The name.
SS stands for Super Shitty — as in, Super Shitty to the Mac. It's a nod to the reality that enterprise Mac management often feels exactly like that. MDM quirks, Intune limitations, Apple's occasionally baffling decisions... this blog exists to make that experience a little less painful.
What started as a place to dump notes and scripts for my own reference. Turns out a lot of Mac admins are dealing with the exact same headaches.
What this blog covers.
Everything here is focused on enterprise Apple device management — primarily macOS, with iOS/iPadOS mixed in. Sometimes there might be some Windows related posts. The emphasis is on practical automation: Azure Automation runbooks, PowerShell scripts, Intune configuration, Graph API wrangling, and compliance framework benchmarks.
The stack.
Most of my tooling lives in the Microsoft ecosystem — Intune, Azure Automation, Graph API, Entra ID — combined with Apple's MDM protocol and native macOS tools. PowerShell for automation logic, bash for on-device scripts - and an unhealthy amount of time in the Intune portal.
Community.
This blog is my contribution to the Mac admin community. Everything is shared freely — scripts, guides, configs. If something here has helped you, feel free to reach out. And if you find a bug or a better way to do something, I'd genuinely love to know.