Jamf & DEP

[DI_Casper]

I was wondering if anyone else has had experience with this scenario.

A MacBook Pro was stolen while arriving to our office. This laptop is in DEP, but was not selected in the scope of the prestage enrollment. So, if you go through the OOBE you can bypass the requirement of JAMF MDM. Is there a way to force the laptop to enroll into JAMF when it's not in our hands? I know there are terminal commands that will prompt to enroll, but we wouldn't be able to do that since it was stolen.

Would we basically just have to wait until they wipe the computer and go through the OOBE to get JAMF on there?

Also, we have had a scenario where we were able to bypass the enrollment screen for JAMF during OOBE on a MacBook Pro when we didn't have internet connection. Has anyone else experience this?

[Chris]

There's not really a way to enforce enrolment on macOS, even with a DEP device.
If there's no internet connection during the setup assistant, it'll just skip enrolment, unlike iOS which requires online activation.
macOS can throw prompts like this one if it's a not-enrolled DEP device, but those are easily dismissed as well.