Jamf Pro Reviews

The primary use case is to manage everything Apple in our environment. This includes everything from assigning the asset to the user, controlling licensing via the App Store, custom policies, and configurations.

The goal is to ease the burden on our Service Desk, while also enabling the user to be more self-sufficient.

In the past, I have used many MDM solutions and most of the time it came down to poor documentation with them compared to Jamf.  We found the resources provided were more then enough to get us up and running. Plus, the continued support from their staff has been awesome! 

We have found Jamf to be the critical part of everything.

Having the ability to automate our workflows has been great. Also, having the knowledge base of other Mac Admins at our disposal with the Jamf Nation, that's something that very few if any, MDM providers have.

We currently have a zero-touch workflow, where we are able to deploy the full MS Office Suite, complete encryption, and block activation lock, all while the device is being enrolled for the first time.

The user doesn't have to reach out to IT at all during the process, which definitely improves the onboarding experience.

The most valuable feature is Jamf Nation. It contains valuable information, tips, tricks, and resources to go to when you might have issues. Oftentimes, the issue you are facing isn't something new at all. There are always others who have run into it and can provide valuable insight to resolving it. If it is something completely new, you have a plethora of other admins at your disposal who are able to quickly assist you.

Integrated patch management is easy to keep your software up to date on devices

Painless app deployment means that we can simply package and deploy. With some other MDMs, you have to convert to a proprietary file or have to upload multiple files to properly complete the loop.

One of the big areas in need of improvement is automated device naming for computers. You can do this via mobile devices in the pre-stage but not for computers. Having the ability to assign devices to a specific pre-stage enrollment group, and having said group identify all of the systems via a specific prefix/suffix, would benefit us a lot and keep better consistency when it comes to users' machine names.

Improved Patch Management is something that is in the works, I know, but having access to more applications or even improving the method to organizing/configuring patch management will be beneficial. Currently, setting it up is a painful process.

I've been using Jamf Pro for the past four years.

Stability-wise, our experience has been very good. There have been instances of downtime, whether it be scheduled or not, but for the most part, everything has been up and running consistently. 

The downtime I'm referring to is either scheduled maintenance (because we are a cloud hosted environment) or there have been server outages with AWS.  Overall though you can quickly pull up details regarding those pieces.

From the perspective of stability with the product on a day to day basis, its stellar.  Being cloud hosted we have been able to consistently add new policies, devices, scripts, running things every 15 minutes on our fleet and never any hiccups.

We use Jamf Pro's hosted services. Scalability has never come up and performance has always been top-notch.  The only slowness is when your internet is lacking.

I would say tech support has been great overall. Sometimes, it's a bit tricky to get the point across or even to identify the root cause, and it might take a couple of back and forth encounters, but once that clears up then it's a smooth experience.

Before we implemented Jamf at a previous workplace, we were using AirWatch to manage our mobile devices and binding our Macs to AD using Centrify. We switched to Jamf to improve mobility for our users as well as alleviate account issues with binding.

The initial setup was pretty straightforward, to be honest.

You needed to configure some prerequisites with Apple (ABM, APNS, VPP) but once everything was up and running, the rest was pretty seamless. The hardest part is taking a high-level look at your environment and determining how you want to manage the devices with the various scopes.

We implemented it via Jamf directly.

It is hard to put exact numbers on ROI but it's also hard to even think about the things we are doing now if we take Jamf out of the picture.

It's hard to say with this.

A lot of the resources are great and enable Admins to configure the environment solo for the most part. I would recommend you have at least one of the Admins go through the training course to better enable themselves.

Depending on how much support you require, it might make sense to add that to the licensing agreement. I've seen the difference in the support structures, first hand, and I definitely enjoyed the dedicated support tiers.  

We did a POC for AirWatch (which we had for mobile already), InTune (back then, it was very much in its infancy), and Jamf.

