Got a tip for us?
Let us know
Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
Apple Enterprise Company Jamf Now Manages 20 Million+ Devices Worldwide
- Thread starter MacRumors
- Start date
- Sort by reaction score
Incorrect, the big ones run Windows on Cloud desktops, not local VM. Second, Parallels Windows works on M1 in technical preview. Lastly, corporates have always been moving to OS agnostic development practices like Electron. That's why Teams, Slack, and the like are the same regardless of platform you use.
Not really "one" system. We use On Prem Jamf since 2010 and have no interest in switching away.
No everything can be done with every system, but Jamf is flexible enough to give us the ability to add any extra functionality ourself.
No everything can be done with every system, but Jamf is flexible enough to give us the ability to add any extra functionality ourself.
It is not just "one system". Jamf is a product that can be deployed either on your own server or cloud-based. Cloud based solutions are multiple independent instances. There is no single place to hack.
That is perfectly legit.
Same token, if you owned a car rental company, you probably would not install LoJack. Another car rental company owner would. This is what makes the world go round, and choices for everyone.
I think that could happen. But I feel like the motivation really isn't there. Especially for programs that have been around since the early 90's and organizations still depend on them. There are even a lot of "tech companies" that rely on old software.
Depends on how the computer was enrolled. If it was enrolled via Automatic Enrollment, then likely NO. If it was enrolled via User Enrollment, then yes.
But, that would like be a violation of your companies computer polices.
I don't know how to answer your question other than that I am pretty sure Apple installed it as it never touched my company's hands. It was shipped from Apple and I received it with the package never opened.
Anyway, I had a issue a couple weeks later and took it to the Apple Store. The guy there erased the hard drive (not Erase All Content and Settings).
It doesn't have to touch your company's hands to be enrolled into Jamf. If it was purchased by your company from Apple, it will automatically enroll into their Jamf instance. Regardless, us sysadmins don't appreciate people trying to get around the safeguards we put in place. They're there for a reason
Totally understand and not trying to do anything malicious. Just concerned/wanting to make sure I d’t mess anything up.It doesn't have to touch your company's hands to be enrolled into Jamf. If it was purchased by your company from Apple, it will automatically enroll into their Jamf instance. Regardless, us sysadmins don't appreciate people trying to get around the safeguards we put in place. They're there for a reason
Nope, you should be safe. No way around Apple Business Manager. It is set before the device ships. We had a couple of devices "mis-shipped". Sent letters to the "owners" address with information on how to easily return them to us. Got them back with no fuss. One of them said they purchased at a yard sale, during a road trip. Never opened.
Great, that is a big relief. I believe Apple sets it all up for us as my computer never touched our IT Deparment's hands. So I should have Apple Business Manager then it sounds.
Not quite. The way Apple Business Manager works is this.
Apple or reseller sells your organization a computer and uploads the serial numbers to Apple Business Manager.
When a user receives the computer and first turns it on, the computer checks in wiht Apple Business Manager to see if the serial number is registered. If the computer is registered, Apple then sends infomration back to the computer with URL to the organization's MDM server (Jamf, Mosyle, Kandji, etc.) The computer THEN checks in with the MDM server to start enrollment.
All the configuration is handled by the MDM server. All Apple does is provide the enrollment URL to the computer when it is first powered on.
I think I understand.
So when I first started my computer (and again after erasing the hard drive), a Remote Management screen popped up letting me know that my company would remotely configure the computer. Then it had me enter my company user credentials to log in.
Sound about right?