|
I have a 2021 M1 MacBook Pro that is issued to me by my company. A couple of weeks ago finder started giving me issues. I get the spinning beach ball and have to force quit finder. When I go into the force quit selection it shows finder is not responding.?
I attempted to boot into safe mode to see if that resolved the?issue, using the instructions on Apple's support page for the M1, but I was unable to get into safe mode. I gave up after 3 tries. This was on Thursday evening and after the Mac booted up finder worked fine all day Friday. I put my Mac to sleep Friday evening, used it for a few minutes on Sunday then put it back to sleep. Today, finder is back to the spinning beach ball and I have to force quit it.?
I use finder multiple times throughout the day so this is very frustrating. If this was my personal Mac I would perform an OS repair. Since this is not my personal Mac I'm not sure what the company has installed that will be uninstalled by doing an OS repair.?
Does anyone have any suggestions for me to try? Any idea what my company could've changed to prevent me from booting into safe mode?
Thanks!
|
Hi
Are you following the instructions for Safe Boot for the M series?
Continue holding the power button on startup imtol you see More Options?
Can you run EntrCheck Pro to identify issues?
toggle quoted message
Show quoted text
I have a 2021 M1 MacBook Pro that is issued to me by my company. A couple of weeks ago finder started giving me issues. I get the spinning beach ball and have to force quit finder. When I go into the force quit selection it shows finder is not responding.?
I attempted to boot into safe mode to see if that resolved the?issue, using the instructions on Apple's support page for the M1, but I was unable to get into safe mode. I gave up after 3 tries. This was on Thursday evening and after the Mac booted up finder worked fine all day Friday. I put my Mac to sleep Friday evening, used it for a few minutes on Sunday then put it back to sleep. Today, finder is back to the spinning beach ball and I have to force quit it.?
I use finder multiple times throughout the day so this is very frustrating. If this was my personal Mac I would perform an OS repair. Since this is not my personal Mac I'm not sure what the company has installed that will be uninstalled by doing an OS repair.?
Does anyone have any suggestions for me to try? Any idea what my company could've changed to prevent me from booting into safe mode?
Thanks!
|
Gijzette wrote: I have a 2021 M1 MacBook Pro that is issued to me by my company. A couple of weeks ago finder started giving me issues. I get the spinning beach ball and have to force quit finder. When I go into the force quit selection it shows finder is not responding.
I attempted to boot into safe mode to see if that resolved the issue, using the instructions on Apple's support page for the M1, but I was unable to get into safe mode. I gave up after 3 tries. This was on Thursday evening and after the Mac booted up finder worked fine all day Friday. I put my Mac to sleep Friday evening, used it for a few minutes on Sunday then put it back to sleep. Today, finder is back to the spinning beach ball and I have to force quit it.
I use finder multiple times throughout the day so this is very frustrating. If this was my personal Mac I would perform an OS repair. Since this is not my personal Mac I'm not sure what the company has installed that will be uninstalled by doing an OS repair.
Does anyone have any suggestions for me to try? Any idea what my company could've changed to prevent me from booting into safe mode? 1. This Mac has the operating system (macOS 12.0 or later) installed on its own read-only partition. The company probably CAN NOT alter stuff there, and certainly SHOULD NOT. So an OS repair from a Recovery System boot should be fine. 2. This machine should only take maybe 20 seconds to go from power-on/cold boot to the login screen, so I would (and for my M1 Mac, I *do*) shut it down overnight, rather than just putting it to sleep. It may *need* to do some of the housekeeping that happens during the machine start-up. -- Jim Saklad jimdoc@...
|
Paul,
Yes, holding the power button until I see more options. Then pressing the shift key while having over options but never get the "Continue in Safe Mode" dialog. Very strange.?
I ran EntrCheck?Pro and the major issues pointed out were unsigned file. These are files my company installed such as jamf profiles and cyberark security software. Gatekeeper and Apple security disabled. I'm not allowed to turn these on. Instead company installed cyberark, Microsoft defender (yes, I know) and Crowdstrike Falcon.?
