@bobdole01 You can create a QuickAdd package with Recon that you could then install on each machine. That's still manual, but much easier than running Recon on every system.

I am confused however by your statement "DEP enrollments and MDM functions are not an option due to network security constraints". What exactly are you intending to do with Jamf if MDM functions are not an option? And while DEP enrollment may not (yet) be required for managing Macs, MDM enrollment being a requirement is fast approaching.

Thanks. I’ll check that out. What I mean is we don’t currently have the ports opened up that we’d need for MDM to function. Eventually we might just not now.

You can still do a ton without MDM and APN ports opened. Policies, self service, scripts. A lot of what we’d need anyways. Thanks.

@bobdole01 Starting with macOS High Sierra 10.13.2 Apple introduced User Approved MDM. That, and APNS being available for delivery, is now required for installing some types of configuration profiles.

If your org intends to keep supporting Macs then you really need to look into getting the ports opened. Apple's Use Apple products on enterprise networks document is your guide for those. And if you use SSL inspection on traffic through your firewall you're going to need to whitelist most, if not all of the servers listed in that document as Apple is moving to use certificate pinning on almost every service.