macOS Reinstall

Plan and script to restore app and settings after MacOS reinstall.

1. Company Stuff

• Application pushed from Intune:

  1. Intune Company Portal: Add the macOS Company Portal app
  2. O365: Deploying Microsoft 365 Apps for Mac with Microsoft Intune - A Deep Dive
  3. Edge: Add Microsoft Edge to macOS devices using Microsoft Intune
  4. Simple Sign Desktop:
  • Intune Customer Experience Engineering Shell Script Repo
  • Deploying macOS apps with the Microsoft Intune scripting agent
  5. TeamViewer
  6. Rossetta2

• Policy settings to push from Intune:

  • VPN policy Add VPN settings on macOS devices in Microsoft Intune
  • Apple Kerberos SSO app extension Kerberos Single Sign-On (SSO) app extension for macOS
  • Microsoft Enterprise SSO plug-in Use the Microsoft Enterprise SSO plug-in on iOS/iPadOS and macOS devices in Microsoft Intune

• Manual Configuration:

  • Kerberos:
    • Open -> Menu Bar -> Open "Key" Icon -> Login to get Kerberos ticket
    • Open -> System Settings -> Network account server -> Edit -> Add -> Server -> Fill Down:
      • Server address,
      • User name with privileges to join compute to Active Directory Domain,
      • Provide User Password
    • Open -> Ticket Viewer -> Add Identity -> Enter Company credential -> Set as Default
  • Simply Sign Desktop:
    • After the Simply Sign Desktop application is installed, double tap on the Adobe Acrobat App -> Get Info -> Set "Open using Rosetta"

---

To Do:

• Write a script to renew Kerberos Token automatically
• Add Kerberos configuration (command line/Intune script)
• Config Internet Account from the command line
• Check Point Endpoint Security VPN needs a deep dive for the correct configuration
• Set "Open using Rosetta" from the command line for Adobe Acrobat Reader (without this, SimplySign does not work!)

---

2. Privat Stuff

Install and configure Xcode console tools.

Next, install Homebrew with the available applications and tools:

• setapp
• iterm2
• 1password
• adobe-acrobat-reader
• balenaetcher
• gpg-suite-no-mail
• grammarly-desktop
• handbrake
• moom
• powershell
• visual-studio-code

Application for manual installation.

Setapp applications:

• SnippetsLab
• Get Backup Pro
• CleanMyMac X
• Gemini
• iStats Menus
• Lungo
• Meta
• Mission Control Plus
• Nitro PDF Pro
• Session

Application to install from producer websites:

• DisplayLinkManager
• Synology Drive Client
• TinkerTool
• Docker
• Parallels Destop
• Azure Data Studio
• Azure Storage Explorer
• Check Point Endpoint Security VPN
• Mac Evaluation Utility
• YubiKey Manager

Aplication to install from AppStore:

• Notability
• Blackmagic Disk Speed Test
• GoodNotes 5
• HP Smart for Desktop
• Pluralsight: Learn Tech Skills
• VCE Simulator
• 1Password for Safari (Extension)
• Grammarly for Safari (Extension)
• Notability

Settings

• run macsettings.sh

xcode-select --install

CurrentUser=$(echo "show State:/Users/ConsoleUser" | scutil | awk '/Name :/ && ! /loginwindow/ {print $3}')

/bin/bash -c "$(curl -fsSL https://raw.githubusercontent.com/Homebrew/install/HEAD/install.sh)"
echo '# Set PATH, MANPATH, etc., for Homebrew.' >> /Users/$CurrentUser/.zprofile
echo 'eval "$(/opt/homebrew/bin/brew shellenv)"' >> /Users/$CurrentUser/.zprofile
eval "$(/opt/homebrew/bin/brew shellenv)"

brew install --cask setapp
brew install --cask iterm2
brew install --cask 1password
brew install --cask 1password/tap/1password-cli
brew install --cask adobe-acrobat-reader
brew install --cask balenaetcher
brew install --cask gpg-suite-no-mail
brew install --cask grammarly-desktop
brew install --cask handbrake
brew install --cask moom
brew install --cask powershell
brew install --cask visual-studio-code
brew install --cask cheatsheet
brew install --cask latest
brew install lsd
brew install glow
brew install nmap
brew install pwgen
brew install dotnet

cat << EOF >> ~/.zprofile
# Add Visual Studio Code (code)
export PATH="\$PATH:/Applications/Visual Studio Code.app/Contents/Resources/app/bin"
EOF

cat << EOF >> ~/.zprofile
# Add Docker Desktop for Mac (docker)
export PATH="$PATH:/Applications/Docker.app/Contents/Resources/bin/"
EOF

brew install --cask obsidian
brew install --cask rectangle
brew install --cask the-unarchiver
brew install --cask vlc
brew install --cask whatsapp
brew install --cask zoom
brew install --cask latest
brew install midnight-commander
brew install fig

Settings: Acrobat Reader:

• Turn On "Open using Rosetta" Finder:
• Show all filename extensions
• Keep folders on top:
  • In windows when sorting by name
  • On Desktop
• When performing a search:
  • Search the Current Folder On the Desktop Set the Default Internet browser