1. Automate Local Admin Security with OneIdP LAPS

Bridge critical security gaps with OneIdP LAPS (Local Administrator Password Solution). Automate how local admin credentials are managed across Windows and macOS devices.

What you can do:

• Automatically rotate and securely store local admin passwords within OneIdP.

• Rotate passwords after each use to maintain strong security.

• Restore deleted admin accounts and reapply privileges if changed.

• Reset manually altered passwords to enforce policy.

• Provide one-time-use password access for field or support teams.

• View detailed logs and audit history for complete visibility.

2. New updates to Apple Device Management 

a) Extending Veltar Compliance to Support CIS Level 2 Benchmarks

The Veltar Compliance module now supports CIS Level 2 Benchmarks for iOS, iPadOS, and macOS devices. IT Admins can instantly assess and enforce Level 2 compliance across their Apple fleet with a single click.

Easily monitor, manage, and maintain strict security baselines across your organization with an overall CIS compliance percentage, including CIS Level 2 benchmarks.

b) Agent-Based Upgrade for Scalefusion and Remote Support

Prevent upgrade failures that can occur when macOS blocks updates for apps running in the foreground. You can now upgrade the Scalefusion and Remote Support macOS apps using an agent-based mechanism for smoother, more reliable updates.

You can now enable agent-based upgrades from Global Settings.

Note: The feature is supported for Scalefusion Agent v5.0.5+ and Remote Support Agent v6.0.1+ or later. 

c) Blocking Apple Apps via Veltar’s Application Control

You can now block Apple system apps using Veltar’s Application Control, giving you more granular control over default macOS behavior. Restrict system apps like Time Machine or Migration Assistant using the BlockList policy.

Note: Apple apps cannot be managed via the AllowList policy and can only be blocked.