Enrollment Methods and LAPS Account Creation - Technical Paper: Local Administrator Password Solution for Jamf Pro

Technical Paper: Local Administrator Password Solution for Jamf Pro
Solution
Application
Content Type
Technical Documentation
Utilities & Services
ft:locale
en-US

The type of LAPS account created relates to the enrollment method used and the options selected, as shown in the diagrams below.

User-Initiated Enrollment

If the managed local administrator account is created during user-initiated enrollment (Settings > User-initiated enrollment > Computers > Create managed local administrator account), only a Jamf management framework LAPS account is created.

Automated Device Enrollment

If you enroll computers via Automated Device Enrollment, the type of LAPS account created is determined by the following settings:

  • If you create a managed local administrator account during a PreStage enrollment (Computers > PreStage enrollments > Account Settings > Create a managed local administrator account before Setup Assistant), and:

    • you create the managed local administrator account in the user-initiated enrollment settings, both an MDM LAPS and a Jamf management framework LAPS account are created.

    • you do not create the managed local administrator account in the user-initiated enrollment settings, only an MDM LAPS account is created.

  • If you do not create a managed local administrator account during a PreStage enrollment, and:

    • you create the managed local administrator account in the user-initiated enrollment settings, only a Jamf management framework LAPS account is created.

    • you do not create the managed local administrator account in the user-initiated enrollment settings, no LAPS account is created.