Merge pull request #6462 from aczechowski/cz-12927803-macos

macOS deprecation in ConfigMgr

Author: LJSpiller

memdocs/configmgr/apps/get-started/creating-mac-computer-applications.md

@@ -2,7 +2,7 @@
 title: Create Mac computer applications
 titleSuffix: Configuration Manager
 description: See which considerations you must take into account when you create and deploy applications for Mac computers.
-ms.date: 10/06/2016
+ms.date: 01/05/2022
 ms.prod: configuration-manager
 ms.technology: configmgr-app
 ms.topic: conceptual
@@ -15,6 +15,9 @@ ms.localizationpriority: medium
 
 *Applies to: Configuration Manager (current branch)*
 
+> [!IMPORTANT]
+> Starting in January 2022, this feature of Configuration Manager is deprecated.<!-- 12927803 --> For more information, see [Mac computers](../../core/plan-design/configs/supported-operating-systems-for-clients-and-devices.md#mac-computers).
+
 Keep the following considerations in mind when you create and deploy applications for Mac computers.  
 
 > [!IMPORTANT]  

memdocs/configmgr/compliance/deploy-use/create-configuration-items-for-mac-os-x-devices-managed-with-the-client.md

@@ -2,7 +2,7 @@
 title: Create configuration items for macOS
 titleSuffix: Configuration Manager
 description: Use the Configuration Manager macOS X configuration item to manage settings for macOS devices.
-ms.date: 05/08/2019
+ms.date: 01/04/2022
 ms.prod: configuration-manager
 ms.technology: configmgr-compliance
 ms.topic: how-to
@@ -14,6 +14,9 @@ ms.localizationpriority: medium
 
 # Create configuration items for macOS X devices
 
+> [!IMPORTANT]
+> Starting in January 2022, this feature of Configuration Manager is deprecated.<!-- 12927803 --> For more information, see [Mac computers](../../core/plan-design/configs/supported-operating-systems-for-clients-and-devices.md#mac-computers).
+
 Use the Configuration Manager **Mac OS X (custom)** configuration item to manage settings for macOS X devices that are managed by the Configuration Manager client.  
 
 The macOS X operating system uses property list (.plist) files to store application settings. Use compliance settings to evaluate and remediate settings in a property list file. You can also manage macOS X settings by writing a shell script that returns a value that you can evaluate and remediate for compliance.  

memdocs/configmgr/compliance/get-started/get-started-with-compliance-settings.md

@@ -2,7 +2,7 @@
 title: Get started with compliance settings
 titleSuffix: Configuration Manager
 description: Learn about core concepts and how compliance settings work
-ms.date: 04/05/2021
+ms.date: 01/04/2022
 ms.prod: configuration-manager
 ms.technology: configmgr-compliance
 ms.topic: conceptual
@@ -11,6 +11,7 @@ ms.author: mstewart
 manager: dougeby
 ms.localizationpriority: medium
 ---
+
 # Get started with compliance settings in Configuration Manager
 
 *Applies to: Configuration Manager (current branch)*
@@ -36,6 +37,9 @@ Configuration items fall into two main categories:
 | Windows Phone devices (enrolled with on-premises MDM) | Select settings from a predefined list. |  
 | Mac computers (with the Configuration Manager client) | Create custom configuration items to assess objects such as macOS preferences, and results returned by a script. |  
 
+> [!NOTE]
+> On-premises MDM and the Configuration Manager client for macOS are both deprecated. For more information, see [Removed and deprecated features for Configuration Manager](../../core/plan-design/changes/deprecated/removed-and-deprecated-cmfeatures.md).<!-- 12454901,12927803 -->
+
 ## What is a configuration item?
 
 A configuration item is a container that stores specific information. The information you configure depends on the configuration item type. Configuration items can include the following information:

memdocs/configmgr/core/clients/deploy/deploy-clients-to-macs.md

@@ -2,7 +2,7 @@
 title: Deploy Mac clients
 titleSuffix: Configuration Manager
 description: Learn how to deploy clients to Mac computers in Configuration Manager.
-ms.date: 12/10/2018
+ms.date: 01/05/2022
 ms.prod: configuration-manager
 ms.technology: configmgr-client
 ms.topic: conceptual
@@ -16,6 +16,9 @@ ms.localizationpriority: medium
 
 *Applies to: Configuration Manager (current branch)*
 
+> [!IMPORTANT]
+> Starting in January 2022, this feature of Configuration Manager is deprecated.<!-- 12927803 --> For more information, see [Mac computers](../../plan-design/configs/supported-operating-systems-for-clients-and-devices.md#mac-computers).
+
 This article describes how to deploy and maintain the Configuration Manager client on Mac computers. To learn about what you have to configure before deploying clients to Mac computers, see [Prepare to deploy client software to Macs](prepare-to-deploy-mac-clients.md).
 
