User-Initiated Enrollment - LDAP/Managed AppleIDs necessary?

If you click on Enroll, The enrollment should go through.

Usually, when you want to set up a user for JAMF Pro, you’ll either need to set up an LDAP server or use managed Apple IDs. This makes it easier for users to sign in and get their devices set up.

Now, I know you’re planning to deploy a lot of new devices, and you don’t have a self-enrollment setup yet. Here are a few things you can do to get started:

1. Set up an LDAP server: This will make it super easy for users to sign in and get their devices set up. It’ll also help you manage your devices better and make sure everyone is following the rules.

2. Use Pre-Stage Enrollment through Apple Business Manager: This is a way to automate the device enrollment process. It doesn’t require managed Apple IDs, but you’ll need to supervise the process and assign devices to users through Apple Business Manager.

3. Batch enrol devices: If you don’t want to set up an LDAP server or use Pre-Stage Enrollment, you can batch enrol devices through automated device enrollment. This means that IT can handle the initial setup, but you won’t have to do it yourself.

Since all the devices are company-owned, I think Pre-Stage Enrollment might be the best option for you. It’ll save you a lot of time and effort, and it’ll help you make sure that everything is set up correctly.

I hope this helps! If you have any other questions, feel free to ask.

Are you able to move to Automated Device Enrollment, or DEP, in your organization for these new devices?

​@A_Collins 

I didn’t think for a moment to leave it empty! That did it! My problem now is that it won’t take the MDM profile because it is not “removable.” And since these are company owned devices, of course we don’t want the MDM being removable. I will have to investigate this. However...

​@Samstar777 ​@mvu 

I believe I got my thought trains crossing paths; We are set up for auto-enrollment, but what I had in mind that would get in my way is actually the activation locks, not the enrollment! My mistake...
I think what we will do is remove the activation lock for a short time to allow everyone to set up their own new phones and then use JAMF to reactivate the activation locks later. This will also get around this business about making a “removable MDM profile.”

Does it sound like I’m back on track? 

Thank you so much for your responses!

Not sure. How is the activation lock impeding you?

If you need to manage it, you can also do this through Apple Business Manager itself now.

 

​@mvu 

We would like the activation lock on at all times normally. It is impeding when a user goes through the iPhone startup screens with it on, and the activation lock prompts for the DEP credentials.

For the sake of the deployment, we would have to turn it off to allow users to get around it, and then once everyone is in, we’d reactivate the activation lock.