Remote Commands for Computers Flashcards
Lock Computer*
Logs the user out of the computer, restarts the computer, and then locks the computer
(Optional) Displays a message on the computer when it locks
To unlock the computer, the user must enter the passcode that you specified when you sent the Lock Computer command.
Remove MDM Profile
Removes the MDM profile from the computer, along with any configuration profiles that were distributed withJamf Pro.
After the MDM profile is removed,Jamf Prowill no longer be able to send commands to the computer, deploy configuration profiles, or deploy settings that rely on the Apple Push Notification service (APNs).
Note:
Removing the MDM profile without removing the Jamf management framework, which includes the jamf binary, will leave the computer in a partially managed state. The computer will continue to update inventory in Jamf Pro, receive policies, enforce restricted software, and perform other actions managed by the Jamf management framework.
Renew MDM Profile*
Renews the MDM profile on the computer, along with the device identity certificate.
The device identity certificate has a default expiration period of two years.
Wipe Computer
Permanently and immediately erases the computer by sending a macOSEraseDevicecommand to the computer. Wiping the computer removes the MDM profile, theJamfmanagement framework, and all settings and applications installed byJamf Pro. TheRemote Wipe Passcodefield only applies to Mac computers that do not support Activation Lock. For a computer with an Apple T2 Security Chip or Apple silicon (e.g., M1 chip), enter six random digits to bypass this dialog.
Send Blank Push
Contacts Apple Push Notification service (APNs) and the declarative status channel to prompt the computer to check in withJamf Profor instructions to perform an action, like install a configuration profile
Download/Download and Install Updates*
Updates the OS version and built-in apps on the computer
macOS 10.11 or later
You can update the OS version for macOS using the following options:
Target Version—You can choose to update the OS version to the latest version based on device eligibility or you can update to a specific version. When choosing to update the OS version to the latest version, you can select theInclude major updates, if availablecheckbox to download and install the latest major update. To download and install the latest patch version, keep the checkbox deselected.
Note:
Updating to a specific macOS version requires computers with macOS 10.15 or later.
Install Action—You can choose to download the update for users to install, download and allow macOS to install later, or to download and install the update and restart computers after installation. When choosing theDownload and allow macOS to install lateraction, you can configure the number of times a user can defer the update on computers with macOS 12.3 or later. The default deferral is 7 times, but can be changed to any integer between 0–99.
Unlock User
macOS 10.13 or later
Supervised or enrolled via a PreStage enrollment
Unlocks a local user account that has been locked due to too many failed password attempts
Remove User
macOS 10.13 or later
Supervised or enrolled via a PreStage enrollment
Removes a user that has an active account on the computer
Note:
TheRemove Usercommand cannot remove a user if they are the last user with a secure token granted.
Enable/Disable Bluetooth*
Enables/disables Bluetooth on the computer
macOS 10.13.4 or later
Note:
When sending the command via a mass action, theSet Bluetoothoption must be selected.
Enable/Disable Remote Desktop*
Enables/disables Remote Desktop on the computer
macOS 10.14.4 or later
Note:
When sending the command via a mass action, theSet Remote Desktopoption must be selected.
Set Activation Lock*
Allow user to enable Activation Lock directly on the computer
Disable and prevent Activation Lock