 When you install a new client for Mac computers, you might have to also install Configuration Manager updates to reflect the new client information in the Configuration Manager console.
@@ -77,7 +80,10 @@ For more information, see [How to configure client settings](configure-client-se
 
 ## <a name="bkmk_download"></a> Download the client for macOS
 
-1. Download the macOS client file package,  [Microsoft Endpoint Configuration Manager - macOS Client (64-bit)](https://www.microsoft.com/download/details.aspx?id=100850). Save **ConfigmgrMacClient.msi** to a computer that runs Windows. This file isn't on the Configuration Manager installation media.  
+> [!NOTE]
+> The macOS client installation package isn't available for new deployments, but existing deployments are supported until December 31, 2022.<!-- 12927803 -->
+
+1. Save **ConfigmgrMacClient.msi** to a computer that runs Windows. This file isn't on the Configuration Manager installation media.  
 
 2. Run the installer on the Windows computer. Extract the Mac client package, **Macclient.dmg**, to a folder on the local disk. The default path is `C:\Program Files\Microsoft\System Center Configuration Manager for Mac client`.  
 

memdocs/configmgr/core/clients/deploy/plan/determine-the-site-system-roles-for-clients.md

@@ -2,7 +2,7 @@
 title: Site system roles for clients
 titleSuffix: Configuration Manager
 description: Determine site system roles for clients in Configuration Manager.
-ms.date: 04/05/2021
+ms.date: 01/04/2022
 ms.prod: configuration-manager
 ms.technology: configmgr-client
 ms.topic: conceptual
@@ -72,6 +72,9 @@ The reports aren't needed to deploy clients. You can see some deployment informa
 
 ## Enrollment point and enrollment proxy point
 
+> [!IMPORTANT]
+> With the deprecation of on-premises MDM and the Configuration Manager client for macOS, these site system roles are also deprecated. For more information, see [Removed and deprecated features for Configuration Manager](../../../plan-design/changes/deprecated/removed-and-deprecated-cmfeatures.md).<!-- 12454901,12927803 -->
+
 Configuration Manager requires the enrollment point and the enrollment proxy point to enroll mobile devices and to enroll certificates for Mac computers. You don't need these site system roles in the following situations:
 
 - You plan to manage mobile devices by using the Exchange Server connector

memdocs/configmgr/core/clients/deploy/plan/planning-for-client-deployment-to-mac-computers.md

@@ -2,7 +2,7 @@
 title: Planning client deployment to Mac computers
 titleSuffix: Configuration Manager
 description: Plan for client deployment to Mac computers in Configuration Manager.
-ms.date: 04/23/2017
+ms.date: 01/05/2022
 ms.prod: configuration-manager
 ms.technology: configmgr-client
 ms.topic: conceptual
@@ -15,6 +15,9 @@ ms.localizationpriority: medium
 
 *Applies to: Configuration Manager (current branch)*
 
+> [!IMPORTANT]
+> Starting in January 2022, this feature of Configuration Manager is deprecated.<!-- 12927803 --> For more information, see [Mac computers](../../../plan-design/configs/supported-operating-systems-for-clients-and-devices.md#mac-computers).
+
 You can install the Configuration Manager client on Mac computers that run macOS X and use the following management capabilities:  
 
 - **Hardware inventory**  

memdocs/configmgr/core/clients/deploy/prepare-to-deploy-mac-clients.md

@@ -2,7 +2,7 @@
 title: Prepare to deploy the client to Macs
 titleSuffix: Configuration Manager
 description: Configuration tasks prior to deploying the Configuration Manager client to Macs.
-ms.date: 10/07/2021
+ms.date: 01/05/2022
 ms.prod: configuration-manager
 ms.technology: configmgr-client
 ms.topic: conceptual
@@ -16,18 +16,13 @@ ms.localizationpriority: medium
 
 *Applies to: Configuration Manager (current branch)*
 
-Follow these steps to make sure that you're ready to [deploy the Configuration Manager client to Mac computers](deploy-clients-to-macs.md).
-
-
-
-## Mac prerequisites
+> [!IMPORTANT]
+> Starting in January 2022, this feature of Configuration Manager is deprecated.<!-- 12927803 --> For more information, see [Mac computers](../../plan-design/configs/supported-operating-systems-for-clients-and-devices.md#mac-computers).
 
-The Mac client installation package isn't supplied with the Configuration Manager media. Download it from the [Microsoft Download Center](https://www.microsoft.com/download/details.aspx?id=100850).
+Follow these steps to make sure that you're ready to [deploy the Configuration Manager client to Mac computers](deploy-clients-to-macs.md).
 
