Jamf Pro Reviews

The primary use case of Jamf Pro is for managing Apple devices such as MacBooks, iPhones, and iPads. 

It allows us to deploy and configure software, set security and compliance policies, inventory devices and their configurations, and manage device deployments and updates. 

We are using Jamf Connect in our environment to provide a seamless, secure, and user-friendly connection to the company's resources for Mac users. 

It helps to manage user authentication, password synchronization, and the creation and maintenance of local accounts on macOS devices. It also enables users to easily access resources such as corporate networks, cloud services, and applications while ensuring compliance with security policies and regulations.

Jamf Pro allows us to manage all Apple devices from a single interface, making it easy to deploy and configure software, set policies, and inventory devices.

It allows us to set security and compliance policies to help protect devices and data, such as requiring passcodes, encrypting data, and disabling certain features.

We can now easily deploy software and updates to all devices, which can help users stay productive and avoid interruptions due to software issues.

Jamf Pro helps to automate the management process of Apple devices and reduce the number of support tickets and the need for manual intervention.

The most valuable aspects include:

The self-service portal. With the self-service portal, users can install apps, handle settings, and even enroll their own devices, improving their experience and reducing the IT workload.

Reports and inventory. Jamf Pro provides extensive inventory and reporting capabilities, which allow IT administrators to track the device's status, compliance, software inventory, and many other aspects, this can help to identify trends, and issues and take proactive actions.

Automated Software Distribution. Jamf Pro can automate software deployment, updates, and inventory of software licenses, this can help users stay productive and avoid interruptions due to software issues.

Improvements could include:

Integration with other systems. Jamf Pro could be improved by providing more out-of-the-box integration with other systems such as Active Directory, Single Sign-On (SSO) solutions, and other IT management tools.

Advanced Automation. More advanced automation options like scripting and API integrations could help to automate more complex processes, increase efficiency and reduce human errors.

Cloud Management. Some organizations may prefer to manage their devices through the cloud, and it would be beneficial for Jamf Pro to include cloud management capabilities.

However, Jamf already has a very comprehensive solution.

We have been using Jamf Pro since May 2021.

We did use Matrix42 with Empirum. It is no MDM.

We looked into Silverback from Matrix42. They offered bad UI.

We use this program to manage all of our Apple devices in our different locations. We have Zoom rooms set up that use iPads that we configure to stay in single app mode so users are unable to change anything. 

We also use it to manage the kiosk we have set up when we have guests. We have also implemented a BYOD policy where we have users sign up with Jamf and it allows us to push apps from our business to their phones. It's nice. We also make sure they select the "personally-owned" option so we don't accidentally take full control of their device.

It has made our day-to-day job so much easier since implementing Jamf Pro at our company. We have a simple to use one-stop-shop for all our Apple devices. We can manage all our Macbooks and see what apps are installed or even see what macOS version they are on. Then we can remotely force install the newest version of the macOS and either allow the user to upgrade on their own or force it to upgrade then and there. Jamf Pro is great for lost devices as well, they have a "Lost Mode" command that will ping their last known location and even make a noise.

The first most valuable feature I found was the ability to simply push out applications to devices, Mac or iPads/iPhones. (We also have the ability to manage desktops and AppleTV devices if needed). It's as easy as procuring the licensing for the apps and then setting it to the volume purchasing back in Jamf. 

Another great feature is the ability to set all different kinds of restrictions on the devices. We can block certain settings, the App Store, or even specific apps! We can even do the opposite and only allow selected apps.

It's really hard to figure out anything that needs to be improved in Jamf. They do everything so well and they are constantly updating the system. 

Since we are in the cloud, it just updates automatically and little bugs/glitches are always being fixed. 

Apple does block certain actions from happening or disallows Jamf from making certain changes. This is the only true issue I can see, which is not truly a Jamf issue. I would just hope that one day Apple will allow Jamf to make changes to the screen sharing changes so that way we can fully support remote employees. 

I have been using this solution for almost two years now.

Support is great. They have multiple ways to contact them and are fairly responsive. They will also follow up a couple of times before closing the ticket due to no responses.

Positive

We use Jamf Pro for Mac and Desktop central for ManageEngine for Windows. It allows us to set up and configure hardware remotely. We also use this solution to release patches, configurations, applications, installations, and any restrictions when required. 

