About Computer Enrollment

Enrollment is the process of adding Mac or Windows computers to the Jamf Software Server (JSS). When computers are enrolled, inventory information for the computers is submitted to the JSS.

Enrolling Mac computers makes them managed by the JSS. This allows you to perform inventory tasks and remote management and configuration tasks on the computers. When you enroll Mac computers, you specify a local administrator account that you want to use to manage them (called the “management account”).

Note: Enrolling computers with macOS 10.9 or earlier using a PreStage enrollment allows you to search and report on the computers as part of your inventory; however, this process alone does not make the computers managed by the JSS.

Enrolling Windows computers allows you to search and report on the computers as part of your inventory. Windows computers cannot be managed by the JSS.

There are several ways to enroll Mac computers with the JSS:

  • User-initiated enrollment—You can allow users to enroll their own Mac computers by having them log in to an enrollment portal where they follow the onscreen instructions to download and install a QuickAdd package.

  • Use a QuickAdd package created with Recon—You can use Recon to create a QuickAdd package that enrolls Mac computers when it is installed. This type of QuickAdd package can be deployed using almost any deployment tool, such as Apple Remote Desktop or the Casper Suite. You can also give the QuickAdd package to users to install.

  • Use the network scanner—You can remotely enroll multiple Mac computers in specified IP ranges by using the network scanner in Recon. Recon scans the specified IP ranges and enrolls any computers that it can connect to over SSH (Remote Login).

  • Run Recon remotely on a single computer—If you know the IP address of the Mac computer that you want to enroll and SSH (Remote Login) is enabled on the computer, you can enroll the computer by running Recon remotely.

  • Run Recon locally—If you have physical access to the Mac computer that you want to enroll, you can run Recon locally on the computer.

  • Image computers—You can enroll Mac computers by imaging them with a configuration that is associated with a management account.

  • Use a PreStage enrollment—A PreStage enrollment allows you to store enrollment and Mac computer setup settings in the JSS and use them to enroll new computers with the JSS. In addition to reducing the amount of time and interaction it takes to prepare new computers for use, this enrollment method makes the computers MDM capable. Computers with macOS 10.10 or later can also be managed automatically when using a PreStage enrollment.
    This enrollment method requires an Apple Deployment Programs account. For more information, see the Integrating with Apple’s Device Enrollment Program (DEP) Knowledge Base article.

There are two ways to enroll Windows computers with the JSS:

  • Use a Recon.exe QuickAdd package—You can use Recon.exe to create a QuickAdd package that enrolls Windows computers when it is installed. This type of QuickAdd package can be deployed using almost any deployment tool. You can also give the QuickAdd package to users to install.

  • Run Recon.exe locally—If you have physical access to the Windows computer that you want to enroll, you can run Recon.exe locally on the computer.

Related Information

For more information, see the following sections in this guide:

For related information, see the following Knowledge Base articles:

Copyright | Privacy | Terms of Use | Security
© copyright 2002-2017 Jamf. All rights reserved.