What’s the difference between a hosted and managed Jamf Pro deployment?

What’s the difference between a hosted and managed Jamf Pro deployment?

We’ve been helping our customers work with Jamf Pro since 2009, and have deployed more licences than any other UK provider, so there are no safer hands for your Jamf deployment. We offer Jamf Pro as a hosted service, a managed service, and a hosted, managed service – read on to find out which option is right for you. 

A hosted, managed Jamf Pro deployment (we host your server and manage all the devices)

In this scenario, you don’t have to do anything. You tell us how many devices you need managing and which permissions your various user groups will need, then we host the licences at our UK datacentre and manage the deployment and maintenance of them. If you ever want to add new licences or change settings, all you have to do is give our team a call, and we’ll arrange everything from this end.

Why choose a hosted, managed deployment? 

Predictable per device pricing. Let’s get this out of the way early. Our managed, hosted solution is billed on a per device basis, so you’re only paying for the licences you use and you don’t incur any hardware, power or cooling costs.

Focus on core skills. Maintaining another skill base in your company is a financial and logistical challenge. It takes staff away from their core tasks, which can impact the smooth running of your organisation. However, a managed solution means that our team take responsibility for the management of your licences, and your team can focus on their core capabilities.

Time savings. Don’t tie up your team managing another platform. All you have to do is tell us how you want your devices to behave. We’ll then build profiles, register devices, apply settings, monitor usage, troubleshoot and generate reports for you – just let us know your requirements and sit back while we run around on your behalf.

Secure access to a UK-based datacentre. Your licences will be hosted at our UK-based datacentre, and you’ll be given private, secure access.

A hosted Jamf Pro deployment (we host the server but you manage the devices)

All hosted Jamf Pro deployments are held in our UK datacentre, and you are given secure VPN access to the servers holding your licences. In this scenario, your team would manage the devices themselves (you can still ask us for tech support, though).

Why choose a hosted deployment? 

No onsite costs. Hosting licences in our datacentre costs you a flat, predictable fee per licence, and lets you sidestep internal hosting costs. It also means you don’t have to buy any hardware as part of your initial outlay.

You maintain ultimate control over your licences. If you’ve already got the know-how in-house, have a very delicate mixed environment that you don’t trust outsiders with, or have users whose needs and permissions will have to change frequently, you might prefer to manage your devices in-house. A hosted deployment lets you do this without having to assume responsibility for the maintenance of any new hardware.

Develop in-house expertise. Who are we to stand in the way of professional development? You may want to get members of your team trained up on Apple and Jamf Pro workflows, in which case getting the right training on managing your devices yourself is essential. Find out how we can help below.

Our expert support and training. Our accredited team offer support contracts that can include remote and onsite support, regular system health checks, access to our help desk for your end users and more, all backed up by our 25 years’ experience in mixed platform environments. We’ll even include a JSS health check as part of your service level agreement. We can also provide four levels of official Jamf Pro support, and offer training courses of our own for technical teams and end users.

A managed onsite Jamf Pro deployment (you host the server, we manage the devices)

If you want to host your own licences but don’t have the time to take on device admin or the funds to take the training that enables you to do it, choose a managed onsite deployment. Your hardware stays in your server room where you can monitor and control it, and no one has to VPN into our datacentre, but we still take care of all the behind the scenes stuff.

Why choose a managed onsite deployment? 

You can choose and check your own hardware. We’re very protective of our server room and security practices too, so we understand some people want to keep their servers where they can see them.

Obey strict storage policies without having to take on management tasks. If you don’t want to deal with Jamf Pro admin, but want or need to keep your data onsite to comply with contractual or legal obligations, a managed solution allows you to do this without taking on any additional admin tasks.

No support or training costs. Support comes under the umbrella of us managing your deployment, so there’s no extra cost for that. And with our team handling things, there’s no need to retrain your in-house team.

Already got Jamf Pro? Ask us about…

Transitioning your existing Jamf Pro deployment to the cloud. If you already have Jamf Pro onsite but would like to move to a hosted or hosted and managed setup, we can help make the move quick, seamless and cost effective.

