Jamf Pro Reviews

We are using Jamf Pro to manage all of our macOS, iOS, iPad OS, and tvOS devices, which totals ~200 devices. 

We have just recently started using Jamf Protect and hoping to start using Jamf Connect. We are a small cybersecurity firm and all of our users are Mac users. We don't have any Windows end-user clients in our environment. Our users don't have admin rights on their systems, so all changes to the systems are being pushed out and managed via the Jamf platform. Jamf Protect is a recent purchase, however, it has been very useful in getting greater insights into the built-in Apple security tools.

Primarily, it has enabled us to manage all of these devices without the need for a large IT staff. We are a small organization and trying to manage these devices without a tool like Jamf would require significantly more staff or we would need to rely on end-users to manage certain things themselves. This has especially been useful as everyone has started remote work. Also, Jamf has made it possible to ensure that all of our endpoints are compliant with our IT and InfoSec policies, which is crucial in our industry.

The managed settings via configuration profiles are fantastic for enforcing certain settings, especially now that you can customize the payloads. 

The patch management has been a killer feature, and it's getting even better now that Jamf is adding so many new feeds.

The self-service is awesome for empowering end-users, especially if you don't allow admin rights (however, the UI still needs a lot of improvement).

The automated enrollment/Apple Business Manager integration has made the device onboarding process so much more efficient than the traditional imaging/manual enrollment process.

The self Service UI needs some real improvement; they recently revamped the app, but I don't know if those changes have been for the better. 

The App Store deployments are incredibly unreliable, however, I think this might be more of an Apple issue than a Jamf issue. 

The patch feeds are quite extensive. I would like to see the ability to create custom patch definitions and host those directly in Jamf Pro.

It's not specific to the product, however, I wish Jamf was more communicative/responsive to the feature requests section of Jamf Nation. They don't need to approve all of the requests, but offering response/feedback/status would be greatly appreciated by the community.

I have been using and managed a Jamf Pro instance for about 15 years.

The product and regular releases have been incredibly stable.

If you are using the cloud service, then it would be extremely scalable. Larger on-prem installs may need to look at clustering servers for load balancing or software package storage.

Generally, the support team is great, however, it's clear that they've been a bit overwhelmed throughout the COVID pandemic.

Implementation was done with the assistance of a Jamf jumpstart; the folks performing the jumpstart were extremely knowledgeable.

I'd advise that new users check out the Jamf Business Plan, which is user-based licensing. It is now available to any existing customers and makes it much more affordable for getting the suite of Jamf products.

Our primary use case is automated enrollment for clients. We use Apple Business Manager and leverage it for new computers. For existing computers, I created an automated enrollment process, enlisting machines that can remotely wipe and re-install the OS and bring down the entire suite of applications on enrollment, which is very powerful.

A good use case would be the end-user experience. The end-users are excited and happy that they're able to be more productive because they're able to access approved applications and self-service. They're able to submit tickets to the help desk, in which, if they need an application approved, it'll go through an approval process.

Anything outside of the core application suite, you'd have to get approval. At the same time, they like the aspect of being streamlined like that.

Overall, it's quite helpful and productive.

I found that automated enrollment is very powerful because you can bring standardization to the environment. 

The restrictions are very powerful because you can block new OS releases, so you can vet them to make sure they're not going to break any legacy applications. That's very useful and powerful.

The ability to leverage self-service for a better end-user customer experience. You can categorize it to different aspects of your organization, be it HR, creative department, or legal, whatever you like.

The reporting needs to be improved so that generating them is more user-friendly. The reporting should have more of a graphical interface. For example, if you want to create a report on how many computers have been checked in the past 30 days you can produce it. However, it is not something that you'd like to give to a CIO.

It will export data into a spreadsheet, but executives don't want to look at spreadsheets. Rather, they want to look at bar graphs, charts, and visuals with percentages.

The prices are expensive and should be reduced.

When we paid for training, we could not have all five people training at one time. I thought that if we were paying $18,000 USD then we could have everybody training at once. However, this is not the case and it doesn't make sense to me.

The response time for technical support could be better.

I have been using Jamf since 2009 or 2010, with version 8.6.

Jamf is very stable. They have a 99.9% uptime in the cloud, and I use it on a daily basis. I would say that it's very robust.

This product scales very well. There's a great use case from IBM that shows how they scaled in that environment. They bought 100,000 Macs and it scaled out very well. I've used it myself when I went from zero to over 600 computers in less than six months.

