Jamf Pro FAQs

What is Jamf Pro? 
 
Jamf Pro is a Mobile Device Management (MDM) solution used by iTech to manage the university's Apple ecosystem. With Jamf, iTech can proactively support the entire lifecycle of university-owned Apple devices. This includes deploying and maintaining software, responding to security threats, distributing configurations, and analyzing inventory data to ensure your device runs smoothly. 
 

What are the benefits of Jamf Pro? 
 
Reliability: Security patches, critical updates, and software repairs will be quietly deployed directly to your device, ensuring fewer system crashes and less down-time. 

• Efficiency: Automated configurations mean your Mac is ready to go out of the box. No more long appointments drop-offs at the help desk just to get standard campus software set up. 

• Flexibility: You are in the driver's seat. Through Self Service+, you decide exactly when to execute maintenance tasks or install new applications so your active work is never interrupted. 

• Security & Peace of Mind: iTech proactively monitors and mitigates background security threats on your machine, protecting both university data and your digital workspace so you don't have to worry about it. 

What is Automated Device Enrollment (ADE)? 
 
Automated Device Enrollment streamlines the setup process for new or repurposed Apple devices. Apple hardware purchased through University of Southern Mississippi procurement is automatically linked to our Jamf MDM server. This makes configuring your device much quicker and easier right out of the box. 
 
What to expect: When going through Apple's Setup Assistant for the first time (or after a factory restore), you will see a campus-branded enrollment screen. Follow the on-screen prompts to connect your device. If you have any questions during setup, please call the iTech Help Desk at x6-HELP (601-266-4357) or submit a service request. 

 
I already have a Mac. How can I get it enrolled? 

If you have an existing university-owned Mac that is not yet enrolled in Jamf Pro, an iTech desktop technician will work with you to complete the process. 

• How it works: The enrollment is primarily handled remotely. A technician will connect with you to initiate the setup, and the total background process takes about 1 to 1.5 hours to complete. (Note: You do not need to actively watch the screen the entire time; Jamf will configure itself in the background). 

• In-Person Setup: If technical limitations prevent a remote enrollment, we will schedule a brief in-person appointment to complete the initial setup steps. 

• Get Started: To schedule your enrollment, please submit a service request by emailing helpdesk@usm.edu or by visiting the iTech Service Desk Portal. 
   

How can I tell if my device is enrolled in Jamf Pro?  

The easiest way to check if your university-owned Mac or iPad is enrolled is to look for the Self Service + application. This app is installed automatically the moment enrollment is successful.  

• On a Mac (macOS): Look for the Self Service + icon in your Applications folder or pinned to your Dock.  

If you see the app, your device is fully enrolled and protected! If you don't see it and believe your device should be enrolled, please contact the iTech Help Desk.  

 
 
What is the Self Service + app?  
 
Think of Self Service+ as the university's curated app store for your Mac. Located right in your Applications folder, Self Service+ gives you complete control over when and how tasks are executed. Instead of waiting for IT to push changes, you use on-demand actions to run tasks at your convenience. 

From Self Service+, you can trigger actions such as: 

• Software Installs: Download approved applications (like specialized academic tools or web browsers) without needing IT assistance. 

• On-Demand Maintenance: Manually run policy updates or force an inventory check-in if troubleshooting an issue.
   

Can I use Self Service+ when I am off-campus? 

Yes. Because Jamf Pro is a cloud-based solution, Self Service+ will function from anywhere in the world - no VPN or campus network connection required. All you need is an active Internet connection. 

Note: Depending on the speed of your home or public Wi-Fi network, larger software downloads or installations may take a bit longer to complete than they would on the high-speed campus network. 


Data & Privacy: What does Jamf see? 

To maintain compliance and security, Jamf collects basic system data. However, your personal data remains private. 

*Note: Device location is never tracked unless a device is officially reported stolen/missing and iTech enables Apple's dedicated "Lost Mode." 
 

How do software updates work? 

For the most part, Jamf’s software updates and patching will be completely invisible to you. 

• Background Downloads: Updates download silently in the background without interrupting your work. 

• Notifications: When an app update is available, you will receive daily notifications for one week before it becomes mandatory. 

• Deadlines: To keep university data secure, updates must be completed within 7 days of release. If an application remains open past this deadline, a final 60-minute countdown banner will appear. This gives you one final hour to save your work before the application automatically closes to complete the security update. 
   

Will I lose administrative access to my Mac? 

To align with campus security standards, your primary user account will be configured as a standard account. However, you will still be able to perform administrative tasks securely. 

By using the Admin by Request tool, you can instantly elevate your privileges to run specific installers or initiate a 1-hour administrative session. Click here to learn more about Admin by Request. 
 

Exceptions: To ensure strict compliance with federal data protection guidelines, certain computers on campus handling sensitive data will be restricted from using self-elevation features. If your workstation falls into this category, iTech will manage software installations directly for you.

Computers in shared-use environments, such as computer labs or classrooms, may also be configured to disallow self-elevation features.  Administration of these machines will be handled by designated administrators or iTech.