How did you create an apple business manager / school account? also how did you verify your business, please guide

Highly biased, natural for a Jamf integrator. :D Intune dont have beatiful screens or ready-to-use settings such Jamf.

Is JAMF more Mac-centric, sure. But a few of the noted "can't dos" just aren't true. You CAN: manage the dock. Disable activation lock. If it is enabled, you have recovery passwords auto-generated for each device record. Haven't had a problem with FileVault, but we might just be lucky. We use mostly Intune for the very reasons you list, but are managing several hundred Macs with them. Long before MDM, we used Munki and it definitely takes a lot of Intune's shortcomings away. I doubt we could manage Macs with Intune alone without it.

Hugely biased comparison of not much use sadly

Graham is a genius! Thank you for making such an amazing tool.

Great info and huge thanks for compiling all this and presenting to the community, well done 🎉🎉

Any way to get this presentation, may be only as "read only". Thank you.

When it comes to Jamf Connect you should have taken a look into Microsoft Platform SSO that is already available. As you've mentioned User Affinity can't be compared to Jamf Connect. Regarding Zero Touch Provisioning: I recommend taking a look into Baseline in combination with Installomator. That's working well for me enrolling devices via Intune.

Love the channel and info, but do not underestimate the need for quality audio. Don't think AirPods Pro are gonna cut it. A professional mic definitely when making these videos.

We appreciate your time and efforts to show how Intune is still far behind from Jamf

Man if you are coming from Jamf(like me) Intune totally sucks

At 00:28:54 I talk about the Device Check-in Frequency. Since I created this video, I've gotten several people claiming different things about Intune's check-in frequency. Some people say 8 hours, others say 24 hours, and still others say 5 minutes. An Intune SME who worked for Microsoft told me if they made a change to a profile, their standard procedure was to have them check the computer the next day. In my experience, the wait time for a change to happen was often longer than I was willing to wait, so I would plug the computer in and wait a day for the change to apply, or restart the computer which would sometimes work (but not all the time).

Very informative 👍

44:53 It still makes sense to read questions or put them on the screen because we can't see them in the recording.

Really hope that macOS SU will be adressed. Running Macs without being to enforce software updates is a real pain and shame.

Love the excel tip, but the real pro tip is the comma separated searching... I'd tried doing space separated searches (ala Apple Business Manager) to no avail and assumed this wasn't possible. Never tried commas! Great tip!

17:50 you can scope by macOS latest version, just create a group with subgroup "macOS not up to date"

I lost a job because of Kandji. I didn't embrace the company's choice to use it over Jamf Pro but I did try. I took some time to learn how to interact with Kandji through command line but that was largely useless. A simple product is not always better, and Kandji is no exception. I'm a Jamf Now customer. I have my personal Apple devices managed through Jamf Now. I noticed that there are similarities between Kandji and Jamf Now. As a home user, Jamf Now is perfect. I don't need a lot of functionality. Jamf Pro allows me to do much more than I could ever do with Kandji. I'm a bit of a control freak... in a good way. I like to be able to create a great user experience. I can't do that with Kandji. The lack of ability for granularity with Kandji is very limiting (and annoying). With Jamf Pro, I can scope policies and profiles to specific computers and groups of computers with ease. Jamf Now is just as limited as Kandji, but as a non-business user, I don't care. While looking at Kandji before the company I was working for signed onto it, I tried out its blueprints feature and thought of a way that I could create basically the same functionality with Jamf Pro using a combination of policies and configuration profiles. In the end, the company went with Kandji because of these reasons. The first was that Kandji was much more eager for our business and they were willing to make a good deal. Jamf seemed a bit arrogant, and like they had the deal already sewn up. That may have been because Jamf knew I was a huge fan and advocate for Jamf Pro, but they should have tried a lot harder. I was really PO'd at Jamf over that. The second reason was because the owners of the company felt that Kandji would be easier for their techs to work with. If I was one of those techs, I would have been insulted by that. I promised them that I could train everyone on Jamf Pro. They would learn it very quickly. To be fair, I realized that job wasn't working out after about a month of being there. It just wasn't a good fit. The decision to go with Kandji was the final blow. I tried to embrace it but the company owners knew full well that I thought Kandji was not good. I can't say in polite conversation what I really think about Kandji. I'm in a much better job now and I work with Jamf Pro daily. I could go on for hours about how great Jamf Pro is but it does have some problems and annoyances. In some ways I'm a bigger fan of Jamf's than Apple's.

