Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

ITS technicians will be migrating all ITS-supported Macs from NoMAD to Jamf Connect for user authentication.

...

  1. Log into Jamf.

  2. Check the serial number to ensure that the computer can support Jamf Connect. Generally, this should be a computer from 2018 or newer. You can check a computer’s model on Jamf, or on the Apple warranty website.

    warranty lookup
  3. In the ticket, send the client instructions to back up their data. You can use the<TBD> canned response in Jira. The client must respond to this with a confirmation that the data is backed up. If they request assistance with data backup, they will have to book an appointment with an FTE.

  4. Once we receive written confirmation from the client that they have sufficiently backed up their data, we can send the drop-off canned response in Jira.

...

  1. Check the serial number of the computer to make sure we are working on the correct machine.

  2. Check for litigation holds and capture the image if needed. Follow instructions here: Taking a Litigation Hold Image on macOS /wiki/spaces/AIT/pages/3446636862

  3. Search for the computer via its serial number in Computers → Search Inventory.

    search computer inventory
  4. Find the current PreStage assignment and click on it.

    Prestage enrollment
  5. Navigate to Scope → Edit. Then search for the computer via its serial number and then un-check it. Then select Save.

    un-check from prestage

  6. Return to the computer’s page in Jamf and then delete its Jamf object. This cannot be undone.

    delete object

  7. Assign a modern PreStage for the computer. Navigate on the sidebar to Computers → PreStage Enrollments. If the computer will be used by a single user, select JAMF CONNECT - LAPTOP, DESKTOP. If the computer will be shared in a lab or other multiple-user environment, select JAMF CONNECT - LAB.

    choose prestage

  8. Navigate to Scope → Edit, search for the computer via its serial number, make sure it is checked, then select Save.

...

  1. Navigate through the setup prompts. This will include steps such as as selecting a region and language.

    1. If it asks you to create a user account or sign in with an Apple Account/ID, the PreStage enrollment was not assigned properly. Stop here and ensure the assignment was set correctly. Then restart the computer and try this step again.

  2. When asked to enroll under management for University of Connecticut, select Enroll. This step may take a few minutes.

  3. If asked, enable Location Services.

  4. When the computer is at the UConn-branded Microsoft Entra ID login screen, enrollment is complete.

  5. In Jamf, search for the computer via its serial number. Select the computer object then select Edit.

    edit computer object

  6. Under the Site dropdown, select the appropriate tag for the device. For ITS-managed machines, select MWManagedWorkstation. In the Asset Tag field, add the UConn inventory tag (Cxxxxx). Then select Save.

    Add site tag and asset tag

  7. If the computer will be designated as “shared-use” (in a lab, public-use, student worker workstation, etc.), you must add Add the staff member who will be responsible for assigned to this asset. This is usually the person who is the reporter for the ticket. If the computer is for a single user, you can skip to the next step. Navigate to the User and Location section, then select Edit.

    edit user and locationImage Modified
  8. Search for the assigned employee via their NetID, then select Search.

    search for userImage Modified
  9. Select the employee’s NetID.

    select userImage Modified
  10. Select Save.

    save progressImage Modified
  11. Add the computer to appropriate static groups. On the sidebar, navigate to Computers → Static Computer Groups. Most single-user machines will be placed in mwManagedWorkstation - Staff / Faculty, and shared machines will be placed in mwManagedWorkstation - Lab.

  12. Select the static group and navigate to Assignments → Edit. Search for the computer via its serial number and ensure that it is checked. Select Save.

    image-20241122-165612.png
  13. Allow the computer to be left online for about 15 minutes to receive policies and configuration profiles.

  14. You can now send the canned response for device pick-up for the client.

...