Skip to main content

The purpose here is to compile a list of Configuration Profile payload/preferences or MDM commands that are not currently implemented by Jamf. I have trouble keeping track of the ones I vote for (although that's a separate Feature Request being worked on for JN). Having a public list like this will hopefully help keep track whenever I want to check up on the status of some of these requests.



https://www.jamf.com/jamf-nation/feature-requests/7272/support-for-new-macos-10-13-4-payloads



https://www.jamf.com/jamf-nation/feature-requests/7511/add-support-for-mdm-payload-securetokenauthbypass



https://www.jamf.com/jamf-nation/feature-requests/5555/addition-of-mdm-identity-preference-payload-type



https://www.jamf.com/jamf-nation/feature-requests/7516/add-ability-to-suppress-display-of-the-filevault-key-when-encrypting-via-configuration-profile



https://www.jamf.com/jamf-nation/feature-requests/6626/configuration-profile-for-firmware-efi-password-management-starting-high-sierra



If you got other examples, I'd recommend making a Feature Request (if one doesn't already exist) and then adding the link back here. If you do end up creating one from scratch, provide a link to documentation from Apple's page if possible in that request.



Note: To keep things in scope, this is not meant for other MDM-related features (DEP, VPP, etc.). It's specifically just about Configuration Profile and MDM commands.

You have a duplicate listed above but the below FR predates the one you posted.
https://www.jamf.com/jamf-nation/feature-requests/6831/add-showrecoverykey-to-require-filevault-2-in-security-privacy-payload


Good catch. I voted it up. And also made a comment in that FR so that the one I posted gets marked as a duplicate.


https://www.jamf.com/jamf-nation/feature-requests/7671/config-profile-option-to-disable-restrict-usb-added-in-ios-11-4-1


https://www.jamf.com/jamf-nation/feature-requests/7672/add-support-for-configuration-profile-payload-to-disable-32-bit-application-warning


All of these are mostly planned for Jamf Pro 10.7, but not all will get implemented by then so in keeping up with the spirit of this list:
https://www.jamf.com/jamf-nation/feature-requests/7696/message-support-for-device-lock-command-in-macos-10-14



https://www.jamf.com/jamf-nation/feature-requests/7697/implement-new-dep-options-in-ios-12-and-macos-10-14



https://www.jamf.com/jamf-nation/feature-requests/7700/implement-macos-10-14-ios-12-and-tvos-9-0-configuration-profile-payloads



https://www.jamf.com/jamf-nation/feature-requests/7699/add-support-for-installenterpriseapplication-in-10-13-6-and-later



https://www.jamf.com/jamf-nation/feature-requests/7698/scheduleosupdate-support-for-tvos-12-0


https://www.jamf.com/jamf-nation/feature-requests/7747/time-server-payload-support-in-ios-and-tvos


https://www.jamf.com/jamf-nation/feature-requests/7749/add-new-smartcard-settings-payload-preference-key-support-for-macos-10-13-4-and-later



https://www.jamf.com/jamf-nation/feature-requests/7750/add-new-nsextension-management-payload-for-macos-10-13-and-later


https://www.jamf.com/jamf-nation/feature-requests/7746/add-disablefdeautologin-to-login-window-payload


https://www.jamf.com/jamf-nation/feature-requests/7753/ability-to-skip-true-tone-setup-assistant-on-macbook-pro-2018



11/6/18 EDIT: Although not marked as implemented as of this edit, apparently it made it into Jamf Pro 10.8. Striking this one off the list.