JSS Healthchecks. If you want to keep your deployment onsite but don’t think it’s running as efficiently as it could, we also offer JSS Healthchecks. These are designed to ensure your Jamf Pro deployment and associated networking are optimised for each other, so you can improve performance without the need for costly upgrades. Find out more here

Legacy JSS If you’ve previously installed Jamf Pro (perhaps in its previous incarnation as Casper Suite) but it’s fallen into disuse or the expertise has left your organisation, call on us to give your setup the kiss of life. We’ll revitalise your hardware and policies to make sure you’re getting the most out of your investment.

Jamf Jumpstart training. This is mandatory training that Jamf insist you have if you’re going to manage your own devices (if we’re managing your devices for you, you can skip it). Depending on the size and complexity of your deployment, you could need to undertake anything between four hours of remote training and a three day onsite course that costs £3500. Ask our experts what you’ll need.

Additional training. We offer training for tech teams and end users on Apple devices, their operating systems and the solutions you can use to manage them. Get in touch with the team to arrange Jamf Pro training that’s tailored to your needs. Book your training here.

Official tech support. We offer five tiers of support for Jamf Pro deployments, all at fixed, predictable annual costs. They range from general remote support and troubleshooting packages to our Gold package, which includes eight days with an engineer onsite, six half days of dedicated remote support for ongoing issues, ongoing end user support, annual health checks of your hardware and networks, roadmaps for future system development and the packaging and deployment of up to 12 business apps.

Why choose Jigsaw24?

Scale We’ve deployed more licences of Jamf Pro and carried out more Jumpstart training than any other company in the UK.

Longevity We’ve been working with Jamf since 2009, and were one of the first companies in the UK to work with them, meaning we have the most experienced team of engineers available to you.

Apple expertise But it’s not all about Jamf. We’ve been providing Apple devices, solutions and services for 25 years. Our support team really understand your devices, their underlying architecture and how they’ll interact with Jamf Pro and your wider IT ecosystem, whether that be Windows or OS X-based.

Security As well as providing secure access to your licences, our Tier UK datacentre offers redundant power and disaster recovery in case of emergency.

Our satisfied customers include SuperGroup, Lincoln University, King’s College London, News UK, Pret-A-Manger, MTV, The AA, Jamie Oliver, Williams Lea, The Guardian, Pentland Brands and Burberry. If you’re ready to get started with Jamf Pro, or unhappy with your current provision, our team can migrate you from an onsite deployment to a hosted or hosted and managed one in order to reduce your running costs. Email our engineers to find out how.

Want to know more? Give us a call on 03332 409 306 or email solutions@Jigsaw24.com. For all the latest news and reviews, follow @WeAreJigsaw24 on Twitter or ‘Like’ us on Facebook

 

We survived our first Golden Square comedy night!

We survived our first Golden Square comedy night!

Having run out of puns of our own, we handed over to the professionals last night as we held our first ever comedy night at our Soho office. Thankfully, it went off without a hitch…

Big thanks are due to the guys from JAMF Software and Quantum storage, who shepherded us through the productive part of the evening, presenting their plans for the upcoming year. JAMF’s Gib Chan and Kieran O’Connor shared their Casper Suite roadmap for 2016, focussing on new products and features that will be joining the leading MDM solution’s toolkit in the coming months. If a question about device management or mobility strategy ever comes up on a pub quiz, we’ll be ready with the answer.

comedy_night_blog

Next up was Tim Strand from Quantum, who outlined the storage giant’s 2016 plans and introduced us to the updated feature set of their new storage range, Xcellis (you can almost see it in the overcrowded photo above).

Jigsaw24’s very own Tariq Saied introduced our updated solutions and services portfolio, including our managed services for storage, Apple device management, repairs and more. We also announced our new Apple Addicts lunch and learn sessions with Jigsaw24’s own Tom Holbrook, and a new and improved training programme for end users and first line techs.

With the serious business segment of the evening over, it was time for compere Sean Meo, Imran Yusuf and Paul Foot to find out if the IT crowd actually have a sense of humour (of course we do, and they were brilliant). “It was really great meeting the Jigsaw24 team and customers and chatting to them about Apple management,” JAMF’s Kieran O’Connor was generous enough to say. “Plus the comedy acts were absolutely brilliant! Can’t wait for the next event.”

