Hi there!
Just checking if anyone has pro-tips!
We currently have a management account on many devices with the same password, and that same local account is used for the helpdesk.
What i am trying to achieve is;
- Create a new hidden management account like "_management" on existing devices
- Still have the ability to use Jamf Remote
- When that is all done, set up macOS Laps for the helpdesk account. ( no help needed for this)
What is the best way to achieve this?
Already tried
- Create custom QuickAdd.pkg with params -noPolicy -noManage to prevent triggering Enrollment and other policies, _management gots created, but then Jamf Remote keeps "authenticating". In the JSS the device state has changed to managed: _management
- Create new local account with a Jamf policy and then make it hidden, edit device info and change management account, did it manually and the Actions option.
- Use jamf binary to create a account, change management accounts through Actions or device inventory
All feels fine, except Jamf Remote keeps trying to Authenticate so i guess the randomized / static pw for _management account does not get submitted correctly but weird fact is that if change it manually it still is not working.
When i change it back to the "old" management account Jamf Remote does his job.
Any suggestions on how to only change management account for macOS devices?
Cheers!