Posted on 04-20-2020 05:12 AM
in our environment, there are few mac which are managed by developer and do not want to receive any policies, although i want to keep them in Jamf environment.
Is there a way to exclude those macs from all the policies?
Note: we generally do not choose any sites in all the policies.(not best practice)
Posted on 04-20-2020 06:36 AM
Create a static group called “Developers” and exclude it from all your policies and configuration profiles. Don’t exclude if from update inventory though.
Posted on 04-20-2020 07:55 AM
@jared_f is there an easy way to do this if you have a lot of policies? i have considered writing a script to iterate through all of the groups and add to exclusions, but just never got around to it.
Posted on 04-20-2020 08:36 AM
I just had to do this the hard way for different reasons. I ended up making a group named "Default policy exclusion group" and had that smart group be that it's in the other smart group I wanted to exclude so I can modify it later without having to go through every policy again.
Posted on 04-20-2020 09:01 AM
Thanks @jared_f, Presently i am doing it that way but
its really pain to add exclusion for 100+ policies. Hope you can understand. :)
Posted on 04-20-2020 09:13 AM
This could help you: https://github.com/jssimporter/jss_helper/wiki
Posted on 04-20-2020 11:16 AM
@anverhousseini will check that..thanks
Posted on 04-20-2020 12:21 PM
How about creating a separate site just for those machines and assigning them to that site.
Posted on 04-27-2020 07:53 AM
@hdsreid @Rohitds14 Ya, I totally get that. The last Jamf instance I managed had over 140 policies and 40 config profiles and that was just the beginning of the deployment across campus. I excluded it mainly on restriction profiles and AV policies. I also used a script to create buttons for ITS Techs to put the computer in certain groups, they are super handy but a PIA to make. Two policies per button, and multiple smart groups to update the buttons accordingly in Self Service.