Affectionate_Exit430

to be real ,is something like that happen to me i would say "whoever configured this computer ,have no practical skill"

you did nothing wrong .As you said,you prepare for the worst case scenario with the worst case test.If is not breaking any law ,it expose the problem exactly where it can come.Emotions .you CTO should do some learning process on how cybersecurity work ,else get a write down mail where do you ask exactly where is the line from HR and CTO ,so when the business will be destroyed by similar phishing attempt ,they are responsabile for no preparation against it.

If for your enviroment is enough to have them as "registered" you dont need ABM at all.Just do a separate mac group for onboarding and use Company portal .

do you have Trend Micro endpoint installed by chance? It did that to our BT and WIFI cards across different platform.

being a IT Manager / specialist , from my last 2 position i know exactly wich of them do what and how. To the point where i know how to do invoice to how you print a label in logistic.I think that knowing the exact flux of work is the only way to optimize globaly and than specificaly.Macro and micro is the way for me.