Jamf Pro Reviews

The primary use case is to manage everything Apple in our environment. This includes everything from assigning the asset to the user, controlling licensing via the App Store, custom policies, and configurations.

The goal is to ease the burden on our Service Desk, while also enabling the user to be more self-sufficient.

In the past, I have used many MDM solutions and most of the time it came down to poor documentation with them compared to Jamf.  We found the resources provided were more then enough to get us up and running. Plus, the continued support from their staff has been awesome! 

We have found Jamf to be the critical part of everything.

Having the ability to automate our workflows has been great. Also, having the knowledge base of other Mac Admins at our disposal with the Jamf Nation, that's something that very few if any, MDM providers have.

We currently have a zero-touch workflow, where we are able to deploy the full MS Office Suite, complete encryption, and block activation lock, all while the device is being enrolled for the first time.

The user doesn't have to reach out to IT at all during the process, which definitely improves the onboarding experience.

The most valuable feature is Jamf Nation. It contains valuable information, tips, tricks, and resources to go to when you might have issues. Oftentimes, the issue you are facing isn't something new at all. There are always others who have run into it and can provide valuable insight to resolving it. If it is something completely new, you have a plethora of other admins at your disposal who are able to quickly assist you.

Integrated patch management is easy to keep your software up to date on devices

Painless app deployment means that we can simply package and deploy. With some other MDMs, you have to convert to a proprietary file or have to upload multiple files to properly complete the loop.

One of the big areas in need of improvement is automated device naming for computers. You can do this via mobile devices in the pre-stage but not for computers. Having the ability to assign devices to a specific pre-stage enrollment group, and having said group identify all of the systems via a specific prefix/suffix, would benefit us a lot and keep better consistency when it comes to users' machine names.

Improved Patch Management is something that is in the works, I know, but having access to more applications or even improving the method to organizing/configuring patch management will be beneficial. Currently, setting it up is a painful process.

I've been using Jamf Pro for the past four years.

Stability-wise, our experience has been very good. There have been instances of downtime, whether it be scheduled or not, but for the most part, everything has been up and running consistently. 

The downtime I'm referring to is either scheduled maintenance (because we are a cloud hosted environment) or there have been server outages with AWS.  Overall though you can quickly pull up details regarding those pieces.

From the perspective of stability with the product on a day to day basis, its stellar.  Being cloud hosted we have been able to consistently add new policies, devices, scripts, running things every 15 minutes on our fleet and never any hiccups.

We use Jamf Pro's hosted services. Scalability has never come up and performance has always been top-notch.  The only slowness is when your internet is lacking.

I would say tech support has been great overall. Sometimes, it's a bit tricky to get the point across or even to identify the root cause, and it might take a couple of back and forth encounters, but once that clears up then it's a smooth experience.

Before we implemented Jamf at a previous workplace, we were using AirWatch to manage our mobile devices and binding our Macs to AD using Centrify. We switched to Jamf to improve mobility for our users as well as alleviate account issues with binding.

The initial setup was pretty straightforward, to be honest.

You needed to configure some prerequisites with Apple (ABM, APNS, VPP) but once everything was up and running, the rest was pretty seamless. The hardest part is taking a high-level look at your environment and determining how you want to manage the devices with the various scopes.

We implemented it via Jamf directly.

It is hard to put exact numbers on ROI but it's also hard to even think about the things we are doing now if we take Jamf out of the picture.

It's hard to say with this.

A lot of the resources are great and enable Admins to configure the environment solo for the most part. I would recommend you have at least one of the Admins go through the training course to better enable themselves.

Depending on how much support you require, it might make sense to add that to the licensing agreement. I've seen the difference in the support structures, first hand, and I definitely enjoyed the dedicated support tiers.  

We did a POC for AirWatch (which we had for mobile already), InTune (back then, it was very much in its infancy), and Jamf.

