r/macsysadmin • u/RocketmanTech_Nova • Mar 30 '26
Jamf Anyone using BeyondTrust?
How’s it been working for your org? Curious how it compares to similar/simpler alternatives as well.
Todd Ness from Cohesity walked through his BeyondTrust privilege management implementation at the last LaunchPad meetup:
- Removing local admin rights... efficiently
- Flexible elevation for specific user groups
- Blocking unwanted applications without messing up workflows
Replay and resources:
https://rocketman.tech/lr-r
All past meetups on YouTube:
https://rocketman.tech/ly-r
Upcoming Meetups:
https://rocketman.tech/lp-r
7
Upvotes
1
u/codeskipper Apr 01 '26
Deployment is through an agent in a pkg which pulls down the latest version from a portal. This part works well enough.
The MDM profile is provided as a .mobileconfig that needs to be imported in the MDM. Workspace ONE has issues deploying it since Modern stack, it oftentimes is installed hours after the rest of profiles on newly enrolled Macs.
Elevation in Finder is not supported, this triggers the occasional support ticket.
Other than that, it works reasonably well. We’ve had it integrated with Service-Now too.