We are a solution provider and we resell Jamf Pro, as well as provide managed services, and we are also a support partner. I am also a Jamf integrator and I train people on its usage.

The policies make it possible to distribute packages and scripts.

Patch management, even though it's not 100%, is better than most competitors. Jamf bought a company that is much better at patch management, and it will be introduced in the Spring. This is something that I'm looking forward to.

The zero-day support regarding new Apple hardware and Apple operating systems is very good.

The patch management is not automated in any way, and you have to do a lot of manual work to upload the current version of applications. In some cases, you have to repackage it before uploading it. This means that it's a lot of manual work before you can apply the patch policies to clients.

I started working with Jamf Pro between four and five years ago.

This is a stable product.

I have customers that range in size from 25 customers to 25,000 customers, and it works same the same way, regardless. It is scalable.

The technical support is pretty good. 

Prior to Jamf Pro, I worked with a product called Absolute Manage. They are now part of Ivanti. They were one of the main players but I don't think that they evolved fast enough. We switched over to Jamf Pro and are very satisfied with it.

As I am the most senior Apple and Jamf consultant at my company, I do not work much with other products. However, VMware Workspace One is the most important competitor.

Jamf is easy to deploy. As soon as you have the instance up and running and the activation code, it's really easy. If you use Apple Business Manager then you don't need to do very much to bring clients into Jamf Pro.

The price difference between Jamf Pro and VMware Workspace One is not very much, but when counting the cost of my time, Jamf Pro is clearly much better.

My advice for anybody who is interested in this product is to test it. All new customers can get a 30-day trial, and I suggest contacting a reseller.

I cannot see any need for additional features because the vendor is very Apple-focused, and I don't know of anything that can't be managed using Jamf Pro.

Overall, this is a very good product, but nothing is perfect and there are always things that can be better.

I would rate this solution a nine out of ten.

The primary web application is responsible for syncing data from the configured Apple School Manager instance and Jamf Pro. This includes recurring scheduled syncs, as well as manually initiated syncs performed while logged in to a secondary web application.

This monitor collects information about devices that have been added to Automated Device Enrolment (formerly DEP) portals and assigned to the Jamf Pro MDM server. It is run by the primary web application. Any manually initiated refreshes are performed by the web application the user is logged in to.

For the seventh consecutive year, Jamf delivered day-zero compatibility and feature support for Apple’s fall and spring releases. Since 2012, Jamf has been ready to support customers as they upgrade to the latest version of iOS, macOS, or tvOS the same day they are available from Apple.

Jamf Pro, Jamf’s flagship product, added wholly new functionality like managed software updates and Inventory Preload, the ability to upload mobile device inventory data before devices are enrolled. Jamf Pro also enhanced existing functionality like tvOS management and the groundbreaking Microsoft Intune integration. 

The most valuable features in Jamf Pro are the policies and config profiles, making our life easy to manage many different things in one place.

I believe they should be able to add touch IDs for the admin, which would allow for adding the IT team's fingerprints to the scope and set it up to get into the computers quicker.

It will be very helpful if we could restore users after they have been removed from Jamf because I have some cases of deleting a computer before unlocking it.

We have been using Jamf Pro for a year and a half.

We did not use another similar solution before this one.

This product is surely worth the cost of implementation.

We did not evaluate other options.

I use Jamf Pro to manage every Apple device in our organization including Mac computers, iPads, iPhones, and Apple TVs. It's connected with Apple Business Manager.

In our environment, there are also PCs and Android devices but these are managed by other dedicated software for the corresponding ecosystem. 

Zero-touch deployment is very helpful to us. We deliver new or refreshed Macs or iOS devices directly to new employees.

Also, we provide BYOD for iOS, so it is possible to check mail using private devices. We don't have to push all of the software, as the company store (self-service) allows for the downloading of all necessary applications.

As an administrator, I really love the integration with Apple Business Manager.

Zero-touch deployment saves tons of time.

