Help

List of Configuration Profile payloads and MDM commands not implemented by Jamf

bpavlov
Honored Contributor

Posted on ‎06-06-2018 08:21 AM

The purpose here is to compile a list of Configuration Profile payload/preferences or MDM commands that are not currently implemented by Jamf. I have trouble keeping track of the ones I vote for (although that's a separate Feature Request being worked on for JN). Having a public list like this will hopefully help keep track whenever I want to check up on the status of some of these requests.

https://www.jamf.com/jamf-nation/feature-requests/7272/support-for-new-macos-10-13-4-payloads

https://www.jamf.com/jamf-nation/feature-requests/7511/add-support-for-mdm-payload-securetokenauthby...

https://www.jamf.com/jamf-nation/feature-requests/5555/addition-of-mdm-identity-preference-payload-t...

https://www.jamf.com/jamf-nation/feature-requests/7516/add-ability-to-suppress-display-of-the-fileva...

https://www.jamf.com/jamf-nation/feature-requests/6626/configuration-profile-for-firmware-efi-passwo...

If you got other examples, I'd recommend making a Feature Request (if one doesn't already exist) and then adding the link back here. If you do end up creating one from scratch, provide a link to documentation from Apple's page if possible in that request.

Note: To keep things in scope, this is not meant for other MDM-related features (DEP, VPP, etc.). It's specifically just about Configuration Profile and MDM commands.

Labels:
Reply
40 REPLIES 40

Kaltsas
Contributor III

Posted on ‎06-06-2018 09:46 AM

You have a duplicate listed above but the below FR predates the one you posted.
https://www.jamf.com/jamf-nation/feature-requests/6831/add-showrecoverykey-to-require-filevault-2-in-security-privacy-payload

Reply

bpavlov
Honored Contributor

Posted on ‎06-06-2018 10:58 AM

Good catch. I voted it up. And also made a comment in that FR so that the one I posted gets marked as a duplicate.

0 Kudos
Reply

bpavlov
Honored Contributor

Posted on ‎08-13-2018 11:23 AM

https://www.jamf.com/jamf-nation/feature-requests/7753/ability-to-skip-true-tone-setup-assistant-on-...

11/6/18 EDIT: Although not marked as implemented as of this edit, apparently it made it into Jamf Pro 10.8. Striking this one off the list.

0 Kudos
Reply

gregneagle
Valued Contributor

Posted on ‎08-15-2018 07:04 AM

I may have missed it, but does this list have "InstallApplication" and "InstallEnterpriseApplication"?

EDIT:
Here's the latter: https://www.jamf.com/jamf-nation/feature-requests/7699/add-support-for-installenterpriseapplication-...

Support for the former might be nice for environments that cannot upgrade to 10.13.6, but I doubt we'll see it.

0 Kudos
Reply

bpavlov
Honored Contributor

Posted on ‎08-15-2018 07:14 AM

@gregneagle Good call. It is a Feature Request here: https://www.jamf.com/jamf-nation/feature-requests/6907/custom-dep

0 Kudos
Reply

milesleacy
Valued Contributor

Posted on ‎09-05-2018 11:28 AM

An open framework for constructing payloads and commands similar to the FR below would solve most, if not all of these issues.

Break Up Multi-MDM-Payload GUI Payloads

0 Kudos
Reply

bpavlov
Honored Contributor

Posted on ‎09-06-2018 06:03 AM

@milesleacy While that FR has my vote, it's not really going to solve the fact that Jamf hasn't implemented and/or supported these MDM payloads/commands. Jamf already provides the ability for people to upload their own custom profiles. Your FR would make that easier, but that's not really the point though (of this list anyways). Jamf should have these MDM features already built into Jamf. How they see fit to best do that, I'll leave up to them. And there's also the fact that some of these MDM features require just a bit more support than just filling in a payload domain, key and value.

All that to say, I'd like to keep this list specific to MDM features that aren't implemented by Jamf. Not MDM improvements that Jamf could make of which there are a ton.

0 Kudos
Reply

milesleacy
Valued Contributor

Posted on ‎09-06-2018 08:46 AM

@bpavlov , I agree. Jamf needs to be quicker with deploying their “easy button” of GUI checkboxes, etc. Thats a perennial problem. We’re still waiting for all 10.13 MDM functions to be natively supported here on the eve of 10.14. Given that timeline is a proven bugbear, I’m looking for an alternative.

Providing an open framework to enter commands, payloads, settings, and values semi-manually would provide those of us who provide zero-day support for Apple operating systems within our organizations with the ability to use any and every command, payload, and setting as soon as Apple release them into the wild.

We can write profiles by hand, manually sign them and upload them to Jamf, but that is not scalable or delegable to junior staff. As for commands, AFAIK, Jamf does not provide any provision for hand-writing and uploading an MDM command.

I understand this list/discussion is about GUI support in the Jamf web app, however I’m proposing something flexible and a bit more manual vs nothing at all.

Reply

Not applicable

Posted on ‎01-24-2019 08:15 PM

Great information..This will be useful for online dot net course studies

0 Kudos
Reply

cgolebio
New Contributor III

Posted on ‎02-07-2019 05:50 PM

hi @bpavlov , would you consider the following implemented now? Just checking in case you want to cross it off...
https://www.jamf.com/jamf-nation/feature-requests/7699/add-support-for-installenterpriseapplication-in-10-13-6-and-later

0 Kudos
Reply

cgolebio
New Contributor III

Posted on ‎02-13-2019 12:12 PM

Thought I'd contribute 1 (or 2) to the list:

https://www.jamf.com/jamf-nation/feature-requests/8367/add-payload-for-managed-unmanaged-contacts-to...

edit: Now I see this is a duplicate for @bpavlov . Sorry, buddy.

0 Kudos
Reply

dgreening
Valued Contributor II

Posted on ‎06-18-2019 10:03 AM

With Apple moving many "previously able to be scripted" Management Actions to MDM (thank goodness... long overdue!), we are going to need beta and then zero-day support for these payloads. :)

Reply

gachowski
Valued Contributor II

Posted on ‎06-18-2019 11:47 AM

I wonder if this thread should be moved to the same location as "known issues"? A master list inside of everyone's accounts page?

C

0 Kudos
Reply

bpavlov
Honored Contributor

Posted on ‎06-18-2019 12:17 PM

@gachowski Why? I'm just linking to feature requests (which are publicly available for anyone to read) related to payloads and/or MDM specs that are not implemented by Jamf. And it seems to have had some sort of effect because if you've noticed, a lot of these have a strike now which means they've been implemented. Not too shabby for a list that's only been around one year.

Reply

gachowski
Valued Contributor II

Posted on ‎06-18-2019 12:23 PM

I was just thinking out loud... a Jamf managed list would look more professional and a little easier to read. Not married to it, just an idea. As typed that out, I realized it takes something simple and complicates it... : )

C

PS I would bet that there is some manager someplace that has used this thread to push back against getting Jamf in their organization.

Reply

lbm5
New Contributor III

Posted on ‎08-02-2019 01:36 PM

Please consider up voting: Add the ability to do a Remote and immediate restart OR shutdown for macOS devices via MDM commands:

https://www.jamf.com/jamf-nation/feature-requests/8800/macos-remote-restart-and-shutdown-via-mdm-commands

Reply