Managed Local Administrator Account Creation During Computer Enrollment

Jamf Pro Documentation 11.16.0
Solution
Application
Content Type
Technical Documentation
Utilities & Services
version
11.16.0
ft:locale
en-US
vrm_version
11.16.0

When you enroll a computer with Jamf Pro, you must specify a managed local administrator account if you want to log in to a specific computer to perform management tasks.

To create the management account, you must enable user-initiated enrollment, and then configure the managed local administrator account username and additional account settings. During computer enrollment, the jamf binary will create this account as defined by the user-initiated enrollment settings.
Warning:

Do not use the same username for the managed local administrator account created in user-initiated enrollment settings and a managed local administrator account created in a PreStage enrollment. If the same username is used for both, those accounts may not be created correctly during Automated Device Enrollment, and unexpected errors may occur. In addition, the password for the local administrator password solution (LAPS) will not be retrievable in the Jamf Pro API.

Important:

The managed local administrator account must be created to allow use of local administrator password solution (LAPS) functionality, which you can use to manage the managed local administrator account password. For more information, see the Local Administrator Password Solution for Jamf Pro technical paper.

You can identify if a computer is managed by viewing the Managed attribute field in computer inventory information. For more information, see Computer Inventory and Criteria Reference.