Data Collection

Information Collected for Computers

Computers can submit many types of inventory information to Jamf Pro. Basic inventory information—such as hardware, operating system, user and location information, security reporting, storage, and applications—is collected automatically. 

The Computer Inventory Collection settings in Jamf Pro allow you to collect the following additional items:

  • Local user accounts

  • Printers

  • Active services

  • Last backup date/time for managed mobile devices that are synced to computers

  • User and location from an LDAP directory service (only available if an LDAP server is set up in Jamf Pro)

  • Package receipts

  • Available software updates

  • Application Usage information

  • Fonts

  • Plug-ins

You can also collect FileVault 2 information, including:

  • Personal (also known as "individual") recovery keys (if enabled in Jamf Pro using a disk encryption configuration or redirected to Jamf Pro using a macOS configuration profile)

  • List of FileVault 2 enabled users

  • Presence of an institutional recovery key

  • Personal (also known as "individual") recovery key validation (validity is checked during every inventory submission)

Information can also be collected using computer extension attributes, which are custom fields that allow for the collection of almost any type of data from a computer.

For related information, see the following sections in the Jamf Pro Administrator's Guide:

Information Collected for Institutionally Owned Mobile Devices

Jamf Pro stores detailed inventory information for each managed mobile device.

You can view the following information for each institutionally owned mobile device:

  • Hardware information, including UDID, serial number, MAC address, model, and capacity

  • Operating system information

  • Installed apps

  • Installed configuration profiles.

Information can also be collected using mobile device extension attributes, which are custom fields that allow for the collection of almost any type of data from an institutionally owned mobile device.

For related information, see the following sections in the Jamf Pro Administrator's Guide:

Information Collected for Personally Owned Mobile Devices

Jamf Pro stores a limited set of inventory details for each personally owned mobile device.

You can view the following information for each personally owned mobile device:

  • Hardware information, including UDID, serial number, MAC address, model, and capacity

  • Operating system information

  • Managed apps installed by Jamf Pro

  • Configuration profiles installed by Jamf Pro

Mobile device extension attributes do not apply to personally owned mobile devices.

Information Shared with Microsoft Intune

When the connection between Jamf Pro and Microsoft Intune is successfully established, Jamf Pro sends inventory information to Microsoft Intune for each computer that has been registered with Azure AD.

You can view Azure Active Directory ID information for a user and a computer in the Local User Account category of a computer's inventory information in Jamf Pro. For detailed information on the inventory attributes sent to Microsoft Intune, see the "Appendix: Inventory Information Shared with Microsoft Intune" section of the Integrating with Microsoft Intune to Enforce Compliance on Macs Managed by Jamf Pro technical paper.

Note: Inventory information is not shared with Microsoft Intune unless the macOS Intune Integration setting is enabled in Jamf Pro.