Here is what the report has for Major & Minor Major Issues:
Anything that appears on this list needs immediate attention.
Unsigned files - There are unsigned software files installed that could be
malicious and should be reviewed.
Gatekeeper disabled - Gatekeeper security protection is disabled. This
computer is at risk of malware infection.
Apple security disabled - Apple security software is disabled. This computer is
at risk of malware infection.
Minor Issues:
These issues do not need immediate attention but they may indicate future
problems or opportunities for improvement.
System extensions installed - This computer has system extensions installed.
System extensions can be difficult to uninstall.
No Time Machine backup - Time Machine backup not found.
Configuration profiles found - This computer may have configuration profiles
installed.
Heavy RAM usage - Apps are using a large amount of RAM.
Apps crashing - There have been numerous app crashes.
Apps with heavy CPU usage - There have been numerous cases of apps with
heavy CPU usage.
Unsigned files - There are unsigned software files installed. These files could
be old, incompatible, and cause problems. They should be reviewed. System modifications - There are a large number of system modifications
running in the background.
Limited permissions - More information may be available with Full Disk Access. Kernel extensions present - This computer has kernel extensions that may not
work in the future.
Sharing enabled - This computer has sharing services enabled that could be a security risk.?
Let me know if there's anything else in the report you want to see. I'm not sure I can attach the report here.?
Hi
Are you following the instructions for Safe Boot for the M series?
Continue holding the power button on startup imtol you see More Options?
Can you run EntrCheck Pro to identify issues?
Paul
I have a 2021 M1 MacBook Pro that is issued to me by my company. A couple of weeks ago finder started giving me issues. I get the spinning beach ball and have to force quit finder. When I go into the force quit selection it shows finder is not responding.?
I attempted to boot into safe mode to see if that resolved the?issue, using the instructions on Apple's support page for the M1, but I was unable to get into safe mode. I gave up after 3 tries. This was on Thursday evening and after the Mac booted up finder worked fine all day Friday. I put my Mac to sleep Friday evening, used it for a few minutes on Sunday then put it back to sleep. Today, finder is back to the spinning beach ball and I have to force quit it.?
I use finder multiple times throughout the day so this is very frustrating. If this was my personal Mac I would perform an OS repair. Since this is not my personal Mac I'm not sure what the company has installed that will be uninstalled by doing an OS repair.?
Does anyone have any suggestions for me to try? Any idea what my company could've changed to prevent me from booting into safe mode?
Thanks!
|
Jim,
Yes, that is the case unless you have file vault activated. File vault causes the Mac to take?over 5 min to boot. This isn't a problem on a normal work day but when you're on call the person calling you gets impatient waiting for your Mac to boot. I usually shutdown my Mac on Friday's since unless I'm on call I don't need to use it on the weekends.?
I do agree that they shouldn't be able to alter the OS in the recovery partition.?
1. This Mac has the operating system (macOS 12.0 or later) installed on its own read-only partition. The company probably CAN NOT alter stuff there, and certainly SHOULD NOT. So an OS repair from a Recovery System boot should be fine.
2. This machine should only take maybe 20 seconds to go from power-on/cold boot to the login screen, so I would (and for my M1 Mac, I *do*) shut it down overnight, rather than just putting it to sleep. It may *need* to do some of the housekeeping that happens during the machine start-up.
--
Jim Saklad
jimdoc@...
|
Gijzette wrote: Jim,
Yes, that is the case unless you have file vault activated. File vault causes the Mac to take?over 5 min to boot.
I’ve had File Vault active on this computer from day !, and cold boot takes<15 seconds to login screen. I do agree that they shouldn't be able to alter the OS in the recovery partition.?
Who *owns* the machine – you or the company?
I ask because they’ve been obviously mucking around with it in ways that make it less secure and less stable.
jimdoc@...
|
The company owns the machine. Yes, I was hoping when I got a Mac they wouldn't muck around with it as much as the Windows machine. I guess I was wrong. We have very few IT personnel who know anything about a Mac as the company is mostly Windows users. We have approximately 20,000 employees and I'd say only 2% use Macs because we are doing some type of software development.?
