First I analysed what happens on the file level and which processes are called. The idea is that I have a service (launchdaemon) that notices when I run the Erase Assistant and then updates a JAMF extension attribute I created. What can we do to ensure that an erase operation is logged in our client management system? The only question is whether we want to deactivate this helpful feature, especially when many users are in the home office. Of course, JAMF offers us a way to prevent this function.
Apple has unfortunately failed to implement a kind of postflight action for this process.If the user bypasses the DEP process after the reset (offline enrolment), we would only notice this because our device does not deliver an inventory or a checkin. The disadvantage of this solution is that you as an administrator do not notice anything. Open System Preferences -> Click on “System Preferences” Similar to iOS, Mac users can now reset their Mac themselves in the system preferences. With the release of macOS Monterey, Apple has implemented a really helpful feature for me.