WEBVTT

00:05.080 --> 00:09.610
In the next section of videos, we're going to discuss using a program called Bootstrappers to get your

00:09.610 --> 00:15.100
computer from an out of state to a production state with as little human interaction as possible.

00:15.910 --> 00:20.860
Now, normally, when you take a computer out of the box and you let it boot up, the Apple setup assistance

00:20.860 --> 00:26.620
starts and the first thing it asks you to do is to create a user account, which then becomes an administrator

00:26.620 --> 00:27.010
account.

00:27.460 --> 00:32.380
Now, if you don't want your end users to become administrators, then you're basically forced to have

00:32.380 --> 00:34.760
someone from your technical team set up the computer.

00:35.350 --> 00:41.440
Now, you may not want your end users to set up their computers, but if you follow this bootstrap or

00:41.440 --> 00:47.410
procedure, then you actually could have end users set up their own computer to start the bootstrap

00:47.470 --> 00:48.070
procedure.

00:48.070 --> 00:50.270
You need to boot your computer into recovery mode.

00:50.650 --> 00:55.900
Now, we're in recovery mode and I'm going to go ahead and run this utility and you're going to see

00:55.900 --> 00:58.960
that we are Bhoot from the recovery partition.

00:58.960 --> 01:02.410
And then we also have a partition on the machine called Macintosh Hard Drive.

01:04.140 --> 01:10.200
Now, if we go into utilities and we change that Macintosh hard drive volume, then you're going to

01:10.200 --> 01:16.650
see that there are no user accounts on this machine and that's because this computer hasn't been run

01:16.650 --> 01:18.860
in the setup assistant hasn't been run yet.

01:19.260 --> 01:22.190
So, again, this computer is in and out of state.

01:22.290 --> 01:29.220
So to start bootstrap or we're going to go ahead and run in HDI util and then attach and then the path

01:29.220 --> 01:31.020
to our bootstrap volume.

01:40.870 --> 01:47.290
And then once it mounts, we're going to go ahead and run the run command off of our bootstrap volume.

01:50.040 --> 01:55.020
And how we get to the food strapper menu, so next we're going to choose the volume that the computer

01:55.020 --> 02:00.570
is going to boot from and in our case, that is Macintosh hard drive next, that's going to run a series

02:00.570 --> 02:01.830
of scripts and packages.

02:01.830 --> 02:06.290
And in order we specify and in our case, the first one is to enter a computer name.

02:06.690 --> 02:11.820
So we're going to go ahead and enter the computer name for this machine and it's going to go ahead and

02:11.820 --> 02:12.870
rename the computer.

02:13.170 --> 02:15.390
And then after that, it's going to run some packages.

02:15.390 --> 02:22.950
So it's installing monkey tools and Monkey Kickstart, which is a which basically puts a monkey into

02:22.950 --> 02:24.570
bootstrap mode, which we'll cover.

02:24.840 --> 02:31.140
And then it's going to run a package to get the setup assistant and then it's going to install a package

02:31.140 --> 02:33.530
to create an administrator account with a known password.

02:33.900 --> 02:38.130
And now it's running a script that's going to allow us to choose what monkey manifests we want to use.

02:38.130 --> 02:43.170
And you can see that there's one based off of a serial number or hostname site default and then one

02:43.170 --> 02:45.570
called Luby or at a box experience.

02:45.570 --> 02:47.510
And we're going to go ahead and choose that one.

02:48.390 --> 02:53.550
And then after that, it's running another script that's going to suppress the diagnostics dialogue

02:53.550 --> 02:59.580
when a user logs in for the first time and it wants to know now if we want to restart or shut down now,

02:59.580 --> 03:02.340
we could shut down and ship this computer somewhere.

03:02.490 --> 03:06.630
And when it boots up, it's going to just it'll already be named.

03:06.630 --> 03:11.340
And then monkey will do whatever work it needs or we can go ahead and restart it, which I'm going to

03:11.340 --> 03:14.850
do, and then the computer will restart and start configuring itself.

03:16.270 --> 03:21.970
So when you take a computer out of the box and you set it up with the setup assistant, you remember

03:21.970 --> 03:26.950
that the Apple remote desktop agent's not set, SSA isn't set.

03:27.130 --> 03:30.380
If you have some other management system, no agent is installed.

03:30.670 --> 03:37.630
So basically what we've done is following a simple procedure with very little user input and without

03:37.630 --> 03:39.990
needing an administrator account or password.

03:40.210 --> 03:45.700
What we've effectively done is taken the computer out of the box and within a couple of minutes the

03:45.700 --> 03:49.930
computer will ultimately be set up by monkey with the correct name, correct.

03:49.940 --> 03:55.420
Active Directory organization unit that will get the right printer will be configured for remote management.

03:55.730 --> 03:57.290
It's got the right manifest.

