Hey @gc are you planning to re-deploy the machine? If so, completely wiping and reinstalling macOS would be the cleanest way to do this. If not, you could go through a cleanup process, but there are a lot of moving parts.
You'll need the Jamf agent to issue all of these commands, so save the sudo jamf removeFramework until the end.
Some of the things you may need to clean up are apps, supporting files, other agents. It's best to use the native uninstallers if possible. Here's a script to remove files/folders/apps. If you remove the Self Service app, keep in mind that it will reinstall on Jamf's next check in.
#!/bin/sh
## postinstall
pathToScript=$0
pathToPackage=$1
targetLocation=$2
targetVolume=$3
#log all to jamf client log
exec 1>>/var/log/jamf.log
exec 2>>/var/log/jamf.log
directory='/Applications/AppToRemove.app'
#Look for Application You'd Like To Remove and remove files if found
echo "Looking for $directory"
if [ -d "$directory" ] ; then
echo "$directory found."
rm -rf "$directory"
echo "$directory removed"
else
echo "$directory not found"
fi
exit 0 ## Success
exit 1 ## Failure
You may also want to remove local accounts. You can create a policy and use the Local Accounts item.
If you'd like to remove certificates, you can use this script. You'll first need to find the shasum by locating the path of the certificate. You'd use that shasum to run the security delete-certificate command. You'll have to direct it to the correct keychain.
#!/bin/bash
#shasum info:
shasum -a 1 /path/certificate1.cer
#9879879879879879879876546546546546546544 /path/certificate1.cer
security delete-certificate -Z 9879879879879879879876546546546546546544 /Library/Keychains/System.keychain
exit 0
You may also want to remove config profiles scoped to that machine.
Also check for Restricted Software items that might be scoped to this machine.
Finally, you can sudo jamf removeFramework.
You may want to create a static group that has all of these scoped items so that if you ever need to re-issue a machine, you'll just need to add that machine to this static group and have all of this done automatically.
Exclude Static Group from all Config Profiles and Restricted Software items.
Scope Static Group to all Removal policies. Make sure you remove the Jamf Agent last.
There may be a few more things to remember, but at least this covers a bunch of things you might also want to remove besides apps.
Good luck!
