Apple Device Management

DESY IT operates an Apple device management system based on Jamf Pro.

Jamf manages and secures Apple devices, sets them up, pre-configures them and improves the user experience.


Resources:


Affected devices

  • All new macOS devices are automatically managed by Jamf.
  • iOS devices are currently (2024) not managed by Jamf.

Impact

  • Enforcement of the D4 security policies.
  • Collection of inventory data.
  • Utilization of DESY accounts.
  • Pre-installation and configuration of apps and settings.

Scope

DESY groups can tailor their configuration or use the general one.

  • Enforce password policy.
  • Enforce Filevault disk encryption.
  • Enforce macOS updates (not yet implemented)
  • Installatiion of Munki.
  • Login with DESY accounts.
  • Installation of DESY WiFi profile.
  • Pre-allow security software.
  • Pre-install helper tools.