as well as neurotypicals.
Hosts:
Marcus Ransom - @marcusransomGuests:
Rowan Quigley - @rquigleyLinks:
Fern Brady https://www.tiktok.com/@cultofpinky/video/7230743131581353242 Piratesoftware - https://www.tiktok.com/@brainystreamers/video/7422629711127334177 Pe...Episode 386: The Art of Conferencing

With JNUC and Macsysadmin last week, conference season is behind us for 2025. Tom and Marcus look back on the conference year that was and discuss how to get the most out of these awesome events
Hosts:
Tom Bridge - @tbridge@theinternet.social Marcus Ransom - @marcusransomLinks:
Jim Rispin - Care & Feeding of your IT Professional https://jc0b.computer/posts/attending-your-first-conference/Sponsors:
Kandji 1Password Watchman MonitoringIf you're interested in sponsoring the Mac Admins Podcast, please email podcast@macadmins.org for more information.
Get t...
Fall 2024 Releases with Apple

Jeremy Butcher returns to the Mac Admins Podcast to talk about this Fall’s releases of new operating systems, a bit on Apple Intelligence, and how Mac Admins should be preparing for these latest releases.
Hosts:
Tom Bridge - @tbridge@theinternet.social Marcus Ransom - @marcusransom Emily Kausalik-Whittle - @emilyoooGuests:
Jeremy Butcher - LinkedIn
Sponsors:
Kandji 1Password Watchman MonitoringIf you're interested in sponsoring the Mac Admins Podcast, please email podcast@macadmins.org for more information.
Get the latest about the Mac Admins Podcast, follow us on...
Live from MacSysAdmin Gothenburg

Join Tom & Guests live from MacSysAdmin in Gothenburg Sweden 2024
Hosts:
Tom Bridge - @tbridge@theinternet.socialSponsors:
Kandji 1Password Watchman MonitoringIf you're interested in sponsoring the Mac Admins Podcast, please email podcast@macadmins.org for more information.
Get the latest about the Mac Admins Podcast, follow us on Twitter! We're @MacAdmPodcast!
The Mac Admins Podcast has launched a Patreon Campaign! Our named patrons this month include Weldon Dodd, Damien Barrett, Justin Holt, Chad Swarthout, William Smith, Stephen Weinstein, Seb Nash, Dan McLaughlin, Joe Sfarra, Nate Cinal, Jon Brown...
Beth Johnson on Compliance

Beth Johnson’s talk at MacAdmins this year was all about bringing Compliance routines to her organization, and we wanted to spend some time getting her to share more about the process, the tools, and most importantly, the philosophy behind her efforts. And we’ll get into her incredibly beautiful slides, also.
Hosts:
Tom Bridge - @tbridge@theinternet.social Marcus Ransom - @marcusransomGuests:
Beth Johnson
Links:
https://www.youtube.com/watch?v=Do8bxvpl7bASponsors:
Kandji Kolide Alectrona Watchman MonitoringIf you're interested in sponsoring the...
An API for Harmonized Tariff Codes, with Diamond Assets

Device Lifecycle is a massive topic for Mac Admins – what’s the right length? how do you purchase? what devices keep their value? – and we’re excited to have Kris Roesken from Diamond Assets here to tell us how their customers are approaching this interesting subject.
Hosts:
Tom Bridge - @tbridge@theinternet.social Marcus Ransom - @marcusransomGuests:
Kris Roesken - LinkedIn Jeremy Egger - LinkedInLinks:
www.diamondassets.com https://clarity.diamondassets.com/ https://www.reddit.com/r/spicypillows/Sponsors:
Kandji 1Password Watchman MonitoringIf you're interested in sponsori...
Enforcing minimum OS with Bushrat Chowdhury

Software Updates is a subject that is dear to the heart of all Mac Admins. Traditionally this was a task that we could only perform after devices were enrolled. Beginning with macOS 14, Automated Device Enrollment began to support the requirement of a Minimum OS Version, which allows us to mandate that the device is updated before we allow it to enroll into our device management system. This week, we’ll talk with Bushrat Chowdhury of Jamf about the adaptation of this feature into the product.
Hosts:
Tom Bridge - @tbridge@theinternet.social Marcus Ransom - @marcusransom...
Jamf Setup Manager

It seems like it’s onboarding assistants all the way down at the moment. Everyone has embraced the idea of ensuring our users are kept informed about what is going on when their device is being configured, but most of them share one thing in common - they run once the user has arrived at the desktop. Today we are going. to discuss Jamf Setup Manager, which runs before the setup assistant during enrollment.
Hosts:
Tom Bridge - @tbridge@theinternet.social Marcus Ransom -Â @marcusransomGuests:
Mischa van der Bent -Â LinkedIn Anthony Darlow - Li...Just Us on 2024 Fall Releases

With major Apple platform releases and a live event around the corner, Tom, Marcus, and Emily round up for a look back at Sonoma and iOS 17, an anxiety check on Sequoia and iOS 18, and ponder some of the questions admins are eager to have answered this Septober.
Hosts:
Tom Bridge - @tbridge@theinternet.social Marcus Ransom - @marcusransom Emily Kausalik-Whittle - @emilyoooSponsors:
Kandji 1Password Watchman MonitoringIf you're interested in sponsoring the Mac Admins Podcast, please email podcast@macadmins.org for more information.
Get the latest about the Mac Admins...