One of the most valuable features is the ability to apply apply granular level restrictions to our machines, making them easy to manage remotely from the backend.

The upgrade process of these solutions could be improved. It is not possible to use Jamf Pro to upgrade devices. This has to be done via the Apple site. In comparison, in Windows, it is possible to download patches and everything you need is readily available on the console of ManageEngine. However, using Jamf Pro and Mac, these packages need to be created and pushed out and sometimes fail due to the network or connectivity. 

There is no solution in Jamf Pro to remotely manage Mac machines if they are not on your network.

Patching packages aren't readily available. We have to create those packages and that is time-consuming.

We have used this solution for more than one year. 

This is a stable solution. 

This is a scalable solution. We have more than 2000 users.

The technical support for this solution is not that good. 

I would rate their support team a five out of ten. 

Neutral

The initial setup was straightforward. 

We used a vendor team who completed the POC and assisted with the installation.

The licensing costs for this solution are high. 

Jamf Pro gives you control at a granular level such as blocking specific USB devices being used with hardware. This solution has great compatibility with the latest MacBook including offering a PPPC utility and a wide variety of scripts. 

The limitations of Jamf Pro are due to Apple restrictions and not the tool itself. 

I would rate it a nine out of ten. 

In our company we are managing 5 clients - all using Jamf Pro. Our primary use case is to provision a big number of devices (located around the globe) with applications, network configurations, security settings, VPN configurations, printer setups, operating system patches, etc. Jamf Pro fits our needs in one hundred percent of the cases and helps us satisfy our customers. It’s a leading MDM that has the biggest number of features compared to other solutions (such as Microsoft Intune, Workspace One, or Quest Kace). 

Our organization is not only managing other clients but also is being managed. Jamf Pro helps users in our organization to quickly, easily, and painlessly get applications required to fulfill their work. For example, the first enrollment to our company’s Jamf Pro installs Microsoft Office, Global Protect VPN, and sets the password requirements, assigns the device to the user, helps to get the 1Password license, and more. The user is also presented with a self-service application that contains all sorts of useful stuff.

The most valuable aspects include:

Scripts. Jamf Pro has the best scripts from all of the available MDM solutions. They allow us to deploy complicated scripts to thousands of users. We can use script parameters inside the console which allows us to use one script for different configurations. Also, logs are presented as soon as script is executed.

Extension attributes. This is a great feature that is not available in other MDMs. EAs let us create super custom reports and the possibilities are endless thanks to the fact that EAs can be scripted.

Smart Groups. We can set custom deployments based on every available parameter in macOS.

I am always complaining about the reporting side of things. I love how reporting lets us create custom reports, however, I also feel like it could use some updating. For example, when I need to create a report which has 20 conditions, I cannot simply choose one and then copy it 19 times. I need to search for the condition 20 times, then change the operators, etc. 

In terms of additional features, I would be blown away if Jamf could add a force check-in button. We have a huge on-premises environment and our check-in is set to once per hour. 

I've used the solution for 3.5 years.

I am very satisfied with the stability.

I am super satisfied. We have an environment for around 30,000 Mac devices.

I’ve had a couple of cases in the past and everything went fine. Jamf has always helped me.

Positive

We did use Dell Kace. It wasn’t bad, however, Jamf has a lot more features.

It was a simple setup. Jamf has a lot of manuals and the whole Jamf Nation is helpful.

I am always satisfied with Jamf support.

We went straight to Jamf, as we already new it’s capabilities.

We use this solution for device management.

I am very satisfied with Jamf Pro. It's a good solution.

When we are creating or fetching the features, such as creating extension attributes.

We face issues when we do not have a script and have to write a script, we need to create extension attributes. The hardware details and software details should be by default from Jamf. This needs improvement.

We have been using Jamf Pro for almost five years.

We are not using the latest version. We use version 10.26.1.

Jamf Pro is a stable solution.

It's a scalable product.

Jamf enrolled devices are approximately 1,000, for a project that we have started with recently.

The initial setup was straightforward. We didn't experience any gap there. It was good.

My management is trying to set up VMware Workspace ONE. It will take 10 to 12 months to set up the Workspace ONE in the company. Once it is set up then we can do a comparison and a PoC between both.

