Steven Palmesano
8e44fb59f1
This enforces NTP on macOS devices. The "Set date and time automatically" toggle can be verified with `systemsetup - getusingnetworktime` (you can write a script to put the output of that into a file, then use the `file_lines` table in a policy), and set with `systemsetup - setusingnetworktime on` (which could be a script automation that kicks off if a device fails the policy). If you want to prevent users from changing it, you can use the attached config profile. Note that it requires setting the NTP server, but this is most likely just the default Apple server. The `setusingnetworktime` will work even with the Ul locked. <img width="1458" height="320" alt="Screenshot 2026-05-14 at 08 19 28" src="https://github.com/user-attachments/assets/22064715-1548-490c-b3e0-bde51dd26f12" /> <!-- This is an auto-generated comment: release notes by coderabbit.ai --> ## Summary by CodeRabbit * **New Features** * Added a macOS configuration profile that automatically configures devices to use Apple’s time server. * Included a human-readable profile name and standard configuration metadata for easier deployment. <!-- end of auto-generated comment: release notes by coderabbit.ai -->
Solutions
Best Practices
General
- Name the file what the profile does.
- For example, instead of
googlePlayProtectVerifyApps.json(the name of the Android policy for this control), describe what it does:enforce-google-play-protect.json.
- For example, instead of
- Use kebab case in file names, with all letters in lowercase.
- Instead of
passwordPolicy.json, usepassword-policy.json.
- Instead of
- Be sure to end files with an empty newline.
symlinks
If a solution is applicable to multiple platforms, keep the original in the main platform directory and symlink it to the other platforms. For example, if an Apple configuration profile can be used on both macOS and iOS, use macOS as the source, and create a symlink in the iOS directory.
cd docs/solutions/ios-ipados/configuration-profiles/- Note that this is the destination that we want the symlink to be in.
ln -s ../../macos/configuration-profiles/my-profile.mobileconfig .- The
.here at the end means the current directory, and will use the same file name as the original (which is what we want).
- The
git add profile.mobileconfiggit commit