Self-service makes enrollment much quicker, as we don't have to push all of the applications. The user can decide when to perform an installation, chosen at the most suitable time.

The most important thing for me is to have zero-day support, which is something that I expect from Jamf. Other MDM vendors do not handle support as well.

I think that the zero-touch enrolment could be improved.

I would like to have the ability to push scripts using MDM commands.

Four years.

Deployment of this solution is super easy.

Licensing is based on the number of devices.

JumpStart looks a little bit pricey; however, it is worth every penny. 

I evaluated the Apple Profile Manager, but it wasn't enough and had lots of bugs.

If you want to do more than just using the Apple Management Framework, this is a solution for you.

We manage about 2,300 macs in our enterprise. Most of the devices are used by developers.

Right now, we manage only basics in our mac fleet. Like having a compliant mac, get the VPN Anti Virus, Firewall NoMAD, and other basic software on it. Also, users have the option to get additional software via self-service. So, when a user gets a device from us, it is pretty "vanilla" and they can customize the device themself. 

Additionally, we configure the device for printing and proxy usage.

We are aiming to manage a lot more with Jamf, which is certainly possible. At some point, we also want to make the mac available for all users, not just developers. Jamf will immensely help us with this goal.

Jamf pro gives you the best tool to manage your Apple macOS fleet in your company. Unfortunately, Apple is limiting the way you can manage macs compared to how you manage Windows devices. Therefore you need an elegant strategy to manage your devices. Jamf pro helps you with that. The combination of the Apple MDM commands and the Jamf binary helps you to get the most out of it.

Everything Apple does not enable with MDM commands, you can take care of with scripting and custom policies. With that, your options are almost endless for managing your Apple macOS devices.

I have been using Jamf pro since May 2015 and there is no other vendor who does such great work, helping you succeed with your macOS devices.

If you want to manage macOS devices in your enterprise and want to make it as easy for the user as well as for the administrators, you should use the DEP with Jamf Pro. It makes it very easy to deploy a new Apple Mac to a new user. IT does not need to touch the device even once. You could ship it directly from the vendor and all the user needs is an internet connection and their credentials. At the end of the setup, the user has a fully managed and functional Mac to use within the enterprise.

The integrated patch feature is good but needs some tweaking. As of now, there is no option for the user to defer the installation of a patch. You can either give them the option to install the patch through self-service, which needs an active part of the user to do it, or you can force the installation. However, with the force of the installation, there is potential data loss, because an App that you want to patch needs to be closed for it to work. The information explaining that the app will be closed for patching is almost not noticeable for the user.

Therefore we do no use the integrated patch management technology and build our own logic to work around it.

We have been using Jamf Pro since May 2015.

We have a mixed Windows/Mac environment, and needed a good MDM solution to efficiently handle the Mac side. We use Jamf Pro to image and deploy new systems utilizing DEP and pre-stage enrollment. We also push out policies and configurations to install software and settings for specific users that are role-based. With Jamf Pro, we're able to work fully remote as an IT team, which is something that would have been very difficult prior to its implementation. Luckily we installed the software before Covid!

Integration with Apple's DEP program and the ability to image systems quickly and efficiently is one of the best features. I use Jamf Pro to push out remote access tools that allow us to help our users with issues that require more "hands-on" than only MDM can provide, which is nice as well. Setting policies, and blocking software and processes has been useful to keep users safe, along with Self Service to install approved apps and updates for those users. I couldn't imagine operating the way we did before Jamf Pro.

Integration with Apple's DEP program and the ability to image systems quickly and efficiently is one of the best features. I use Jamf Pro to push out remote access tools that allow us to help our users with issues that require more "hands-on" than only MDM can provide, which is nice as well. Setting policies, and blocking software and processes has been useful to keep users safe, along with Self Service to install approved apps and updates for those users. I couldn't imagine operating the way we did before Jamf Pro.