Our next strategy-and-jokes shindig is in May – we’ll hopefully have thought of a better name for them by then – so if you’d like to attend, drop solutions@Jigsaw24.com a line and we’ll get your name on the list.

To find out more about our events, head to our events calendar. For more about mobility, storage and IT strategy, give us a call on 03332 409 306 or emails sales@Jigsaw24.com

Jigsaw24 achieves Jamf Gold Reseller status!

Jigsaw24 achieves Jamf Gold Reseller status!

Joining an elite group of four in the UK, Jigsaw24 has received Gold Reseller accreditation from Jamf. As a Gold Reseller and System Integrator, we’ve demonstrated continued commitment to Jamf, customer service and sport a strong sales record.

In 2015, we sold a cool 7252 Jamf Pro licences and performed 37 JumpStarts (including 42 total JumpStart sales), successfully integrating Apple IT into schools and businesses throughout the UK. Last year, we provided more JumpStarts than any other partner in the UK. A JumpStart engagement accompanies all purchases of Jamf Pro – a certified JumpStart integrator will work alongside your staff to implement your new system, and integrate it seamlessly into your existing IT environment.

Jamf Pro allows businesses and schools to harness the power of Apple hardware and manage it accordingly. Designed with self-sufficiency in mind, Apple Mobile Device Management is incorporated into Jamf Pro providing establishments full control over their Apple hardware and individual user activities – a powerful, unified solution for device management.

We are the UK’s No. 1 Jamf Pro reseller, having sold 10% more than any other partner in 2015. Jamf are dedicated to providing the hottest Apple tech to businesses and educational institutions all over the country, offering some of the best IT implementation and integration solutions around. Our engineers work in conjunction with Jamf to JumpStart Jamf Pro, and deliver refreshed, reliable IT infrastructure.

Gold Resller status and being a system integrator reaffirms our strong relationship with the guys over at Jamf, and our commitment to delivering high-quality IT solutions and system integration services to our customers.

We can now add a Gold Reseller badge to our growing list of industry-recognised qualifications, which also includes Avid Elite Reseller, Adobe Platinum Reseller and Apple Premium Service Provider accreditations. We’re pretty good at what we do.

If you’d like to know more about Jamf and Jamf Pro, call us on 03332 400 888, email sales@Jigsaw24.com, ‘like’ us on Facebook, or follow us on Twitter @WeAreJigsaw24

 

Highlights from JAMF Software’s JNUC 2015 event

Highlights from JAMF Software’s JNUC 2015 event
Our team headed to the JAMF Nation User Conference in Minneapolis last week to catch the latest news in Mac management. Hundreds of Apple IT admins packed into the Guthrie Theater for the annual event based on freely sharing IT information and best practices.
 
Over three days and dozens of sessions, there was insight from a wide range of organisations – from large and small schools to global companies – all with the common thread of enabling scalable Apple technologies at scale through creative practices, from security to deployment and management. Just a few of our highlights included:
System Integrity Protection (SIP)

here was a lot of chat at the show about System Integrity Protection (SIP), which is part of OS X El Capitan 10.11, which was interesting to hear as it’s a new direction from Apple and affects Mac admins. csrutil, NetBoot and any old packages and software that install into protected directories will no longer run, however JAMF binary is on the white list so will continue to work.

Rich Trouton, an Apple veteran with over 18 years of experience supporting Macs, provided an overview: “All malware tries to get root access,” Trouton mentioned as he explained why SIP became important for Apple to implement. SIP disables root access to certain system files and kernel extensions. “SIP is a big change, but still a work in progress. I expect Apple to update this in the future.”

He also warned against disabling SIP and suggested that If you are using software that requires SIP to be disabled, “demand more from those vendors or leave them.” You can check out his full presentation here.

A new CEO at JAMF Software

JNUC 2015 was also the first JNUC with Dean Hager as JAMF Software’s Chief Executive Officer. Hager has more than 20 years of experience in leadership positions at high-growth software and technology companies including Kroll Ontrack and Lawson Software.

