Jamf school admin guide

Jamf school admin guide DEFAULT

General Requirements

This guide contains instructions on how to initially set up Jamf School (formerly ZuluDesk). This guide supplements the information in the Jamf School setup assistant by providing additional information and instructions on how to perform certain tasks covered in the Jamf School setup assistant. It is recommended that you read this guide before starting the Jamf School setup assistant so that you have a basic understanding of how you want to configure Jamf School. Each step builds on previous steps, so it is recommended that you progress through each step in order.

Before going through the Jamf School setup assistant, you must do the following:

Jamf School requires a valid push certificate to communicate with Apple Push Notification service (APNs). This communication is required to manage devices with Jamf School. Apple recommends that you use one corporate Apple ID for push certificates and a separate one for Apple School Manager. To create a push certificate, you need a valid Apple ID (a corporate Apple ID is recommended). To create a corporate Apple ID, navigate to: https://appleid.apple.com Enter the Apple ID you are using for push certificates in the Apple ID field at the bottom of this page so you know which Apple ID to use when you renew the push certificate.

For more information, see Creating, Renewing, or Deleting an Apple Push Certificate and the Apple Push Certificate for Jamf School training video in the Getting Started with Jamf School series.

Jamf School allows you to assign Jamf School user accounts or LDAP users to devices. Assigning a user to a device in Jamf School allows you to see at a glance what devices belong to each user. You can also create user groups to use as filters for smart device groups and set permissions for Jamf Teacher or Jamf School Parent access. There are several ways to add users to Jamf School. The Jamf School setup assistant guides you through the process of creating users via CSV file import and manually. For more information on the different ways you can to add users to Jamf School, see Creating User Accounts and the User Creation Methods for Jamf School training video in the Getting Started with Jamf School series.

If you chose to import or create users, the Jamf School setup assistant will guide you through the process. You can create test users while you are completing the Jamf School setup assistant and delete them later. For more information on how to create or import users, see "Importing Users with a CSV File" and "Adding Users Manually" in Creating User Accounts. After you have created a few test user accounts, you can add them to a user group. For more information on how to manually create a user group, see Creating User Groups.

Enrollment is the process of adding devices to Jamf School to establish a connection between the devices and the Jamf School server. This allows you to perform inventory, configuration, security management, and distribution tasks on the devices. When mobile devices are enrolled, inventory information for the devices is submitted to Jamf School. If you are changing from another MDM provider to Jamf School and the device is not enrolled via Automated Device Enrollment (formerly DEP), or if you want to remove the MDM profile from a device enrolled in Jamf School through on-device enrollment, you must remove the MDM profile from your devices manually before enrolling them.

It is recommended that you enroll your institutionally owned devices as supervised to use all the management capabilities Jamf School has to offer. To ensure a device is supervised, you must enroll it using one of the following methods:

  • Automated Device Enrollment using Apple School Manager

  • Apple Configurator 2

Select the method you want to use and the Jamf School setup assistant will guide you through enrolling devices using one of these methods. For more information on the different enrollment methods, see Enrollment Methods and the Enrollment Configuration & Synchronization for Jamf School training video in the Getting Started with Jamf School series. Additionally, you can select the Enable renaming devices checkbox to automatically rename devices upon enrollment by using variables.

It is recommended that you assign a license to a device before or immediately after enrolling the device. For more information, see Assigning Perpetual Licenses to Devices.

You can purchase apps and books through Apple School Manager to distribute to devices in Jamf School. To purchase apps and books through Apple School Manager, you must first create a service token and upload it to Jamf School. You can do this using the Jamf School setup assistant. For more information, see Renewing or Replacing a Service Token from Apple School Manager.

There are two methods you can use to distribute apps and books purchased through Apple School Manager to devices and users:

  • Apple ID—Assigns the app to a user's Apple ID. Users can access the app when they are signed in to a device using their Apple ID.

  • Device—Assigns the app to a specific device. Anyone using the device will have access to the app.

For more information on distributing apps and books to users and devices, see Content Distribution Methods and the Apps and Books Configuration & Synchronization for Jamf School training video in the Getting Started with Jamf School series.

You can also choose to automatically invite users via a pop-up dialog or web clip to associate their Apple ID or Managed Apple ID with Apple School Manager by selecting the Enable AutomaticInvitation checkbox. This allows Apple School Manager to distribute any apps and books that are assigned to that user.

Profiles provide an easy way to define settings and restrictions for devices. Profiles can configure settings on your devices like Wi-Fi networks, restrictions, and email accounts.

For more information on how to create a profile, see Device Profiles and the Create a Profile for Jamf School training video in the Getting Started with Jamf School series.

Sours: https://docs.jamf.com/jamf-school/deploy-guide-docs/Getting_Started_with_Jamf_School.html

()

App Extension SSO (Enhancement)

Managed apps in bundle

iOS 14 or later

You can now allow only managed applications to access and use the credential bundle ID.

DNS (New Payload)

The payload for configuring encrypted DNS settings.

DNS Server

iOS 14 or later

Allows you to specify the transport protocol used to communicate with the DNS server.

Server Name

When "TLS" is selected for the DNS server, this allows you to configure the hostname of a DNS-over-TLS server used to validate the server certificate.

