Jamf Basics for Mac Users
What Jamf does on your Mac, how to use Self Service, and what those prompts mean
Jamf is the MDM (Mobile Device Management) platform your company uses to manage Mac computers. If you have a work Mac, Jamf is probably running in the background – pushing settings, managing updates, and providing you with an app catalog called Self Service. It's not something you interact with constantly, but it helps to know what it does when a prompt pops up or IT tells you to install something from Self Service.
What Jamf does on your Mac
Jamf manages your Mac on behalf of IT. Behind the scenes, it:
- Installs and configures Wi-Fi, VPN, and email settings automatically
- Enforces security policies (encryption, password requirements, screen lock)
- Deploys software updates and patches
- Reports device compliance status back to IT
- Provides the Self Service app for on-demand software installs
You won't see Jamf running as a visible app. It works through macOS's built-in management framework and a small background agent. The most visible part of Jamf for most users is the Self Service app.
Self Service
Self Service is Jamf's app store for your organization. IT stocks it with approved software, configuration options, and sometimes useful shortcuts like printer setup or VPN configuration.
To open Self Service:
- Look for the Self Service app in your Applications folder or search for it with Spotlight (Cmd + Space, type "Self Service")
- Browse or search the catalog for the app or tool you need
- Click Install next to the item
Common things you'll find in Self Service:
- Approved apps (Slack, Zoom, Office, Chrome, etc.)
- Printer drivers and printer setup
- VPN configuration
- Security tools your company requires
- macOS software updates (sometimes managed through Self Service instead of the normal update flow)
If you need software that isn't in Self Service, you'll typically need to submit a request to IT. Most organizations have a process for adding new apps to the catalog.
Common Jamf prompts
You'll occasionally see prompts from Jamf or macOS related to management. Here's what the common ones mean:
- "Remote Management" during setup – This appears when your Mac is being enrolled in Jamf during initial setup. It means your Mac is registered in Apple Business Manager and your organization's MDM. Just follow the prompts.
- "Management Profile" installation – macOS is installing the profile that lets Jamf manage the device. Approve it when prompted.
- "[App] would like to access..." permission prompts – Jamf-deployed apps may need permissions for things like screen recording, accessibility, or full disk access. These are normal macOS permission requests, not Jamf-specific.
- Software update notifications – Jamf can push update reminders with deadlines. These often have a "Later" option with a countdown, but eventually the update becomes mandatory.
- "Your Mac is not in compliance" – Something on your device doesn't meet IT's requirements. Common causes: OS too old, encryption not enabled, or a required app was removed. The notification usually tells you what to fix.
Checking in and inventory
Jamf periodically "checks in" with your Mac to update its inventory and apply any new policies. This happens automatically in the background. You don't need to do anything for check-ins to work.
If IT asks you to "run an inventory update" or "check in," you can do this manually:
- Open Self Service
- Look for a policy called something like Update Inventory or Check In (the name varies by organization)
- Click Run or Install
Alternatively, if IT gives you a terminal command, it's usually sudo jamf recon to force an inventory update.
Jamf Connect
Some organizations use Jamf Connect to link your Mac login to your work identity (like Microsoft Entra ID or Okta). This means:
- Your Mac login password syncs with your work password
- When you change your work password, your Mac password updates too
- You may see a Jamf Connect login window instead of the standard macOS login
If your password gets out of sync and you can't log in, contact IT. They can usually reset the connection.
Frequently Asked Questions
Can I uninstall Self Service?▾
You technically can, but it will likely be reinstalled automatically by Jamf on the next check-in. Self Service is how IT delivers software and updates to your Mac, so removing it may cause you to miss required installations. Leave it installed.
Does Jamf see everything I do on my Mac?▾
No. Jamf sees device inventory information: what apps are installed, OS version, storage, encryption status, and compliance state. It does not monitor your screen, read your files, track your keystrokes, or watch your browsing activity. It manages the device, it doesn't surveil you.
What if Self Service shows "No policies available"?▾
This usually means your Mac hasn't checked in recently, or there's a network issue preventing it from reaching the Jamf server. Make sure you're connected to your organization's network (or VPN if remote), then try opening Self Service again. If it persists, contact IT.
Why does my Mac keep asking me to update?▾
Jamf can enforce software update policies with deadlines. If you're seeing persistent update prompts, IT has likely set a required update with a due date. It's best to run the update when convenient rather than waiting for the deadline, since forced updates at inconvenient times are worse.
Is Jamf only for Macs?▾
Jamf primarily manages Apple devices – Mac, iPhone, and iPad. If your organization also manages Windows or Android devices, they likely use a different tool like Microsoft Intune for those platforms.