macOS Remote Commands

The macOS remote commands available in the JAMF Software Server (JSS) allow you to remotely perform the following tasks on a computer:

You can send a macOS remote command to a single computer. Some commands can also be sent to multiple computers at once using mass actions. For more information, see Performing Mass Actions for Computers.

Note: The remote commands available for a particular computer vary depending on the computer's OS version. For more information, see Computer Management Capabilities.

The following table describes the macOS remote commands that you can send from the JSS:

macOS Remote Command

Description

Requirements

Lock Computer

Logs the user out of the computer, restarts the computer, and then locks the computer

To unlock the computer, the user must enter the passcode that you specified when you sent the Lock Computer command.

--

Remove MDM Profile

Removes the MDM profile from the computer, along with any configuration profiles that were distributed with the Casper Suite

If the MDM profile is removed, you can no longer send remote commands or distribute configuration profiles to the computer.

Note: Removing the MDM profile from a computer does not remove the computer from the JSS or change its inventory information.

--

Wipe Computer

Permanently erases all data on the computer

Note: Wiping a computer does not remove the computer from the JSS or change its inventory information.

To restore the computer to the original factory settings, the user must enter the passcode that you specified when you sent the Wipe Computer command, and then reinstall the operating system.

For detailed information on macOS Recovery, see the following Apple Knowledge Base article:
https://support.apple.com/kb/HT4718

--

Send Blank Push

Sends a blank push notification, prompting the computer to check in with Apple Push Notification service (APNs)

--

Update OS version and built-in apps

Updates the OS version and built-in apps on the computer

You can choose to download the update for users to install, or to download and install the update and restart computers after installation.

macOS v10.11 or later

Enrolled via a PreStage enrollment

Requirements

To manage macOS remote commands, you need:

  • Computers with macOS v10.7 or later and a Recovery Partition

  • A push certificate in the JSS (For more information, see Push Certificates.)

  • The Enable certificate-based authentication and Enable push notifications settings configured in the JSS (For more information, see Security Settings.)

Sending a macOS Remote Command

  1. Log in to the JSS with a web browser.

  2. Click Computers at the top of the page.

  3. Perform a simple or advanced computer search.
    For more information, see Simple Computer Searches or Advanced Computer Searches.

  4. Click the computer you want to send the macOS remote command to.
    If you performed a simple search for an item other than computers, you must click Expand images/download/thumbnails/13828267/Add_icon.png next to an item to view the computers related to that item.

  5. Click the Management tab, and then click the button for the remote command that you want to send.

    • If you are sending a Lock Computer command, type a password that the user must enter to unlock the computer.

    • If you are sending a Wipe Computer command, type a password that the user must enter to restore the computer.

The remote command runs on the computer the next time the computer checks in with the JSS.

Viewing the Status of macOS Remote Commands

  1. Log in to the JSS with a web browser.

  2. Click Computers at the top of the page.

  3. Perform a simple or advanced computer search.
    For more information, see Simple Computer Searches or Advanced Computer Searches.

  4. Click the computer you want to view macOS remote commands for.
    If you performed a simple search for an item other than computers, you must click Expand images/download/thumbnails/13828267/Add_icon.png next to an item to view the computers related to that item.

  5. Click the History tab.

  6. Use the Management History pane to view completed, pending, or failed commands.

Canceling a macOS Remote Command

  1. Log in to the JSS with a web browser.

  2. Click Computers at the top of the page.

  3. Perform a simple or advanced computer search.
    For more information, see Simple Computer Searches or Advanced Computer Searches.

  4. Click the computer for which you want to cancel a macOS remote command.
    If you performed a simple search for an item other than computers, you must click Expand images/download/thumbnails/13828267/Add_icon.png next to an item to view the computers related to that item.

  5. Click the History tab, and then click Pending Commands.

  6. Find the command you want to cancel, and click Cancel across from it.

Copyright | Privacy | Terms of Use | Security
© copyright 2002-2016 Jamf. All rights reserved.