Jamf Connect

If you are managing macOS endpoints in your environment, then JAMF Connect is a no brainer.

Opmerkingen: JAMF will connect you with an engineer who will walk you through the configuration and installation of the product and will be able to answer any questions. The support for any JAMF product is overwhelming and they have an amazing community.

Pluspunten:

JAMF Connect is easy to set up when you are using JAMF for your MDM. It resolves Keychain and password syncing issues. It also helps by implementing a modern way of authenticating into your macOS environment.

Minpunten:

It's a bit pricey, especially if you are in Enterprise. You can do the majority of the things in JAMF Connect, with its free counterpart NomAD.

Its not perfect (yet)

Pluspunten:

In a post COVID-19 world, we had to come up with a way to deploy laptops to people and get them logged in off VPN. Jamf Connect has answered that call and made our lives easier.

Minpunten:

The application can often be buggy and sometimes regardless of the configuration, Jamf Connect misbehaves. These aren't deal breakers, but for a premium product, I expect premium experience.

Not the best for AD environment

Opmerkingen: fair, I like the ability to control logins and have hands free deployment but this really is only useful for new Mac deployments. I did not even try to move a user to a new Mac, not sure how that would work

Pluspunten:

The ability to use hands off deployment to new users

Minpunten:

I had issues with passwords in my testing. We us AD accounts to access our Mac computers. When Jamf connect setups on a machine that already has and AD mobile account, it makes it local, this does something that when the user changes their ad password the connection between Jamf connect and the Mac will not allow the password to be updated. I had a support ticket and we were unable to resolve this issue. Also, when running updates on a computer the updates do not complete until Jamf Connect has authenticated. I would start updates on Friday, come in on Monday, sign into Jamf Connect, then have to wait 15 minutes for the update to complete.

Streamlining account creation and login

Pluspunten:

Our users simply open the sealed box, and after the traditional setup, are prompted to enter their IDP Credentials. Now their local account and password matches what is in the IDP. If the user changes their password somewhere other than their Mac, Jamf Connect detects and remediates the change on their Mac too. If your org requires FileVault 2 encryption to be enabled, Jamf Connect and ensure the device is encrypted, with the key being escrowed, before any user has created their account.

Minpunten:

While Jamf only supports Apple Devices, our Windows users get jealous of the speed in which we can deploy and provision Macs to our users.

Jamf Connect review

Opmerkingen: Its been a good experience thus far. We still have a few more projects related to Jamf Connect brewing. Specifically, deploying Jamf connect to computers already enrolled in our environment.

Pluspunten:

I came on board shortly after the deployment of Jamf connect and it has made a big impact on our touchless enrollment. The Okta integration was convenient

Minpunten:

Somewhat difficult to configure and the guide could have done a better job explaining some of the functionality. Specifically, I would have liked to see better documentation around FileVault workflows. I found myself digging around other sites to get information that I felt should have been in the documentation.