I'm trying to determine what the effect of disabling ssh might be for managed computers. At the moment, all I can see is that Recon and Casper Remote won't work. Recon isn't a big problem, since ssh would be disabled after enrolment and deployment are complete.
Is ssh used by JSS or other components?
Would any other functionality be affected?
Only those two applications would be affected yes.
Everything else runs through the jamf binary and talks to the JSS over https.
I've taken the plunge and tested this on some computers, and so far it seems that it works ok. Policies etc work ok, but Casper Remote doesn't. Fun thing is that you can enable/disable/configure ssh with a policy anyway.
Disabling SSH in my environment presented the following issues:
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.