Topics Map > IT Operations > Service Desk
Topics Map > IT Operations > Customer Support and Policies > Desktop Support
Jamf Connect User Instructions and Documentation
Overview:
Campus’ Division of IT (DIT) has released new security IT standards (IT-20) that the Campus Community must follow. Notably, two of the requirements that affect our Apple users are:
- All University-Owned macOS devices must be enrolled in Campus’ central management system, Jamf.
- All University-Managed (and therefore University-Owned) macOS devices are not permitted to have local accounts.
What does this mean for our users? In short, this means that their macOS computers will need to be reconfigured to allow them to log in with their Campus Credentials. Aside from first time setup, this will not significantly change the way users log into their computer(s).*Please note that any following support article links can only be accessed while connected to a Campus Network or to the GlobalProtect VPN.
Initial Setup Instructions
Basic Setup Instructions
All UMD-owned macOS device users should:
- Back up data across all of their device’s accounts to Google Drive or Box Drive.
- Input University Credentials in the new login window, like this one.
- If prompted to select an account, please select your most-used account. More instructions can be found here.
- Note that this "new login window" is pushed out centrally by Jamf, and may reach users' computers at different times.
- Be on the lookout for any potentially missing data upon first login, and restore that data from their Google Drive or Box Drive backups.
- Use University Credentials to log into their computer moving forward.**
In the event a user chooses to not follow these instructions, DIT will be removing their computer’s access to the UMD network (see the “Compliance” section of this article).
**Note that you might be met with a notification window like the one below. If you are, please input the password that you previously used to log into your computer:
Detailed Setup Instructions
EIT is handling most of the configuration on the backend, though we will need assistance from our users to ensure that this process goes smoothly. If these instructions are not followed exactly, users may lose data, or place their computer out of compliance with these new security standards. In the event a user chooses to not follow these instructions, DIT will be removing their computer’s access to the UMD network. There are a few things that users will need to do to accomplish this:
- Back up any important data that they have on their current account. If a user has multiple accounts, please ensure that important data is backed up from each of them. We’d highly recommend making use of Campus-provided cloud services, like Google Drive and Box Drive for this. Time Machine, while very useful and recommended for regular, scheduled backups, is not recommended for this particular use case.
- Once a users' computer receives the Jamf Connect package from the central management server, they will notice a change to their standard login window. Please note that users only have to go through the following steps once:
- If the account name on a users computer matches their University DirectoryID, then their Campus credentials will be automatically matched to the local computer account, and their password will be updated to match their Directory password.
- If the account name on their computer does not match their DirectoryID, they'll be met with an account selection screen. Users should choose the account that they most often log into.
- Further instructions on this particular step can be found here. (Please note that these links can only be accessed while connected to a Campus Network or to the GlobalProtect VPN.)
- Once a users' account has been linked to their University Credentials, they'll now use their username (DirectoryID if it matches, local username if it does not) and their Directory Password to log into their computer. Further information can be found here.**
- In the event that a user is unable to log in using their University Credentials in the future, or they have multiple accounts on your device, they'll still be able to log into the local accounts using the “local login” button seen on this page.
- This system, Jamf Connect, will also keep track of a user's current Directory password status, and allow them to reset it. Instructions can be found here.
If a user feels that they have a valid reason to keep a purely local account on their computer, please reach out to the EIT Service Desk directly via email at eit-help@umd.edu. Exemptions to this are not guaranteed, but we can assist on a case-by-case basis.
**Note that you might be met with a notification window like the one below. If you are, please input the password that you previously used to log into your computer: