What’s the difference between a hosted and managed Jamf Pro deployment?

What’s the difference between a hosted and managed Jamf Pro deployment?

We’ve been helping our customers work with Jamf Pro since 2009, and have deployed more licences than any other UK provider, so there are no safer hands for your Jamf deployment. We offer Jamf Pro as a hosted service, a managed service, and a hosted, managed service – read on to find out which option is right for you. 

A hosted, managed Jamf Pro deployment (we host your server and manage all the devices)

In this scenario, you don’t have to do anything. You tell us how many devices you need managing and which permissions your various user groups will need, then we host the licences at our UK datacentre and manage the deployment and maintenance of them. If you ever want to add new licences or change settings, all you have to do is give our team a call, and we’ll arrange everything from this end.

Why choose a hosted, managed deployment? 

Predictable per device pricing. Let’s get this out of the way early. Our managed, hosted solution is billed on a per device basis, so you’re only paying for the licences you use and you don’t incur any hardware, power or cooling costs.

Focus on core skills. Maintaining another skill base in your company is a financial and logistical challenge. It takes staff away from their core tasks, which can impact the smooth running of your organisation. However, a managed solution means that our team take responsibility for the management of your licences, and your team can focus on their core capabilities.

Time savings. Don’t tie up your team managing another platform. All you have to do is tell us how you want your devices to behave. We’ll then build profiles, register devices, apply settings, monitor usage, troubleshoot and generate reports for you – just let us know your requirements and sit back while we run around on your behalf.

Secure access to a UK-based datacentre. Your licences will be hosted at our UK-based datacentre, and you’ll be given private, secure access.

A hosted Jamf Pro deployment (we host the server but you manage the devices)

All hosted Jamf Pro deployments are held in our UK datacentre, and you are given secure VPN access to the servers holding your licences. In this scenario, your team would manage the devices themselves (you can still ask us for tech support, though).

Why choose a hosted deployment? 

No onsite costs. Hosting licences in our datacentre costs you a flat, predictable fee per licence, and lets you sidestep internal hosting costs. It also means you don’t have to buy any hardware as part of your initial outlay.

You maintain ultimate control over your licences. If you’ve already got the know-how in-house, have a very delicate mixed environment that you don’t trust outsiders with, or have users whose needs and permissions will have to change frequently, you might prefer to manage your devices in-house. A hosted deployment lets you do this without having to assume responsibility for the maintenance of any new hardware.

Develop in-house expertise. Who are we to stand in the way of professional development? You may want to get members of your team trained up on Apple and Jamf Pro workflows, in which case getting the right training on managing your devices yourself is essential. Find out how we can help below.

Our expert support and training. Our accredited team offer support contracts that can include remote and onsite support, regular system health checks, access to our help desk for your end users and more, all backed up by our 25 years’ experience in mixed platform environments. We’ll even include a JSS health check as part of your service level agreement. We can also provide four levels of official Jamf Pro support, and offer training courses of our own for technical teams and end users.

A managed onsite Jamf Pro deployment (you host the server, we manage the devices)

If you want to host your own licences but don’t have the time to take on device admin or the funds to take the training that enables you to do it, choose a managed onsite deployment. Your hardware stays in your server room where you can monitor and control it, and no one has to VPN into our datacentre, but we still take care of all the behind the scenes stuff.

Why choose a managed onsite deployment? 

You can choose and check your own hardware. We’re very protective of our server room and security practices too, so we understand some people want to keep their servers where they can see them.

Obey strict storage policies without having to take on management tasks. If you don’t want to deal with Jamf Pro admin, but want or need to keep your data onsite to comply with contractual or legal obligations, a managed solution allows you to do this without taking on any additional admin tasks.

No support or training costs. Support comes under the umbrella of us managing your deployment, so there’s no extra cost for that. And with our team handling things, there’s no need to retrain your in-house team.

Already got Jamf Pro? Ask us about…

Transitioning your existing Jamf Pro deployment to the cloud. If you already have Jamf Pro onsite but would like to move to a hosted or hosted and managed setup, we can help make the move quick, seamless and cost effective.

JSS Healthchecks. If you want to keep your deployment onsite but don’t think it’s running as efficiently as it could, we also offer JSS Healthchecks. These are designed to ensure your Jamf Pro deployment and associated networking are optimised for each other, so you can improve performance without the need for costly upgrades. Find out more here

Legacy JSS If you’ve previously installed Jamf Pro (perhaps in its previous incarnation as Casper Suite) but it’s fallen into disuse or the expertise has left your organisation, call on us to give your setup the kiss of life. We’ll revitalise your hardware and policies to make sure you’re getting the most out of your investment.

