@ajm2358 Is this a usb mac (or macs) that you use on devices that don’t have built-in lan?

I have a powershell method for doing this via the api, but the full solution requires some infrastructure work to store the defined macs used for imaging somewhere you can get them. I embed them in an internal powershell module I use for provisioning. You may really just need one or 2 functions from this example and I also haven’t tested it working just copy paste. You would for sure need to install the module and connect to the api first. I took this from my module but I believe it should work once you have the module installed, imported, and connected.

After a computer finishes imaging and provisioning, my last step is uses the powershell fogapi module (see the links in my signature for info on the module) to run

$usbmacs = [pscustomobject]@{ mac = "00:00:00:00:00"; description = "mac description, I have these defined in a json, this is an inline example"; } $result = Remove-UsbMac -usbMacs.mac -hostname ($ENV:COMPUTERNAME);

Then I make sure all the macs that are valid are present

$physicalMacs = (get-netadapter | select-object -expand macaddress).replace("-",":") $fogHost = (Get-FogHost -hostName $ENV:COMPUTERNAME) $hostID = ($fogHost.id); $pendingFogmacs = Get-FogHostPendingMacs -hostID $hostID; $pendingFogmacs | ForEach-Object { $pendingMac = $_; if ($usbMacs.mac -notcontains $pendingMac.mac) { "Mac $pendingMac is pending and is not usbmac" | Out-Host; if ($physicalMacs -contains $pendingMac) { "Mac $($pendingMac.mac) is attached to this device, approving" | Out-Host; Approve-FogPendingMac -macObject $pendingMac; } else { if ($pendingMac.hostID -eq $hostID) { "Mac $($pendingMac.mac) is not attached to this device, removing it from Fog" | Out-Host Deny-FogPendingMac -macObject $pendingMac; } } } else { "Mac $($pendingMac.mac) is a usbmac, removing it from Fog" | Out-Host Deny-FogPendingMac -macObject $pendingMac; } } $fogMacs = Get-FogMacAddresses; $physicalMacs | ForEach-Object { $mac = $_; $fogMac = $fogmacs | Where-Object mac -eq $mac; if ($null -eq $fogMac) { if ($mac -notin $usbMacs.mac) { "$mac doesn't exist in fog, adding it for the host" | Out-Host; try { Add-FogHostMac -hostID $hostID -macAddress $_ -forceUpdate; } catch { Write-Warning "secondary mac address $($_) failed to add to host" } } else { "Usb mac $mac is attached, remove usb mac after provisioning!" | out-host; } } else { $otherHost = Get-FogHost -hostid $fogmac.hostId "Mac address $mac is already assigned to or pending for a different host, $($otherhost.name)" | out-host; } }

Then I make sure I didn’t break the host on accident during that by unintentionally deleting all the macs

try { $hostObj = (Get-FogHost -hostName $ENV:COMPUTERNAME) if (!$hostObj) { throw "host not found by name, trying by active mac instead" } } catch { $mac = get-activeMacAddress; $hostObj = Get-FogHost -macAddr $mac; } if ($hostObj.pending -ne '0') { Write-Verbose "The host is pending or not explicitly set to not pending in fog, adjust host to be approved be setting pending to '0'"; try { Reset-HostEncryption -fogHost $hostObj; $hostObj.pending = "0"; $jsonData = $hostObj | Select-Object id,pending | ConvertTo-Json; Update-FogObject -type object -coreObject host -IDofObject $hostObj.id -jsonData $jsonData; Restart-Service FOGService; } catch { Write-Verbose "There was an issue resetting host encryption or when running set-fogou -force. Host id is $($hostObj.id)" } }

TL;DR

Take a look at the Fog API Powershell Module especially the Remove-USBMac function and the Deny-FogPendingMac function. You can also use the above example for a more robust solution. The above solution also assumes its being run from the host in question, you can also manage any host remotely through the api.