03:57.290 --> 04:00.340
The monkey is going to do whatever we want to this computer that we need.

04:02.450 --> 04:06.710
All right, so now that the computers boot up, you can see that monkey is running now.

04:06.710 --> 04:08.980
It's in a mode called bootstrap mode.

04:08.990 --> 04:14.960
And what bootstrap mode basically means is, is that monkey is going to run, it's going to finish and

04:14.960 --> 04:19.680
it's going to run again and it's going to keep running until there's no more work for it to do.

04:20.120 --> 04:24.740
And so what that means is monkey will even run again after a reboot instantly.

04:25.100 --> 04:29.930
So right now, it's installing some packages and some mobile config profiles and scripts.

04:30.200 --> 04:36.440
And if any of these are set to reboot the computer, which I've actually made the join domain package

04:36.440 --> 04:39.350
do, then Monkey will go ahead and reboot.

04:39.500 --> 04:42.820
And then monkey after the reboot is going to continue running again.

04:43.040 --> 04:47.990
And like I said, it will just keep on running and running until there's no more work for it to do.

04:48.140 --> 04:51.080
And then the computer will be in a production stage.

04:51.600 --> 04:51.920
All right.

04:51.920 --> 04:55.310
So I'm going to just speed this up so we can see the process.

05:03.680 --> 05:10.370
All right, so as you can see, Monkey is finished installing stuff, but it was given a command to

05:10.370 --> 05:12.620
reboot, which that it's going to do now.

05:12.860 --> 05:17.140
And then after it comes back up from the reboot, you'll see monkeys start running again.

05:27.740 --> 05:33.350
All right, so as you can see, the computers back up and monkeys started again and it's found no additional

05:33.350 --> 05:36.050
work to do, so now we have the ability to log in.

05:36.230 --> 05:39.560
And right now our computer is in a production state.

05:53.780 --> 05:58.370
All right, so as you can see, when we logged in, we went directly to the desktop, we weren't asked

05:58.370 --> 06:02.750
any of the questions that you normally get asked when you log into a system for the first time.

06:03.360 --> 06:05.900
And so I want to point out a couple of things.

06:05.900 --> 06:11.540
And that is, first of all, if we go to sharing, you can see that our computer name is named how we

06:11.540 --> 06:13.240
set it in Bootstrap.

06:13.250 --> 06:17.370
Our remote log in is turned on in remote management or also turned on.

06:17.570 --> 06:24.740
So already our computer is manageable, not to mention the fact that that monkey has been installed

06:24.740 --> 06:25.960
and we have a manifest.

06:26.930 --> 06:34.970
So in addition, a user account, an administrator user account has been set up with a password that

06:34.970 --> 06:37.640
the person that set the computer up doesn't even know.

06:38.000 --> 06:44.900
And it was joined to our domain, which is how we were able to log in with our network account and when

06:44.900 --> 06:46.370
we go to profiles.

06:47.310 --> 06:53.030
You can see that we have a bunch of profiles, including our Velzy preferences or active directory,

06:53.040 --> 06:59.340
joined us to the right organizational unit, and there's some new mobile config profiles here that we

06:59.340 --> 07:00.600
haven't worked with yet.

07:00.810 --> 07:06.120
And we have one to skip the remaining questions that Mojave asked you when you log in for the first

07:06.120 --> 07:11.270
time like like light or dark appearance, privacy and iCloud set up.

07:11.580 --> 07:16.890
And then there's also another mobile config profile that skips a firewall question, which we'll get

07:16.890 --> 07:18.300
to in the next section.

07:19.890 --> 07:27.240
Now, we also have gotten our printer installed, and if we go to the applications menu, you'll see

07:27.240 --> 07:33.120
that we have Velzy installed in Velshi only and that was just for demonstration purposes.

07:33.450 --> 07:39.270
If we launch Velzy, you'll see that we're not going to get any the first run questions because our

07:39.630 --> 07:41.490
preference is packages were applied.

07:41.940 --> 07:49.230
And then if we go to monkey and let Monkey run, then you'll see that if we go to software, we have

07:49.230 --> 07:51.270
some optional software to install.

07:51.840 --> 07:59.040
So as you can see, bootstrappers with monkey is pretty powerful that a non admin user can go ahead

07:59.040 --> 08:05.220
and set up a machine, name it, and effectively it will join the domain, install whatever software

08:05.220 --> 08:07.110
that you want or as little as you want.

08:07.470 --> 08:11.010
And you could have your end users install whatever software they want.

08:11.010 --> 08:15.030
Or you could push out all the software that you want to them automatically.

08:15.540 --> 08:22.320
Getting a computer from out of the box to production just takes a few minutes and very little user interaction.

08:22.530 --> 08:26.760
And in the next section, I'm going to teach you how to install your own bootstrap or environment.
