apple server os for device enrollment program

UAMDM grants mobile device management (MDM) additional management privileges, beyond what is allowed for macOS MDM enrollments which have not been “user approved”. As of macOS 10.13.4, the only additional management privilege associated with UAMDM is that it allows you to deploy a profile which provides a white list for third-party kernel extensions. If you create a managed administrator account, you can hide that account in the Users & Groups pane of System Preferences.Starting in macOS 10.13.2, Apple introduced the concept of User Approved MDM Enrollment (UAMDM). You must also create a managed administrator account. No option to create an account: The user logs in on the Mac using their directory user name and password.

You can specify how the user proceeds through the account setup portion of the OS X Setup Assistant:Ĭreate an administrator account: The user creates an administrator account on the Mac.Ĭreate a standard account: The user creates a standard account on the Mac. Require user name and password to complete enrollmentĭisable pairing of an iOS device to a Macĭisable the specific setup steps listed below: Prevent unenrollment (Supervised iOS devices only) Once you use the Device Enrollment Program to authorize your server to manage devices, you can do the following:

The user can decide to accept the enrollment profile or skip enrollment. Profile Manager sends a notification when the Mac connects to the appropriate network. Note: Setup Assistant on a Mac can be completed without a network connection.

Apple server os for device enrollment program