Not really an issue but when compared against net booting and imaging a vanilla image the time is just not feasable.Īnother issue I ran into is when I attempted to image a system that is already in JAMF with a Pre-Stage Enrollment it would get stuck in a loop because our Policy that would install Munki would want to restart so the machine would never finish using the PKG install to enroll in JAMF.
As for a major issue, I attempted to do an internet recovery of the system (re-image) which took a very very long time. One minor issue I saw when using the same account as the local admin account is it will mess up the keychain for the local admin account which is a minor issue but still troublesome. This means that minus the two screens in DEP it was almost completely hands off. Once the system restarted, it then began to build. When I saw this policy in action it installed the packages and did indeed restart the system. I also made the Policy restart the machine no matter what since Munki will need to begin building the machine. For this group I created a policy that will install Munki for software patches and installs and our local admin account so it has a nice profile picture. I set this policy to execute once enrollment has completed and ONLY for the Smart Group we created. I created a Smart Group in JAMF that will look to see if an OS X machine has a Pre-Stage Enrollment which means that the device was more than likely setup using the Device Enrollment Program. Once completed and logged in, I saw that all of the configuration profiles pertinent to this machine installed automatically. To continue testing I just created a local account with the same credentials as our local admin account.
We would like to avoid prompting the user to create a user account however this is currently not possible. Using Pre-Stage Enrollment I was able to setup the devices to skip almost all of the setup assistant except for two very particular pieces:Ĭreation of a user account is really detrimental to our environment as we use Active Directory and all users use cached network accounts. So for our first test with an OS X device in DEP, I went ahead and configured a set of laptops that came in that will be used in a lab environment. Currently, our environment could "almost" hand a Mac to a user and have them go through the setup assistant. So far the experience has been mostly positive however there are few miscues that I'm hoping are addressed as the JSS is updated. Today I experimented with the use of Apple's Device Enrollment program with JAMF's Casper Suite.
0 kommentar(er)
