Computername in PreStage Enrollment

Not sure if this helps, but we run a policy during the enrollment complete portion that adds initials and the serial #, then we have an on-going policy to keep the computer/host/etc name the same. It's not entirely polished but it keeps the computer name accurate.

As far as preventing a user from changing it, you could restrict Sharing preferences, but they could also use Terminal if they have admin. One method would be to run a policy/script that would match the Jamf computer name record so it will always match what you want or had set. My policy just sets the name at certain intervals (its not entirely polished or pretty, but think I may switch to the former suggestion).

I run this as part of my enrollment script to rename the computer prior to binding to the AD. Doesn't prevent users from changing the name after the fact but like @randy.andersen said if the users have local admin privileges and access to sharing preferences they can change it.

#!/bin/sh

serial_number=`ioreg -l | grep IOPlatformSerialNumber|awk '{print $4}' | cut -d " -f 2`
/usr/sbin/scutil --set ComputerName $serial_number
/usr/sbin/scutil --set LocalHostName $serial_number
/usr/sbin/scutil --set HostName $serial_number

Apple has a great guide for zero touch enrollment. I can't share the doc but you can ask apple for it.

Thank you I will check the script and will also check what Apple has to offer.

This script really works nice. Thanks.

Old topic but how did you guys get the script to work prior to AD binding? Not sure where or how to fit this in? Any ideas?