Computer Inventory Collection
By default, inventory is collected from computers using the “Update Inventory” policy that is created automatically when you install Jamf Pro. This policy collects inventory from all computers once every week.
You can make changes to the default inventory collection policy at any time. In addition, if you want more control over inventory collection, you can create additional inventory collection policies as needed.
Computer Inventory Information Collected by MDM Commands
While the majority of computer inventory information is collected by the Jamf management framework, MDM commands are also used to collect additional inventory information and populate other inventory fields. MDM commands are typically issued immediately after Jamf management framework inventory commands are executed. This information can help when troubleshooting issues with certain fields failing to update or populate. You can view the sent MDM commands by navigating to the Management History category in the History tab of the computer inventory information.
Note: Jamf Pro also sends additional MDM commands that do not impact inventory information that may display in the Management History category.
The following table lists the inventory information which Jamf Pro collects by MDM commands:
|
Inventory Fields Collected |
macOS Versions Affected |
MDM Command Used |
|
Bootstrap Token Allowed |
macOS 11 or later |
BootstrapTokenAllowed |
|
Activation Lock Note: Collected for compatible computers with macOS 10.15 or later only. For more information on macOS compatibility, see About Activation Lock on your Mac from Apple's support website. |
10.15 or later |
DeviceInformation |
|
Enrolled via Automated Device Enrollment |
10.13.4 or later |
SecurityInfo |
|
External Boot Level |
10.15 or later |
SecurityInfo |
|
Secure Boot Level |
10.15 or later |
SecurityInfo |
|
Supervised |
10.15 or later |
DeviceInformation |
|
Remote Desktop Enabled |
10.14.4 or later |
SecurityInfo |
|
User Approved MDM |
10.13.4 or later |
SecurityInfo |
|
Logged in to the App Store |
N/A |
iTunes Account Status |
In addition to the MDM commands used to collect inventory field information, the following MDM commands are used to populate inventory information categories:
-
ProfileList command—Populates the Profiles category
-
UserList command—(Computers with macOS 10.13 or later enrolled via Automated Device Enrollment) Populates the Local User Accounts category
Note: The Local User Accounts category information is populated by the jamf binary if computers do not meet these requirements.
-
CertificateList command—Populates the Certificates category
-
ContentCachingInformation command—Populates the Content Caching category
Related Information
For related information, see the following sections in this guide:
-
Policy Management
Find out how to create and edit policies. -
Policy Payload Reference
Learn about each payload in the policy interface.
For related information, see the following Knowledge Base article:
Collecting the IP Address and Reported IP Address in Jamf Pro
Learn how the IP address and reported IP address computer inventory items are collected and how you can manually retrieve the reported IP address.