I realize this thread is old, but is there a problem with the following
approach: Create a policy with no package but with "jamf recon" in the
Execute Command section, which should run as rootScope that policy how
you want (all computers? yikes!, but...