What Does Jamf Track and How Does It Work?

Organizations and companies can take advantage of MDM profiles to help track their assets (macOS and iOS devices) and to use it as a productivity tool.

The profile also assists in keeping the company's data secure. There are many MDM solutions available for mac and OS devices, one of them being Jamf Pro.

What is Jamf Pro?

A management system developed by Jamf, Jamf Pro is a complete management system solution for Apple's iOS devices and macOS computers.

Many IT departments use Jamf Pro to manage their corporate's Apple devices ecosystem.

These include functions such as uploading and maintenance of software, resolving security issues, analyzing data files, and updating device settings.

What does jamf track for a computer?

Jamf Pro tracks the history and activity logs for each macOS computer. You are able to view the following:

Application Usage Logs	View a pie chart from a specific date range that shows the amount of time an app was running in the foreground
Computer Usage Logs	View the following information: Dates and times when a user login and logout Dates and times when the system bootup Usernames used when a user login and logout
Audit Logs	View the following activity: A Wipe Computer command is sent to the computer remotely A user has viewed the FileVault encryption key
Policy Logs	View a list of policies run on the computer with the following information: The time and date of the policy ran The duration of time the policy ran Action logged Status
Jamf Remote Logs	View the following information: Event date and time of Jamf Remote Status Jamf Remote event actions are logged
Screen Sharing Logs	View the following information: Screen sharing session status Date and time of the screen sharing session Additional Details
Jamf Imaging Logs	View the following information: Time and date of when the computer is imaged Imaging event status Actions happened during the imaging event
Mac App Store	View the following app installation activity: Completed Pending Failed You can cancel any pending app installations
macOS Intune Integration Logs	If a computer is registered with Azure AD and the macOS Intune integration is enabled then you can view for each username the inventory sent to Microsoft Intune.
Hardware/Software History	View an inventory report of a specified date range for hardware information: OS Make/Model/Serial Number Learn if there is a change in the software from the previous reports.
Management History	View a list of management command: Completed Pending Canceled Sending a remote command Installing of configuration profile Removal of configuration profile
User and Location History	View a list of records that includes the history of location changes.

For instructions on how to access these logs and additional information, click here.

What does jamf track for a mobile device?

Jamf Pro tracks the history and activity logs for each iOS device. You are able to view the following:

Management History	View a list of the following management logs: Completed Pending Canceled Record of inventory updates iOS Configuration profiles installed/removed Apps installed/removed Managed Books installed/removed Provisional Profiles installed/removed
Audit Logs	View the following audit logs: Bypass code for activation lock is viewed Remote commands has been sent to the device: Clear passcode Format/Factory Reset device
User and Location History	View a list of records that includes the history of location changes of each user.
Managed Book Installation	View an activity list of managed book installation: Completed Pending Canceled You can cancel any pending managed book installations
App Store Installation	View the following app installation activity: Completed Pending Failed You can cancel any pending app installations

For instructions on how to access these logs and additional information, click here.

How does Jamf Pro work?

Jamf Pro is like any other Apple management system. It has a cluster of management servers called the JSS (JAMF Software Server).

An 'agent' is a small software utility that is installed on macOS laptops and systems. An MDM or Mobile Device Management creates a profile and then installs it on iOS and macOS devices.

The iOS or macOS client agent regularly uses internet data to check with the JSS servers. It will check with the servers whenever the device boots up and with an interval of 15 minutes.

The agent will keep in touch with the servers until the system is powered off or the internet connection is interrupted.

The following data is consumed when corresponding with the JSS servers:

Network Traffic consumes approximately 2KB
Real Memory takes about 4MB
CPU uses 0.10%

Additional data is consumed when the inventory from the computer is uploaded to the JSS servers every day:

Network traffic is less than 200 KB
Real Memory uses 8MB
CPU uses 3.74%

It will take 30 seconds to complete the average inventory process.

The iOS client corresponds with the JSS servers once per day by default. However, the user can also request the Jamf pro technicians to check in with the JSS.

You do not need to worry about your company's private data being compromised. A certificate pair is configured when installing the agent and profile on the devices.

It helps the communication between the client (macOS and iOS device) and the server to be encrypted.

How can I tell if my device is enrolled in Jamf Pro?

Any new Apple computer your company or organization issues you could have the Jamf Pro client on the device. If it's not enrolled, then good for you.

But most often, the client will be enrolled on your macOS or iOS device so the company can track your activity and keep employee data in a centralized location.

To check if the macOS computer or laptop you own is enrolled in Jamf Pro, follow the instructions below:

Step 1: Click on the 'System Settings' from the Apple Menu

System Settings

Step 2: Open Profiles.

If you cannot find a Profiles preference tab, then the macOS computer is not enrolled with any management service software.
If you find an 'MDM Profile' signed in by your company, then the device is enrolled in the Jamf Pro.
If the 'MDM Profile' is missing, then there are two possibilities. Either the profile was removed from the Jamf Pro technicians, or the device was never enrolled in the first place.

Open Profiles

You can also follow these alternate instructions to check whether your macOS is enrolled in Jamf Pro or not:

Step 1: From the 'Finder' menu, select the 'Applications' folder.

Step 2: Open Utilities.

Step 3: Now, you would need the run 'Activity Monitor' to check.

The device is connected with the Jamf Pro if the mdmclient process is running.
If you cannot find the mdmclient running in the process, that means the system is not enrolled.

Activity Monitor

Now, once you've confirmed if the macOS computer has Jamf Pro enrolled or not. You can move next to check if the iOS device (iPhone, iPad, or iPod) is enrolled in the Jamf Pro.

Follow the instructions below:

Step 1: Go to 'Settings' from your iPhone or any other iOS device.

Step 2: Tap on the 'General' tab.

Step 3: Tap on the 'Profiles & Device Management.

Step 4: Select the 'MDM Profile.' if the profile says, 'your company name - Information Technology JSS,' then your iOS device is connected with the Jamf Pro servers.

However, if you're unable to locate the profile on your iOS device, then one of the possibilities is that the MDM profile is removed. It also means that the device was never enrolled on Jamf Pro management software.

How do I uninstall Jamf Pro from my device?

If you do not want to use the services of Jamf Pro or would like to remove it from any iOS or macOS device, then you contact the IT support group or use the MDM bypass tool.

As the IT technician of Jamf can help you remove the agent or MDM profile from the devices. You can also reach out to your own IT department.

Conclusion

Jamf Pro MDM profile can control all of your Apple devices. But you can take a few steps to ensure it doesn't disregard your privacy or limit the functions of your iOS device.

Get in touch with your IT department, or contact an Apple technician to remove it from your tablet or handset.