That will then kick off other actions such as Crowdstrike install or Code42 full disk access 4 clicks is all it takes to enroll in JAMF with the appropriate profiles. JAMF requires the user to approve the MDM profile but we have been training users to not click on malicious links.Ĭhad does a demo of how to enroll a device in JAMF and approve MDM.įor current macOS users, SOM is using BigFix to push out the JAMF to the endpoint with instructions on how to approve the JAMF MDM profile. Every system that apple supports (macOS n-2) needs to use JAMF. Jamf can take care of this automatically but the JAMF needs to be manually approved by the user. SoM has 13k mac's, we can't rely on users to do this.

macOS 10.13+ deployment can't be fully automated due to FDA, kernel extensions. Deploying Crowdstrike! (new ISO AV tool) Deploy Digital Guardian to high risk users (USB Encryption protection) Jonathan Morton & Chad Morales - CPE, TDS (SoM). A tool like JAMF is necessary in today's Apple environment to apply security settings on Macs. BigFix can no longer work with the new Apple security features. Apple's new security posture changes over the years means we need to provide additional permission for apps like Code42 (full disk access) and others.

Stanford code42