The interface is very intuitive. Anybody who has had a reasonable amount of experience with Macs will really appreciate the way this has been designed. It is only on the Mac platform anyway, and I'm given to understand Jamf engineers work at Apple and Apple engineers work at Jamf.

It is a first-rate product and well known in the industry as the gold standard for Apple device management.

When Apple has a new iOS or Mac OS, that particular OS often has new features. Jamf is ready for those features the moment that the OS is released. If there are additional benefits or features as part of a new macOS, Jamf is aware. Jamf has its own network of users and a portal, Jamf Nation. Jamf users are continually suggesting updates and additional features that get reviewed by Jamf and where appropriate are implemented. There is good communication, good end-user engagement, and great company response; there's visibility of user requests and what is getting implemented.

One of the included Jamf Applications, Jamf Remote, is somewhat flaky. It's never worked for me when I've tried to access a remote device that is not on the same network, so the one thing that I would like to see improved/implemented is remote support and I believe Jamf have something in the pipeline. The ability to provide remote support access to end user devices, preferably in a similar manner to Apple Remote Desktop (ARD), Desktop Central's solution or Teamviewer.

We had it all set up and running in February 2018, so it's been about two to two and a half years since we began using the solution.

The product is ultimately stable and the ability manage most anything with an Apple device exists on the system. The product can be hosted by Jamf or on-prem, some Jamf resellers also provide their own hosting for clients, which is how our instance is configured. Our institution is very impressed with how reliable Jamf Pro is.

If you decide to go with a hosted instance from a Jamf reseller/supplier, as we do, the reseller provides support in addition to Jamf themselves. The support we've received thus far is nothing short of excellent. When Apple release either a new iOS or macOS, Jamf is ready able to support the new operating systems from day one.

I'd give technical support full marks, ten out of ten, hands down.

Jamf require clients to have two to three days initial training known as 'Jumpstart'. A Jamf expert comes to your location and goes through everything you need to do to get it up and running. If you're simply managing Mac OS, it's two days. If you're managing iOS as well, as we are, it's three days. Jumpstart is a paid-for service.

We did get a specific 3-day in-person training session with a member of the Jamf engineering team. It was a paid service.

Jamf Pro is used by some of the most notable enterprise organisations in the world. I believe IBM uses Jamf to manage all their devices, for example. That is pretty interesting, considering they make their own device management solution; and IBM has probably got the largest deployment of Macs on the planet! If that's not a recommendation for anybody, I don't know what is. I'm also aware ARM use Jamf as well, as does Dyson. These major companies would not be using the product if it wasn't doing what they wanted.

I would rate the solution ten out of ten. It's excellent. I have nothing bad to say about it at all.

We manage macOS and iOS devices using Jamf Pro. We are a K through 12 school district and have single users and shared devices. We use Jamf Pro to set up and keep all our Macs and iOS devices up to date and make sure all our corporation's software is installed. Jamf has the ability to not only deploy configuration profiles but also deploy management policies. This allows for a total deployment tool to manage all aspects of our fleet.

Jamf has given us the ability to manage and make live changes to our entire fleet at a click of a button. At any time, I can see a user's devices, what their IP is, what apps they have been using, and any pending software updates. This allows us to give real-time updates and reports to management and allows our IT staff to better assist our end-users in our organization.

Policy management is very valuable to us. It can do so many things - from setting up accounts to installing new software or just editing a .plist file. It can do it all! 

You also have Jamf's recon tool that keeps your inventory up to date and allows you to pull real-time reports of your devices. 

With the countless API integrations and Jamf Marketplace add-ons, Jamf is customizable and is a total device management tool for Apple's ecosystem.

The mass update management tool could be better. We need the ability to tell Macs on next check-in to run all software updates that are pending and authenticate this via bootstrap and root. It should offer a run-on login window so no client needs to be logged in.

There needs to be a mass policy change tool. We would like the ability to make changes to multiple policies at the same time. For example, 50 Printer policies for different printers. We'd like to be able to change the scope or change the driver on the policy en-masse.

