So, I’ve attempted this multiple times and took a short break to clear my head. Cannot seem to get this wrapped up, and it’s a necessity.
Hi, I’m Robert and I’m a Security Engineer for my company. Part of my portfolio is Enterprise Software Management via Intune. I manage all software deployments for the company on a tenant level, using assignment groups to make certain apps available to pertinent groups. Over the past 3 years, I’ve learned a lot where Intune deployments and the Windows OS intersect. I’m still on the learning path, but I’m figuring out the nuances, the lowest common denominators and getting better at troubleshooting issues. This is where things get complicated: 100% of my experience in this arena is Windows 10 / Windows 11 based. And we now have a very small fleet (<10 devices) of Mac devices for our Marketing team.
Now, I’ve tried everything I can find online, but the documentation on how to pull this off via Intune is scarce and incomplete. Reddit has been the most...verbose? But still not able to get things working. I’ve done many, many things, but this is just the most recent and the most well documented:
- I installed Packages on a testbench MacBook Pro I was deployed.
- Went to the Jump Clients page in our BeyondTrust tenant and downloaded the Mac installer (dmg).
- Imported the DMG into a new Packages project.
- Added the following post install script (per sources on Reddit)
#!/bin/bash
PROCESS=bomgar
number=$(ps aux | grep -v grep | gre -ci $PROCESS)
if [ $number -eq 0 ]
then
sciprtDir=$(dirName $0)
hdiutil attach -nobrowse -mountpoint /Volumes/bomgar-scc $scriptDir/bomgar-scc-guid.dmg
sudo /Volumes/bomgar-scc/Open\ To\ Start\ Support\ Session.app/Contents/MacOS/sdcust --silent
sleep 15
fi- Save and build package.
- Upload to Intune, assign to groups, deploy.
Prior to clicking deploy, setting up the Bomgar.mobileconfig file as outlined here. This is the only place I found that states this must be done, so if this is wrong, please advise how to reverse/remove it.
It appears to successfully deploy, according to Intune, but the devices never show up in our Jump Client list, and no icon ever populates on the end devices.
If you require more information, please advise. If you have some guidance or a tutorial or just a good point in the right general direction, I would be greatly appreciative. I’ve looked at the offical documentation, but it appears to only support JAMF, which I do not have. Everything else I’ve found pertaining to Intune is either wrong (I’m assuming, they didn’t work) or wildly out of date (click on this button...the button doesn’t exist, etc.). I’m struggling here, I’ve had mostly good experiences with BeyondTrust but this making me want to pull my non-existent hair out.