Who *owns* the machine – you or the company?
I ask because they’ve been obviously mucking around with it in ways that make it less secure and less stable.
|
On Dec 4, 2023, at 8:44 AM, Gijzette <gsstrickland@...> wrote:
I have a 2021 M1 MacBook Pro that is issued to me by my company. A couple of weeks ago finder started giving me issues. I get the spinning beach ball and have to force quit finder. I can help you trouble-shoot this problem. But first... As soon as you said “issued to me by my company” it made me strongly suspect the cause of the problem. In about 90% of the cases where someone tells me that their Mac is having beachball/slowdown problems, the problem is always the same. Does the machine, by any chance, have Sophos anti-virus installed? If so, then that’s almost certainly the problem. Here is how to uninstall Sophos: If you don’t have Sophos installed, but you have some other fully interactive anti-virus software installed, that is very likely to be the source of your problem. __________________________________________________ Randy B. Singer Co-author of The Macintosh Bible (4th, 5th, and 6th editions) Essential But Hard To Find Macintosh Software and Advice __________________________________________________
|
Hi Gijzette
May I ask what possessed you to use software from an unknown source to check your computer?
Etresoft is based at a Box Number in Toronto - do you really trust that?
Good luck with sorting out your problem.
David
toggle quoted message
Show quoted text
On 5 Dec 2023, at 00:07, Gijzette <gsstrickland@...> wrote:
Paul,
Yes, holding the power button until I see more options. Then pressing the shift key while having over options but never get the "Continue in Safe Mode" dialog. Very strange.?
I ran EntrCheck?Pro and the major issues pointed out were unsigned file. These are files my company installed such as jamf profiles and cyberark security software. Gatekeeper and Apple security disabled. I'm not allowed to turn these on. Instead company installed cyberark, Microsoft defender (yes, I know) and Crowdstrike Falcon.?
Here is what the report has for Major & Minor Major Issues:
Anything that appears on this list needs immediate attention.
Unsigned files - There are unsigned software files installed that could be
malicious and should be reviewed.
Gatekeeper disabled - Gatekeeper security protection is disabled. This
computer is at risk of malware infection.
Apple security disabled - Apple security software is disabled. This computer is
at risk of malware infection.
Minor Issues:
These issues do not need immediate attention but they may indicate future
problems or opportunities for improvement.
System extensions installed - This computer has system extensions installed.
System extensions can be difficult to uninstall.
No Time Machine backup - Time Machine backup not found.
Configuration profiles found - This computer may have configuration profiles
installed.
Heavy RAM usage - Apps are using a large amount of RAM.
Apps crashing - There have been numerous app crashes.
Apps with heavy CPU usage - There have been numerous cases of apps with
heavy CPU usage.
Unsigned files - There are unsigned software files installed. These files could
be old, incompatible, and cause problems. They should be reviewed. System modifications - There are a large number of system modifications
running in the background.
Limited permissions - More information may be available with Full Disk Access. Kernel extensions present - This computer has kernel extensions that may not
work in the future.
Sharing enabled - This computer has sharing services enabled that could be a security risk.?
Let me know if there's anything else in the report you want to see. I'm not sure I can attach the report here.? Hi
Are you following the instructions for Safe Boot for the M series?
Continue holding the power button on startup imtol you see More Options?
Can you run EntrCheck Pro to identify issues?
Paul
I have a 2021 M1 MacBook Pro that is issued to me by my company. A couple of weeks ago finder started giving me issues. I get the spinning beach ball and have to force quit finder. When I go into the force quit selection it shows finder is not responding.?
I attempted to boot into safe mode to see if that resolved the?issue, using the instructions on Apple's support page for the M1, but I was unable to get into safe mode. I gave up after 3 tries. This was on Thursday evening and after the Mac booted up finder worked fine all day Friday. I put my Mac to sleep Friday evening, used it for a few minutes on Sunday then put it back to sleep. Today, finder is back to the spinning beach ball and I have to force quit it.?