Jamf Jumpstart training. This is mandatory training that Jamf insist you have if you’re going to manage your own devices (if we’re managing your devices for you, you can skip it). Depending on the size and complexity of your deployment, you could need to undertake anything between four hours of remote training and a three day onsite course that costs £3500. Ask our experts what you’ll need.

Additional training. We offer training for tech teams and end users on Apple devices, their operating systems and the solutions you can use to manage them. Get in touch with the team to arrange Jamf Pro training that’s tailored to your needs. Book your training here.

Official tech support. We offer five tiers of support for Jamf Pro deployments, all at fixed, predictable annual costs. They range from general remote support and troubleshooting packages to our Gold package, which includes eight days with an engineer onsite, six half days of dedicated remote support for ongoing issues, ongoing end user support, annual health checks of your hardware and networks, roadmaps for future system development and the packaging and deployment of up to 12 business apps.

Why choose Jigsaw24?

Scale We’ve deployed more licences of Jamf Pro and carried out more Jumpstart training than any other company in the UK.

Longevity We’ve been working with Jamf since 2009, and were one of the first companies in the UK to work with them, meaning we have the most experienced team of engineers available to you.

Apple expertise But it’s not all about Jamf. We’ve been providing Apple devices, solutions and services for 25 years. Our support team really understand your devices, their underlying architecture and how they’ll interact with Jamf Pro and your wider IT ecosystem, whether that be Windows or OS X-based.

Security As well as providing secure access to your licences, our Tier UK datacentre offers redundant power and disaster recovery in case of emergency.

Our satisfied customers include SuperGroup, Lincoln University, King’s College London, News UK, Pret-A-Manger, MTV, The AA, Jamie Oliver, Williams Lea, The Guardian, Pentland Brands and Burberry. If you’re ready to get started with Jamf Pro, or unhappy with your current provision, our team can migrate you from an onsite deployment to a hosted or hosted and managed one in order to reduce your running costs. Email our engineers to find out how.

Want to know more? Give us a call on 03332 409 306 or email solutions@Jigsaw24.com. For all the latest news and reviews, follow @WeAreJigsaw24 on Twitter or ‘Like’ us on Facebook

 

Jigsaw24 achieves Jamf Gold Reseller status!

Jigsaw24 achieves Jamf Gold Reseller status!

Joining an elite group of four in the UK, Jigsaw24 has received Gold Reseller accreditation from Jamf. As a Gold Reseller and System Integrator, we’ve demonstrated continued commitment to Jamf, customer service and sport a strong sales record.

In 2015, we sold a cool 7252 Jamf Pro licences and performed 37 JumpStarts (including 42 total JumpStart sales), successfully integrating Apple IT into schools and businesses throughout the UK. Last year, we provided more JumpStarts than any other partner in the UK. A JumpStart engagement accompanies all purchases of Jamf Pro – a certified JumpStart integrator will work alongside your staff to implement your new system, and integrate it seamlessly into your existing IT environment.

Jamf Pro allows businesses and schools to harness the power of Apple hardware and manage it accordingly. Designed with self-sufficiency in mind, Apple Mobile Device Management is incorporated into Jamf Pro providing establishments full control over their Apple hardware and individual user activities – a powerful, unified solution for device management.

We are the UK’s No. 1 Jamf Pro reseller, having sold 10% more than any other partner in 2015. Jamf are dedicated to providing the hottest Apple tech to businesses and educational institutions all over the country, offering some of the best IT implementation and integration solutions around. Our engineers work in conjunction with Jamf to JumpStart Jamf Pro, and deliver refreshed, reliable IT infrastructure.

Gold Resller status and being a system integrator reaffirms our strong relationship with the guys over at Jamf, and our commitment to delivering high-quality IT solutions and system integration services to our customers.

We can now add a Gold Reseller badge to our growing list of industry-recognised qualifications, which also includes Avid Elite Reseller, Adobe Platinum Reseller and Apple Premium Service Provider accreditations. We’re pretty good at what we do.

