What’s Included
Following the initial implementation described in the Onboarding section, managed JAMF device management services are provided to support ongoing security and management of the Apple device environment.
Subject to the selected subscription, managed JAMF services may include oversight of device management operations such as monitoring, policy management, system maintenance, user support, and compliance reporting to support device security and operational continuity.
Depending on the selected subscription, services generally include:
- Enrollment of all in scope Apple devices, such as MacBooks, iMacs, iPhones, and iPads, in JAMF, along with monitoring of enrollment status and policy compliance through the JAMF dashboard and automated alerts
- Identification and remediation of devices that fall out of compliance, including notification to designated contacts or end users and enforcement of compliance requirements through the management system where possible
- Development, application, and maintenance of management policies and configuration profiles for Apple devices in accordance with security standards and operational needs, including encryption through FileVault, firewall settings, password complexity, screen lock, network configurations such as Wi Fi and VPN, and email profiles
- Updates to policies and profiles as industry best practices or operational requirements evolve
- Management of software and update deployment to managed Apple devices, including packaging and deployment of approved applications, utilizing Apple’s Volume Purchase Program where applicable, and pushing macOS and iOS updates and patches
- Coordination of update deployments to help minimize end user disruption, with critical security patches expedited as needed to address emerging threats
- Remote support and troubleshooting for Apple device management issues, including enrollment problems, policy enforcement conflicts, lost or stolen device tracking, and remote lock or wipe where authorized, as well as issues with managed applications on Apple devices
- Management of JAMF integration points, including Apple Business Manager ABM and directory services such as Active Directory or Azure AD
- Regular maintenance of the JAMF environment, including software updates, renewal of required certificates such as the Apple Push Notification Service certificate, and verification of JAMF configuration backups where applicable