search

rtrouton / rtrouton_scripts

Scripts to share
MIT License
1.3k stars 491 forks source link

Using new version #34

Closed brtr92 closed 6 years ago

brtr92 commented 6 years ago

Hi,

how can i best setup check_apfs_encryption, smart computer group? and policy ?

thank you

chasetb commented 6 years ago
  1. Create an Extension Attribute using the 'Script' option as input type and paste the contents of check_apfs_encryption_extension_attribute.sh in the 'Script' dialog box.
  2. Create one or more SmartGroups which look for specific results of the EA. For example, you may want to create a SmartGroup called "Not Encrypted APFS Volume" that includes the above EA whose result is: FileVault is Off. (which would mean not encrypted, of course.)
  3. Create a policy scoped to the above SmartGroup which will enforce FileVault encryption either through a built-in policy action or a script of your choosing. Don't forget to set the frequency to something like "Once a day" and perhaps have a notification to the user for transparency's sake.