If you’d like to know more about Jamf and Jamf Pro, call us on 03332 400 888, email sales@Jigsaw24.com, ‘like’ us on Facebook, or follow us on Twitter @WeAreJigsaw24

 

Highlights from JAMF Software’s JNUC 2015 event

Highlights from JAMF Software’s JNUC 2015 event
Our team headed to the JAMF Nation User Conference in Minneapolis last week to catch the latest news in Mac management. Hundreds of Apple IT admins packed into the Guthrie Theater for the annual event based on freely sharing IT information and best practices.
 
Over three days and dozens of sessions, there was insight from a wide range of organisations – from large and small schools to global companies – all with the common thread of enabling scalable Apple technologies at scale through creative practices, from security to deployment and management. Just a few of our highlights included:
System Integrity Protection (SIP)

here was a lot of chat at the show about System Integrity Protection (SIP), which is part of OS X El Capitan 10.11, which was interesting to hear as it’s a new direction from Apple and affects Mac admins. csrutil, NetBoot and any old packages and software that install into protected directories will no longer run, however JAMF binary is on the white list so will continue to work.

Rich Trouton, an Apple veteran with over 18 years of experience supporting Macs, provided an overview: “All malware tries to get root access,” Trouton mentioned as he explained why SIP became important for Apple to implement. SIP disables root access to certain system files and kernel extensions. “SIP is a big change, but still a work in progress. I expect Apple to update this in the future.”

He also warned against disabling SIP and suggested that If you are using software that requires SIP to be disabled, “demand more from those vendors or leave them.” You can check out his full presentation here.

A new CEO at JAMF Software

JNUC 2015 was also the first JNUC with Dean Hager as JAMF Software’s Chief Executive Officer. Hager has more than 20 years of experience in leadership positions at high-growth software and technology companies including Kroll Ontrack and Lawson Software.

On his appointment, he said: “Businesses and schools love Apple products, and are continuing to adopt Mac, iPad, and iPhone devices in droves. This creates an enormous opportunity for JAMF by providing an easy way to manage these devices, helping organisations both large and small succeed with Apple. I am thrilled to be a part of it and to be leading JAMF in its next stage of growth.”

The JNUC 5k

The event wasn’t all Apple IT admin (and posh dinners) though – there was also the small matter of a 5k run open to all delegates. One of our heroic Solutions Architects, Thomas Holbrook, took it upon himself to dash around Minneapolis in the October cold, so well done, Tom!

CRRzVyNVEAAkvVG

Want to find out more about JAMF Software Casper Suite and our partnership with them? Give us a call on 03332 409 306 or email solutions@Jigsaw24.com. For all the latest news and reviews, follow @WeAreJigsaw24 on Twitter or ‘Like’ us on Facebook

Using JAMF Software to tame iOS and OS X devices in the workplace

Using JAMF Software to tame iOS and OS X devices in the workplace

With the rise of OS X and iOS devices in business, finding a way to manage these devices and ensure they’re in line with company policies is more important than ever – especially if you need your Mac users to work in harmony with a PC-based workforce.  Here, we talk through some of the techniques and tools you can use to make sure all your Mac and iOS devices are managed and visible, without overburdening IT admin.

While the rise of Apple devices and BYOD/mixed platform environments can be great for productivity and end user satisfaction, it can be a cause for concern among IT admins, particularly as Apple have retired their server hardware, prompting a widespread move to managing Mac computers using Windows servers.  And as the Mac user base grows, viruses are becoming increasingly targeted at the platform, making policy compliance and disk encryption incredibly important for mobile devices and desktops alike. Happily, Apple and a range of third parties are working together to make the situation manageable.

Device Enrolment Programme (DEP)

One of Apple’s latest initiatives, the DEP is designed to make it easier for you to enrol new devices on your company’s MDM system, and reduce the chance of any user accessing the network on an unsecured device. It is not an MDM solution in and of itself, but it does make a ‘zero touch’ MDM deployment possible for all new devices, drastically reducing the time and effort involved in setting up new users.

Put broadly, your create MDM profiles for different types of device and user, then share them with Apple’s servers. Apple will assign your MDM server a unique token, and when a device connects to it for the first time, DEP will push the correct MDM profile to the device as part of the initial startup process, so your end users can’t use their new devices without enrolling them in your MDM service, and no one from IT has to be on hand to oversee registration – it’s all done automatically.

You can enrol your company in DEP at deploy.apple.com.

