Since upgrade to 8.61, OS X computers automatically enrolling to MDM

powellbc
Contributor II

Is this normal or has it always been the case? We never noticed it in 8.52. Machines are enrolling in the JSS with a management profile (just the MDM enrollment profile, no settings) after imaging and when the framework was upgraded on the clients.

If this is normal, can this be suppressed? one of your regional areas manager profile via his own OS X server and would rather it not be installed, if possible.

I unchecked "Allow enrollment without invitation" under Mobile Device Management Framework Settings but it did not affect anything.

2 REPLIES 2

jafuller
Contributor

This is certificate based management.

In the JSS go to Settings > Computer Management Framework Settings > Security.

If the "Enable Certificate-Based Communication" and "Enable Push Notifications for OS X v10.7 or later clients" are checked you'll experience this behavior.

Uncheck if you no longer want to manage OS X via Profiles.

powellbc
Contributor II

Awesome, thanks for the answer.

If we do this does it completely disable it? The reason I ask is what I noted before: there is one area who uses Casper for software deployments, but his management profiles are managed from his own OS X server. He says the casper MDM profile will interfere with his.

We would like everyone else to be able to use the profiles from the JSS.