I use finder multiple times throughout the day so this is very frustrating. If this was my personal Mac I would perform an OS repair. Since this is not my personal Mac I'm not sure what the company has installed that will be uninstalled by doing an OS repair.?
Does anyone have any suggestions for me to try? Any idea what my company could've changed to prevent me from booting into safe mode?
Thanks!
|
On Dec 5, 2023, at 5:26 AM, David G Brooks via groups.io <davidandtrishab@...> wrote:
May I ask what possessed you to use software from an unknown source to check your computer?
Etresoft is based at a Box Number in Toronto - do you really trust that?
Etresoft has been around for years now, and their software is often recommended by Macintosh users to help other Macintosh users troubleshoot problems. To the best of my knowledge, there have been no reports of any nefarious activity by Etresoft as a company, or through their software. Do you have any concrete knowledge that Etresoft is not to be trusted, David? Just about all legitimate applications in the Macintosh world are perfectly safe. The very rare exception, ironically, is that there are a few anti-virus products that either carry adware, or even malware. One does have to be careful WHERE one gets their software from, though. Aggregated software download sites, illegal file sharing networks, and pop-ups on random Web sites that offer “plug-ins" have been known to spread Trojans, rather than legitimate software. It’s best to download your software from developer’s Web sites or from the Apple Store. __________________________________________________ Randy B. Singer Co-author of The Macintosh Bible (4th, 5th, and 6th editions) Essential But Hard To Find Macintosh Software and Advice __________________________________________________
|
David – EtreCheck is a well-established website for helping determine what may be wrong with your mac.
?
?
?
toggle quoted message
Show quoted text
From: [email protected] < [email protected]>
On Behalf Of David G Brooks via groups.io
Sent: Tuesday, December 5, 2023 8:26 AM
To: [email protected]
Subject: Re: [macsupportcentral] Finder Not Responding
?
Hi Gijzette
May I ask what possessed you to use software from an unknown source to check your computer?
Etresoft is based at a Box Number in Toronto - do you really trust that?
?
Good luck with sorting out your problem.
?
Yes, holding the power button until I see more options. Then pressing the shift key while having over options but never get the "Continue in Safe Mode" dialog. Very strange.?
I ran EntrCheck?Pro and the major issues pointed out were unsigned file. These are files my company installed such as jamf profiles and cyberark security software. Gatekeeper and
Apple security disabled. I'm not allowed to turn these on. Instead company installed cyberark, Microsoft defender (yes, I know) and Crowdstrike Falcon.?
Here is what the report has for Major & Minor
Major Issues:
Anything that appears on this list needs immediate attention.
Unsigned files - There are unsigned software files installed that could be
malicious and should be reviewed.
Gatekeeper disabled - Gatekeeper security protection is disabled. This
computer is at risk of malware infection.
Apple security disabled - Apple security software is disabled. This computer is
at risk of malware infection.
Minor Issues:
These issues do not need immediate attention but they may indicate future
problems or opportunities for improvement.
System extensions installed - This computer has system extensions installed.
System extensions can be difficult to uninstall.
No Time Machine backup - Time Machine backup not found.
Configuration profiles found - This computer may have configuration profiles
installed.
Heavy RAM usage - Apps are using a large amount of RAM.
Apps crashing - There have been numerous app crashes.
Apps with heavy CPU usage - There have been numerous cases of apps with
heavy CPU usage.
Unsigned files - There are unsigned software files installed. These files could
be old, incompatible, and cause problems. They should be reviewed. System modifications - There are a large number of system modifications
running in the background.
Limited permissions - More information may be available with Full Disk Access. Kernel extensions present - This computer has kernel extensions that may not
work in the future.
Sharing enabled - This computer has sharing services enabled that could be a security risk.?
Let me know if there's anything else in the report you want to see. I'm not sure I can attach the report here.?
?
?
Hi
Are you following the instructions for Safe Boot for the M series?
