-
-
Notifications
You must be signed in to change notification settings - Fork 60
4. Deployment Methods
Ultimately, Setup Your Mac is just "window dressing" for the execution of your Jamf Pro policies.
Determining the best deployment method is a task left up to you, the Mac Admin.
While Setup Your Mac was originally designed to be executed only via a Jamf Pro Self Service policy, version 1.5.1 introduced additional checks to better execute with the Jamf Pro “Enrollment Complete” policy trigger.
Prior to using Setup Your Mac, we were using Jamf Pro policies triggered by enrollmentComplete (i.e., “Enrollment Complete Immediately after a computer completes the enrollment process”), but the successful execution of these policies was too unreliable for our needs.
Policies with an Enrollment Complete trigger do not run upon completion of enrollment under certain circumstances. Jamf Pro Known Issues PI100009 - PI-004775
Currently — as can be observed in the first several seconds of the Setup Your Mac screencast — a device is initially considered as “non-compliant” and is only offered two policies:
- Setup Your Mac
- Update Computer Inventory
The successful execution of Setup Your Mac results in a compliant Mac.
Additionally, we require login to Self Service — including Multi-Factor Authentication — for every other policy; enabling Setup Your Mac at Enrollment Complete would bypass the required user login on the very first policy the user experiences. (See also: Setup Your Mac, please.)
Thanks to Robert Schroeder for the excellent write-up on using Setup Your Mac with Jamf Pro PreStage Enrollments.
Many Mac Admins are able to successfully leverage a configuration with an enrollmentComplete trigger.
Thanks to Andrew Clark for the write-up on using Setup Your Mac with Jamf Pro Enrollment Complete Enrollments.