I have been using Jamf Pro for five years. 

The product is very scalable! There are tons of API integration and add-ons. Also, Jamf has zero-day support and is always adding new things.

Jamf is fast to reply and if the person you get doesn't know the answer they will stay with you through the process and help you find the answer.

Positive

We used Meraki MDM. We switched as it could not do everything we needed and we needed a complete management solution. 

New users should make sure they pay to do the onboarding, and then, once onboarded, attend Jamf user groups and join the Jamf Heroes group.

We did not evaluate other options.

We use the product to manage everything Apple, including MacBooks, iPhones, and iPads.

In general, it just has allowed us to deploy Macs and iPhones easier and more securely to our end users. We can also maintain software updates.

The ease of use is very good. Patching is also really easy with the tool as well.

We found the initial setup to be simple.

Anything could always use improvement. The patching can definitely use a little bit of improvement. They should make it a little bit more automated. That's the only thing I would say could use a little bit of enhancement.

I'd like to see more security-based profiling. One of the other competitor products, Kandji, has an entire section of pre-built profiles for things like initial security requirements. You can just pick the security requirement and then implement it. You don't have to code it all up as you do with Jamf, since they don't have that feature in there right now. If you're going through major security changes in your company. 

I've used the solution probably for about six years at this point.

The product is about 100% stable. It's the best solution in the industry.

We've had no issues with scalability. You go from a small number of devices to thousands of devices, and there's no change. There's no slowness or anything like that. It just continues to function.

We have about 700 iPhones, and about 250 to 300 MacBooks right now, and user roles range from developers to CEOs.

We will increase usage. We always have a desire to increase usage, however, we have a choice program in place for our users. Therefore, if a Windows person wants to switch, when their time is ready for a refresh, they can choose a Mac device.

There are no issues with support. I've always had great service with them.

We used Workspace ONE by AirWatch for iPhones, and we switched due to the fact that we wanted a single solution to manage all the back Apple devices.

The solution's initial setup is very straightforward. They also provide a guide for you to come in, and they help you with everything from start. 

It was already in the current company I work with. It was already deployed in the previous one. We did it in a pilot project for about a month, and then we were able to move it into production pretty quickly. It all depends on your skill level. When you bring the vendor in with their sort of prep package; they do it in about four days with you.

We have a first-level service desk. We also have first-level desktop support, and then third-level would be me. I'm probably the only one with a lot of Macs or Apple experience, therefore, I'm probably the single person maintaining it other than like the basic day-to-day stuff, that the other people do.

This is my second company using it, so I didn't really need any assistance to get it going.

ROI is always hard. With Microsoft solutions, everything's baked into your 365 licensing, including Intune. It's hard to break out the licensing, like an ROI properly due to the fact that Microsoft doesn't do that. They just have the one-time costs for everything Microsoft these days.

We only really look at the numbers once a year. I would not say it's the cheapest solution on the market, however, I would also say you get what you pay for when you sign up for any of these services. While there are cheaper ones, I would also say the cheaper ones are the cheaper ones across the board, so it's not necessarily great to go with the cheaper solution.

There are no extra fees. Once you have that in place, you're pretty much good to go.

We did not evaluate other solutions before choosing this product.

I'm just an end-user.

I would advise users to definitely go with a Cloud solution if they can. It just makes life that much easier.

I'd rate the solution at a nine out of ten. I've used it for a long time. I've never had a problem and it works great. That said, I could see there are a couple of little things that they could do, to definitely improve the product.

We need remote hardware and software management. We are a half on-site half offsite workforce over two office locations. We need to be able to deploy hardware and software catered to each department at a quick pace. Jamf works perfectly for this. 

The ability to script executions of CLI-based solutions is second to none.

We needed an MDM solution that would meet our InfoSec needs on data/hardware/software deployment. We also needed a way to revoke the same data/hardware/software if required.