Preparing for MDM

Before rolling out an MDM solution for Apple devices, you’ll need to make a decision about your Apple ID policy. Many apps and services, both free and paid for, rely on your end user having an Apple ID to authenticate their identity in the App Store and other areas. For this reason, we recommend you allow users to create individual Apple IDs (however, your admin team should use a shared Apple ID to access services like DEP and VPP).

Every Apple ID requires an associated email address – the degree of freedom you wish to allow users and whom ownership of the device sits with will determine whether you allow end users to use their personal emails and existing Apple IDs, or insist they create a separate Apple ID associated with their work email address.

MDM solutions: JAMF Software’s Casper Suite

JAMF Software are one of the most experienced Mac and iOS management experts out there, and their Casper Suite management solution is even used by Apple themselves. At the core of the suite is the JAMF Software Server, which acts just like a web server. It can be hosted on any existing Windows, Linux or OS X server at your premises, hosted remotely via JAMF Cloud or provided as a managed service by our accredited team.

Key features include:

Recon, an app included in the suite which scans your existing estate for Apple devices not currently enrolled in Casper Suite. Recon can then be used to enrol multiple OS X computers remotely. It will also scan IP ranges and enrol any computer it can connect to via SSH (Remote Login).

A range of imaging options, including monolithic imaging (IT builds a standard image including apps and settings, which is then deployed locally or over the network to all computers), thin imaging (IT builds a smaller, more modular image which is installed on top of a standard OS X installation, and other restrictions and apps are deployed using profiles and policies) and zero touch imaging (enrolment through DEP).

Self Service, an app which acts like an internal App Store for your organisation. It can contain apps linked to VPP, packaged apps, eBooks, printer settings, configuration profiles and custom profiles, all of which users can install on or apply to their own device without IT intervention.

JAMF software can be run completely on windows server hardware if required.

Volume Purchasing Program and Managed Distribution

Apple’s Volume Purchasing Program (VPP) is a purchasing scheme designed to save time and money for organisations who want to buy apps and books in bulk. It allows your IT admin to purchase several licences for a particular app, then centrally assign them to end users.

Traditionally, you had to buy your licences, download a spreadsheet of redeemable codes, provide a code to each user so that they can download the app without paying again, and then transfer ownership of the app or book to that user’s Apple ID permanently. Obviously, this is quite time consuming and messy, and involves you losing ownership of the app or book.

Now, if you’re using DEP, you can use Managed Distribution to license content to your end users, meaning they can use the app or book on a temporary basis but you can revoke access at any time. All you need to do is use Casper Suite to generate an invitation email for the end users who need access, and then they’ll be guided through the installation and licensing process without the need for IT admin’s involvement.

Casper Suite as a managed service

If you don’t have the resource to handle MDM in-house, or if your IT team are all PC-based and aren’t comfortable administrating Macs or iOS devices, we can provide Casper Suite as a managed service. You tell us what needs doing; our JAMF-certified team can set up and maintain your deployment. We can even help you optimise your infrastructure for Casper Suite, so you’re getting the best possible performance out of your software.

Want to know more? Give us a call on 03332 409 306 or email business@Jigsaw24.com. For all the latest news and reviews, follow @WeAreJigsaw24 on Twitter or ‘Like’ us on Facebook

Casper Suite version 9.4 adds BYOD tools and Android support

Casper Suite version 9.4 adds BYOD tools and Android support

JAMF Software have just launched version 9.4 of their Casper Suite device management tools. The major addition is Casper BYOD, which brings iOS and Android management tools to the Suite in order to better support – you guessed it – bring your own device programmes.

JAMF’s goal for this round of updates is to help end users become more productive and self sufficient, and to that end they’ve added self-service and BYOD tools that are designed to be simple, lightweight and easy for users to access without help from technical staff. Here’s the key info…

Casper Self Service for Mac, iPad and iPhone

JAMF have added new features to their self service toolkit, allowing users without admin access to download software and App Store apps, install eBooks, receive notifications from central IT and auto-configure their own email, contacts, calendars and WiFi/VPN profiles – all without having to raise a helpdesk ticket.

Users on iOS devices can now use the native Casper app to access self service functions, allowing them to download apps, files, eBooks, web clips and more, as well as configuring their email, calendars, contacts and WiFi and VPN settings, so they get a more seamless experience when moving between their desktop computer and any mobile devices.

Big benefits for IT here include the ability to send out push notifications and, hopefully, a massive reduction in the number of helpdesk tickets you have to handle. JAMF have made sure that configuration information still stays central, though, so you can have visibility over who is using which WiFi or VPN profile (and who’s tried to jailbreak their device) even if you’re not configuring it directly.

