Activity in IT Topics
JumpCloud logs to SentinelOne XDR
We use SentinelOne EDR and I just found out that we have XDR data ingestion with our plan, but are not using. We can send pretty much any types of logs (so they say ...) to the XDR. Has anyone been sending their JumpCloud logs to SentinelOne XDR? ...
Setup Kiosk Mode On Windows 10/11
Hey folks, It's been a while and finally I got a little breathing room to share my Friday joy (again) . Kiosk Mode on Windows - on a large scale? and you looking for a way to do it without paying for Intune? This post will get you covered, please r...
How to establish Device Trust for Apple iOS Devices with Okta by using JumpCloud's Apple MDM?
Hi Community FolksYesterday I wrote about: "How to establish Device Trust for Android Devices with Okta by using JumpCloud's Android EMM?"Now you might wonder: Can I do the same for iOS-devices as well? Yes, certainly you can. Please refer to the art...
Payloads to Set Applications With Permission To Screen Record (MacOS Ventura Privacy & Security)
I have consulted with the Apple Platform Deployment and the Device Management Documentation but am unable to find the setting that allows/controls applications with access to Privacy & Security > Screen Recording.In MacOS Ventura, the user must toggl...
Disabling "Optimizing Your Mac"
We are seeing growing interest to remove the MacOS "Optimizing Your Mac" notifications.Having Google'd I don't see where this is handled, or what policy it relates to.Any ideas?
Upgrade Ubuntu to Lunar Lobster
Just a quick blurb: We're posted a helpful tutorial on how to upgrade Ubuntu to Lunar Lobster. The upgrade path is Ubuntu 22.04 to Ubuntu 23.04. Lunar Lobster is more productive, easier to manage, and optimized for gaming. I made a video to help w/ t...
How to establish Device Trust for Android Devices with Okta by using JumpCloud's Android EMM?
HelloRecently I posted about "How to establish Device Trust (managed devices) for Okta by using JumpCloud as factor for authentication?" - which enables you to make use of Device Trust Certificates from JumpCloud with Okta. But how about mobile devic...
Resolved! Enabling Jumpcloud SSO for Microsoft 365
Has anyone made this change? it seems like a big one and I'm not sure if it should be done or not.I'm happy with Jumpcloud and it's pretty heavily configured now but I'm not sure if piping everything through Jumpcloud is going to be good. Has anyone ...
A Tale of Two Certs
The past two hours of my life were spent taking practice certification exams for Microsoft's SC-300: Microsoft Identity and Access Administrator (for Azure AD). This was fresh off of obtaining a certification to become an Android Enterprise certified...
Setting up SSO for AWS IAM or AWS Identity Center(?)
I know the subject of this post may seem confusing at first, but rest assured, you will leave with a clear understanding of these concepts (hopefully). Keep calm and read on What are these terms? First thing first - let's clarify AWS IAM and AWS Ide...
HRIS Integration Deep Dive - Onboarding
Hey Folks, (A massive kudos to my colleague @SamMorganJC for supporting me throughout the process! This post wouldn't have been possible without her invaluable guidance.) Following my post about onboarding users from HRIS to JC, a lot of people have...
Are Integrated MDM/EMM and IAM Vendors Really Zero Trust?
Zero trust as a strategy is essentially to trust nothing, verify everything. A colleague and I had an interesting chat the other day where we examined how that concept applies to the intersection of device management and identity. I created a decisio...
Remote Assist - Usage & Frequency
Hi there!For those of you who are interested in or are currently using a remote assist solution, I’m curious and interested to find out:When would/do you use remote assist? (Eg, Onboarding a new hire, troubleshooting desktop problems, etc.)How often ...
How to run queries using SQL against JumpCloud API's by using Steampipe
Hello Have you heard of Steampipe before? Steampipe allows you to run queries in SQL against various (more than 200) cloud services including AWS, Github, Azure, Slack, and JumpCloud as well - along with many others. All you need (on macOS) is to ins...
How To: Configure JumpCloud RADIUS and Groups to work with Sonicwall SMA 1000 series
If helpful to others, I have successfully configured JumpCloud RADIUS and Groups to work with a Sonicwall SMA 1000 series VPN box (SMA 6210 specifically). General config steps:1. RADIUS services configured and working for the Sonicwall SMA in both JC...
