Enrollment is the process of adding devices to Jamf School to establish a connection between the devices and the Jamf School server. This allows you to perform inventory, configuration, security management, and distribution tasks on the devices. When mobile devices are enrolled, inventory information for the devices is submitted to Jamf School.
If you are changing from another MDM provider to Jamf School and the device is not enrolled via Automated Device Enrollment (formerly DEP), or if you want to remove the MDM profile from a device enrolled in Jamf School through on-device enrollment, you must remove the MDM profile from your devices manually before enrolling them.
Note: To access all management features, it is recommend you use supervised devices with iOS 9.3.5 or later.
There are three ways to enroll devices with Jamf School:
Automated Device Enrollment (formerly DEP)—Automated Device Enrollment (formerly DEP) allows you to automate the enrollment process and prevent users from removing the MDM profile from the devices. This is the enrollment method recommended by Apple. By enrolling devices using Automated Device Enrollment, you can use all the device management capabilities Jamf School offers. Automated Device Enrollment is one way in which a computer can achieve a User Approved MDM status. User Approved MDM is required for certain performance and security enhancements, like managing kernel extensions. For more information on Automated Device Enrollment, see the following article from Apple's support website: https://support.apple.com/HT204142
Apple Configurator 2 (iOS and tvOS only)—If you want to use Automated Device Enrollment but your devices are not in Apple School Manager, you can use Apple Configurator 2 to add them to Apple School Manager.
User Enrollment and on-device enrollment—User Enrollment and on-device enrollment allow you to manually enroll a device in Jamf School. Enrolling devices using User Enrollment or on-device enrollment results in an unsupervised device state. Users can remove the MDM profile on devices enrolled via User Enrollment or on-device enrollment, and you cannot use all management capabilities on them. As a result of this, it is recommended that you only enroll devices with User Enrollment or on-device enrollment if you cannot enroll them with Apple School Manager or Apple Configurator 2 or if it is a personally owned device. If a device is institutionally owned, it is recommended you enroll it using on-device enrollment. If a device is personally owned, it is recommended you enroll it using User Enrollment. User Enrollment and on-device enrollment are two ways in which a computer can achieve a User Approved MDM status.
Removing an MDM Profile Manually
You can remove the MDM profile from your devices manually if you are changing from another MDM provider to Jamf School and the device is not enrolled via automated enrollment, or if you want to remove the MDM profile from a device enrolled in Jamf School through on-device enrollment. If you want to re-enroll the device, you can use on-device enrollment.
On the device, navigate to System Preferences > Profiles > MDM Profile.
Click Remove, then click Remove again to confirm.
The MDM profile is now removed from the device.
For related information, see the following sections in this guide:
Automated Device Enrollment
Find out how to enroll devices using Apple School Manager.
Apple Configurator 2 Enrollment
Find out how to enroll iOS and tvOS devices as supervised using Apple Configurator 2.
User Enrollment and On-Device Enrollment
Find out how to enroll devices using on-device or User Enrollment.
For related information, see the following technical paper:
Enrolling Devices with User Enrollment and Jamf School
Find out how to enroll devices in Jamf School with User Enrollment using step-by-step instructions.