Recommended Profile Configs

[jlyle1]

Just setting up zero-touch deployment for our company that went full remote. I know that profile configs are unique to each org's requirements, but I wanted to get a feel for what people had implemented, and if there were any suggested profile configs to look into. For example, blocking user's system preferences access, or security profiles? 

[jpeters21 · Accepted solution]

like you said really specific to your company...really just kind of follow the best practices. I have seen quite a few people do not enable the firewall on a mac so probably a good place to start if you do not already. An often missed one is printers, if you company does not want the staff printing work related documents at home you should block them from adding those. Take admin privileges were possible.. and in that make sure all the needed software can be packaged and deployed through Jamf. 

[jlyle1]

good call on the printers. Thank you!