Skip to main content

Enable JAMF Reset for Field Technicians Only

Updated over 2 weeks ago

Issue Description

Allow field technicians the ability to user JAMF Reset, but not end users however configuration profiles with LDAP limitations seem to get uninstalled soon after getting installed via Self Service.

Troubleshooting Steps

  1. Create the following 3 smart groups:

    1. Name - Has Add Jamf Reset Web Clip 1
      Criteria - Profile Name
      Operator - has
      Value -Add Jamf Reset 1

    2. Name - Has Add Jamf Reset Web Clip 2
      Criteria - Profile Name
      Operator - has
      Value - Add Jamf Reset 2

    3. Name - Has Remove Jamf Reset Web Clip
      Criteria - Profile Name
      Operator - has
      Value - Remove Jamf Reset

  2. Create the following 4 configuration profiles:

    1. Name - Add JAMF Reset 1
      Distribution Method - Self Service
      Payload - Web Clip - Does not matter what URL it goes to (I set it to localhost), but we don't want to make it removable
      Scope - Targets - Devices that have Jamf Reset Installed
      Scope - Limitations - LDAP group or username

    2. Name - Add Jamf Reset 2
      Distribution Method - Install Automatically
      Payload - Web Clip - Does not matter what URL it goes to (I set it to localhost), but we don't want to make it removable
      Scope - Targets - Has Add Jamf Reset 1
      Scope - Targets - Has Add Jamf Reset 2
      Scope - Exclusions - Has Remove Jamf Reset

    3. Name - Remove Jamf Reset
      Distribution Method - Self Service
      Payload - Web Clip - Does not matter what URL it goes to (I set it to localhost), but we don't want to make it removable
      Scope - Targets - Devices that have Jamf Reset Installed
      Scope - Limitations - LDAP group or username

    4. Name - Hide JAMF Reset
      Payload - Restrictions--->ios and tvos-->applications-->Do not allow some apps-->Jamf Reset (or com.jamf.reset)
      Scope - targets - All devices that have JAMF Reset (could probably use the same scope we have for JAMF Reset
      Scope - Exclusions - Has Add Jamf Reset 2

  3. Setup Jamf Reset and scope it to the devices that you want to have it.

    End result is whenever JAMF Reset Web Clip 2 is on the device, JAMF Reset is visible. 'Add Jamf Reset 1' is what the Field technician is actually clicking on which triggers the installation of JAMF Reset 2. JAMF reset 2 is scoped to devices that have either JAMF Reset 1 or JAMF Reset 2 on them, so it stays on the device until it gets wiped (the entire idea of JAMF Reset) or the technician installs 'Remove JAMF Reset.'

Did this answer your question?