FR: Create a "Is managed check"

Answer:

To create a "Is managed check" that verifies if an Apple device is managed before initiating a wipe or erase command using Apple Configurator 2, follow the steps below:

1. Create a new script: In Apple Configurator 2, go to the Library tab and click on New Script. Name the script, for example, CheckDeviceManagementStatus.scp.

2. Add the following script code:

#!/bin/sh

# Get the device's management status using the system_profiler command
management_status=$(system_profiler SCDynamicStore -xml | grep -E '(<key>Management[[:space:]]+:</key>.*<string>[[:space:]]+Managed)</string>' | sed 's/<[^>]*>//g')

# Verify if the device is managed
if [[ "$management_status" == "Managed" ]]; then
  echo "Device is managed."
  # Proceed with the wipe or erase command
  # Replace <your_erase_command> with the actual erase command
  # For example: /usr/sbin/dpkg-reconfigure -plow dhcp3-client
  #/usr/sbin/<your_erase_command>
else
  echo "Device is not managed."
  # Display an error message and exit the script
  echo "Error: Device is not managed. Aborting wipe/erase command."
  osascript -e 'display notification "Device is not managed. Aborting wipe/erase command." with title "Error"'
  exit 1
fi

Replace <your_erase_command> with the actual erase command you intend to use.

3. Save and close the script: After adding the script code, save the script and close the script editor.

4. Create a new action: Go to the Actions tab and click on New Action. Name the action, for example, CheckDeviceManagementStatusAndWipe. Add the new script as a step in the action.

5. Configure the action: Configure the action to run before the wipe or erase command. For example, if you are using the Automated tab to manage devices, you can add the action to the Prepare phase.

6. Save and apply the configuration: Save the configuration and apply it to the devices you want to enforce managed status before wiping or erasing.

With this setup, the "Is managed check" task will run prior to the erase or wipe command, and if the device is managed, it will proceed with the command. If the device is not managed, the check will display an error message and abort the wipe or erase command.