...
By Texas state law, all state-owned computers must either us use encryption to protect user data stored on the device, or the computer must be configured so that it does not retain any user data.
...
NOTE: When delivering a LAITS provisioned FileVault enabled device it will be necessary to login with the first user account, boot macOS, and then logout in order to enable JAMF Connect to be used by the new user.
Off Campus Internet Considerations
While not exhaustive, we have tested numerous WiFi connections that are off campus and found that all of the ones we have tried (protected and public) have worked properly using the WiFi connectivity interface within the JAMF Connect login application.
Our Faculty and Staff implementation of JAMF Connect
If on On campusour LAITS Faculty and Staff implementation of JAMF Connect leverages a configuration profile which uses a resource EID to connect to the UTEXAS wifi for WiFi that allows the machine to connect to the UTEXAS wireless SSID in order to facilitate the new user authenticating with JAMF Connect and setting up their user account on the computer. Once the deployment is marked complete in JAMF by the Desktop Support Technician that configuration profile is removed when is it removed /what's the trigger??? from the device and is no longer needed as the user will be added to the approved FileVault users list. If setting up users away from campus, the user blah blah and the above profile will be removed blah blah blah Removal of the UTEXAS wireless SSID configuration profile will occur regardless of whether an on campus or off campus internet connection is used.
Newmachines that use a wired Ethernet connection for internet connectivity will simple ignore the WiFi profile as it is not needed.
Our Research implementation of JAMF Connect
Our On campus our LAITS Research implementation of JAMF Connect leverages a configuration profile for WiFi that allows the machine to connect to the UTEXAS-IOT wireless SSID Need more information here... we use ISORA to set up a group blah blah blah so the machien is automatically connected to the IOT wifi blah blah blah in order . This setup requires additional setup in the XMP Network Portal including identifying the computer itself which must be in ISORA, as well as setting up a group Pre-Shared Key for authenticating to the UTEXAS-IOT wireless SSID. The machine will then use the UTEXAS-IOT wireless SSID to facilitate the new user authenticating with JAMF Connect and setting up their user account on the computer. Once the login is completed the WiFi connection to the UTEXAS-IOT wireless SSID is dropped and the machine joins the UTEXAS wireless SSID by authenticating with their the users personal credentials????. The first time a user logs in they will be asked prompted for their credentials to join the UTEXAS wireless SSID, subsequent logins will automatically swap over with no prompting.
...
NOTE: These machines do not have FileVault enabled and therefore macOS boots immediately to the JAMF Connect login window. We use a user profile policy that runs at every reboot? at a specific time?? the login window and is triggered when the previous user logs outto ensure these devices do not retain user data.
Our On campus our LAITS Student Lab and Classroom implementation of JAMF Connect leverages a configuration profile for WiFi that allows the machine to connect to the UTEXAS-IOT wireless SSID in order . This setup requires additional setup in the XMP Network Portal including identifying the computer itself which must be in ISORA, as well as setting up a group Pre-Shared Key for authenticating to the UTEXAS-IOT wireless SSID. The machine will then use the UTEXAS-IOT wireless SSID to facilitate the new user authenticating with JAMF Connect and setting up their user account on the computer. Once Once the login is completed the WiFi connection to the UTEXAS-IOT wireless SSID is dropped and the machine joins the UTEXAS wireless SSID. Since we use a user profile policy to ensure these devices do not retain user data, users will be asked for their credentials to join the UTEXAS wireless SSID, on EVERY login. For this reason we highly recommend these machines use Ethernet for connectivity whenever possible. Make changes to this paragraph that follows updated changes in paragraph above.
New machines that use an Ethernet connection for internet connectivity will simple ignore the WiFi profile as it is not needed.