Best practice for devices that drop from JSS


Can anyone provide a best practice on devices that drop from JSS? I am starting to see devices that have not checked in for some time. Email to end user they mention they are using the device.

So not sure what happened. Possible time machine backup?

I created a quickadd.pkg through Recon but when I do a test on a machine it seems to run our complete initial setup which includes app installs. I do not want that. Self enrollment may be an option but I do not want the end user the capability to remove it.

I would just like a simple pkg that I can share via a remote session that will connect back to Jamf so I can look over the device and possibly patch and update as needed.