Jamf Pro

Full Wi-Fi and VPN profile deployment for macOS and iOS including per-app VPN, proxy PAC, and 802.1X configurations.

Exchange and email account configuration for macOS Mail and iOS Mail with S/MIME support and per-message signing.

Deep Apple-specific restrictions with 100+ toggles for macOS and iOS covering hardware, software, and media restrictions.

Excellent custom profile support with mobileconfig upload, Configuration Profile Builder, and custom schema deployment.

iOS Single App Mode and Classroom app for iPad; macOS kiosk via custom scripts. No multi-app kiosk UI for iPad.

Industry-leading ADE integration with PreStage Enrollments offering granular skip-screen, authentication, and MDM module selection per device.

Apple-only platform; no Android device management capabilities.

Apple-only platform; no Windows device management capabilities.

Enrollment invitations via email/SMS and CSV import; bulk enrollment mainly through ADE or Configurator for Apple devices.

User-Initiated Enrollment via web portal and Jamf Self Service; supports Account-Driven User Enrollment for iOS BYOD.

App Store deployment via VPP with silent installation on supervised devices; Mac App Store app management.

PKG and DMG deployment for macOS via Jamf Admin; IPA deployment for iOS with version management.

Excellent VPP management with volume license tracking, device-based assignment, and automatic license revocation.

AppConfig support for iOS managed apps with configuration keys and managed open-in restrictions.

Jamf Self Service provides a polished app catalog for macOS and iOS with branding, categories, and bookmarks.

Smart Groups drive compliance with criteria-based targeting; Jamf Protect adds security compliance posture monitoring.

Conditional Access via Microsoft Entra ID integration and Jamf Connect; compliance data shared with identity providers.

FileVault management with institutional recovery key escrow; personal recovery key escrow and rotation.

SCEP and PKCS certificate deployment with ADCS integration; certificate-based Wi-Fi and VPN authentication.

Jamf Protect (separate product) provides endpoint protection, threat detection, and compliance reporting for Apple devices.

Apple Declarative Device Management (DDM) for macOS and iOS updates; version-targeted enforcement and Nudge-like notifications.

Third-party app patching through Jamf App Installers and Patch Management; limited to macOS applications.

macOS and iOS update deferral via managed software update delay settings; up to 90-day deferral.

Remote wipe and unenroll for Apple devices; inventory record archival for retired devices.

Hardware inventory with purchase date and warranty tracking; limited lifecycle dashboards.

Rich dashboard with compliance overview, device breakdown charts, and real-time fleet health metrics.

Advanced search and Smart Groups enable powerful custom queries; CSV export and scheduled email reports.

Deep Apple hardware and software inventory with extension attributes for custom data collection.

Detailed audit log with change tracking, policy history, and computer/device history per record.

Device details with last check-in, battery, storage, and location (managed lost mode); inventory updates on check-in.

Remote lock with custom message, remote wipe, restart, and shut down for macOS and iOS devices.

Jamf Remote for macOS screen sharing and remote control; iOS remote view via screen mirroring.

Remote command execution via Jamf API; Extension Attributes run scripts and collect output from macOS devices.

Jamf Self Service provides a branded portal for apps, bookmarks, policies, and password changes on macOS and iOS.

File distribution via Jamf Distribution Server for macOS packages; log collection via scripts.

Industry-leading Smart Groups with 150+ criteria for macOS and iOS including extension attributes and LDAP lookups.

Scope-based policy assignment with targets, limitations, and exclusions using Smart Groups, buildings, and departments.

iOS geofencing via managed location services; location-based inventory and compliance reporting.

Policy trigger scheduling with recurring execution, maintenance windows, and custom triggers.

Multiple profiles and policies can coexist; Smart Group-based scoping with scope priority for overlapping assignments.

Entra ID integration with device compliance sharing; Jamf Connect enables Entra ID authentication on macOS login.

Okta and Google Workspace integration; Jamf Connect supports Okta authentication for macOS login.

LDAP integration with on-premises Active Directory for user lookups and group-based targeting.

Certificate-based authentication with ADCS integration for 802.1X Wi-Fi and VPN client certificates.

User-device affinity tracking with LDAP-based user assignment and inventory reporting.

Jamf Pro API and Classic API with extensive endpoint coverage for automation and integration.

Webhook notifications for key events; Jamf Pro API webhooks for external system integration.

Jamf Protect SIEM integration with Splunk, Sentinel, and syslog forwarding for security event streaming.

ServiceNow integration via marketplace app; Jira and ITSM integration through API and community plugins.

Excellent macOS scripting with Extension Attributes, policies, and scripts; bash/python/zsh execution support.