System information

Parallels Mac Management Features

4 To include an option in the configuration profile and to specify its value click the ON/OFF switch

to toggle it to "ON". To exclude an option, toggle the switch to "OFF". The excluded options will

not be evaluated on managed Macs.

5 When finished, click the OK button to close the dialog. To modify the profile, right-click it and

then click Edit Parallels Configuration Item in the pop-up menu.

To evaluate Mac computers for compliance, you need to add the configuration item to a baseline

and then deploy it to a Mac collection. See Deploying Configuration Baseline (p. 86) for more

information.

Using Scripts to Assess Compliance

In addition to configuration profiles described in the previous sections, you can assess the

configuration compliance of client Macs using scripts written in any language supported by OS X.

To use scripts, you need to create a standard SCCM configuration item in the Configuration

Manager console. When creating a configuration item, you have an option to specify a discovery

script and a remediation script. The discovery script is used to obtain the value of a setting on a

Mac to be assessed for compliance. The remediation script is used to remediate a noncompliant

value if needed (creating a remediation script is optional).

When a discovery script returns a value, it is assessed for compliance using the compliance rules

defined for it. If the value is noncompliant and a remediation script exists, the value is passed to the

script so that the necessary modifications can be done on the Mac. If a remediation script doesn't

exist, the assessment stops and a noncompliance is reported to SCCM. Each discovery script can

assess a single value, but multiple scripts with their own compliance rules can be added to a given

configuration item.

This section describes how to:

• Create a configuration item using the Create Configuration Item Wizard (p. 82)

• Create a dis

covery script (p. 84)

• Create a remediatio

n script (p. 84)

• Specify

the script interpreter to be used (p. 85)

• Defi

ne Compliance Rules (p. 85)

Creating Configuration Item

To use scripts to assess compliance, you need to create a standard SCCM configuration item. To

do so, in the Configuration Manager console, navigate to Assets and Compliance / Overview /

Compliance Settings. Right-click Configuration Items and then click Create Configuration Item

in the pop-up menu. The Create Configuration Item Wizard opens. Populate the pages of the

wizard as described below.