Looks like they provide everything you need to install the client. You
can just CURL the installer and run it from CLI which would not need a
package to be deployed by Jamf, you can do this with a Files and
Processes payload. You can also download th...
You can use a Configuration Profile to disable Users and Groups, but
Configuration Profile would not do anything like blocking a command from
running unless apple made a domain to manage that function like they do
with FileVault.What you are wanting ...
Anything in iCloud would not be visible to them, but iCloud syncs back
locally to your Mac and any files synced WILL be visible to them. If
they disabled (manual) Device Enrollment, it does not matter how many
VM's or separate partitions you make, yo...
I was thinking they may also lack the experience to properly manage and
support Macs. Could also be a security gap that they don't have the
manpower, skill set, or tools to cover. Some organizations just don't
feel it's worth it to deal with macOS in...
MacOS is very finicky with docks because apple refuses to support
DisplayPort MST. We usually stick with DisplayPort Docks. I absolutely
hate the software, but they are far more reliable than random docks on
the market. As far as plug and play docks ...