Demobilizing Accounts

Jamf Connect Documentation
Solution
Application
Jamf Connect
Content Type
Technical Documentation
Utilities & Services
ft:locale
en-US

  1. Use Jamf Pro or Jamf Connect Configuration to create a login window configuration profile for Jamf Connect that includes the Demobilize Accounts (DemobilizeUsers) setting. 
    <?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
    <key>DemobilizeUsers</key>
    <true/>
</dict>
</plist>
    Note:

    The configuration profile created in this step can also include other Jamf Connect settings that you want to use after you complete the demobilization and unbinding process. The configuration profile ignores these settings until the Jamf Connect login window is enabled.

  2. Use Jamf Pro to create a policy that does the following:

    • Installs the Jamf Connect PKG

    • Executes the following authchanger command after Jamf Connect installs via the Files and Processes payload:
      /usr/local/bin/authchanger -reset -preAuth JamfConnectLogin:DeMobilize,privileged
  3. Deploy the configuration profile and policy created in steps 1 and 2 to target computers.
  4. Request or prompt users to log in to their computers. Logging in will run the demobilization process in the background of the default macOS login process.

Depending on the number of computers you are demobilizing in your organization, this process may take one or more days.