We manage about 2,300 macs in our enterprise. Most of the devices are used by developers.
Right now, we manage only basics in our mac fleet. Like having a compliant mac, get the VPN Anti Virus, Firewall NoMAD, and other basic software on it. Also, users have the option to get additional software via self-service. So, when a user gets a device from us, it is pretty "vanilla" and they can customize the device themself.
Additionally, we configure the device for printing and proxy usage.
We are aiming to manage a lot more with Jamf, which is certainly possible. At some point, we also want to make the mac available for all users, not just developers. Jamf will immensely help us with this goal.
Jamf pro gives you the best tool to manage your Apple macOS fleet in your company. Unfortunately, Apple is limiting the way you can manage macs compared to how you manage Windows devices. Therefore you need an elegant strategy to manage your devices. Jamf pro helps you with that. The combination of the Apple MDM commands and the Jamf binary helps you to get the most out of it.
Everything Apple does not enable with MDM commands, you can take care of with scripting and custom policies. With that, your options are almost endless for managing your Apple macOS devices.
I have been using Jamf pro since May 2015 and there is no other vendor who does such great work, helping you succeed with your macOS devices.
If you want to manage macOS devices in your enterprise and want to make it as easy for the user as well as for the administrators, you should use the DEP with Jamf Pro. It makes it very easy to deploy a new Apple Mac to a new user. IT does not need to touch the device even once. You could ship it directly from the vendor and all the user needs is an internet connection and their credentials. At the end of the setup, the user has a fully managed and functional Mac to use within the enterprise.
The integrated patch feature is good but needs some tweaking. As of now, there is no option for the user to defer the installation of a patch. You can either give them the option to install the patch through self-service, which needs an active part of the user to do it, or you can force the installation. However, with the force of the installation, there is potential data loss, because an App that you want to patch needs to be closed for it to work. The information explaining that the app will be closed for patching is almost not noticeable for the user.
Therefore we do no use the integrated patch management technology and build our own logic to work around it.
We have been using Jamf Pro since May 2015.
100%, the zero day support is key, and we've had terrible experiences with other MDM vendors in the past... with some not adding support for 12+ months.