Description
Blueprint swaps, assigning one or more devices to a different blueprint, can be a powerful troubleshooting technique to test and isolate the effects of what a blueprint is doing to assigned devices without making the change to all devices in the blueprint.
The second blueprint can be a blank blueprint or a copy of the original blueprint a device is assigned to that has a small change.
For example, in the new blueprint:
We can disable a restriction, like Prevent Changes to Passcode or Prevent Changed to Accounts, then assign one device to this copied blueprint temporarily so a device user can make a passcode change or login to an account.
We can disable all restrictions. This can eliminate whether Jamf Now's management is at all affecting a device. This is a good choice when we do not want to unenroll a device.
We can unassign an app. In a copied blueprint we can remove a troublesome app from a blueprint's app list. When we assign the affected device to the copied blueprint, Jamf Now will send a RemoveApplication command (if necessary). Then a new InstallApplication command will be sent for the app when the device is assigned back to the desired blueprint.
Important notes regarding blueprint swaps
Jamf Now has logic built in that when a device is assigned to a different blueprint, the list of apps are examined and if an app is assigned in both blueprint then Jamf Now will leave the app installed and will not be removed and reinstalled. Managed apps not on the list in the second blueprint will be uninstalled.
When a device is moved to a new blueprint, Jamf Now will remove any blueprint email configuration that was installed on devices and reinstall the email configuration even if the new blueprint is configuring the identical email account. The device user will have to re-enter their account password for Mail and Contacts to work.
Copying and Swapping blueprints in Jamf Now
In Jamf Now, navigate to the blueprint an impacted device is assigned to.
In the list of blueprint options, at the top you will see the name of the blueprint with an arrow. Click the name/arrow to open up a menu.
Choose Copy.
Give the copied blueprint a very clear name.
Make the changes to this blueprint, like removing apps or deselecting a restriction.
Assign the test/impacted device to this copied blueprint.
Once troubleshooting is complete, reassign the device(s) back to their original blueprint. Depending on the reasoning for carrying out the blueprint swap, it might make sense to apply the changes from the second blueprint to the original blueprint.
Warning: To repeat, devices that have email accounts assigned will see the contents of the Mail app inbox and Contacts app disappear until the user re-enters their credentials.