Stolen Laptop

This is a tricky one. We have multiple stolen devices in Jamf and we keep them in there for about 6 months before removing. What we do have is a Lost/Stolen PreStage that we move the device into, so if it is ever wiped and powered back on the following happens:

1. Recovery Lock is set
2. User prevented from enabling Activation Lock
3. Skips through all Setup Assistant options
4. Managed local admin account created & hidden
5. Standard Account created called STOLEN MAC (cannot be changed)
6. Login Window Config Profile applied saying Mac is stolen
7. Parental Controls Config Profile applied
8. Restrictions Config Profile applied locking most settings.

Basically the Mac becomes a brick to the thief/unsuspecting buyer.

I have requested Jamf create some kind of “quarantine” section in Pro for lost or stolen devices, so they can stay in Jamf with Lock Command pending but they aren’t consuming a license or showing up in any patch reports etc. The issue is if you remove it from Jamf then the pending Lock payload is also removed.

Great idea and thank you very much. Umberto.

Hello ​@JimboJambo I agree with ​@Giannini that this is a great idea! Please be sure this idea is in the Ideas Portal at https://ideas.jamf.com/ I want to be sure the product team can track this idea.

Have a great day!

If you stage a Lock command for the Mac, and then change the Mac to Not Managed instead of deleting it, the Lock will still apply if the Mac comes back online (if the MDM Profile hasn’t expired before then that is)

I love this! I’m going to implement the same thing.

I tend to keep stolen devices for quite some time. I have seen monthly restore and setup as new attempts for years from various places in Asia for mobile devices, and expect the same for laptops. I work in Europe, but the stolen device economy has turned global.