Updating current Jamf Protect plan

[bowie]

whats the best appoach to deploy new Jamf Protect plan in to machines?
currently we have a Default plan that is deployed to all Macs using configuration profiles in Jamf Pro. I want to either deploy a new plan that has tamper prevention enabled or edit an existing one to enable it.
what is the best way to fix this?

it’s enough to edit the current profile and deploy it in Jamf Pro and I don’t have to create a new one?

[AJPinto · Accepted solution]

Just make the changes in Jamf Protect to the existing Plan. When Protect and Pro sync, the Configuration Profile will be updated automatically for the Plan you made the changes to. Jamf Pro will update the Configuration Profile on devices automatically. The only time you would need a new Configuration Profile is when you make a new Plan.

If you need to create a new Plan, you will need to target the new Configuration Profile that is created in Jamf Pro. As you target new Computers with this new Configuration Profile, you will need to exclude Computers from the old Configuration Profile.