 For the list of supported versions, see [Supported operating systems for clients and devices](../../plan-design/configs/supported-operating-systems-for-clients-and-devices.md#mac-computers).
 
-
-
 ## Certificate requirements
 
 Client installation and management for Mac computers requires public key infrastructure (PKI) certificates. PKI certificates secure the communication between the Mac computers and the Configuration Manager site by using mutual authentication and encrypted data transfers. Configuration Manager can request and install a user client certificate. It uses Certificate Services with an enterprise certification authority, and the Configuration Manager enrollment point and enrollment proxy point. You can also request and install a computer certificate independently from Configuration Manager. This certificate must meet the Configuration Manager certificate requirements.  

memdocs/configmgr/core/clients/deploy/prerequisites-for-deploying-clients-to-mobile-devices.md

@@ -2,7 +2,7 @@
 title: Mobile device client prerequisites
 titleSuffix: Configuration Manager
 description: Learn about the prerequisites for deploying the Configuration Manager client to mobile devices.
-ms.date: 08/02/2021
+ms.date: 01/05/2022
 ms.prod: configuration-manager
 ms.technology: configmgr-client
 ms.topic: conceptual
@@ -16,6 +16,11 @@ ms.localizationpriority: medium
 
 *Applies to: Configuration Manager (current branch)*
 
+> [!IMPORTANT]
+> On-premises MDM and the Configuration Manager client for macOS are both [deprecated](../../plan-design/changes/deprecated/removed-and-deprecated-cmfeatures.md).<!-- 12454901,12927803 -->
+>
+> Migrate management of macOS and mobile devices to Microsoft Intune. For more information, see [Supported clients and devices](../../plan-design/configs/supported-operating-systems-for-clients-and-devices.md#mac-computers).
+
 Deploying Configuration Manager clients in your environment has the following external dependencies and dependencies within the product.
 
 For more information on the minimum hardware and OS requirements for the Configuration Manager client, see [Supported configurations](../../plan-design/configs/supported-configurations.md).

memdocs/configmgr/core/clients/manage/maintain-mac-clients.md

@@ -2,7 +2,7 @@
 title: Maintain Mac clients
 titleSuffix: Configuration Manager
 description: Maintenance tasks for Configuration Manager Mac clients.
-ms.date: 04/23/2017
+ms.date: 01/05/2022
 ms.prod: configuration-manager
 ms.technology: configmgr-client
 ms.topic: conceptual
@@ -15,6 +15,9 @@ ms.localizationpriority: medium
 # Maintain Mac clients
 *Applies to: Configuration Manager (current branch)*
 
+> [!IMPORTANT]
+> Starting in January 2022, this feature of Configuration Manager is deprecated.<!-- 12927803 --> For more information, see [Mac computers](../../plan-design/configs/supported-operating-systems-for-clients-and-devices.md#mac-computers).
+
 Here are procedures for uninstalling Mac clients and for renewing their certificates.
 
 ##  Uninstalling the Mac client  

memdocs/configmgr/core/clients/manage/upgrade/upgrade-clients-on-mac-computers.md

@@ -2,7 +2,7 @@
 title: Upgrade macOS clients
 titleSuffix: Configuration Manager
 description: Upgrade the Configuration Manager client on Mac computers.
-ms.date: 09/10/2019
+ms.date: 01/05/2022
 ms.prod: configuration-manager
 ms.technology: configmgr-client
 ms.topic: conceptual
@@ -16,14 +16,20 @@ ms.localizationpriority: medium
 
 *Applies to: Configuration Manager (current branch)*
 
+> [!IMPORTANT]
+> Starting in January 2022, this feature of Configuration Manager is deprecated.<!-- 12927803 --> For more information, see [Mac computers](../../../plan-design/configs/supported-operating-systems-for-clients-and-devices.md#mac-computers).
+
 Follow the high-level steps in this article to upgrade the client for Mac computers by using a Configuration Manager application. You can also download the Mac client installation file, copy it to a shared network location or a local folder on the Mac computer, and then instruct users to manually run the installation.  
 
 > [!NOTE]  
-> Before you do these steps, make sure that your Mac computer meets the prerequisites. See [Supported operating systems for Mac computers](../../../plan-design/configs/supported-operating-systems-for-clients-and-devices.md#mac-computers).  
+> Before you do these steps, make sure that your Mac computer meets the prerequisites. For more information, see [Supported operating systems for Mac computers](../../../plan-design/configs/supported-operating-systems-for-clients-and-devices.md#mac-computers).
 