At this point, we're just implementing it with our clients. The Mac footprint is perhaps 500 end-users, total. We're planning to grow the environment and we're going to use Jamf to do it.

I would rate their technical support a nine out of ten. They are good, although the response time could be better.

I have always used Jamf, and start with version 8.6 in 2009 or 2010. At that time, there wasn't really another similar solution.

If you're using a cloud-based deployment then it is straightforward and Jamf will spin that up for you. If you're on-premises then it's a $6,000 USD on-site visit. A technician will come on-site and spin up the on-premises solution for you. An on-premises version is primarily used by federal government agencies, more often than commercial agencies. Commercial agencies usually move to the cloud.

The IT staff, including myself and several other individuals, are the ones who operate Jamf from an administrative perspective.

This is an expensive solution.

The price of a training pass for five people was $18,000 USD.

My advice for anybody who is implementing Jamf is to get the cloud version first and immerse yourself in it. The key is to always look at the admin guide, which can be very helpful. I would also suggest leveraging Google because if you search for Jamf Pro, there are a lot of videos where they show you how to do certain implementations. In summary, I would say that the best thing is to do your research.

I would rate this solution a nine out of ten.

The primary use case of Jamf Pro is for managing Apple devices such as MacBooks, iPhones, and iPads. 

It allows us to deploy and configure software, set security and compliance policies, inventory devices and their configurations, and manage device deployments and updates. 

We are using Jamf Connect in our environment to provide a seamless, secure, and user-friendly connection to the company's resources for Mac users. 

It helps to manage user authentication, password synchronization, and the creation and maintenance of local accounts on macOS devices. It also enables users to easily access resources such as corporate networks, cloud services, and applications while ensuring compliance with security policies and regulations.

Jamf Pro allows us to manage all Apple devices from a single interface, making it easy to deploy and configure software, set policies, and inventory devices.

It allows us to set security and compliance policies to help protect devices and data, such as requiring passcodes, encrypting data, and disabling certain features.

We can now easily deploy software and updates to all devices, which can help users stay productive and avoid interruptions due to software issues.

Jamf Pro helps to automate the management process of Apple devices and reduce the number of support tickets and the need for manual intervention.

The most valuable aspects include:

The self-service portal. With the self-service portal, users can install apps, handle settings, and even enroll their own devices, improving their experience and reducing the IT workload.

Reports and inventory. Jamf Pro provides extensive inventory and reporting capabilities, which allow IT administrators to track the device's status, compliance, software inventory, and many other aspects, this can help to identify trends, and issues and take proactive actions.

Automated Software Distribution. Jamf Pro can automate software deployment, updates, and inventory of software licenses, this can help users stay productive and avoid interruptions due to software issues.

Improvements could include:

Integration with other systems. Jamf Pro could be improved by providing more out-of-the-box integration with other systems such as Active Directory, Single Sign-On (SSO) solutions, and other IT management tools.

Advanced Automation. More advanced automation options like scripting and API integrations could help to automate more complex processes, increase efficiency and reduce human errors.

Cloud Management. Some organizations may prefer to manage their devices through the cloud, and it would be beneficial for Jamf Pro to include cloud management capabilities.

However, Jamf already has a very comprehensive solution.

We have been using Jamf Pro since May 2021.

We did use Matrix42 with Empirum. It is no MDM.

We looked into Silverback from Matrix42. They offered bad UI.

We use Jamf Pro for Mac and Desktop central for ManageEngine for Windows. It allows us to set up and configure hardware remotely. We also use this solution to release patches, configurations, applications, installations, and any restrictions when required. 

One of the most valuable features is the ability to apply apply granular level restrictions to our machines, making them easy to manage remotely from the backend.

The upgrade process of these solutions could be improved. It is not possible to use Jamf Pro to upgrade devices. This has to be done via the Apple site. In comparison, in Windows, it is possible to download patches and everything you need is readily available on the console of ManageEngine. However, using Jamf Pro and Mac, these packages need to be created and pushed out and sometimes fail due to the network or connectivity. 

There is no solution in Jamf Pro to remotely manage Mac machines if they are not on your network.

Patching packages aren't readily available. We have to create those packages and that is time-consuming.

We have used this solution for more than one year. 

This is a stable solution. 

This is a scalable solution. We have more than 2000 users.

The technical support for this solution is not that good. 

I would rate their support team a five out of ten. 

Neutral

The initial setup was straightforward. 

We used a vendor team who completed the POC and assisted with the installation.

The licensing costs for this solution are high. 

Jamf Pro gives you control at a granular level such as blocking specific USB devices being used with hardware. This solution has great compatibility with the latest MacBook including offering a PPPC utility and a wide variety of scripts. 

