Disney Account Documentation

Thin Provisioning Guide

Disney

ITIL Classification: Target Audience: app-global-macdsm

Document Purpose: The purpose of this document is to detail the preparation in deploying new or existing Macs with Apple’s stock
macOS and Disney’s base apps and configurations.

Filename: [Link]

TABLE OF CONTENTS
RELATED DOCUMENTS AND REFERENCES....................................................................................................................................... 2
USING STOCK MACOS.................................................................................................................................................................... 2
GETTING STARTED......................................................................................................................................................................... 2
OUT OF BOX INITIAL STEPS FOR APPLE SILICON MACS....................................................................................................................................2
Procedure......................................................................................................................................................................................... 3
DISNEY ENROLLMENT 5.0...........................................................................................................................................................................4
Remote (DEP) Provisioning for End Users.........................................................................................................................................4
Non-DEP Provisioning by Technicians...............................................................................................................................................8
TROUBLESHOOTING:.................................................................................................................................................................... 11
REVISION HISTORY....................................................................................................................................................................... 12
DOCUMENT CONTROL................................................................................................................................................................. 14

Internal Use Only - Please refer to the electronically controlled version for the latest document. Page 1 of 14
 Disney Account Documentation

INTRODUCTION
Prepare and deploy new or existing Macs with Apple’s stock macOS and Disney’s base apps and configurations.
Note: This Thin Provisioning process requires your LDAP account to be in the proper LDAP group. Please check with your manager
before Thin Provisioning.

RELATED DOCUMENTS AND REFERENCES

Technical Documentation folder

USING STOCK MACOS

 Thin Provisioning configures a Mac with our business critical apps, settings, and updates.
 Computer must be "out of box" (OOB), or must have been "restored" to OOB state for this process to work.
 Thin Provisioning supports macOS Sequoia (15.x.x, our default).
 This process works on all new Apple computers, both laptops and desktops.
 To restore a computer to OOB state, see the proper version of the 3 documents: Restore_OOB_image–[Link],
Restore_OOB_T2.pdf in the Technical Documentation folder.
 For systems being re-provisioned, delete the computer record from Jamf Pro, the Computer Name and serial number are
required for the deletion of the system.

GETTING STARTED
 Assign the Mac to a Prestage using the Self Service policy from a Disney enrolled Mac
o If you do not have the policy send a RITM with your serial number to request access: app-global-macdsm

o
 Follow the illustrated steps.

Internal Use Only - Please refer to the electronically controlled version for the latest document. Page 2 of 14
 Disney Account Documentation

OUT OF BOX INITIAL STEPS FOR APPLE SILICON MACS

Install macOS on Apple Silicon using DFU Mode.
Requirements:
 Host machine Monterey or above with USB Type-C/Thunderbolt 3/4
o Details: [Link]
 Approved Operating system ipsw file
 [Link]
 Latest version of Apple [Link] from the Mac App Store

PROCEDURE
1. Shut down the Apple Silicon client machine.
2. Connect the computers via USB-C/Thunderbolt 3 cable.
a. The client Apple Silicon must be plugged in via its designated port.
i. Details: [Link]
3. Open Apple Configurator.
4. For laptops: Press and hold down the Power + Right Shift + Left Option + Left Control at the same time for 10 seconds.
You may use a timer to count by counting by saying “one-one-thousand, two-one-thousand, etc.” is accurate enough.
• [Link]
5. Release the Shift, Option, and Control keys and continue to hold the power button for about 5-8 seconds until Apple
Configurator displays DFU Mode.

Internal Use Only - Please refer to the electronically controlled version for the latest document. Page 3 of 14
 Disney Account Documentation
6. For Desktops: Per Apple
a. If reviving or restoring an iMac
i. Disconnect the iMac from power.
b. While holding down the power button, connect the iMac to power and continue to hold the power button for about 3
seconds.
Note: You won’t see any initial screen activity from the iMac you want to revive or restore. After the revive or restore begins,
you’ll see an Apple logo and progress bar.
c. If reviving or restoring a Mac Studio or Mac mini
i. Optionally connect a monitor (if you want to see when the process is complete).
ii. Disconnect the Mac Studio or Mac mini from power for at least 10 seconds.
iii. Press and hold the power button.
iv. Reconnect power while still holding the power button.
v. Release the power button.
vi. The status indicator light should turn amber, and a DFU icon should appear in Apple Configurator on the Mac
mini.
Note: You won’t see any initial screen activity from the Mac Studio or Mac mini you want to revive or restore. After the revive or
restore begins, you’ll see an Apple logo and progress bar if a monitor is connected.
7. Drop the IPSW file into the Apple Configurator Window and choose restore.
8. Wait until the Client Mac boots to the “New Mac” startup screen to unplug the devices and start the Disney Enrollment
process.