https://www.jamf.com/jamf-nation/feature-requests/7754/skip-the-option-to-configure-choose-your-look-during-setup-for-macos-10-14-and-later


https://www.jamf.com/jamf-nation/feature-requests/7755/add-allowdockfixupoverride-support-for-the-dock-configuration-payload-for-macos-10-12-or-later


https://www.jamf.com/jamf-nation/feature-requests/7759/add-support-for-the-privacy-preferences-policy-control-payload-in-macos-10-14-and-later

https://www.jamf.com/jamf-nation/feature-requests/7760/add-new-restrictions-payload-options-in-ios-12+-and-later


https://www.jamf.com/jamf-nation/feature-requests/7061/adding-the-option-to-turn-on-or-off-lock-screen-in-the-apple-menu



https://www.jamf.com/jamf-nation/feature-requests/7763/add-support-for-the-logoutdisabledwhileloggedin-preference-key-part-of-the-login-window-payload-for-macos-10-13-and-later


I may have missed it, but does this list have "InstallApplication" and "InstallEnterpriseApplication"?



EDIT:
Here's the latter: https://www.jamf.com/jamf-nation/feature-requests/7699/add-support-for-installenterpriseapplication-in-10-13-6-and-later



Support for the former might be nice for environments that cannot upgrade to 10.13.6, but I doubt we'll see it.


@gregneagle Good call. It is a Feature Request here: https://www.jamf.com/jamf-nation/feature-requests/6907/custom-dep


https://www.jamf.com/jamf-nation/feature-requests/5595/keep-mac-dep-device-in-setup-assistant-until-mdm-config-is-complete


https://www.jamf.com/jamf-nation/feature-requests/7791/reconcile-computer-os-inventory-info-in-jamf-pro-with-mdm-client-data


An open framework for constructing payloads and commands similar to the FR below would solve most, if not all of these issues.



Break Up Multi-MDM-Payload GUI Payloads


@milesleacy While that FR has my vote, it's not really going to solve the fact that Jamf hasn't implemented and/or supported these MDM payloads/commands. Jamf already provides the ability for people to upload their own custom profiles. Your FR would make that easier, but that's not really the point though (of this list anyways). Jamf should have these MDM features already built into Jamf. How they see fit to best do that, I'll leave up to them. And there's also the fact that some of these MDM features require just a bit more support than just filling in a payload domain, key and value.



All that to say, I'd like to keep this list specific to MDM features that aren't implemented by Jamf. Not MDM improvements that Jamf could make of which there are a ton.


@bpavlov , I agree. Jamf needs to be quicker with deploying their “easy button” of GUI checkboxes, etc. Thats a perennial problem. We’re still waiting for all 10.13 MDM functions to be natively supported here on the eve of 10.14. Given that timeline is a proven bugbear, I’m looking for an alternative.



Providing an open framework to enter commands, payloads, settings, and values semi-manually would provide those of us who provide zero-day support for Apple operating systems within our organizations with the ability to use any and every command, payload, and setting as soon as Apple release them into the wild.



We can write profiles by hand, manually sign them and upload them to Jamf, but that is not scalable or delegable to junior staff. As for commands, AFAIK, Jamf does not provide any provision for hand-writing and uploading an MDM command.



I understand this list/discussion is about GUI support in the Jamf web app, however I’m proposing something flexible and a bit more manual vs nothing at all.


https://www.jamf.com/jamf-nation/feature-requests/7883/add-support-for-the-new-education-profile-in-macos-10-14-also-for-ios-9-3-and-later


https://www.jamf.com/jamf-nation/feature-requests/7898/add-simsetup-to-skip-the-add-cellular-plan-pane-for-dep



https://www.jamf.com/jamf-nation/feature-requests/7897/add-support-for-dual-sim-configurations-in-mdm


https://www.jamf.com/jamf-nation/feature-requests/7935/add-search-domains-to-vpn-payload


https://www.jamf.com/jamf-nation/feature-requests/8048/add-allowcellularplanmodificaton-for-ios-11-and-later



https://www.jamf.com/jamf-nation/feature-requests/8047/add-allowesimmodification-restriction-for-ios-12-1-and-later


https://www.jamf.com/jamf-nation/feature-requests/8062/please-add-support-for-the-configuration-profile-setup-assistant-payload


Reply