Jamf managed services
Jamf Pro needs steady attention: certificates to renew, Apple releases to test, updates to enforce and policies to keep tidy. Our Jamf managed services take that work on for UK organisations, either running Jamf for you or working alongside your own IT team. We are a Jamf Professional Partner and a Jamf MSP.
Start with a Jamf Pro health check
Trusted by teams across UK government, healthcare, education, charities, financial services and global brands
98%
of around 1,000 Macs up to date, using declarative updates in Jamf
4 weeks
to move update compliance from 65% to 98%
250 Macs
back on the target version within 7 days of a failed update
7 days
notice to staff before an update is forced
The client manages its Macs with Jamf and must prove that security updates are installed. Read the case study
Jamf rarely fails all at once. It drifts: a renewal is missed, a policy is copied once too often, a new macOS release changes the rules. Managed well, none of that reaches your people.
Renewals
Jamf says the MDM push certificate has to be renewed every year for devices to keep talking to Jamf Pro, using the same Apple Account that created it. Issue a new one by mistake and enrolled devices lose contact.
What you getRenewal dates tracked, the owning account recorded, renewals done before they fall due.
Apple releases
Each release can change how Macs are managed. macOS Golden Gate 27 ended the older MDM update commands, so updates now run through declarative management, which Jamf Pro provides through Blueprints.
What you getReleases tried on a pilot group first, then enforced with a target version and a deadline.
Upkeep
Over the years an instance collects old policies, overlapping profiles and scripts nobody owns. We keep scoping, naming and documentation current, and retire what is no longer used.
What you getAn instance a new engineer can understand on their first day.
Apps and security
App Installers keep common Mac apps up to date from the Jamf App Catalog. Compliance Benchmarks report hardening against baselines built on the macOS Security Compliance Project, including CIS Level 1 and Level 2.
What you getPatch and compliance reporting you can show an auditor.
Our advice comes from engineers who run these platforms every day. We can share evidence of each on request.
Jamf licences, and the team to run them
See our Jamf listing (opens the Jamf partner directory in a new tab)
Jamf run for you as a managed service
See our Jamf listing (opens the Jamf partner directory in a new tab)
Government Commercial Agency (GCA) supplier
See our G-Cloud listings (opens the Digital Marketplace in a new tab)
Microsoft Cloud Solution Provider (CSP)
Microsoft 365 licences in the UK, and the team to manage them
Some clients hand Jamf over completely. Others keep their own administrator and use us for the specialist work. Both are normal, and many move between them as their team changes. Read more about co-managed IT.
| Area | Co-managed Jamf | Fully managed Jamf |
|---|---|---|
| Who runs Jamf Pro day to day | Co-managedYour team, with our Jamf engineers on hand | Fully managedOur engineers |
| Helpdesk for your people | Co-managedYour service desk, with escalations to us | