Jamf Nation Community

Our teachers use AD to log into their macbooks. After their first login we make them local administrators of the macbook. Is there a way we can block them from seeing the wifi passwords that are stored in keychain access?

We just recently set up an externally facing JSS. We have been trying to send out remote lock and remote wipe commands to Macs outside of our network but they keep failing. These are the ports we opened up on our firewall: 443, 548, 2195, 2196, and 5...