Remove Self Service but keep connected to Jamf

[arjanhuis]

Hi,

I have a couple of student MacMini's and I don't want them to install anything so they don't have admin permissions but I also don't want them to use the Self Service.

I know I can exclude these student MacMini's from all the policies that are available through the Self Service but that is a hassle... I have a script that, after enrollment, deleted the app in the application folder but it looks like the app keeps on coming back..?

Is it true that maybe a recon or check-in automatically puts back the self service application?

[aaronpolley]

@arjanhuis

Yes I believe it will self heal at each check in

A "quick fix" could be using restricted software targeted to those machines:

https://docs.jamf.com/10.14.0/jamf-pro/administrator-guide/Restricted_Software.html

A more thorough approach will be to stop deploying it automatically and perform a specific policy and scope for deploying the app:

https://docs.jamf.com/10.14.0/jamf-pro/administrator-guide/Installing_Jamf_Self_Service_for_macOS.ht...

Choose your own adventure :)

[arjanhuis]

Ah..! Thanks! Will try the restricted software!