Jamf filled all of these needs.

The solution allowed software deployment without having to use admin credentials and remote control sessions. Jamf cut the time it takes to deploy a new machine to a new user. We are able to group departments quickly and deploy the correct work environment every time.

Jamf also keeps a store and list of our available software titles that the end-user can choose from if needed. Once they find the title they need they can download and install it on their own without creating a ticket with the IT department. This saves us a lot of time.

The self-service portal and auto-enroll are great.

Self-service has reduced the number of your support tickets incredibly. End users are able to search for and find available and approved software and download and install it themselves. This has saved time for both the end-user and the IT department.

Auto enroll is a fantastic feature integrated into the system. We buy direct from Apple. Once purchased they are entered automatically into our auto-deploy script. It keeps our equipment safe and reduces the time from Box to EU.

An easier way to deploy Full OS upgrades would be a great start. For use to deploy Big Sur we needed a bunch of scripts and two different ways to deploy. Once Monterey came out our script no longer worked. If Jamf could work with Apple to get the App Store deployment of the OS upgrades to work that would be great.

Another feature that would be great would be a way for an App Store Application deployed by self-service to be forced to update to the latest on the App Store. Many apps, especially Office, lag behind and an uninstall and reinstall is required to fix the issue.

They need to scale the self-service header.

I've used the solution for six years.

I have not had one problem using the Jamf Cloud solution.

It scales well.

Support has been great for the few times I had to use them. They offer a very quick response. 

Positive

We did not use a previous solution. We imaged all the machines.

We used a kickstart consultant.

The vendor we used was very capable.

I'm IT. I don't concern myself with ROI. My concern is keeping the company running. Cost is a factor, however, uptime is more important.

The cost is average. The setup is not that bad. We used one of Jamf's quick kickstart consultants to get us going.

I had used Jamf at a previous job so brought it over.

I'd advise potential users to just get it if you manage Apple Devices.

We use this solution for device management. We have multiple locations, as well as remote workers. Our entire workforce use Apple tech. Therefore, Jamf allows us to manage all of our end-user technology from one place. This includes pushing apps, profiles (restrictions, settings, etc.), and more.

We were able to dramatically enhance our cybersecurity, and better support our users.

Through Jamf, we were able to enforce things like encryption (escrow keys), password policies, the firewall on the Mac, etc. We can also remotely wipe/lock devices as required.

The most valuable features are Inventory and Self Service.

Inventory is all about auditing your estate (super easy). You can drill into a specific device, check out the model, what OS it’s running, which apps are installed on it, and even basic usage stats.

Self Service is about empowering users to take control of their tech in a safe way, such as proving them with apps that they can install as required.

This solution would benefit from more focus on Self Service, such as Office 365 and GSuite integration. At the moment, if you want to display cloud-hosted content in the Self Service app for distribution to all staff then you have to add it as a web link (it’s a little clunky). Direct integration would make this better.

We’ve never experienced any issues from a stability perspective.

This solution is easy to scale. We adopted this after not being able to scale Profile Manager.

All ongoing support is in-house, and I’m not aware of any support calls raised with Jamf.

We previously used Profile Manager; however, we found that it was unable to scale as our business grew.

The initial setup of this solution is really simple. You commit to something called a JumpStart, which is basically a consultancy and training session to ensure that your Jamf meets your organization's needs from day one.

We implemented using Jamf Direct, who provided us with a JumpStart. All ongoing support is in-house.

This solution has been a huge timesaver. It also allows you to leverage and control a lot of built-in Apple services, which can help you save money on buying third-party software.

If you have the in-house capability to support Jamf, then paying for onboarding / JumpStart training is a no brainer. It will help you get up to speed on the product. It will not, however, cover the enrolment of all of your client devices into Jamf, so make sure to set aside time to do this.

If you don’t have a tech team, buy Jamf MSP. You won’t have access to manage the product yourself, but your Jamf MSP reseller can do that for you under some sort of contract / SLA.