A client asked me about this feature shortly after making this video, and I had a couple more notes I didn't mention in the video that I wanted to call out: - The password is randomized for each computer, a static password that's the same cannot be set - The password is a random, 29 character alpha-numeric string that cannot be customized in any way to be more readable - Once the password is retrieved, it MUST be cycled - The password must be changed by specific intervals (aka 90 days) and can't be done at specific times (like at the end of the year) so each computer not only has a unique password, but a unique password change interval. - All the settings for this a global, meaning you can't have different configurations for different computers. Every computer gets the same configuration. - Biggest of all, this account is not FileVault enabled, meaning you can't login to it on a FileVault enabled computer. Worst off, because of the way the password is cycled, it's basically impossible to setup a script that will make the account FileVault enabled. I'm not trying to push users away from this tool, there's a lot of organizations that this tool is perfect for, but when we're talking to Universities and School Districts that have specific needs for their backdoor admin account, this may not be the best solution.

Can you share the GitHub for the scripts you utilize?

Great overview, What types of custom attributes is everyone using out there? In the video you mentioned the country the device is in based on IP. What else? I've seen battery charge cycles as well, but what else?

Great job with the overview!

Great video. Thank you!!

How long the deployment will be installed if i purchase the application using JAMF Catalog?

Great! Let's see how @Apple going to smoothen the workflow of its macOS upgrade and update process for Mac admins.

Want to say thank you for this video. I was able to figure out how to call a webhook from a Power Automate flow. Im going to start playing with Azure Functions.

Found the demo to be very useful. Getting more hands on with Jamf. Bash scripting already quite familiar. The background explanations are fascinating, since it is the real world stuff :)

Hey sir, I switched from Jamf Pro to Kandji after using Jamf for 2 years. While I do think Kandji is "stripped" of more settings and basically looks like typical "web app" we need to keep in mind that Jamf Pro (aka Casper) they were founded almost 20 years(?) ago. I do think that Kandji is "worse" version of Jamf but I would recommend Kandji over Jamf for companies or start ups up to 300/500 devices. Great video tho!

Thanks for the great review. We did the same, challenged Jamf against Kandji and we came to the same conclusion. Our fleet are currently more than 400 devices and it is almost impossible to manage devices in the same way you do with Jamf. If you focus on automation, APIs or options like "Smart Groups" there is no better MDM for Apple than Jamf.

😇 Promo SM

Great overview. Thanks, man! 🙏🏼

Looking forward to the updated Wiki and starter guide

During our testing users are constantly prompted to accept the "Workplace Join Key", using Chrome with the "Windows Accounts" extension installed. Any ideas?

Is there a good way to use this to integrate the Jamf API and Team Dynamix?

Promo>SM 😻

Need to update this for "Device Compliance" since "Conditional Access" is going away.

Superb!!!!

Incredible!!!!!!!

Thanks for this video. It's interesting that only 3 software titles have been added to the list since October 2022. It being the 31st March 2023 as I write this comment.

Very Helpful and knowledgeable Content !!!!

authrisation bacon has me in peaces lol. Thank you for the video 🙂

Very helpful. Thank you for posting this.

Superb !! Script please :)

Great info! Thank you for sharing.

Rock On!!!!!

This is fantastic news! Bravo Jamf!

Have you heard that Mass Action Commands are not recommended for over 100 devices at once? Jamf told me this unofficially and I’d really like to leverage this for my fleet

Thank you for describing it.

i agree with chris, we just tried to send mass remote command to update to 12.4 (for our 2021 M1 macbook pro) and it just restarted our M1 macbook randomly and updated the mac after 50 minutes