SecondSonConsulting / Baseline

An MDM agnostic zero touch solution for macOS
MIT License
192 stars 22 forks source link

Using Baseline with Jamf Pro #36

Open dpertschi opened 6 months ago

dpertschi commented 6 months ago

General Guidance for Using Baseline with Jamf Pro

Baseline is very easily deployed from Jamf Pro and can be leveraged in a variety of ways. Please read the whole Wiki first to understand what’s going on and what your options are.

Configuration Profile

When using a configuration profile to manage Baseline you can roll your own or use iMazing Profile Editor for an assist, but you may find it easier to use the automatically generated JSON schema.

If you want the JSON for a current beta release of Baseline, go to the main GitHub page, switch from the main branch to the dev branch, click on the ProfileManifest folder link and you should find the JSON link within.

baseline dev branch

Using the JSON - here’s how

Jamf ext apps config

,,

In the Custom JSON Schema dialog, paste the code into the box, click Upload and Save ,,

Jamf custom schema

,, You’ll now see all the configurable properties in the GUI. You do not need to use all the properties provided. For instance, if you don’t need InitialScripts and wont use Installomator, you can safely click on Add/Remove Properties and uncheck those options. Need them later, just add them back.

add remove properties

When a new version of Baseline is released you can easily update the schema by clicking on the Edit Schema button and pasting in the new JSON code.

Using the Scripts properties to run Jamf policies

The basic use of Scripts, Installomator, and Packages is well documented within the wiki, however the Scripts properties offer some unique flexibility for Jamf users. In addition to running an actual shell script, you can point to the Jamf binary and define a Custom Event trigger to run an entire Jamf policy.

For example; if you have a policy that installs Microsoft Office with a custom trigger of _InstallMicrosoftOffice, configure the Script Path and Arguments like this:

Script Path and Arguments

Finally, ensure your configuration profile is scoped to a group that will encompass your target machines after enrollment.

Zero-Touch

To use Baseline in your Automated Device Enrollment workflow as a user facing progress dialog

Create your configuration profile with desired settings for packages, scripts, dialog window options, etc.

Create/Modify your Jamf PreStage Enrollment options:

With those things in place, after enrollment when a user logs in, Baseline will trigger and begin processing your configurations.