Adding exclusions to the scope of a remote management task allows you to exclude specific computers or mobile devices, groups, buildings, departments, users, user groups, or network segments. For example, if you want to restrict an application for everyone except the head of the department, you can add them as an exclusion.
You can also add iBeacon regions as exclusions to the scope of policies and configuration profiles. For example, if you want to prevent a mobile device from having a configuration profile installed when it is in a specific iBeacon region, you can add the iBeacon region as an exclusion.
- On the Exclusions pane, click Add.
- On each tab, add items as needed:
To add a directory service or local user, click the Directory Service/Local Users tab. Then enter the username in the search field and click Add.
To add a directory service user group, click the Directory Service User Groups tab, enter the name of the group in the search field and click Search. Then click Add for the group you want to add.
To add another type of item, click the appropriate tab and then click Add for the item you want to add.
Important: Jamf Pro does not use a computer's User and Location information to process LDAP exclusions. If you add a directory service user or group as a exclusion, Jamf Pro will only apply the exclusion if the user currently logged into the computer matches the directory service user exactly.