Continue holding the power button on startup imtol you see More Options?
Can you run EntrCheck Pro to identify issues?
Paul
?
I have a 2021 M1 MacBook Pro that is issued to me by my company. A couple of weeks ago finder started giving me issues. I get the spinning beach ball and have to force quit finder.
When I go into the force quit selection it shows finder is not responding.?
I attempted to boot into safe mode to see if that resolved the?issue, using the instructions on Apple's support page for the M1, but I was unable to get into safe mode. I gave
up after 3 tries. This was on Thursday evening and after the Mac booted up finder worked fine all day Friday. I put my Mac to sleep Friday evening, used it for a few minutes on Sunday then put it back to sleep. Today, finder is back to the spinning beach ball
and I have to force quit it.?
I use finder multiple times throughout the day so this is very frustrating. If this was my personal Mac I would perform an OS repair. Since this is not my personal Mac I'm not
sure what the company has installed that will be uninstalled by doing an OS repair.?
Does anyone have any suggestions for me to try? Any idea what my company could've changed to prevent me from booting into safe mode?
|
Hi Randy,
Sophos is not installed. Instead the company has installed Microsoft Defender and ?Crowdstrike Falcon. I can uninstall but as soon as my machine is audited, which is done weekly using CyberArk it will automatically be repushed?to my Mac. I have gone into login item and turned off Microsoft Defender. After a reboot I do not see it running in Activity Monitor. I did not turn off Crowdstrike Falcon as I can't use any URl without it. Including internal sites (I know, go figure). It literally checks all URLs to make sure they are safe and part of the companies allowed websites.?
On Tue, Dec 5, 2023 at 7:01?AM Randy B. Singer < randy@...> wrote:
Does the machine, by any chance, have Sophos anti-virus installed?? If so, then that’s almost certainly the problem.
Here is how to uninstall Sophos:
If you don’t have Sophos installed, but you have some other fully interactive anti-virus software installed, that is very likely to be the source of your problem.
|
John Daniel is not honest and true!
He has been caught napping in this recent thread, as you can read for yourself:- ?
The thread has been ‘manipulated’ by someone - the ‘Hosts’, possibly.
I do believe you have a persona on LinkedIn, as do I.?
Do you still see John Daniel on LinkedIn? I suspect not!
toggle quoted message
Show quoted text
On 5 Dec 2023, at 14:23, Randy B. Singer <randy@...> wrote:
On Dec 5, 2023, at 5:26 AM, David G Brooks via groups.io <davidandtrishab@...> wrote:
May I ask what possessed you to use software from an unknown source to check your computer?
Etresoft is based at a Box Number in Toronto - do you really trust that?
https://developer.apple.com/forums/thread/687438
Etresoft has been around for years now, and their software is often recommended by Macintosh users to help other Macintosh users troubleshoot problems. To the best of my knowledge, there have been no reports of any nefarious activity by Etresoft as a company, or through their software. https://www.etresoft.com/index.html Do you have any concrete knowledge that Etresoft is not to be trusted, David? Just about all legitimate applications in the Macintosh world are perfectly safe. ?The very rare exception, ironically, is that there are a few anti-virus products that either carry adware, or even malware. ?One does have to be careful WHERE one gets their software from, though. ?Aggregated software download sites, illegal file sharing networks, and pop-ups on random Web sites that offer “plug-ins" have been known to spread Trojans, rather than legitimate software. ?It’s best to download your software from developer’s Web sites or from the Apple Store. __________________________________________________ Randy B. Singer Co-author of The Macintosh Bible (4th, 5th, and 6th editions) Essential But Hard To Find Macintosh Software and Advice http://www.macattorney.com/welcome.html __________________________________________________
|
Thank you, Vincent
In this thread?
‘Kilted Tim’ advised that EtreCheck had been removed from the relative safety of the Apple App Store.
Can you confirm the reason for the removal? Maybe you could post in the ASC forum and ask if you don’t know?
If you do, please provide a link, here, to your enquiry. Thank you.
