Configuring Enrollment-only Jamf Connect Settings

Jamf Connect Documentation
Solution
Application
Jamf Connect
Content Type
Technical Documentation
Utilities & Services
ft:locale
en-US

If you plan to configure Jamf Connect settings that should only be used during enrollment with Jamf Pro, you can create a separate configuration profile for these settings.

This allows you to use a smart computer group to apply the settings during Automated Device Enrollment, and automatically remove the settings from computers after setup is complete.

Common settings include:

  • Acceptable use policy settings

  • Notify screen script

  • authchanger command-line arguments that enable the Notify screen

  1. In Jamf Pro, click Computers in the sidebar.
  2. Click Smart computer groups in the sidebar.
  3. Create a smart computer group that includes computers that successfully enrolled with Jamf Pro and have Jamf Connect installed.

    You can choose the "Jamf Connect - FirstRunDone" extension attribute or any other criteria that indicates computers in your environment completed their initial setup.

    CriteriaOperatorValue
    Jamf Connect - FirstRunDoneisFirstRunDone
  4. Click Save .
  5. Click Configuration profiles in the sidebar.
  6. In Jamf Pro, navigate to and configure enrollment-only settings in the com.jamf.connect.login preference domain.
    Jamf Pro Application and Custom Settings payload for Jamf Connect
  7. If your organization uses the notify screen, add a custom PLIST file that enables the Notify screen on computers.
    Jamf Pro Application and Custom Settings payload for uploading custom PLIST files.
    1. In the Preference Domain field, enter com.jamf.connect.authchanger.
    2. In the Property List field, add or upload the following:
      <?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
    <dict>
        <key>Arguments</key>
        <array>
            <string>-reset</string>
            <string>-JamfConnect</string>
            <string>-Notify</string>
        </array>
    </dict>
</plist>
  8. Click the Scope tab and add the smart group that includes computers that successfully enrolled with Jamf Pro and have Jamf Connect installed as an exclusion.

    This ensures that the enrollment-only settings are removed after enrollment.

  9. Click Save .