The limitations of Jamf Pro are due to Apple restrictions and not the tool itself. 

I would rate it a nine out of ten. 

In our company we are managing 5 clients - all using Jamf Pro. Our primary use case is to provision a big number of devices (located around the globe) with applications, network configurations, security settings, VPN configurations, printer setups, operating system patches, etc. Jamf Pro fits our needs in one hundred percent of the cases and helps us satisfy our customers. It’s a leading MDM that has the biggest number of features compared to other solutions (such as Microsoft Intune, Workspace One, or Quest Kace). 

Our organization is not only managing other clients but also is being managed. Jamf Pro helps users in our organization to quickly, easily, and painlessly get applications required to fulfill their work. For example, the first enrollment to our company’s Jamf Pro installs Microsoft Office, Global Protect VPN, and sets the password requirements, assigns the device to the user, helps to get the 1Password license, and more. The user is also presented with a self-service application that contains all sorts of useful stuff.

The most valuable aspects include:

Scripts. Jamf Pro has the best scripts from all of the available MDM solutions. They allow us to deploy complicated scripts to thousands of users. We can use script parameters inside the console which allows us to use one script for different configurations. Also, logs are presented as soon as script is executed.

Extension attributes. This is a great feature that is not available in other MDMs. EAs let us create super custom reports and the possibilities are endless thanks to the fact that EAs can be scripted.

Smart Groups. We can set custom deployments based on every available parameter in macOS.

I am always complaining about the reporting side of things. I love how reporting lets us create custom reports, however, I also feel like it could use some updating. For example, when I need to create a report which has 20 conditions, I cannot simply choose one and then copy it 19 times. I need to search for the condition 20 times, then change the operators, etc. 

In terms of additional features, I would be blown away if Jamf could add a force check-in button. We have a huge on-premises environment and our check-in is set to once per hour. 

I've used the solution for 3.5 years.

I am very satisfied with the stability.

I am super satisfied. We have an environment for around 30,000 Mac devices.

I’ve had a couple of cases in the past and everything went fine. Jamf has always helped me.

Positive

We did use Dell Kace. It wasn’t bad, however, Jamf has a lot more features.

It was a simple setup. Jamf has a lot of manuals and the whole Jamf Nation is helpful.

I am always satisfied with Jamf support.

We went straight to Jamf, as we already new it’s capabilities.

We use this solution for device management.

I am very satisfied with Jamf Pro. It's a good solution.

When we are creating or fetching the features, such as creating extension attributes.

We face issues when we do not have a script and have to write a script, we need to create extension attributes. The hardware details and software details should be by default from Jamf. This needs improvement.

We have been using Jamf Pro for almost five years.

We are not using the latest version. We use version 10.26.1.

Jamf Pro is a stable solution.

It's a scalable product.

Jamf enrolled devices are approximately 1,000, for a project that we have started with recently.

The initial setup was straightforward. We didn't experience any gap there. It was good.

My management is trying to set up VMware Workspace ONE. It will take 10 to 12 months to set up the Workspace ONE in the company. Once it is set up then we can do a comparison and a PoC between both.

I would rate Jamf Pro an eight out of ten.

Our primary use case is managing our one-to-one iPad environment for our lower school students and maximizing our efficiency.

By utilizing Configuration profiles, we are able to push out all of our apps to our classroom sets of one-to-one iPads. They install without us having to handle the devices, and then auto-update. We can then wipe the iPads all at once at the end of the year, by simply performing the startup procedure, everything will reset for the next school year.

Ultimately, it saves us a lot of time and headaches.

We have been able to keep our tech department lean and mean, maximizing our efficiency by utilizing Jamf to set up our iPads for us, rather than installing each app one at a time.

We are able to manage each iPad cleanly, and users do not have to handle the maintenance.

The most valuable feature is the Configuration Profiles, for sure! This is what we use to get all of our iPads set up and uniform. We also push out apps to our devices, which does not require any touching of the devices and they auto-update!

Every once in a blue moon, we wind up with a rarely-seen superbug that takes support weeks to months to solve. The good news is that they are rare and not across the platform. Just us. 

We have been using Jamf Pro since 2012.

This product is very stable. Since 2012, it was only down once, and only on our premises.

It works well for small simple setups like ours but is robust enough for the large setups with experts of code behind them.

Tech support is always friendly and ready to help.

