Enrollment Methods

Enrollment is the process of adding devices to Jamf School to establish a connection between the devices and the Jamf School server. This allows you to perform inventory, configuration, security management, and distribution tasks on the devices. When mobile devices are enrolled, inventory information for the devices is submitted to Jamf School.

If you are changing from another MDM provider to Jamf School and the device is not enrolled via Automated Device Enrollment (formerly DEP), or if you want to remove the MDM profile from a device enrolled in Jamf School through on-device enrollment, you must remove the MDM profile from your devices manually before enrolling them.

Note: To access all management features, it is recommend you use supervised devices with iOS 9.3.5 or later.

There are three ways to enroll devices with Jamf School:

  • Automated Device Enrollment (formerly DEP)—Automated Device Enrollment (formerly DEP) allows you to automate the enrollment process and prevent users from removing the MDM profile from the devices. This is the enrollment method recommended by Apple. By enrolling devices using Automated Device Enrollment, you can use all the device management capabilities Jamf School offers. For more information on Automated Device Enrollment, see the following article from Apple's support website: https://support.apple.com/HT204142

    Note: If Jamf School is integrated with Microsoft Azure or Google, you can require enrollment authentication when enrolling devices via Automated Device Enrollment. For more information, see Integrating with Microsoft Azure and Setting Up Google Sign-In in Jamf School.

  • Apple Configurator 2 (iOS and tvOS only)If you want to use automated enrollment but your devices are not in Apple School Manager, you can use Apple Configurator 2 to add them to Apple School Manager.

  • User Enrollment and on-device enrollmentUser Enrollment and on-device enrollment allow you to manually enroll a device in Jamf School. Enrolling devices using User Enrollment or on-device enrollment results in an unsupervised device state. Users can remove the MDM profile on devices enrolled via User Enrollment or on-device enrollment, and you cannot use all management capabilities on them. As a result of this, it is recommended that you only enroll devices with User Enrollment or on-device enrollment if you cannot enroll them with Apple School Manager or Apple Configurator 2 or if it is a personally owned device. If a device is institutionally owned, it is recommended you enroll it using on-device enrollment. If a device is personally owned, it is recommended you enroll it using User Enrollment.

Removing an MDM Profile Manually

You can remove the MDM profile from your devices manually if you are changing from another MDM provider to Jamf School and the device is not enrolled via automated enrollment, or if you want to remove the MDM profile from a device enrolled in Jamf School through on-device enrollment. If you want to re-enroll the device, you can use on-device enrollment.

  1. On the device, navigate to System Preferences > Profiles > MDM Profile.

  2. Click Remove, then click Remove again to confirm.

The MDM profile is now removed from the device.

Related Information

For related information, see the following sections in this guide:

Copyright     Privacy Policy     Terms of Use     Security
© copyright 2002-2019 Jamf. All rights reserved.