Skip to main content

User and Device Level Configuration Profiles in Jamf Now

Updated over a month ago

Description

In Jamf Now you configure blueprints with the settings you want to enforce on managed devices. Some of these settings install via configuration profiles at the system/device level and apply to all users and other settings install at the user level.

When enrolling a Mac in Jamf Now, the local account used to enroll the Mac becomes the MDM-enabled user and is the only local account that receives User Level profiles deployed by Jamf Now.

Device and User Profiles

User Level Profiles

Device Level Profiles

  • WiFi

  • Web Clips

  • Email

  • Enrollment profile

  • Jamf Connect Password Sync licensing profile

  • Jamf Protect Plan licensing profile

  • Restrictions

  • Security Settings

  • Custom Profiles

    • Note: Jamf Now will deploy all custom profiles over the Device Channel, however, some custom profiles require deployment over the User Channel.

This image shows an example of how user profiles and device profiles show in System Settings > Profiles.

Changing the MDM-enabled user on Devices Managed by Jamf Now

If the wrong local account on a managed Mac has the enrollment profile, we will need to unenroll and re-enroll the Mac using the desired local account.

  1. Either manually remove the Jamf Now Enrollment profile from System Settings or send an unenroll command from Jamf Now.

  2. Log in to the desired local account that needs to be MDM-enabled.

  3. Re-enroll the Mac following the steps linked below depending on what enrollment type the computer is eligible for:

More Resources

See Mac Management Considerations on the Jamf Now System Requirements article for more information on managing Macs and local accounts.

Did this answer your question?