We did evaluate other options including Xinca (they’ve since been purchased by Jamf as part of the ZuluDesk sale), and Meraki.

This solution is worth every penny! I don’t know how I got by without it.

We are a medium-sized company, and our fleet is 95% Macs.

Jamf helps us to manage Macs remotely via an intuitive dashboard.

Managing macOS can get difficult sometimes without the help of an MDM. With Jamf, I have control of the fleet with a few clicks.

Being able to update third-party applications without the need for other external tools is another plus. 

With minor modifications, we were able to have an almost zero-touch deployment. This way, we know that all Macs will always have the same configurations.

We are also working on the self-service app, which has a lot of potential. 

With Jamf, we can create almost a zero-touch deployment which saves a lot of time with flashing the OS, manually installing the apps, and configuring some settings.

This has enabled us to save time for each onboarding/offboarding/laptop change.

I worked in an environment where we had only 10 Macbooks and no MDM, and without Jamf, it was super hard to manage the Macbooks. With self-service, the sky is the limit. You can do whatever you want with it.

There are some out-of-the-box integrations that can help you achieve some results.

Smart Groups with alerts is useful. This will let me have visibility of the environment without having to constantly see what is happening. 

After some tweaks, zero-touch deployment is another valuable thing. We are able to configure the laptop with the security requirements needed, default applications, and so on without touching it. This feels great, especially when you send a brand new sealed Macbook to some user.

Another awesome feature is Patch Management. Until this day, many people don't know that this exists. However, it helps a lot with patching third-party applications.

The solution needs cheaper training. Some companies don't have that much budget to invest in training. 

They need integrations with known/other services out of the box.

Reports for execs could be more colorful/attractive.

The documentation for the API is still confusing.

Until this day, I still don't know what's the best way to securely run your API in an end-user endpoint.

Some documentation could also be updated or created in cases where a large population uses the same environment (like Jamf + Google + Okta) or something like that. 

I've used the solution for two years.

I used Kandji and ManageEngine in previous jobs.

Jamf was already in my current environment, and it just works, so there is nothing to say here.

For what I remember, 30%

I am the administrator of Jamf Pro in my environment. We use Jamf Pro as an MDM solution for our Apple products. 

We use Jamf Pro to manage Apple Mac computers and Apple iOS devices. Jamf Pro does have the ability to manage tvOS devices as well. 

We have integrated Apple Business Manager into any device that is purchased from an authorized vendor will automatically get enrolled into Jamf Pro upon initial start-up. We then can integrate it into our IDP solution to make sure that our users are authenticating on the devices during enrollment. 

Jamf Pro has allowed us to go from a reactive team to a proactive team. We know that our Apple products are managed safely and securely. 

The integration of our IDP has been crucial as well. During enrollment, a user will be asked for their credentials, then Jamf Pro assigns the device to that user. This makes it easy for an administrator to quickly know who has what devices. It also makes it easy to ensure the right people get the right software when needed. Jamf Pro is awesome. 

Configuration Profiles from Jamf Pro are awesome. They are managed settings coming from the MDM that the user cannot change. We can set configurations on the devices that are permanent until we make changes inside the MDM itself. A great example of a configuration profile that we use includes the FileVault payload. We can enforce encryption on the computers while also escrowing the personal recovery key inside Jamf Pro. If a user ever forgets their FV password, we can provide the key that is escrowed. 

A dark mode would for sure be appreciated. Continuing to include what Apple allows via MDM is key as well. As new features are released, Jamf Pro is right there, making them available to manage through Jamf Pro. Another feature that Jamf Pro is continuing to grow on is App Installers. This is the ability for Jamf Pro to install and keep up-to-date software titles on the computers automatically. No more having to package and upload to Jamf Pro to edit Patch Management policies to keep your users updated, Jamf Pro does the heavy lifting here. 

I have been using Jamf Pro for about eight years.