Practice
Complete the following practice tasks. When deploying any changes, ensure the only targets are your own test devices.
In Jamf Pro, create a configuration profile which encrypts an enrolled mobile device. (Lesson 1)
In Jamf Pro, navigate to .
Click New.
In the General payload, enter a profile name in the Name field.
In the list of payloads, click Passcode then select Require Passcode. Configure any additional options as desired.
Click Scope and add a test device as a target, then click Save.
Create a new local user account on a test Mac computer. Ensure that the new user does not have administrator privileges. (Lesson 2)
While logged in to a computer with an administrator account, open the System Settings app.
Click Users & Groups in the sidebar.
Click Add User.
Enter administrator credentials and click Unlock.
Enter information for the new user, including an account name and a password.
Ensure the New User menu has selected.
Click Create User.
Log out of the administrator account and log in with the newly-created standard account.
Open the System Settings app and attempt to create a new user as before. Observe that the standard account credentials are not accepted.
In Jamf Pro, create a configuration profile which ensures that users cannot bypass Gatekeeper restrictions on a test computer. (Lesson 3)
In Jamf Pro, navigate to .
Click New.
In the General payload, enter a profile name in the Name field.
In the payload, find Temporarily overriding the Gatekeeper setting by control-clicking to install any app and click Restrict.
Click Scope and add a test device as a target, then click Save.
Objectives recap
Discover how Apple devices are designed to protect users. Understand how administrators can extend this protection to their organizations.
Understand the security options built into the Settings and System Settings applications. Discover how security settings can be configured and enforced with Jamf Pro.
Understand the malware prevention and remediation built into macOS, iOS, and iPadOS. Learn how Jamf Pro and Jamf Protect enhance that built-in security.