We currently have the users and groups locked down on our users Macs via JAMF policy as we want to stop them creating their own accounts or deleting others..
This is however causing issues as they're not able to change their passwords.
Does anyone know of another way do this? We eventually hope to implement JAMF Connect but would like a solution now.