On his appointment, he said: “Businesses and schools love Apple products, and are continuing to adopt Mac, iPad, and iPhone devices in droves. This creates an enormous opportunity for JAMF by providing an easy way to manage these devices, helping organisations both large and small succeed with Apple. I am thrilled to be a part of it and to be leading JAMF in its next stage of growth.”

The JNUC 5k

The event wasn’t all Apple IT admin (and posh dinners) though – there was also the small matter of a 5k run open to all delegates. One of our heroic Solutions Architects, Thomas Holbrook, took it upon himself to dash around Minneapolis in the October cold, so well done, Tom!

CRRzVyNVEAAkvVG

Want to find out more about JAMF Software Casper Suite and our partnership with them? Give us a call on 03332 409 306 or email solutions@Jigsaw24.com. For all the latest news and reviews, follow @WeAreJigsaw24 on Twitter or ‘Like’ us on Facebook

Using JAMF Software to tame iOS and OS X devices in the workplace

Using JAMF Software to tame iOS and OS X devices in the workplace

With the rise of OS X and iOS devices in business, finding a way to manage these devices and ensure they’re in line with company policies is more important than ever – especially if you need your Mac users to work in harmony with a PC-based workforce.  Here, we talk through some of the techniques and tools you can use to make sure all your Mac and iOS devices are managed and visible, without overburdening IT admin.

While the rise of Apple devices and BYOD/mixed platform environments can be great for productivity and end user satisfaction, it can be a cause for concern among IT admins, particularly as Apple have retired their server hardware, prompting a widespread move to managing Mac computers using Windows servers.  And as the Mac user base grows, viruses are becoming increasingly targeted at the platform, making policy compliance and disk encryption incredibly important for mobile devices and desktops alike. Happily, Apple and a range of third parties are working together to make the situation manageable.

Device Enrolment Programme (DEP)

One of Apple’s latest initiatives, the DEP is designed to make it easier for you to enrol new devices on your company’s MDM system, and reduce the chance of any user accessing the network on an unsecured device. It is not an MDM solution in and of itself, but it does make a ‘zero touch’ MDM deployment possible for all new devices, drastically reducing the time and effort involved in setting up new users.

Put broadly, your create MDM profiles for different types of device and user, then share them with Apple’s servers. Apple will assign your MDM server a unique token, and when a device connects to it for the first time, DEP will push the correct MDM profile to the device as part of the initial startup process, so your end users can’t use their new devices without enrolling them in your MDM service, and no one from IT has to be on hand to oversee registration – it’s all done automatically.

You can enrol your company in DEP at deploy.apple.com.

Preparing for MDM

Before rolling out an MDM solution for Apple devices, you’ll need to make a decision about your Apple ID policy. Many apps and services, both free and paid for, rely on your end user having an Apple ID to authenticate their identity in the App Store and other areas. For this reason, we recommend you allow users to create individual Apple IDs (however, your admin team should use a shared Apple ID to access services like DEP and VPP).

Every Apple ID requires an associated email address – the degree of freedom you wish to allow users and whom ownership of the device sits with will determine whether you allow end users to use their personal emails and existing Apple IDs, or insist they create a separate Apple ID associated with their work email address.

MDM solutions: JAMF Software’s Casper Suite

JAMF Software are one of the most experienced Mac and iOS management experts out there, and their Casper Suite management solution is even used by Apple themselves. At the core of the suite is the JAMF Software Server, which acts just like a web server. It can be hosted on any existing Windows, Linux or OS X server at your premises, hosted remotely via JAMF Cloud or provided as a managed service by our accredited team.

Key features include:

Recon, an app included in the suite which scans your existing estate for Apple devices not currently enrolled in Casper Suite. Recon can then be used to enrol multiple OS X computers remotely. It will also scan IP ranges and enrol any computer it can connect to via SSH (Remote Login).

A range of imaging options, including monolithic imaging (IT builds a standard image including apps and settings, which is then deployed locally or over the network to all computers), thin imaging (IT builds a smaller, more modular image which is installed on top of a standard OS X installation, and other restrictions and apps are deployed using profiles and policies) and zero touch imaging (enrolment through DEP).

Self Service, an app which acts like an internal App Store for your organisation. It can contain apps linked to VPP, packaged apps, eBooks, printer settings, configuration profiles and custom profiles, all of which users can install on or apply to their own device without IT intervention.