Casper BYOD

The biggest change in Casper Suite v9.4 is the appearance of Casper BYOD, a lightweight management interface that will let IT teams manage iOS and Android BYOD deployments unobtrusively. It includes tools that allow you to remotely wipe corporate data and settings, remotely lock devices, enforce encryption settings and passwords, and inventory devices and their data from a single, central console.

The key thing here is that wipes and inventories only cover corporate data, so ends users can rest assured that their private data is their own, and they’ll receive notifications whenever the IT team takes action that may affect them. They also get to keep all their personal preferences and settings (as long as they meet the company’s security requirements, such as mandatory passwords).

Casper Simplified Enrolment

Finally, Casper Suite v9.4 includes a vastly simplified process for enrolling users. It requires far fewer steps than before to set up, and users can be enrolled automatically as soon as their device is detected on the corporate network.

If you’re free later, JAMF Software are running through all the changes in a webinar at 2:00pm Central time (8:00pm UK time.) Sign up for the Casper Suite v9.4 launch webinar here.

Want to know more about managing your Macs and mobile devices? Get in touch with the team on 03332 409 306 or at sales@Jigsaw24.com. For all the latest news and reviews, follow @WeAreJigsaw24 on Twitter or ‘Like’ us on Facebook

By

Sign up for Casper Suite training courses now!

Sign up for Casper Suite training courses now!

The Casper Suite is all about making the life of system administrators easier by improving management and deployment of Apple Mac and iOS devices. And JAMF’s own accredited courses are designed to make it easier to learn and develop the skills necessary to get the most out of Casper Suite.

Whether you’re just about to get started with Casper Suite or want a refresh in best practice, these courses are essential if you want to manage OS X and iOS devices. Below, we’ve given you a breakdown of the three courses that JAMF are running in the new year in the UK. Take a look and give us a call on 03332 409 306 or drop us an email at services@Jigsaw24.com if you have any questions about pricing or availability.

Thanks

Ed

————————————————————————–

Certified Suite Essentials (CSE) – To learn the basics of Casper

London on 15th-16th May

What is it? It’s a two-day course that’s perfect for anyone who is completely new to the Casper Suite or looking for a bit of a refresh. It’s focused around hands-on exercises that cover common management tasks for OS X and iOS devices, with the aim of building a solid foundation and providing core information for day-to-day management.

What’s covered? JAMF Software Server (JSS) administration basics, enrolment methods, inventory and reporting, building and managing packages, managing policies and profiles, imaging, Self Service, mobile device management, and app and eBook distribution.

Who’s it for? Anyone new to Casper or looking for a refresh, but has basic OS X and iOS familiarity.

To enquire about pricing or to register your place, email us

————————————————————————-

Certified Casper Administrator (CCA) – To become a Casper expert

London on 15th-17th April

 

What is it? This is the original Casper Suite certification. It’s a three-day course that consists of hands-on exercises (not the strenuous kind) that challenge system administrators to demonstrate just how good they are at OS X management with the Casper Suite.

What’s covered? Inventory (including acquiring computers, generating inventory reports, tracking licensed software, application usage and extension attributes), Packaging (including fundamentals, creating OS and application packages and best practices), Management (including deploying software and updates, running scripts, Self Service, Managed Preferences and restricted software), and Imaging (configurations, autorun data, pre-stage images).

Who’s it for? System administrators with 3 months’ experience with Casper Suite, and who have received JumpStart or attended the Casper Suite (CSE) course.

To enquire about pricing or to register your place, email us

————————————————————————–

Certified Mobile Administrator (CMA) – To become a mobile expert

London on 18th-19th April

What is it? This is a two-day, hands-on course designed for Casper Suite administrators managing iOS devices. It covers many aspects of provisioning, deployment and management required for iOS deployments. The course is focused on building complete iOS workflows that account for the entire lifecycle of the devices in your organisation. Both Casper Suite and Apple tools for managing iOS devices (such as iTunes, Xcode and iPhone Configuration Utility) are covered in depth.

What’s covered? iOS settings management, mobile device management framework configuration, app distribution, remote management functions, iOS device inventory collection, Sync Station (OS X) provisioning and management, common iOS distribution and management workflows.

Who’s it for? Casper Suite administrators with basic iOS and OS X familiarity.

To enquire about pricing or to register your place, email us