I have two requirements that Jamf thinks are in conflict. I need to:
I should be able to create a config profile that just does the "require password" bit while not touching the firewall setting, right? And then use Jamf to push that profile to our Macs?
It's been years since I've had to create config profiles from scratch. Is Apple's Profile Manager the best tool? (Requiers buying macOS Server, but that's only $20.)
Are there other apps for creating config profiles?
Is there a tutorial for creating configuration profiles manually (with a text editor, for example)?
@cpresnall Are you using JAMF to push out the selected item(s) restrictions? If so, How?
If I Am reading this right the program can be used to limit certain aspects of System Prefs item? Example: We would like to block access to FileVault2, but cannot do that in JAMF without blocking access to Security and Privacy (S&P) as a whole. Will the program allow only the blocking of FV2 without blocking the entirety of S&P in System Preferences?
@cpresnall : Thanks! I hadn't previously heard of ProfileCreator, but it's just what I needed.
@rhooper : I've never heard of someone trying to block access to FileVault2. We actually use a Jamf config profile to force FV2.
I'm not sure why you want to block it, but perhaps if you explain your reasoning, your fellow Jamfers might be able to offer a better suggestion.
If your concern is that users might block access to data you need, then you can enable FV, and use Jamf's "recovery key redirection" and "enable escrow" to get a copy of the key on the Jamf server.