DISNEY ENROLLMENT 5.0

REMOTE (DEP) PROVISIONING FOR END USERS

1. Computer should arrive to the End User in an Out-of-Box state.

a. Connect computer to external power and let charge fully.

b. Power on computer.
c. User will be prompted for Country or Region.

Internal Use Only - Please refer to the electronically controlled version for the latest document. Page 4 of 14
 Disney Account Documentation

2. User will be prompted to connect to home Wi-Fi.

a. If user has an Aruba or Disney Connect Device- do not select it as it requires a certificate that is not on the machine yet.
b. If no Wi-Fi network is found DO NOT CONTINUE.

3. The computer will then arrive at the REMOTE MANAGEMENT screen.

4. If the account creation screen appears without Remote Management being prompted, DO NOT CONTINUE.
Note: Once the machine arrives at the Remote Management screen in the process, the Prestage Enrollment Status in JAMF will
show as COMPLETED.

Internal Use Only - Please refer to the electronically controlled version for the latest document. Page 5 of 14
 Disney Account Documentation

5. Once Continue has been selected, enrollment of the device into JAMF has begun.
6. User is prompted to sign in using their Disney email address and will then be taken to the Disney sign-in page.
7. Enter credentials at the TWDC login page and authenticate using Multi-Factor Authentication.

8. User will be prompted to verify account password.

Internal Use Only - Please refer to the electronically controlled version for the latest document. Page 6 of 14
 Disney Account Documentation

Note: Remember this LOGIN NAME and PASSWORD as you will need it later.
9. After a short period of time, the Disney Enrollment interface will launch.

10. The Disney Enrollment interface will display the serial number of the device, the JAMF Site that is designated by the JAMF
Prestage Enrollment Configuration, and the local user account name that was just created by the user. (Currently logged in
user).

11. The user’s email address will be automatically filled in from JAMF Connect information.

12. The user will need to validate their account password before continuing.

13. Click START to proceed with provisioning.

Internal Use Only - Please refer to the electronically controlled version for the latest document. Page 7 of 14
 Disney Account Documentation

14. Software now installs according to the pre-stage configuration that was chosen in JAMF.

15. Your login username is “USERNAME”.

16. After clicking OK, wait 10 minutes before restarting or shutting down. There are background tasks that need to complete to
provide an optimal experience.

NON-DEP PROVISIONING BY TECHNICIANS

Internal Use Only - Please refer to the electronically controlled version for the latest document. Page 8 of 14
 Disney Account Documentation
There will be instances where a device will not be able to be provisioned utilizing DEP or Automated Device Enrollment. In these
cases, follow these steps to provision the device without DEP.
1. Connect computer to external power.
2. Go through the macOS Setup Assistant and create the initial user:
Username: macadmin
3. When setting up the macadmin account, use Aveng3rs@ssemble as the password.
4. Initiate Self Enrollment via URL: [Link]
5. Login using your 3ID.

6. In the next window, enter the username of the person assigned to the computer Do NOT provision a computer if you do not
have a user to assign it to.
7. Select the SITE that corresponds with the user assigned to the device.

8. Once enrollment is completed, the Disney Enrollment interface will launch.

9. The interface will display the information:
a. Serial number of the machine.
b. Site that was selected at the previous stage.
c. Current logged in user is MACADMIN- this will trigger Enrollment type to be SELF ENROLLMENT.
i. Select YES if this is to be a shared device.

10. The email address will be automatically populated.

Internal Use Only - Please refer to the electronically controlled version for the latest document. Page 9 of 14
 Disney Account Documentation
11. An account for the username entered at enrollment time will be created.
a. A randomly generated password will be assigned to this account.
b. RECORD THIS PASSWORD AND INCLUDE IT WHEN DELIVERING THE DEVICE TO THE USER.

12. Click START to provision the device.

13. Once done, a message will indicate its completion.

14. Be sure to send the temporary password with the machine as the user will need it to log in.
15. When the user receives the device, they will log in with their provided username and password.
a. This is how the user will log in going forward from a rebooted device.
b. If logging into an already running device, select the LOCAL LOGIN button and use the same credentials.
16. After the initial login, the user will be prompted to sign in using their MyID credentials.

Internal Use Only - Please refer to the electronically controlled version for the latest document. Page 10 of 14
 Disney Account Documentation

17. Once signed in, the user will be prompted to sync their account password with their corporate credentials by entering their
temporary password.

18. After clicking Sync, wait 10 minutes before restarting or shutting down. There are background tasks that need to complete
to provide an optimal experience.
19. The computer is now fully provisioned and ready to use.
20. Going forward, the user will use the menu bar item to change or reset their password.

