This applies to computers in Static groups that are members of the following Smart Group: Faculty & Staff (NoMAD).
All steps below MUST be completed or the first logged in user may not be made a “Volume Owner”, and this will prohibit the user from running Software Updates.
The first user (and only the first user) to log in to the computer will automatically be made an Admin – no need to have them go into the Self Service App to make themselves an Admin.
Encryption will be enabled when the first user logs in. When prompted, click Allow.
After the first user is logged in and at the desktop screen, have the user log out.
After logging out have the first user log in one more time, then go into the Self Service App and run Update Inventory.
To verify that a computer is configured correctly after going through the above steps search log in to JAMF and search for the computer object.
Once you have selected the computer object check under Inventory > General make sure that:
Disk Encryption is set to Encrypted
Bootstrap is set to YES
Volume Owner lists at least one netid user account (Admin or Non-Admin)
Note:
Unlike the previous deployment of NoMAD Login, you may not have to manually make future users “FileVault Enabled Users.” In our testing, future users on a computer were automatically made FileVault Enabled Users, but this might be dependent on the version of macOS that is installed (or some other factor), so always check.