Setting Up a SMB File Share Distribution Point on Windows

Technical Articles
Solution
Application
Content Type
Technical Documentation
Utilities & Services
ft:locale
en-US
To set up an SMB file share distribution point on a Windows server, you must first create user accounts on the server for your Jamf Pro server to use. Then you can configure Jamf Pro with the required settings to access it.
Note:

If you are planning on using your distribution point to distribute packages during enrollment, it must be configured as an HTTPS distribution point that does not require authentication (e.g., using a publicly-trusted certificate or username and password) instead. Alternatively, you can also secure the download of the enrollment package from an external distribution server using a JSON Web Token (JWT) in Jamf Pro. This ensures that enrollment packages are downloaded securely to computers from external distribution servers. For more information, see JSON Web Token for Securing In-House Content in the Jamf Pro Documentation.

Requirements

A server with Windows Server 2012 R2 or later

  1. Log on to the Windows server you intend to use as a file share distribution point.
  2. Click the Start button.
  3. Click Administrative Tools.
  4. Click Computer Management.
  5. In the sidebar, click Local Users and Groups, and then click Users.
  6. In the right pane under Users, click More Actions.
  7. Click New User....
  8. Use the New User modal to create a user "write" in the account name (e.g., jamfwrite).
    1. Use the Username and Password fields to configure the credentials for the account.
      Note:

      Do not use spaces in the username. Be sure to note these credentials for later use.

    2. Deselect the User must change password at next logon checkbox.
    3. Select the User cannot change password checkbox.
    4. Select the Password never expires checkbox.
    5. Click Create.
  9. Use the New User modal to configure a user with standard permissions with "read" in the account name (e.g., jamfread).
    1. Use the Username and Password fields to configure the credentials for the account.
      Note:

      Do not use spaces in the username. Be sure to note these credentials for later use.

    2. Deselect the User must change password at next logon checkbox.
    3. Select the User cannot change password.
    4. Select the Password never expires checkbox.
    5. Click Create.
  10. In Windows explorer, navigate to the C:\ directory.
  11. Right-click anywhere in an empty space of the central pane, and then click New > Folder.
  12. Give the folder a name that clearly labels it for use as a file share (e.g., Jamf Fileshare).
    Note:

    Do not use spaces in the folder name.

  13. Right-click the newly created folder.
  14. In the pop-up menu, click Properties.
  15. Click the Sharing tab.
  16. Click Advanced Sharing....
  17. Select the Share this folder checkbox.
  18. In the Share name field, enter a clear name with no spaces (e.g., JamfShare).
  19. Click Permissions.
  20. Click Add....
  21. In the Enter the object names to select field, type the usernames of the accounts created previously. Use the Check Names button to verify that the usernames have been entered correctly.
  22. Click OK.
  23. Under Group or usernames, select the "write" account.
  24. Under Allow, select the Change and Full Control checkboxes.
  25. Click OK.
  26. In Jamf Pro, configure the file share using the credentials of the "read" and "write" accounts created previously.

    For instructions, see File Share Distribution Points in the Jamf Pro Documentation.

The SMB share is configured and ready to be used by Jamf Pro as a distribution point.