Skip to main content
Question

Exclude a mac from all Policies

  • April 20, 2020
  • 8 replies
  • 71 views

Forum|alt.badge.img+5

in our environment, there are few mac which are managed by developer and do not want to receive any policies, although i want to keep them in Jamf environment.
Is there a way to exclude those macs from all the policies?
Note: we generally do not choose any sites in all the policies.(not best practice)

8 replies

Forum|alt.badge.img+14
  • Valued Contributor
  • April 20, 2020

Create a static group called “Developers” and exclude it from all your policies and configuration profiles. Don’t exclude if from update inventory though.


Forum|alt.badge.img+10
  • Valued Contributor
  • April 20, 2020

@jared_f is there an easy way to do this if you have a lot of policies? i have considered writing a script to iterate through all of the groups and add to exclusions, but just never got around to it.


Forum|alt.badge.img+16
  • Valued Contributor
  • April 20, 2020

I just had to do this the hard way for different reasons. I ended up making a group named "Default policy exclusion group" and had that smart group be that it's in the other smart group I wanted to exclude so I can modify it later without having to go through every policy again.


Forum|alt.badge.img+5
  • Author
  • Contributor
  • April 20, 2020

Thanks @jared_f, Presently i am doing it that way but
its really pain to add exclusion for 100+ policies. Hope you can understand. :)


anverhousseini
Forum|alt.badge.img+11
  • Valued Contributor
  • April 20, 2020

This could help you: https://github.com/jssimporter/jss_helper/wiki


Forum|alt.badge.img+5
  • Author
  • Contributor
  • April 20, 2020

@anverhousseini will check that..thanks


Forum|alt.badge.img+13

How about creating a separate site just for those machines and assigning them to that site.


Forum|alt.badge.img+14
  • Valued Contributor
  • April 27, 2020

@hdsreid @Rohitds14 Ya, I totally get that. The last Jamf instance I managed had over 140 policies and 40 config profiles and that was just the beginning of the deployment across campus. I excluded it mainly on restriction profiles and AV policies. I also used a script to create buttons for ITS Techs to put the computer in certain groups, they are super handy but a PIA to make. Two policies per button, and multiple smart groups to update the buttons accordingly in Self Service.