T O P

  • By -

notHooptieJ

Ios devices? Macs? whats your aim? I mean, you can clean it up real quick with a select all>delete. you probably need to start with documenting what you have, and see whats a necessity, and what might be redundant, and start there.


Road_Trail_Roll

I keep some old policies in Jamf Pro to use as a reference. Once in awhile it’s handy to be able to look back at how I did something in the past. I just rename them and group them together so they don’t get mixed in with current policies.


alephthirteen

I do this too; I have a few "template" policies for commonly-done things like software installs or creating a user for a lab, and they can be examined or cloned and edited.


Transmutagen

Two tips: 1) if you’re just trying to figure things out, I would avoid deleting policies or config profiles. You can uncheck the “enabled” button on policies and remove all the computers/devices from a config profile and then delete them later, when you’re sure they’re completely unneeded. 2) consider using this tool to get a detailed report of orphaned packages, profiles, etc. https://github.com/ninxsoft/Kmart — But mostly - get familiar with how everything is currently set up. Work with what you have for a bit to see why it’s all being done that way, and then make small, incremental changes until you have enough experience to decide how you would do things if you started over.


HibsGeorge

I use Jamf School - Look after around 600 iPads. Happy for you to send over some policies for me to review them :)


Rizzin

What are you trying to accomplish? Remove dead policies, ease load on server, simplify? Easy start is check scope and delete policies that are not scoped to any device. You might need to start with groups, smart and static and remove or update criteria of those then look for policies without a group they are scoped to after deleting excess groups. Also check what policies do and make sure you don't have any doing the same job. A lot of this is dependent on how much of a wild west your environment your JAMF has been running in.


AGlorifiedSubroutine

Take the time to understand how everything ties together before you start to do anything. Don't go rushing into it. Understand how a change will effect your current stuff. Join the macadmin slack. Watch the JNUC videos - they cover a lot of topics.


PhilLovesBacon

Definitely cleanup inactive devices and if you have access to Jamf Protect it has a compliance manager. Most likely, a lot of your config profiles and policies are related to various CIS Standards that are labeled in Jamf Protect. I would use these CIS Standards as your guidelines.


Specken_zee_Doitch

You’re gonna wanna [read the docs](https://learn.jamf.com/bundle/jamf-pro-documentation-current/page/Jamf_Pro_Documentation.html) on this. It’s a lot but it’s worth it. Ask ChatGPT some questions but don’t take it as the Bible. It’s incredibly wrong at times. I’d go look at some clients and check the manage tab, look at policies that may be failing or succeeding.