Automated Device Enrollment

Automated Device Enrollment (formerly DEP) allows you to automate the enrollment process and prevent users from removing the MDM profile from the devices. This is the enrollment method recommended by Apple. Automated Device Enrollment is one of the methods in which a computer can achieve a User Approved MDM status in Jamf School. By enrolling devices using Automated Device Enrollment, you can use all the device management capabilities Jamf School offers. For more information on Automated Device Enrollment, see the following article from Apple's support website:

Enrolling devices using Automated Device Enrollment involves the following steps:

  • Assign devices to Jamf School

  • Create a DEP profile

    Note: You must erase all content and settings on your mobile devices or reinstall macOS on computers to install a DEP profile because the DEP profile can only get installed during the Setup Assistant. For more information, see How to erase your iPhone, iPad, or iPod touch and How to reinstall macOS from macOS Recovery from Apple's support website.

  • Assign a DEP profiles to devices

You can also customize the enrollment experience by creating agreements to display during enrollment and requiring authentication. For more information, see Customizing the Automated Device Enrollment Experience.

Note: If Jamf School is integrated with Microsoft Azure or Google, you can require enrollment authentication when enrolling devices via Automated Device Enrollment. For more information, see Integrating with Microsoft Azure and Setting Up Google Sign-In in Jamf School.


To enroll devices using Automated Device Enrollment, you must first download the public key before adding the Jamf School server to Apple School Manager. For more information, see Integrating Jamf School with Apple School Manager.

Assigning Devices to Jamf School

Before creating a DEP profile, you must assign devices in Apple School Manager to the Jamf School server. You can choose to automatically add devices you purchase to Jamf School. For more information, see Change MDM server default device assignment in Apple School Manager in Apple's Apple School Manager User Guide. If you want to assign devices to Jamf School manually after purchasing them, see Assign purchased devices to Apple School Manager in Apple's Apple School Manager User Guide.

Creating a DEP Profile

  1. In Jamf School, navigate to Profiles > DEP Profiles in the sidebar.

  2. Select the type of profile you would like to create.

  3. Use the pop-up dialog to configure basic settings, including a profile name. In addition, you can do the following on the DEP profile pop-up dialog:

    • Enter a support phone number and department name that users can reach out to if they need assistance during enrollment.

    • To automatically configure device names during enrollment, enter a device name schema using variables in the Set Device Name field.
      For more information on the variables you can use, see Payload Variables.

    • To allow the devices enrolled with this DEP profile to connect to other computers, select the Allow pairing with other computers checkbox.

    • To allow users to remove the MDM profile, select the Allow removal of the MDM profile checkbox.

      Important: If a user removes the MDM profile, you cannot manage the device.

    • To enable the devices as a Shared iPad, select the Enable Shared iPad checkbox.

    • To customize the user experience of the Setup Assistant, you can select which steps you want to skip in the Setup Assistant. If you choose to skip steps, the user can enable these settings after the device is configured unless otherwise restricted. For Apple TV devices, Ethernet connection is required.

      Note: An Apple ID must be associated with the device before any apps can be installed. If this step is skipped during the Setup Assistant, it must be completed later. If you choose to skip the Location Services step, the device will not automatically set the date and time and will not be able to use Find my iPad.

    • To require authentication during enrollment, select the Require authentication for enrollment checkbox. Additionally, you can make the authenticated user the device owner by selecting the Make authenticated user the device owner checkbox.

  4. Click Save.
    It can take up to five minutes before the profile is pushed to new devices.

Assigning DEP Profiles to Devices

  1. In Jamf School, navigate to Devices > DEP in the sidebar.

  2. Select the devices you want to assign a DEP profile to.

  3. Click Assign profile.

  4. In the pop-up dialog, select the DEP profile you want to assign to the selected devices.

  5. Click Save.
    The profile is now successfully assigned to the selected devices.

Removing a DEP Profile from Devices

If you want to reset and manage a device under different conditions, the settings applied via Automated Device Enrollment (formerly DEP) can be removed. If the devices already have the DEP profile applied, you must wipe and reactivate the devices before removing the DEP profile.

  1. In Jamf School, navigate to Devices > DEP in the sidebar.

  2. Select the devices you want to remove the DEP profile from.

  3. Click Unassign profile.

  4. Click Save.

Copyright     Privacy Policy     Terms of Use     Security
© copyright 2002-2020 Jamf. All rights reserved.