annaislam.blogg.se

Jamf dep serial numbers#
Jamf dep install#
Jamf dep pro#

General Requirements and IdP Compatibility.

Every environment is different but as long as you make sure you have your stuff configured it should get everything it use to get. I have smart groups that calculate based on OS version and then those SmartGroups are tied to specific policies. I use it like this:ĥ.) Once the computer is bound and named I'm good to go. So I have a few more things I need to do.Ĥ.) I have another policy that scoped to that same Pre-stage enrollment SmartGroup which is set to a customTrigger that I can call which BINDs my computer.that custom trigger gets called as the very last thing in my script from Step 2. In my case I have to BIND it to active directory and there are policies that are based on the BIND (OU membership), name, as well as macOS Version.

Jamf setComputerName -fromFile /path/to/local/csvģ.) At this point if your policies are based strictly off naming conventions - you should get the same policies it use to have.

Jamf dep pro#

I exported that CSV from JAMF Pro and then the policy runs a script i wrote to name the computer based off that CSV using this handy JAMF command:

Jamf dep serial numbers#

Then I have a policy that triggers on enrollment complete (scoped to that same SmartGroup looking at that Pre-stage enrollment group criteria) which cURLs down a CSV file onto the mac's /tmp directory with all serial numbers & computer names (12345,NameHere)

I know the OP mentioned having a restriction on thumb drives, but I wanted to mention that as another option for environments that don't have such external drive restrictions in I assign the computer to a pre-stage enrollment group so after it wipes and is at the new setup screen (like out of the box) it will check in with apple > apple tells the computer it's DEP and to look at my JAMF instance > then since it's in a pre-stage enrollment group - gets auto-enrolled into JAMF Pro.Ģ.) I have a smart group that is built based off of the Pre-stage Enrollment Group criteria so after the computer enrolls it falls into this Smart Group. It's just that at the time I built it for them, they were still using Macs running High Sierra. The same process can be used for Mojave of course. The app is large (~5+ GB) since it contains the entire OS installer, but they can fit it easily on 8 GB thumb drives and carry it around and reinstall an OS for any machine they need to, provided it's using an APFS formatted disk.

Jamf dep install#

It then runs one of two script lines, calling the embedded installer to erase and install or just install, depending on which button they chose. They have a 3rd button in the dialog, Cancel, in case they change their mind. The former simply reinstalls macOS without erasing the drive, in case they need to do that on occasion, and the latter is self explanatory. The app runs a script that locates the installer app inside it, prompts them for their admin credentials to run as root, and then pops up a dialog asking them which option they would like to use, either "Install" or "Erase & Install". It was a Platypus built app that contained the latest "Install macOS High Sierra.app" in it's Resources folder. Just as a similar but slightly different alternative, I created a wipe/reinstall application for a customer that they could place on a thumb drive.