I would rate Jamf Pro an eight out of ten.

We are using Jamf Pro to manage all of our macOS, iOS, iPad OS, and tvOS devices, which totals ~200 devices. 

We have just recently started using Jamf Protect and hoping to start using Jamf Connect. We are a small cybersecurity firm and all of our users are Mac users. We don't have any Windows end-user clients in our environment. Our users don't have admin rights on their systems, so all changes to the systems are being pushed out and managed via the Jamf platform. Jamf Protect is a recent purchase, however, it has been very useful in getting greater insights into the built-in Apple security tools.

Primarily, it has enabled us to manage all of these devices without the need for a large IT staff. We are a small organization and trying to manage these devices without a tool like Jamf would require significantly more staff or we would need to rely on end-users to manage certain things themselves. This has especially been useful as everyone has started remote work. Also, Jamf has made it possible to ensure that all of our endpoints are compliant with our IT and InfoSec policies, which is crucial in our industry.

The managed settings via configuration profiles are fantastic for enforcing certain settings, especially now that you can customize the payloads. 

The patch management has been a killer feature, and it's getting even better now that Jamf is adding so many new feeds.

The self-service is awesome for empowering end-users, especially if you don't allow admin rights (however, the UI still needs a lot of improvement).

The automated enrollment/Apple Business Manager integration has made the device onboarding process so much more efficient than the traditional imaging/manual enrollment process.

The self Service UI needs some real improvement; they recently revamped the app, but I don't know if those changes have been for the better. 

The App Store deployments are incredibly unreliable, however, I think this might be more of an Apple issue than a Jamf issue. 

The patch feeds are quite extensive. I would like to see the ability to create custom patch definitions and host those directly in Jamf Pro.

It's not specific to the product, however, I wish Jamf was more communicative/responsive to the feature requests section of Jamf Nation. They don't need to approve all of the requests, but offering response/feedback/status would be greatly appreciated by the community.

I have been using and managed a Jamf Pro instance for about 15 years.

The product and regular releases have been incredibly stable.

If you are using the cloud service, then it would be extremely scalable. Larger on-prem installs may need to look at clustering servers for load balancing or software package storage.

Generally, the support team is great, however, it's clear that they've been a bit overwhelmed throughout the COVID pandemic.

Implementation was done with the assistance of a Jamf jumpstart; the folks performing the jumpstart were extremely knowledgeable.

I'd advise that new users check out the Jamf Business Plan, which is user-based licensing. It is now available to any existing customers and makes it much more affordable for getting the suite of Jamf products.

Our primary use case is managing our one-to-one iPad environment for our lower school students and maximizing our efficiency.

By utilizing Configuration profiles, we are able to push out all of our apps to our classroom sets of one-to-one iPads. They install without us having to handle the devices, and then auto-update. We can then wipe the iPads all at once at the end of the year, by simply performing the startup procedure, everything will reset for the next school year.

Ultimately, it saves us a lot of time and headaches.

We have been able to keep our tech department lean and mean, maximizing our efficiency by utilizing Jamf to set up our iPads for us, rather than installing each app one at a time.

We are able to manage each iPad cleanly, and users do not have to handle the maintenance.

The most valuable feature is the Configuration Profiles, for sure! This is what we use to get all of our iPads set up and uniform. We also push out apps to our devices, which does not require any touching of the devices and they auto-update!

Every once in a blue moon, we wind up with a rarely-seen superbug that takes support weeks to months to solve. The good news is that they are rare and not across the platform. Just us. 

We have been using Jamf Pro since 2012.

This product is very stable. Since 2012, it was only down once, and only on our premises.

It works well for small simple setups like ours but is robust enough for the large setups with experts of code behind them.

Tech support is always friendly and ready to help.

While the tech support professionals are great, and happy to help, sometimes it takes a while to get one back on board with your setup since you no longer have a designated contact who "knows you". Additionally, since they need to get to "know you" I have found that I have had to do a lot of convincing to get them to believe that I know what I am talking about and that I have indeed "already tried that."

We tried Mosyle concurrently, but it was a mess.

As far as I have heard, it was straightforward, and the switch to Cloud only took an hour. It was much shorter than the quoted time.

