Systems

Jamf Pro
Munki Mac Endpoint Management
Workspace ONE Unified Endpoint Management (UEM)

Intended Audience

University of Illinois IT Pros leveraging Technology Services Endpoint Services Jamf Pro OR Munki Mac Endpoint Management and Workspace ONE UEM

General Information

When a Mac is retired from Jamf Pro, Multi-Tenant Munki, or Workspace ONE, the following actions should be taken to properly offboard it from the services. This keeps the service lean and running smoothly.

Actions

• Delete Jamf Pro record
• Run MTM Offboarding Package
• Delete MTM portal record
• Delete MunkiReport record
• Delete Munki manifest
• Delete Workspace ONE record

Delete Jamf Pro record

Deleting retired computer and device records from the Jamf Pro console and removing their MDM assignment is especially important if the endpoint is still usable when sent to Surplus. If another unit retrieves the endpoint for use, they can re-onboard the endpoint into your Jamf Pro site if the endpoint has its operating system erased and reinstalled. Deleting a retired endpoint record also frees up the Jamf Pro license.

To delete a Jamf Pro record:

• Log in to the Jamf Pro console.
• Go to 'Computers' or 'Devices' in the sidebar and then click 'Search Inventory'
• Perform a simple or advanced search to locate the relevant endpoint record. Note: empty searches return all device records.
• Click on the name of the endpoint record you wish to delete, which will bring up the individual endpoint record.
• Select 'Delete' in the bottom-right corner. Confirm the deletion by clicking 'Delete' in the subsequent popup.
• Submit a Jamf Pro "DEP Removal" support request to EPS with the serial numbers of devices that need their Apple School Manager DEP profile/MDM assignment removed.

Run MTM Offboarding Package

Before proceeding with the remaining offboarding steps, ensure that the Multi-Tenant Munki tools and configuration have been removed from the client, either by downloading and running the offboarding pkg, or by wiping the hard drive.

Delete MTM portal record

Deleting retired computer records from the MTM portal is especially important if the computer is still usable when sent to Surplus. If another unit retrieves the computer for use, they will be unable to onboard it to their Munki repo if a portal record exists in a different unit's repo.

To delete a portal record:

• Search for the computer record in the MTM portal.
• Click on the computer name to open the 'Edit Computer' window.
• Click the 'Delete Computer' button, and then the 'Confirm Delete' button.

If you accidentally delete a MTM portal record for the wrong Mac: that Mac will not be able to connect to the Multi-Tenant Munki service, and will need to be re-onboarded.

Delete MunkiReport record

To maintain an accurate picture of the state of your Mac fleet, delete computer records from MunkiReport when devices are retired. This should be done after devices are wiped, when no further possibility exists for the computer to report in to MunkiReport and create a new record. Deleting retired devices from MunkiReport also cuts down on unnecessary charges to units.

To delete a MunkiReport record:

• In MunkiReport, go to Listings - Clients to view the Client Report.
• Enter the computer name or serial number in the top-right search field to locate the computer record.
• While still in the Client Report, select the 'Edit' button above the search field; you are now in edit mode.
• Click the red 'X' beside the computer(s) to be deleted. There is no bulk delete action available, so each record must be individually deleted.
• When all deletions are complete, click 'Edit' again to toggle out of edit mode.

If you accidentally delete a MunkiReport record for the wrong Mac, a new record will simply be created the next time Munki runs on that Mac, usually every hour or two.

While MunkiReport offers a very useful archive feature, archiving should not be used in lieu of deleting records for offboarding, since it will not end monthly billing for the client.

Delete Munki manifest

Deleting unused Munki manifests will help you more easily navigate your unit repo, and will also shorten MunkiAdmin load time.

To delete an unused manifest from your repo:

• Connect to your Munki repo using MunkiAdmin.
• Go to the Manifests tab, and search the list for the manifest to be deleted.
• Right-click (or Ctrl-click) on the manifest and select 'Delete manifest' from the contextual menu.
• Click 'Save' to write your changes back to the MTM server.

If you accidentally delete the Munki manifest for the wrong Mac: you will need to create a new manifest for that Mac via the 'Force Retemplating' checkbox in the MTM Portal.

Delete Workspace ONE record

Deleting a retired device from the Workspace ONE console frees up the license, and also cuts down on unnecessary unit charges.

To delete a Workspace ONE device record:

• Log in to the Workspace ONE console.
• Go to Devices - List View
• Enter the computer name or serial number in the top-right search field to locate the device record.
• Check the box to the left of the device to be deleted, and from the 'More Actions' dropdown, choose Admin - Delete Device.
• Enter a reason for the deletion, and click 'Next'.
• Enter your security PIN when prompted.
• Submit a Workspace ONE "DEP Removal" support request to EPS with the serial numbers of devices that need their Apple School Manager DEP profile/MDM assignment removed.

If you accidentally delete the wrong Workspace ONE device record: the deleted device will need to be re-enrolled into Workspace ONE.

Contact the EPS team