University Configurations and Automation

Below are configurations and automation managed by Stanford University IT, which apply to nearly every device enrolled in Jamf @ Stanford.

Distributed IT Jamf administrators may apply additional configurations and automation.

macOS configuration (via configuration profiles)
- Refer to the Stanford-Managed Configuration Profiles (macOS) webpage
CrowdStrike Falcon Sensor Automation
- Installs on supported macOS versions (11.3.1+, 12.4+, 13+)
- Determines Licensing for EDR versus NGAV, activating accordingly
- Detects unhealthy Sensors and attempts to repair them
- Collects information about the Falcon Sensor for MyDevices
Cisco AnyConnect Secure Mobility (VPN) Client Automation
- Disables the historically problematic AnyConnect Socket Filter (macOS 12 - Monterey and onward)
- Provides a Self Service option to disable the AnyConnect Socket Filter (macOS 11 - Big Sur)

iOS/iPadOS Configuration (via Configuration Profiles)
Refer to the Stanford-Managed Configuration Profiles (iOS/iPadOS) webpage for items like Mail auto-configuration
Deploys Microsoft Outlook app to Microsoft 365 mail users
Deploys Gmail app to Gmail mail users

How do you know any of this is happening?

On the computer itself:
- System Settings/Preferences > Profiles
- Observe Jamf’s log file here: /private/var/log/jamf.log
- Observe Stanford’s log files here: /Library/Logs/Stanford
In the Jamf Pro cloud console:
- Computer record > Inventory > Profiles
- Computer record > Management > Management Commands > Pending/Failed Commands
- Computer record > History > Policy Logs

On the device itself:
- Settings > General > VPN & Device Management > Stanford Device Management > More Details
In the Jamf Pro cloud console:
- Mobile Device record > Inventory > Profiles
- Mobile Device record > Management > Management Commands > Pending/Failed Commands
- Mobile Device record > History > Management History

If you have questions, suggestions, or feedback, please submit a Help request.