| Recommended Group Name | Criteria | Operator | Value | Notes | Use Case |
|---|---|---|---|---|---|
Computers - Updated | Operating System Version | greater than or equal to | Current macOS version | Identifies computers that are up to date with the most recent macOS version | You can use this group for reporting and as scope for any applications or profiles that require the latest macOS version. |
Computers - Needs Update | Operating System Version | less than | Current macOS version | Identifies computers that do not have the most recent macOS version installed | You can use this group as scope for deploying the newest macOS updates via (Beta) Managed Software Updates. |
Computers - MDM - Lost Communication | Last Check-in | more than x days ago | 14 or less | Identifies computers that have not checked in with Jamf Pro within a given time frame | You can use this group as scope for a policy to re-enroll the computer via the jamf binary. |
Computers - Needs FileVault 2 Encryption | FileVault 2 Partition Encryption State | is not | Encrypted | Identifies all computers that are not encrypted via FileVault 2 | You can use this group as scope for a policy that enables FileVault on the affected computers. |
Computers - System Integrity Protection - Enabled | System Integrity Protection | is | Enabled | Identifies computers with System Integrity Protection (SIP) enabled | You can use this group as scope for a policy that enables SIP on the affected computers. |
Computers - Security Apps Installed | Application Title | is | Jamf Connect | Identifies computers that have baseline security software and profiles installed on the computer for reporting on the dashboard or for scoping | You can use this group to ensure you are scoping only to computers that have these applications and profiles currently installed, ensuring the computer is secure before items are scoped to it. |
Jamf Protect | |||||
Jamf Trust | |||||
Profile Name | is | These values are dependent on the names you use for the configuration profiles affiliated with Jamf Connect, Jamf Protect, and Jamf Trust. | |||
Computers - Jamf Connect - Needs Update | Application Title | is | Jamf Connect | Identifies computers that do not have the current version of Jamf Connect installed | You can use this group as scope for deploying the newest version of Jamf Connect. |
Application Version | is not | Current Jamf Connect Version | |||
Computers - Jamf Protect - Regular Communication | Jamf Protect - Last Check-in (Available as Extension Attribute) | more than x days ago | 14 or less | Identifies computers that are not checking in regularly with Jamf Protect | You can use this group to remove scoping of sensitive applications or profiles if Jamf Protect has not checked in for a certain period of time. Note:Additional action via a policy may be necessary to remove an application. |
Computers - Jamf Protect - Needs Update | Application Title | is | Jamf Protect | Identifies computers that do not have the current version of Jamf Protect installed | You can use this group for reporting, or to identify computers that require a remedy for Jamf Protect installation issues. |
Application Version | is not | Current Jamf Protect Version |