David
On 5 Dec 2023, at 14:41, Vince Winterling <vincentwinterling@...> wrote:
David – EtreCheck is a well-established website for helping determine what may be wrong with your mac. ?
? ? ? Hi Gijzette May I ask what possessed you to use software from an unknown source to check your computer? Etresoft is based at a Box Number in Toronto - do you?really?trust that? ? Good luck with sorting out your problem.
<snip>
|
On Dec 5, 2023, at 11:41 AM, Gijzette <gsstrickland@...> wrote:
the company has installed Microsoft Defender Previous to this, I didn’t even know that there WAS a version of Microsoft Defender for the Macintosh. You will have to research it on the Web to see if it might be the source of your problems. (I’d guess that it likely is. Several fully interactive AV products that are quick and dirty ports of Windows products cause nasty problems on Macs.) This is the sort of problem that Mac users encounter when they have IS folks who don’t know s__t about the Macintosh. They use solutions from companies that don’t understand the Macintosh, and end up crippling the machine. and Crowdstrike Falcon. ... I did not turn off Crowdstrike Falcon as I can't use any URl without it. Including internal sites (I know, go figure). It literally checks all URLs to make sure they are safe and part of the companies allowed websites. I’m not familiar with this product either. And with good reason. All Macintosh Web browsers have Google Safe Browsing built-in already. GSB already does the same job that CF appears to be for. Once again, you’d have to research if CF is a potential problem for users. It’s a shame that your IT department doesn’t have sufficient experience with the Macintosh and they have hamstrung your Mac. __________________________________________________ Randy B. Singer Co-author of The Macintosh Bible (4th, 5th, and 6th editions) Essential But Hard To Find Macintosh Software and Advice __________________________________________________
|
I'll research the Microsoft Defender and Crowdstrike Falcon for any reported issues. Weird thing is none of the rest of my teammates are having the same issue. They did complain about Crowdstrike slowing their machine down but after a couple of days that went away. ?
I think in my company it's more about corporate security telling the IT folks that all computers independent of what OS they are running need to have certain software installed. They won't even let us upgrade to Sonoma until they've fully vetted it. They apparently do some type of OS verification before they let your Mac run on the network. My corporate security folks have swallowed the whole BS being pushed that your biggest threat comes from inside.?
On Tue, Dec 5, 2023 at 8:54?PM Randy B. Singer < randy@...> wrote:
> On Dec 5, 2023, at 11:41 AM, Gijzette <gsstrickland@...> wrote:
>
> the company has installed Microsoft Defender
Previous to this, I didn’t even know that there WAS a version of Microsoft Defender for the Macintosh.? You will have to research it on the Web to see if it might be the source of your problems.? (I’d guess that it likely is.? Several fully interactive AV products that are quick and dirty ports of Windows products cause nasty problems on Macs.)
This is the sort of problem that Mac users encounter when they have IS folks who don’t know s__t about the Macintosh.? They use solutions from companies that don’t understand the Macintosh, and end up crippling the machine.
> and? Crowdstrike Falcon.
...
> I did not turn off Crowdstrike Falcon as I can't use any URl without it. Including internal sites (I know, go figure). It literally checks all URLs to make sure they are safe and part of the companies allowed websites.
I’m not familiar with this product either.? And with good reason.? All Macintosh Web browsers have Google Safe Browsing built-in already. GSB already does the same job that CF appears to be for.?
Once again, you’d have to research if CF is a potential problem for users.
It’s a shame that your IT department doesn’t have sufficient experience with the Macintosh and they have hamstrung your Mac.
__________________________________________________
Randy B. Singer
Co-author of The Macintosh Bible (4th, 5th, and 6th editions)
Essential But Hard To Find Macintosh Software and Advice
__________________________________________________
|
Box number in Toronto? ?From the site:
Etresoft, Inc.
21 Simcoe Street South
Oshawa Ontario L1H4G1
info@...
|
The real registered address for Etresoft Inc may be found here:-
| |
Paul
Jim Saklad
David G Brooks