Server URL

When "HTTPS" is selected for the DNS server, this allows you to configure the URI template of a DNS-over-HTTPS server used to validate the server certificate.

Server Addresses

Allows you to list DNS server IP addresses.

DNS Query Domains

Allows you to list domains used to determine which DNS queries will use the DNS server.

Prohibit users from disabling DNS settings

Allows you to prevent users from disabling DNS settings.

Enable DNS on-demand

 

Allows you to enable DNS on-demand. Selecting this setting enables the OnDemandRules XML configuration.

On-Demand Rules Configuration XML

Allows you to specify the rules for on-demand DNS.

Notifications (Enhancement)

Show Preview

iOS 14 or later

You can now configure the display of notification previews. You can choose "Always", "When Unlocked", "Never", or "Do Not Configure".

Restrictions (Enhancement)

Allow displaying app clips

iOS 14 or later

Allows or prevents users from adding app clips

SCEP (Enhancement)

Key Size

  • iOS 4 or later

  • tvOS 9 or later

Allows you to specify the key size, in bits. You can now specify "" as the key size.

VPN (Enhancements)

Prohibit users from disabling on-demand VPN settings

iOS 4 or later

You can now prevent users from disabling DNS settings on their mobile devices.

MTU

You can now specify the maximum transmission units (MTU) for the IKEv2 VPN connection.

Wi-Fi (Enhancement)

Disable MAC Address Randomization

iOS 14 or later

You can now disable MAC Address randomization for wireless networks. When this setting is enabled, a privacy warning is displayed in the device's settings indicating that the configured network has reduced privacy protections.

Sours: https://docs.jamf.com/jamf-school/deploy-guide-docs/Jamf_School.html
  1. Spiral wars
  2. Used sand rail for sale
  3. Wooden worry stone

Configuring an Administrator Role

You can use administrator roles and accounts to allow staff at your school to access Jamf School. Administrator accounts are used to create usernames and passwords for administrators to sign in to Jamf School. You define the access rights and privileges that administrator accounts have by assigning the accounts to one or more administrator roles. Any administrator account assigned to a role is granted all of the access rights for that role. If you update access rights and privileges for a role, those changes are updated for any administrator accounts assigned to that role.

Note: Only administrator accounts can be assigned to an administrator role.

Administrator accounts can also configure account settings, including their profile name and the two-factor authentication (2FA) method used to sign in to Jamf School. Jamf School supports 2FA apps, SMS, and backup codes as 2FA methods.

You can create different administrator roles for various responsibilities at your school, such as content manager, device manager, or help desk technician. Before setting up an administrator role, it is recommended that you determine the specific functions and responsibilities that role should have. This determines which access rights and privileges are needed for that role.

  1. In Jamf School, navigate to Organization > Administrators > Roles in the sidebar.

  2. Click +Create role.

  3. Use the Create role pop-up dialog to enter a name for the role.

  4. (Optional) To allow the administrator role to be assigned to a location, select the Share with locations checkbox.

  5. Click Create.

  6. Use the Access rights payload to configure privileges for the role.

  7. Click Save.

You can view roles by navigating to Organization > Administrators > Roles in the sidebar.

After creating an administrator role, you must create an administrator account to assign the role to.

  1. In Jamf School, navigate to Organization > Administrators >Overview in the sidebar.

  2. Click +Add Administrator.

  3. Use the Add Administrator pop-up dialog to configure basic settings for the account, including the administrator’s email address, first name, location, and role.

  4. Click Apply.

The administrator will receive an email with information on how to sign in to Jamf School.

Note: You can assign individual administrators more than one role in the same or different location than their current role. To add an additional role, navigate to Organization > Administrators >Overview in the sidebar and click the +Add Role images/download/thumbnails//Screen_Shot__at__PM.png icon next to the administrator account you want to assign the additional role to.

After creating administrator accounts, administrators can configure account settings, including their profile name, password, and 2FA settings.

  1. In Jamf School, click the Account Settings images/download/thumbnails//Account_settings_icon.png icon at the top-right of the page.

  2. Select My Account.

  3. To configure profile settings, you can do the following:

    • To edit your profile name, click EditProfile Name

    • To edit your profile picture, click the Camera icon on your profile picture.

    • To change your password, click Change Password.

  4. (Optional) To configure 2FA, do one of the following:

    • To configure 2FA using a 2FA app, click Edit for Two-Factor Authentication (App), and then scan the QR code using the app and enter the verification code. Click Enable.

    • To configure 2FA by receiving an SMS message, click Edit for Two-Factor Authentication (SMS), and then enter a phone number and the verification code. Click Enable.

    • To generate backup codes to use for 2FA, click Edit for Backup Codes, and then click Generate Codes.

      Note: Make sure the backup codes are saved in a secure location.

If 2FA is configured, administrators are prompted to authenticate using the configured 2FA method the next time they sign in to Jamf School. To disable 2FA, click Disable in the 2FA method's settings.

Sours: https://docs.jamf.com/jamf-school/deploy-guide-docs/Setting_Up_Administrator_Roles_and_Accounts_in_Jamf_School.html
Mac Management 101: Getting Started

.

School admin guide jamf

.

JAMF School's Overview

.

Similar news:

.



989 990 991 992 993