The product is pretty good as-is, but if anything could be improved I would say the UI could perhaps be a bit simpler. A mobile app to complement the web-based version, to perform specific tasks, would be nice to have - a good example of what I mean is the "Pulseway" MDM for Windows, they have a very useful and user-friendly mobile app. I use that mobile app to do simple things like reboot/update user machines, push out policies, etc. Other than all that, a little more person to person training when onboarding, included with the purchase perhaps. 

I have been using Jamp Pro for 10 months.

The stability is very good.

Scalability is great.

Great!

We did not use a different solution.

The setup was a bit complex and had a learning curve to get past.

In-house with support from vendor.

Initial setup will take some time and has a learning curve - allow yourself time to do this, or take some training ahead of time.

We primarily evaluated Jamf, we didn't really look at much else.

Use it!

I use this product to manage Mac devices in the enterprise, from profile configurations to security compliance and core applications.

At my current employer, we moved from Workspace ONE to Jamf, which has simplified the management of Macs. Jamf truly simplifies applying configurations, applications, and keeping your device compliant. With Jamf Pro in the cloud, we are capable of managing our devices, located all over the world, with ease.

Self Service empowers the user and allows them to install the software they need when they need it. Not to mention being able to utilize some of the tools we have included to solve their own issues.

Zero-touch deployment is also great. Being able to ship the Mac to the user and have them be able to easily power it up and it auto-configure is great.

Patch Management needs work to be efficient.

Cost is also a factor, given Jamf has a full feature set; however, it's pricey.

I have been using and administering Jamf since 2010.

This is a pricey solution.

We manage our Macs entirely with this solution and have it tied to our directory. Users, apps, and settings are all managed in this tool. 

We create accounts at first start, with their directory credentials. It encrypts the disk, it reports back stats and installs the most important apps for them. It also saves time with setting up mail, having optional apps in self-service, etc. 

With our setup, it's a complete tool for managing our fleet of Macs and iPhones. It saves time, keeps us secure, and is easy to use.

We have complete control over all of our Macs, which helps us with our security needs. For example, helping us getting our ISO27001 certification. Since you can distribute packages, apps, and scripts you can get this to tie in to basically anything.

We also use it with Jamf Protect, which gives us fantastic insights into how our organization is doing from a compliance perspective without really needing to do any work for it.

We have quite an advanced setup for the Macs, while the setup for iPhones is more basic (since you "only" can utilize the MDM framework). However, that is more than enough.

The PreStage enrollment is everything. To have a zero-touch setup for the Macs and iPhones is more valuable than one can think. Without it, we would probably need to double our IT Staff since we would need hands-on for every device. Now, we can ship computers directly to employees from the vendor and have it set up as our corporate device without lifting a finger. Since this feature also helps us tie into our directory service, we basically just have to create the directory account for the employee and Jamf takes care of the rest.

I wish the inventory would have its own pane without having to do it as a search. Hopefully coming soon!

Sometimes, I would just like to browse our fleet and can feel that the extra step of doing a clean search is a bit unnecessary. With that said, it's not hard to do it the way it is now. Maybe this is just as good of a solution for this and I just need some time to get used to it. The same goes for the user inventory. 

I would also appreciate even more included attributes, and this is probably something you could never get enough of.

We as a company have been using Jamf Pro for a couple of years. I have been using it for the past four months.

It is pretty stable. Sometimes there are very short downtimes, but not often at all.

This product is very scalable. You can have tens of thousands of devices for it.

I've used FileWave, but our company has only used Jamf.

The JumpStart is extremely valuable, even if it's a bit pricy. 

The setup can be as complex as you want.

JumpStart is available at an additional cost.

We did evaluate other options but found that Jamf is the Branch standard. It has a huge knowledge base, which isn't true for any competitor. 

Make sure you are clear with what you want before your JumpStart so that they can help you set up your environment the way you want.