While the tech support professionals are great, and happy to help, sometimes it takes a while to get one back on board with your setup since you no longer have a designated contact who "knows you". Additionally, since they need to get to "know you" I have found that I have had to do a lot of convincing to get them to believe that I know what I am talking about and that I have indeed "already tried that."

We tried Mosyle concurrently, but it was a mess.

As far as I have heard, it was straightforward, and the switch to Cloud only took an hour. It was much shorter than the quoted time.

We worked with the vendor and they walked us through the setup. They were great when they walked me through it over video call when we made the switch to Cloud.

While this is hard to quantify, it has allowed us to keep our tech department at two people.

Cloud is worth the small increase in price, but make the switch before you need it, and not during a global pandemic.

To my knowledge, we did not evaluate other options. Rather, we just jumped aboard.

This solution is a ten out of ten. A great friend.

The primary use case is to manage everything Apple in our environment. This includes everything from assigning the asset to the user, controlling licensing via the App Store, custom policies, and configurations.

The goal is to ease the burden on our Service Desk, while also enabling the user to be more self-sufficient.

In the past, I have used many MDM solutions and most of the time it came down to poor documentation with them compared to Jamf.  We found the resources provided were more then enough to get us up and running. Plus, the continued support from their staff has been awesome! 

We have found Jamf to be the critical part of everything.

Having the ability to automate our workflows has been great. Also, having the knowledge base of other Mac Admins at our disposal with the Jamf Nation, that's something that very few if any, MDM providers have.

We currently have a zero-touch workflow, where we are able to deploy the full MS Office Suite, complete encryption, and block activation lock, all while the device is being enrolled for the first time.

The user doesn't have to reach out to IT at all during the process, which definitely improves the onboarding experience.

The most valuable feature is Jamf Nation. It contains valuable information, tips, tricks, and resources to go to when you might have issues. Oftentimes, the issue you are facing isn't something new at all. There are always others who have run into it and can provide valuable insight to resolving it. If it is something completely new, you have a plethora of other admins at your disposal who are able to quickly assist you.

Integrated patch management is easy to keep your software up to date on devices

Painless app deployment means that we can simply package and deploy. With some other MDMs, you have to convert to a proprietary file or have to upload multiple files to properly complete the loop.

One of the big areas in need of improvement is automated device naming for computers. You can do this via mobile devices in the pre-stage but not for computers. Having the ability to assign devices to a specific pre-stage enrollment group, and having said group identify all of the systems via a specific prefix/suffix, would benefit us a lot and keep better consistency when it comes to users' machine names.

Improved Patch Management is something that is in the works, I know, but having access to more applications or even improving the method to organizing/configuring patch management will be beneficial. Currently, setting it up is a painful process.

I've been using Jamf Pro for the past four years.

Stability-wise, our experience has been very good. There have been instances of downtime, whether it be scheduled or not, but for the most part, everything has been up and running consistently. 

The downtime I'm referring to is either scheduled maintenance (because we are a cloud hosted environment) or there have been server outages with AWS.  Overall though you can quickly pull up details regarding those pieces.

From the perspective of stability with the product on a day to day basis, its stellar.  Being cloud hosted we have been able to consistently add new policies, devices, scripts, running things every 15 minutes on our fleet and never any hiccups.

We use Jamf Pro's hosted services. Scalability has never come up and performance has always been top-notch.  The only slowness is when your internet is lacking.

I would say tech support has been great overall. Sometimes, it's a bit tricky to get the point across or even to identify the root cause, and it might take a couple of back and forth encounters, but once that clears up then it's a smooth experience.

Before we implemented Jamf at a previous workplace, we were using AirWatch to manage our mobile devices and binding our Macs to AD using Centrify. We switched to Jamf to improve mobility for our users as well as alleviate account issues with binding.

The initial setup was pretty straightforward, to be honest.

You needed to configure some prerequisites with Apple (ABM, APNS, VPP) but once everything was up and running, the rest was pretty seamless. The hardest part is taking a high-level look at your environment and determining how you want to manage the devices with the various scopes.

We implemented it via Jamf directly.

It is hard to put exact numbers on ROI but it's also hard to even think about the things we are doing now if we take Jamf out of the picture.

It's hard to say with this.

A lot of the resources are great and enable Admins to configure the environment solo for the most part. I would recommend you have at least one of the Admins go through the training course to better enable themselves.

Depending on how much support you require, it might make sense to add that to the licensing agreement. I've seen the difference in the support structures, first hand, and I definitely enjoyed the dedicated support tiers.  

We did a POC for AirWatch (which we had for mobile already), InTune (back then, it was very much in its infancy), and Jamf.