JAMF is the software which manages the School's Supported Macs. This page explains what it does, and why.

The School's Computing Strategy Group agreed in early 2022 that JAMF would be mandatory on all of the School's new Apple Macs.

JAMF is used for device management. It ensures that security updates are applied, that software remains up to date, and that Macs align with School and University policies. It also makes it possible for a Mac to be reused once it's been handed back to Computing Support.

It does not give Information Services (IS) or Informatics Computing staff access to your files.

Software

JAMF adds Self Service, which is like a University app store. This provides an easy way to:

  • install common University and open-source software - e.g. MS Office, Emacs, LibreOffice, MacTeX;
  • configure against University services - e.g. VPN, printers, DataStore, Privileges;

macOS updates

JAMF does not force these immediately, unless they're critical security updates. Updates can be delayed or scheduled for a convenient time.

New major versions of macOS are not made available immediately, as the University must first test them for compatibility with its systems.

Admin rights and Privileges

Accounts on Supported Macs do not have administrator rights but you can get temporary admin rights using the Privileges app. You install Privileges using Self Service - just start Self Service, search for "Privileges", and install it.

Then, when you need admin rights, just start Privileges. It will prompt you for a (very short) reason why you need them, and then you will have admin rights for 10 minutes.

Accounts on your Mac

  • The UoEmanage account is installed by JAMF. It's used for automated management tasks. Nobody can use it to log in, because its password is randomised, and it doesn't allow remote logins anyway.
  • The Infsupport account is for the School's User Support team. They will use it to reset the Mac once you've finished with it and returned it to them. It does not permit remote access, so User Support can only log in when physically present.

Security

The University has set itself IT security standards, and JAMF helps a Mac to meet these:

  • It ensures that FileVault encryption is turned on, and it keeps a record of the encryption keys.
  • Anti-virus checks are run regularly. This is done using Microsoft Defender. There has been concern that this may slow the Mac down, but we have had no reports of significant slowdowns.
  • The macOS version is reported to the College’s OCSng software inventory system. This lets the School see which versions of macOS are in use across the School, and flags up systems running unsupported macOS versions.

If you have questions, please do contact Computing Support.

Last reviewed: 
25/02/2025