There are multiple different ways to display messages to users:
- Send a message through Self Service (mobile devices only, I think
- Create a policy and use the User Interaction tab (computers only)
- Create a script with the /usr/sbin/jamf displayMessage -message 'XYZ' command (computers only)
- Lock the device and display a message (both mobile devices and computers)
- Enable lost mode (mobile devices only)
The last two options are fair bit more than soft pressure, but still possible.
There might be more options, but none I can think of right now.
I prefer to use Jamf Helper for notifications, but the options are really endless. Swift is a good tool for notifications and macOS has tons of options baked in. However, in your case this is a compliance problem. If your organization has standards written to return devices in 14 days, and users are not complying and their managers are not making them comply this is a problem for your leadership not you. Check with your people that manage governance for direction, and also get with your security teams as rogue devices are a security concern.
In the meantime, a notification nag would not be a bad idea. However don't expect users to react to them, look in to software restrictions and block list applications for non-compliant users and if that does not work issue remote lock commands to both the new and old device. Make the users come to you, make this an operational problem, once its an operational problem it becomes a money problem which their leadership will care about. Maybe even issue a remote wipe command to the old device at 14 days to put pressure on the user to move to the new device, no need to tell them its a manual process let them think its automated and they are on a clock.
Thanks for writing out what I thought. I wasn't sure if I should mention it, but agree 100% with you and the way you proposed. We handle it in a similar way.
Who handles the devices? If you're very familiar with people who need to return their old equipment, and know when it's returned, Intune registration with Device Compliance (aka Conditional Access) could be your friend. Add a group to your Master Group (or really, your block group) that any workstation that is in this group fails compliance and loses access to company resources. And then you could use Jamf helper to display an alert to the users explaining why they're blocked.
you might look at this. I wrote a Swift dialog script that allows you to send out custom notifications to specific groups. there are several options for custom messages, graphics files, timers, etc. check it out: https://github.com/ScottEKendall/JAMF-Pro-Scripts/tree/main/DialogMsg
I also like jamfHelper Constructor app. Easy to setup and use. Customizable.
https://github.com/BIG-RAT/jhc