List All FileVault Enabled Users

The List All FileVault Enabled Users tool identifies and displays all user accounts on a macOS device that have FileVault enabled. Designed primarily for use within a Jamf extension attribute, this tool simplifies automated reporting and compliance monitoring.

Recommended Usage: Jamf Extension Attribute

To integrate this tool into a Jamf extension attribute, use the script below:

#!/bin/zsh

# Run the Rocketman tool
result=$(rocketman ListAllFileVaultEnabledUsers)
fileVaultEnabledUsers=$(echo "$result" | tail -n2 | head -n1)

# Check for errors or empty output
if [[ $? -ne 0 || -z "$fileVaultEnabledUsers" ]]; then
    result="Rocketman tool failed or returned no output"
fi

echo "<result>$fileVaultEnabledUsers</result>"

Quick Start

This tool can also be executed directly from the command line without any parameters:

Example Command

rocketman ListAllFileVaultEnabledUsers

Command Options

Required Parameters

None. This tool operates without requiring additional parameters or arguments.

Optional Parameters

None. This tool operates without additional optional parameters or arguments.

Practical Use Case

This tool is ideal for:

• Compliance Monitoring: Ensuring all managed devices adhere to FileVault encryption policies.
• Security Audits: Identifying users with active encryption privileges to verify compliance during security reviews.

Example Scenario

In an environment that requires full-disk encryption for compliance, this tool can be integrated into Jamf Pro as an extension attribute. The resulting data can be used to create dynamic groups of non-compliant users, streamlining remediation efforts.

Important Notes

1. Jamf Integration Recommended: While usable from the CLI, the tool is optimized for use within Jamf Pro extension attributes for reporting and automation.

Screenshot Example