top of page
Search

Rocketman Command Center - Official Launch

Chris Schasse
3 days ago

Presented by: Christopher Schasse and Patrick Blackmore of Rocketman Tech

Presented on: Friday March 7th, 2025



The Rocketman Team officially launches the Rocketman Command Center (RCC)—a powerful (and free) toolset built by Jamf Admins, for Jamf Admins. RCC is a highly configurable command-line utility built specifically to be deployed through Jamf Pro. RCC is chalk-full of useful tools designed to simplify workflows, automate repetitive tasks, and make Jamf Pro management faster and easier. Available Tools include:


  • App Setup Helper: Enables Screen Recording for defined applications

  • Break Glass Admin: Creates LAPS Style Backdoor Admin account

  • Edit User Profile: Updates Building and Department info

  • FileVault Token Revoker: Revokes a user's Secure Token

  • Rapid Response: Triggers a command to run immediately

  • Rename Computer: Programmatically renames Mac Computers

  • Reset Jamf Connect Login Screen: Switches to macOS login.

  • Secure Token Sharing Tool: Grants secure tokens.

  • Self Service Email: Creates pre-filled emails.

  • Temporary Admin: Grants temporary admin rights.

  • Update User Info: Adds Local Username to Computer Record

  • Upload Jamf Logs: Uploads specified logs to specified server

  • User Privilege Management: Adjusts local user roles.


  LaunchPad Podcast


Watch to the full LaunchPad episode on Apple Podcast or Spotify that includes:

  • Gravity Times, the latest Apple and Jamf tech news,

  • This month's feature guest presentation, and the

  • Audience Q&A.






  Presentation Resources



  Q&A


  1. Will the Rocketman Command Center update on the client devices, or will we need to download the newest version and deploy it when there is an update?

    1. At this point, you will need to download the newest version. However, we have another tool that updates the package in Jamf Pro automatically that I’m going to show in a little bit…

  2. For the App Setup Helper tool, will the toggle be available if Chrome or Slack were not yet installed? Or if they are installed but have not yet been launched?

    1. At this point, that feature is not available, and in most cases the best option is ensuring that the applications install in Jamf Pro before running this tool. However, this is easily a feature we could add in the future. We could add an “Installing” icon if the application isn’t installed yet.

  3. Can the App Setup Helper tool assist the user in getting registered for Device Compliance with InTune

    1. Not at this point, but that might be a cool feature to add! It would need to wait for something to happen before continuing, we would need to research if there’s a specific preference file that gets set when device compliance is turned on that we can check against. This could also allow us to do this for other things, like logging into an application.

  4. With the Temporary Admin tool, can you restrict what things the user can do, like use an admin to create a local admin account?

    1. There are ways to do this, and we are working on improving this process as well. For instance, you can create a Configuration Profile through Jamf Pro that restricts the users from accessing User Accounts and Groups and scope it to the same Static Group that is in scope for Temporary Admin. You can also create a Restricted Software title for Terminal, iTerm, xTerm, and any other application you don’t want the user accessing while an admin and scope it to the same group. Since the tool will automatically remove them from that group after running, they will gain access as soon as their account is migrated back to standard.

  5. Where do you guys get your Self Service icons? Been wanting more...

    1. Ask and you shall receive! All of our Self Service icons are available on our wiki: https://github.com/Rocketman-Tech/rcc/wiki/Self-Service-Icons-Repository

  6. For the Temporary Admin tool, where do you capture the reasons for needing admin permissions?

    1. At this point, they are captured directly in the Jamf Policy logs, but if you would like them to be captured somewhere else, like a SEIM or a Slack channel, let me know and we’ll get it added to the roadmap! I think that could be a great feature!

  7. For the Secure Token Sharing too, does the user granting the Secure Token need to have admin rights?

    1. Using our tool they do not need admin rights, so standard users can grant any user a secure token without having to be elevated first!

  8. You did not demo the computer rename feature… but my question is can it be run at enrollment and reference the inventory pre-load? We had a script that did that but a recent update to Jamf Pro broke it.

    1. That’s not something it currently does, but we could build in that functionality if you have a use case. Open a GitHub issue and we can chat about it: https://github.com/Rocketman-Tech/rcc/issues


  Jamf Feature Requests

Feature requests from this month:

Past Feature requests:

 
 
 

Comments

bottom of page