Jamf Onboarding Automation

Overview

I owned the macOS onboarding strategy at Ontinue and redesigned how new hire laptops get provisioned and brought into compliance across a 300+ device fleet.

Problem

A new hire laptop took 2+ hours to become compliant before the person could sign in. Onboarding needed a helpdesk staffer on a call with every new hire to walk them through setup by hand, which tied up IT time and delayed the first day.

Approach

Rebuilt onboarding around Smart Groups, Jamf Setup Manager and AutoPKG, with custom scripts (published on my GitHub) handling app installation, configuration and compliance checks at first login. No helpdesk call.

Department-specific paths: a new hire’s Smart Group placement decides which apps install, so Engineering gets Docker and Finance gets Visio instead of every device getting the same generic set. New documentation and a self-service process go straight to the new hire, so onboarding needs little or no IT hand-holding.

Architecture

Smart Groups scope devices into the right onboarding policies at enrollment and branch into department paths that install what each team uses. Jamf Setup Manager sequences the setup experience for the user. AutoPKG keeps the required packages current and ready to deploy. Custom scripts verify compliance in the background and self-serve documentation covers anything that needs the new hire’s input.

Outcome

New hire laptop compliance went from 2+ hours to a self-directed process the new hire completes alone, and helpdesk no longer joins onboarding calls.

Lessons Learned

Automation on its own did not remove the human bottleneck. Pairing the scripted setup with clear self-service documentation is what got helpdesk off the call and let new hires onboard on their own.