We worked with the vendor and they walked us through the setup. They were great when they walked me through it over video call when we made the switch to Cloud.

While this is hard to quantify, it has allowed us to keep our tech department at two people.

Cloud is worth the small increase in price, but make the switch before you need it, and not during a global pandemic.

To my knowledge, we did not evaluate other options. Rather, we just jumped aboard.

This solution is a ten out of ten. A great friend.

The primary use case is to manage everything Apple in our environment. This includes everything from assigning the asset to the user, controlling licensing via the App Store, custom policies, and configurations.

The goal is to ease the burden on our Service Desk, while also enabling the user to be more self-sufficient.

In the past, I have used many MDM solutions and most of the time it came down to poor documentation with them compared to Jamf.  We found the resources provided were more then enough to get us up and running. Plus, the continued support from their staff has been awesome! 

We have found Jamf to be the critical part of everything.

Having the ability to automate our workflows has been great. Also, having the knowledge base of other Mac Admins at our disposal with the Jamf Nation, that's something that very few if any, MDM providers have.

We currently have a zero-touch workflow, where we are able to deploy the full MS Office Suite, complete encryption, and block activation lock, all while the device is being enrolled for the first time.

The user doesn't have to reach out to IT at all during the process, which definitely improves the onboarding experience.

The most valuable feature is Jamf Nation. It contains valuable information, tips, tricks, and resources to go to when you might have issues. Oftentimes, the issue you are facing isn't something new at all. There are always others who have run into it and can provide valuable insight to resolving it. If it is something completely new, you have a plethora of other admins at your disposal who are able to quickly assist you.

Integrated patch management is easy to keep your software up to date on devices

Painless app deployment means that we can simply package and deploy. With some other MDMs, you have to convert to a proprietary file or have to upload multiple files to properly complete the loop.

One of the big areas in need of improvement is automated device naming for computers. You can do this via mobile devices in the pre-stage but not for computers. Having the ability to assign devices to a specific pre-stage enrollment group, and having said group identify all of the systems via a specific prefix/suffix, would benefit us a lot and keep better consistency when it comes to users' machine names.

Improved Patch Management is something that is in the works, I know, but having access to more applications or even improving the method to organizing/configuring patch management will be beneficial. Currently, setting it up is a painful process.

I've been using Jamf Pro for the past four years.

Stability-wise, our experience has been very good. There have been instances of downtime, whether it be scheduled or not, but for the most part, everything has been up and running consistently. 

The downtime I'm referring to is either scheduled maintenance (because we are a cloud hosted environment) or there have been server outages with AWS.  Overall though you can quickly pull up details regarding those pieces.

From the perspective of stability with the product on a day to day basis, its stellar.  Being cloud hosted we have been able to consistently add new policies, devices, scripts, running things every 15 minutes on our fleet and never any hiccups.

We use Jamf Pro's hosted services. Scalability has never come up and performance has always been top-notch.  The only slowness is when your internet is lacking.

I would say tech support has been great overall. Sometimes, it's a bit tricky to get the point across or even to identify the root cause, and it might take a couple of back and forth encounters, but once that clears up then it's a smooth experience.

Before we implemented Jamf at a previous workplace, we were using AirWatch to manage our mobile devices and binding our Macs to AD using Centrify. We switched to Jamf to improve mobility for our users as well as alleviate account issues with binding.

The initial setup was pretty straightforward, to be honest.

You needed to configure some prerequisites with Apple (ABM, APNS, VPP) but once everything was up and running, the rest was pretty seamless. The hardest part is taking a high-level look at your environment and determining how you want to manage the devices with the various scopes.

We implemented it via Jamf directly.

It is hard to put exact numbers on ROI but it's also hard to even think about the things we are doing now if we take Jamf out of the picture.

It's hard to say with this.

A lot of the resources are great and enable Admins to configure the environment solo for the most part. I would recommend you have at least one of the Admins go through the training course to better enable themselves.

Depending on how much support you require, it might make sense to add that to the licensing agreement. I've seen the difference in the support structures, first hand, and I definitely enjoyed the dedicated support tiers.  

We did a POC for AirWatch (which we had for mobile already), InTune (back then, it was very much in its infancy), and Jamf.