Skip to main content
Question

How to install pkg during enrollement

  • May 22, 2026
  • 8 replies
  • 29 views

Forum|alt.badge.img+1

Hi there,

We have a Jamf-Pro on premise instance.

i’m looking how to install our EDR, packaged, during the enrollement step, using same process to install SelfService.

Is it possible to do this?

Thanks

8 replies

PaulHazelden
Forum|alt.badge.img+13
  • Jamf Heroes
  • May 22, 2026

You can set Enrollment complete as a trigger, which will install the packages straight after enrollment.
OR.
You can add the Packages to the Prestage setup and have them installed during prestage.


AJPinto
Forum|alt.badge.img+26
  • Legendary Contributor
  • May 22, 2026

As ​@PaulHazelden said, just copy the existing policy and set this copies trigger to enrollment. It will install when the device enrolls along with all the other stuff that happens during enrollment.

 

What I used to do was have a single enrollment policy that had a script payload that ran sudo Jamf policy -id to install all the security clients in the order I wanted rather then having a bunch of policies independently triggering at enrollment.


PaulHazelden
Forum|alt.badge.img+13
  • Jamf Heroes
  • May 22, 2026

As ​@PaulHazelden said, just copy the existing policy and set this copies trigger to enrollment. It will install when the device enrolls along with all the other stuff that happens during enrollment.

 

What I used to do was have a single enrollment policy that had a script payload that ran sudo Jamf policy -id to install all the security clients in the order I wanted rather then having a bunch of policies independently triggering at enrollment.

That is how my setup works. One script that launches at enrollment. It then calls by named trigger all of the policies, in the order I want, and once complete it then reboots the Mac. 


Forum|alt.badge.img+1
  • Author
  • New Contributor
  • May 22, 2026

You can set Enrollment complete as a trigger, which will install the packages straight after enrollment.
OR.
You can add the Packages to the Prestage setup and have them installed during prestage.

Thank you for your answer, i saw this option, but it tells me i don’t have a distribution point avalaible to do this, so i only be able to select NONE on distribution point option, i don’t know if ti has an issue?
I will look to your other option but i’m not sure to know how to do this, my job give me our Jamf Pro management because my colleague left, i have good knowledge about inventory and group management, i have to improve my skills


Forum|alt.badge.img+1
  • Author
  • New Contributor
  • May 22, 2026

As ​@PaulHazelden said, just copy the existing policy and set this copies trigger to enrollment. It will install when the device enrolls along with all the other stuff that happens during enrollment.

 

What I used to do was have a single enrollment policy that had a script payload that ran sudo Jamf policy -id to install all the security clients in the order I wanted rather then having a bunch of policies independently triggering at enrollment.

Could you show me how you set it up in jamf pro?


AJPinto
Forum|alt.badge.img+26
  • Legendary Contributor
  • May 22, 2026

Which one?

  • Making the policy trigger off enrollment is just a drop down on the general page.
  • Making a script to trigger policies is just a simple string, and putting it on a policy set to trigger on enrollment.

Script example, but you can get a lot more complex and robust than this and include error handling.

#!/bin/bash

### Install tool 1 (whatever you want to call this)
echo "Install tool 1"
sudo Jamf policy -event {custom event name no curly brackets}

### Install tool 2 (whatever you want to call this)
echo "Install tool 2"
sudo Jamf policy -id {whatever the policy ID is which is found at the end of the URL for the policy without curly brackets}


### Install tool 3 (whatever you want to call this)
echo "Install tool 3"
sudo Jamf policy -id {ID and and event can be changed and exchanged to meet your needs)


### Keep adding extra policies to meet your needs, this does not get around scoping so if a policy is not scoped to a device this won't force it to trigger.

 


AJPinto
Forum|alt.badge.img+26
  • Legendary Contributor
  • May 22, 2026

You can set Enrollment complete as a trigger, which will install the packages straight after enrollment.
OR.
You can add the Packages to the Prestage setup and have them installed during prestage.

Thank you for your answer, i saw this option, but it tells me i don’t have a distribution point avalaible to do this, so i only be able to select NONE on distribution point option, i don’t know if ti has an issue?
I will look to your other option but i’m not sure to know how to do this, my job give me our Jamf Pro management because my colleague left, i have good knowledge about inventory and group management, i have to improve my skills

 

To deploy packages during enrollment itself with the prestage the package needs to be signed and hosted on a cloud distribution point. You can still have policies trigger at enrollment, a bit later in the process then prestage, but still before the user can log in, usually.


Forum|alt.badge.img+1
  • Author
  • New Contributor
  • May 22, 2026

You can set Enrollment complete as a trigger, which will install the packages straight after enrollment.
OR.
You can add the Packages to the Prestage setup and have them installed during prestage.

Thank you for your answer, i saw this option, but it tells me i don’t have a distribution point avalaible to do this, so i only be able to select NONE on distribution point option, i don’t know if ti has an issue?
I will look to your other option but i’m not sure to know how to do this, my job give me our Jamf Pro management because my colleague left, i have good knowledge about inventory and group management, i have to improve my skills

 

To deploy packages during enrollment itself with the prestage the package needs to be signed and hosted on a cloud distribution point. You can still have policies trigger at enrollment, a bit later in the process then prestage, but still before the user can log in, usually.

Ok thank you, i will try what you explain