21. The device can now be powered off and delivered to the user.

Internal Use Only - Please refer to the electronically controlled version for the latest document. Page 11 of 14
 Disney Account Documentation

TROUBLESHOOTING:

If provisioning fails for any reason, do not attempt to run any workarounds, such as policy triggers. Many tasks are executed during
the provisioning sequence, and skipping them could result in an unstable computer state, including the inability to log in.
1. Use the macadmin account and potd to elevate privileges
2. Open System Settings
a. General > Transfer or Reset
b. Click the button “Erase All Content and Settings”
c. Follow the prompts
3. Delete the record from Jamf and start the provisioning from the beginning

If you need to obtain an IPSW file contact MacDSM at [Link]-MacDSM@[Link] and send a INC to app-global-
macdsm

Internal Use Only - Please refer to the electronically controlled version for the latest document. Page 12 of 14
 Disney Account Documentation

REVISION HISTORY
Date Version Section/Page Description of Change Originator of Change

Mar 16, 2018 1.1 All Document creation Rosalie Timajo

Apr 02, 2018 1.2 All Submitted in “As Is” condition for review by NDCS John McNair

May 07, 2018 1.3 All Transferred to Disney approved standard template Ayai Papa

Oct 08, 2018 1.4 All Updated Document Owner Ayai Papa

Oct 08, 2018 2.0 All Reviewed formatting. Finalized. Published. Cheryl Unger

Oct 30, 2018 2.1 All Submitted pdf version to KM Document Drop-Off. John McNair

Nov 08, 2018 2.2 All Transferred updated pdf to document. Anne Hawley

Nov 09, 2018 3.0 All Reviewed formatting. Finalized. Published. Cheryl Unger

Updated document with contents from the original document

Jul 16, 2019 3.1 All submitted by John McNair on Jul 12, 2019. Updated Document Maria Fe Ragua
Owner and other document properties.

Jul 16, 2019 4.0 All Reviewed formatting. Finalized. Published. Cheryl Unger

Reviewed May 06, 2020, by Bob Shynski and determined to be up-

May 06, 2020 5.0 All to-date. Reviewed and updated formatting. Updated Doc Owner Ayai Papa
and Next Review Date.

Reviewed Apr 20, 2021, by Bob Shynski and determined to be up-

Apr 21, 2021 6.0 All Ayai Papa
to-date. Reviewed and updated formatting and Next Review Date.

Reviewed Jul 07, 2022, by Bob Shynski and determined to be up-

Jul 08, 2022 7.0 All Ayai Papa
to-date. Updated formatting, Doc Owner and Next Review Date.

Audit Activity: Moved the Revision History and Document Control

Oct 31, 2022 - - panel sections to the end of the document for ease of accessing Cheryl Unger
support information. No Content Changes.

Updated to add changes for new hardware and updated

May 11, 2023 7.1 All Matthew Montez
provisioning methods.

Reviewed and updated formatting. Updated Publish and Next

May 15, 2023 7.2 All Maria Fe Ragua
Review dates.

Reviewed formatting. Finalized. Published and sent publishing

May 15, 2023 8.0 All Ayai Papa
workflow to Matthew Montez.

This document was reviewed and approved by Matthew Montez

May 19, 2023 - - Maria Fe Ragua
on 05/19/23 per new Workflow form.

Mar 11, 2024 - All Audit Activity: Reviewed and updated formatting as needed. No Anne Hawley
changes made to content.

Reviewed Mar 20, 2024, by Matthew Montez and determined to

be up-to-date. Removed CS126-4-7-0362-Restoring a T2 Mac to
Mar 21, 2024 9.0 All Out-of-Box (OOB) Status reference as its been archived by Ayai Papa
Matthew last May 2023. Reviewed and updated formatting and
Next Review Date.

Audit Activity: Reviewed and updated header and footer. No

Dec 05, 2024 - - Cheryl Unger
changes made to content.

Feb 11, 2025 9.1 All  Removed the procedure Out of box initial steps for Intel Matthew Montez
Macs.

Internal Use Only - Please refer to the electronically controlled version for the latest document. Page 13 of 14
 Disney Account Documentation

Date Version Section/Page Description of Change Originator of Change

 Remove Table of Contents line "Out of box initial steps for

Intel Macs"
 Replaced Contents of Getting Started with instructions using
Disney Self Service.
Updated NON-DEP PROVISIONING BY TECHNICIANS with the
correct initial password for macadmin

Reviewed formatting. Updated next review date. Finalized.

Feb 12, 2025 10.0 All Cheryl Unger
Published and sent publishing workflow to Matthew Montez.

 Changed “Assign the User” to “Assign the Mac”

 Changed references to M1/M2 to Apple Silicon
 Changed reference from “Image” to IPSW
Feb 12, 2025 10.1 All  Updated Label from Disney Enrollment “4.0” to “5.0”
 Added portion to request a wait period after
provisioning states its completion
 Added Troubleshooting Section

DOCUMENT CONTROL
Control Title Description

Author Rosalie Timajo, John McNair

Document Owner Matthew Montez

Document Controller Ayai Papa

Next Review Date 1/21/2025

Internal Use Only - Please refer to the electronically controlled version for the latest document. Page 14 of 14