Change control for policies?

[jsousa2]

Hi Jamf folks, is anyone doing change control across their jamf policies? We are looking to ensure that there's no unauthorized changes to our critical policies, and that they could be audited periodically.

If anyone is doing this and could point me in the right direction I'd greatly appreciate it!

[sdagley · Accepted solution]

@jsousa2 You could use Jamf Migrator to download the policies from your JSS and look for changes. There is a command line option for the tool so you could automate the download and comparison process.

[jsousa2]

Thank you again for that Jamf Migrator tip, my follow up question is - is there a solution that *isn't* Mac based? We're hoping to be able to push something on to an existing linux or windows server since Apple isn't keen on virtualizing.

[sdagley]

@jsousa2 You could run a script on a Linux box that calls the Jamf Pro API to download policies and then reviews them for changes. Here's a blog post from @rtrouton that talks about using a script to download policies and upload them to GitHub which should provide an example of this approach: https://derflounder.wordpress.com/2018/12/21/backing-up-macos-management-policies-from-jamf-pro/

[jsousa2]

TY @sdagley this worked great, we are not worthy!