JAMF software can be run completely on windows server hardware if required.

Volume Purchasing Program and Managed Distribution

Apple’s Volume Purchasing Program (VPP) is a purchasing scheme designed to save time and money for organisations who want to buy apps and books in bulk. It allows your IT admin to purchase several licences for a particular app, then centrally assign them to end users.

Traditionally, you had to buy your licences, download a spreadsheet of redeemable codes, provide a code to each user so that they can download the app without paying again, and then transfer ownership of the app or book to that user’s Apple ID permanently. Obviously, this is quite time consuming and messy, and involves you losing ownership of the app or book.

Now, if you’re using DEP, you can use Managed Distribution to license content to your end users, meaning they can use the app or book on a temporary basis but you can revoke access at any time. All you need to do is use Casper Suite to generate an invitation email for the end users who need access, and then they’ll be guided through the installation and licensing process without the need for IT admin’s involvement.

Casper Suite as a managed service

If you don’t have the resource to handle MDM in-house, or if your IT team are all PC-based and aren’t comfortable administrating Macs or iOS devices, we can provide Casper Suite as a managed service. You tell us what needs doing; our JAMF-certified team can set up and maintain your deployment. We can even help you optimise your infrastructure for Casper Suite, so you’re getting the best possible performance out of your software.

Want to know more? Give us a call on 03332 409 306 or email business@Jigsaw24.com. For all the latest news and reviews, follow @WeAreJigsaw24 on Twitter or ‘Like’ us on Facebook

JAMF Software release new Relo app for iPad

JAMF Software release new Relo app for iPad

JAMF Software took the opportunity of last week’s JAMF Nation ‘Ice-Out’ event to launch their latest endeavour – Relo for iPad, a handy little app that lets you shift all your important data from Android devices and tablets over to iPad and iPhone.

For anyone who’s tried to do this manually in the past without the aid of a dedicated app, especially any IT admins in big businesses, you’ll know that this can be a right chore. As well as being time-consuming and often frustrating, there’s also the added risk of losing important and sensitive data such as photos, videos and contacts, ending in information often being left on old devices. Ditto apps. But now JAMF Software, makers of the excellent Casper Suite, have addressed the needs of those working on multiple platforms, or making the move from Android to iOS, by letting them quickly and simply copy data from non-iOS devices to iPhone and iPad.

JAMF Software promise their Relo app will let users:

Bring Important Data With You. Relo wirelessly copies all contacts, photos and videos from an Android to a new iOS device. Just download the app on both devices, scan a QR code and you’re done!

• See iOS Versions of Your Apps. If you have an Android app that is also available in the App Store, Relo will display the iPhone or iPad version for you to download.

• Ensure Privacy of Your Data. Relo doesn’t upload any data to the cloud or anywhere else, ensuring that private information stays private for users and organisations alike.

Another big plus point for Relo: it’s completely free! You can download it right now from the App Store on your iPad or head on over to iTunes.

Want to know more about JAMF Software’s Casper Suite? Give us a call on 03332 409 306 or email sales@Jigsaw24.com. For all the latest news and tips, follow @WeAreJigsaw24 on Twitter or ‘Like’ us on Facebook.

7 things you need to know about DEP

7 things you need to know about DEP

Ready to start enrolling devices? Our reseller ID is 2287450. Need a little more information? Here are seven things you need to know about Apple’s latest initiative…

1. It stands for Device Enrolment Programme.

It is, not surprisingly, a new programme that enrols new devices onto your system automatically, without your IT team having to get their hands dirty.

2. Enrolment is not the same as management.

The technology behind DEP doesn’t replace a Mobile Device Management system (MDM). You need to have a separate MDM solution to decide which apps should be on devices and what content students who’ll be using them should be able to access.

Popular MDM systems among schools include Lightspeed and JAMF Software’s Casper Suite. Once you have your MDM system in place, DEP puts your new devices into it automatically. (There’s a more detailed explanation here, if you want the technical bits, or you can take a look at Apple’s official guide.)

3. It’s free to use.

There’s no charge for using DEP but you do have to have an MDM solution in place for it to work, and alas, the good ones are not free. If you don’t have a device management solution in place, give our team a call to go through your options.