 ## Download the latest Mac client
 
-The Mac client for Configuration Manager isn't supplied on the Configuration Manager installation media. Download it from the Microsoft Download Center, [Microsoft Endpoint Configuration Manager - macOS Client (64-bit)](https://www.microsoft.com/download/details.aspx?id=100850). The Mac client installation files are contained in a Windows Installer file named **ConfigmgrMacClient.msi**.  
+The Mac client for Configuration Manager isn't supplied on the Configuration Manager installation media. The Mac client installation files are contained in a Windows Installer file named **ConfigmgrMacClient.msi**.
+
+> [!NOTE]
+> The macOS client installation package isn't available for new deployments, but existing deployments are supported until December 31, 2022.<!-- 12927803 -->
 
 ## Create the Mac client installation file
 
@@ -65,29 +71,29 @@ Use this procedure to prevent the Computer Enrollment Wizard from running, and t
 
 1. Add the following script to the setting:  
 
-  ``` Shell
-  #!/bin/sh  
-  echo "Starting script\n"  
-  echo "Changing directory to MAC Client\n"  
-  cd /Users/Administrator/Desktop/'MAC Client'/  
-  echo "Import root cert\n"  
-  /usr/bin/sudo /usr/bin/security import /Users/Administrator/Desktop/'MAC Client'/Root.pfx -A -k /Library/Keychains/System.Keychain -P ROOT  
-  echo "Using openssl to convert pfx to a crt\n"  
-  /usr/bin/sudo openssl pkcs12 -in /Users/Administrator/Desktop/'MAC Client'/Root.pfx -out Root1.crt -nokeys -clcerts -passin pass:ROOT  
-  echo "Adding trust to root cert\n"  
-  /usr/bin/sudo /usr/bin/security add-trusted-cert -d -r trustRoot -k /Library/Keychains/System.Keychain Root1.crt  
-  echo "Import client cert\n"  
-  /usr/bin/sudo /usr/bin/security import /Users/Administrator/Desktop/'MAC Client'/MacClient.pfx -A -k /Library/Keychains/System.Keychain -P MAC  
-  echo "Executing ccmclient with MP\n"  
-  sudo ./ccmsetup -MP https://SCCM34387.SCCM34387DOM.NET/omadm/cimhandler.ashx  
-  echo "Editing Plist file\n"  
-  sudo /usr/libexec/Plistbuddy -c 'Add:SubjectName string CMMAC003L' /Library/'Application Support'/Microsoft/CCM/ccmclient.plist  
-  echo "Changing directory to CCM\n"  
-  cd /Library/'Application Support'/Microsoft/CCM/  
-  echo "Making connection to the server\n"  
-  sudo open ./CCMClient  
-  echo "Ending Script\n"  
-  exit  
-  ```  
+    ``` Shell
+    #!/bin/sh  
+    echo "Starting script\n"  
+    echo "Changing directory to MAC Client\n"  
+    cd /Users/Administrator/Desktop/'MAC Client'/  
+    echo "Import root cert\n"  
+    /usr/bin/sudo /usr/bin/security import /Users/Administrator/Desktop/'MAC Client'/Root.pfx -A -k /Library/Keychains/System.Keychain -P ROOT  
+    echo "Using openssl to convert pfx to a crt\n"  
+    /usr/bin/sudo openssl pkcs12 -in /Users/Administrator/Desktop/'MAC Client'/Root.pfx -out Root1.crt -nokeys -clcerts -passin pass:ROOT  
+    echo "Adding trust to root cert\n"  
+    /usr/bin/sudo /usr/bin/security add-trusted-cert -d -r trustRoot -k /Library/Keychains/System.Keychain Root1.crt  
+    echo "Import client cert\n"  
+    /usr/bin/sudo /usr/bin/security import /Users/Administrator/Desktop/'MAC Client'/MacClient.pfx -A -k /Library/Keychains/System.Keychain -P MAC  
+    echo "Executing ccmclient with MP\n"  
+    sudo ./ccmsetup -MP https://SCCM34387.SCCM34387DOM.NET/omadm/cimhandler.ashx  
+    echo "Editing Plist file\n"  
+    sudo /usr/libexec/Plistbuddy -c 'Add:SubjectName string CMMAC003L' /Library/'Application Support'/Microsoft/CCM/ccmclient.plist  
+    echo "Changing directory to CCM\n"  
+    cd /Library/'Application Support'/Microsoft/CCM/  
+    echo "Making connection to the server\n"  
+    sudo open ./CCMClient  
+    echo "Ending Script\n"  
+    exit  
+    ```  
 
 1. Add the configuration item to a [configuration baseline](../../../../compliance/deploy-use/create-configuration-baselines.md). Then [deploy the configuration baseline](../../../../compliance/deploy-use/deploy-configuration-baselines.md) to all Mac computers that install a certificate independently from Configuration Manager.