Introducing SYM-Helper

First, determine if you will repurpose existing Jamf Pro policies for Setup Your Mac, or create new, enrollment-specific policies.

With either approach, please be aware that SYM-Helper leverages the fields from the Self Service tab of Jamf Pro polices, even if “Make the policy available in Self Service” is disabled.

(After you’ve populated the Self Service fields, you can disable “Make the policy available in Self Service” and SYM-Helper will still use the fields’ values.)

Screencast

SYM-Helper: Adding Policies to the Default Configuration (08:48); music: bensound.com (License Code: WWVE5XLQ6CDWAOCE)

Procedure

Complete the following steps to add policies to the default Configuration using SYM-Helper.

1. Launch SYM-Helper and login to your Jamf Pro server

2. Confirm the selected Configuration; Default is the so-called “catch-all” Configuration

3. Double-click a policy on the left to add it the selected Configuration on the right, then double-click again to remove; drag-and-drop to reorder

4. Various validations can be added to a Configuration (See: 5.D. Validations.)

5. Multiple items can be grouped together in a single trigger_list

Managing multiple Configurations is easy with SYM-Helper.

1. From the Configuration menu, select:
   • Add New…
   • Clone Existing…

2. Provide a name for the Configuration and click OK
   • Note: The recommend approach is to name Configurations with the variable names included in the Setup Your Mac script
     • ${configurationOneName}
     • ${configurationTwoName}
     • ${configurationThreeName}

3. Use the Configuration Action menu to:
   • Clear the policies listed in a Configuration
   • Remove an entire Configuration
     • Note: The default, catch-all Configuration cannot be removed

Overview

Validations are a powerful feature of Setup Your Mac which answer the question:

I can see it’s installed; is it running?

Four validation options are available:

1. Absolute File Path (i.e., any individual file; not a directory)
   • "/Applications/Microsoft Teams.app/Contents/Info.plist"
2. None (for triggers which don’t require validation; always evaluates as successful)
   • reconAtReboot
3. Local (validation within the Setup Your Mac script)
   • rosetta
   • filevault
   • sophosEndpointServices
   • globalProtect
   • recon (required for updating a computer’s inventory with your Jamf Pro server; most frequently included as the last item in your policyJSON)
4. Remote (i.e., validation via a single-script Jamf Pro policy)
   • Check Printer Install
   • CrowdStrike Falcon Status
   • Microsoft Office 365
   • Palo Alto Networks GlobalProtect Status
   • Sophos Endpoint RTS

Screencast

SYM-Helper: Validations (12:32); music: bensound.com (License Code: ESVBL9FWA2YZQTLC)