4. It applies to any kind of Apple device.

Desktops, notebooks, iPad, iPod touch and iPhone can all be enrolled in DEP, as long as they were purchased after March 2011 and from an Apple Authorised Reseller (like us). To enrol devices you already own into DEP, you need to associate them with the reseller ID of the company you bought them from – if that’s us, our ID is 2287450.

5. You can create multiple profiles.

So different profiles can be installed on desktops and iPad, or on devices intended for students and teachers – and they’ll all be applied automatically as soon as the device is turned on.

6. You can’t have devices on this and in Apple Configurator.

If you’re already using Apple Configurator to set up your devices, you can transition to DEP by wiping the devices and re-enrolling them. However, once a device is registered on DEP, you can no longer supervise it using Apple Configurator, as Apple don’t allow one device to be registered in both systems. If it’s easier for you, you can enrol only new devices via DEP, but still manage them through MDM. Just drop us a line to find out how.

7. It should not affect your Volume Purchase Programme (VPP) purchases.

Apple added a new managed distribution option to their Volume Purchasing Programme a while ago. With MDM you can now push apps out wirelessly without ever needing to type in a password on the iPad. Ask us to explain managed app distribution – the best way by far to deploy your apps.

We’ve got a more detailed explanation of DEP here or you can download the official Apple guide here. For more information, call 03332 409 333 or email learning@Jigsaw24.com. For all the latest news and FAQs, follow @Jigsaw24Edu on Twitter or ‘Like’ us on Facebook

Casper Suite version 9.4 adds BYOD tools and Android support

Casper Suite version 9.4 adds BYOD tools and Android support

JAMF Software have just launched version 9.4 of their Casper Suite device management tools. The major addition is Casper BYOD, which brings iOS and Android management tools to the Suite in order to better support – you guessed it – bring your own device programmes.

JAMF’s goal for this round of updates is to help end users become more productive and self sufficient, and to that end they’ve added self-service and BYOD tools that are designed to be simple, lightweight and easy for users to access without help from technical staff. Here’s the key info…

Casper Self Service for Mac, iPad and iPhone

JAMF have added new features to their self service toolkit, allowing users without admin access to download software and App Store apps, install eBooks, receive notifications from central IT and auto-configure their own email, contacts, calendars and WiFi/VPN profiles – all without having to raise a helpdesk ticket.

Users on iOS devices can now use the native Casper app to access self service functions, allowing them to download apps, files, eBooks, web clips and more, as well as configuring their email, calendars, contacts and WiFi and VPN settings, so they get a more seamless experience when moving between their desktop computer and any mobile devices.

Big benefits for IT here include the ability to send out push notifications and, hopefully, a massive reduction in the number of helpdesk tickets you have to handle. JAMF have made sure that configuration information still stays central, though, so you can have visibility over who is using which WiFi or VPN profile (and who’s tried to jailbreak their device) even if you’re not configuring it directly.

Casper BYOD

The biggest change in Casper Suite v9.4 is the appearance of Casper BYOD, a lightweight management interface that will let IT teams manage iOS and Android BYOD deployments unobtrusively. It includes tools that allow you to remotely wipe corporate data and settings, remotely lock devices, enforce encryption settings and passwords, and inventory devices and their data from a single, central console.

The key thing here is that wipes and inventories only cover corporate data, so ends users can rest assured that their private data is their own, and they’ll receive notifications whenever the IT team takes action that may affect them. They also get to keep all their personal preferences and settings (as long as they meet the company’s security requirements, such as mandatory passwords).

Casper Simplified Enrolment

Finally, Casper Suite v9.4 includes a vastly simplified process for enrolling users. It requires far fewer steps than before to set up, and users can be enrolled automatically as soon as their device is detected on the corporate network.

If you’re free later, JAMF Software are running through all the changes in a webinar at 2:00pm Central time (8:00pm UK time.) Sign up for the Casper Suite v9.4 launch webinar here.

Want to know more about managing your Macs and mobile devices? Get in touch with the team on 03332 409 306 or at sales@Jigsaw24.com. For all the latest news and reviews, follow @WeAreJigsaw24 on Twitter or ‘Like’ us on Facebook

By