M365 Login Window Flashing up After User Sync
I have a user who I just synced up to M365/Azure and throughout the day, a window the size of the M365 login window flashes up quickly then goes away. This is on a Mac Running Ventura 13.2.1. I have considered uninstalling the app and reinstalling, b...
Wazuh SIEM x JumpCloud
Hi Community ,Since JumpCloud does not notify on Directory Insights logs, Directory Insights can be integrated with any third-party SIEM tool as we already know.Wazuh is a free and open-source security platform that unifies XDR and SIEM protection fo...
Giving LastPass a last pass - exporting folders/items and import them into JumpCloud Password Manager
HiThe recent (and not so recent) news about LastPass have been - at least to me - literally horrifying. I moved out of LastPass more than a decade ago (to be precise after their security incident on May 3, 2011) and started using 1password from then ...
Commands for Critical Outlook/Exchange Privilege Escalation
It's been a minute since I posted about using JumpCloud Commands for security remediations. There's a particularly nasty zero day that's been actively exploited now that involves attackers obtaining an NTLM hash (Windows password) through Microsoft 3...
Extra fun security news 9 Mar 2023 edition
We didn't do news on the IT hour, but partway through, these two nuggets of joy from bleepingcomputer poped up on my phone:IceFire ransomware now encrypts both Windows and Linux: https://www.bleepingcomputer.com/news/security/icefire-ransomware-now-e...
What do you think about using AI like ChatGPT in your daily work?
Recently @JCDavid used ChatGPT to write a PowerShell script: Using PowerShell to Install a Printer ... using ChatGPT. Have you tried using AI solutions to help you solve a problem recently? Or maybe get past a blank page so you're not starting from s...
Directory Insight SIEM Integrations
Hey Folks, As many of you might be wondering (or already asked ) about integrating SIEM solutions with JumpCloud logs - Directory Insights to be more specific, in order to centralise security event monitoring and management, @JuergenKlaassen had a w...
Crowdstrike Custom SAML app not (fully) working
Hi everyone, I've been trying to implement Crowdstrike's SSO following the documentation that can be found in Crowdstrike's portal, and it somewhat-works. Here's what I mean:After following the steps, when clicking on the app, I get re-directed to Cr...
Resolved! Trying to remotely send a command to Install BitWarden on a Machine (Not Working)
Hello JumpCloud Community!I'm trying to make a command that installs Bitwarden on some of my machines remotely. I'm utilizing Chocolatey Package installer. I've made the script and it runs perfectly fine locally, but when I go into remote use of it, ...
U.S. National Cybersecurity Strategy
This news cycle has a big drop: the Biden admin's national cybersecurity strategy. A friend worked on it and had this to say: "The strategy establishes an affirmative, values-driven vision for a secure cyberspace that creates opportunities to achieve...
Diet Cola Compliance is Here
IT professionals oftentimes talk over the requirements of small and medium-sized enterprises (SMES) with a lot of jargon. Compliance (and laws punishing data breaches) are becoming increasingly widespread, so it's understandable that it's the topic d...
One user to multiple devices
Jumpcloud docs mentions how to take over an existing local account for a user that has one device, but say a user has two devices with two different local accounts. How can that one user be binded to both those local accounts on the two devices witho...
TOTP for Admin Account Stopped Working
Last week I went to login as an Administrator account, only to find that my TOTP code was no longer working from my iOS Authenticator app. JumpCloud said the code was not valid. After a few login attempts, my admin account is now locked. Resetting th...
Using PowerShell to Install a Printer ... using ChatGPT
Last night I asked ChatGPT to write me a PowerShell Script to install a printer from an installer in my Dropbox tenant. This was what it gave me: # Define the URL of the print driver file in Dropbox $driverURL = "https://www.dropbox.com/s/example/e...
Encrypt additional drives on Ubuntu Desktop
Hi Folks, Pretty sure you came across this KB for enabling the full disk encryption on the root drive when installing Ubuntu, and utilising JC's Linux FDE policy to monitor the status. But how about the additional drives on the box? These are not sh...
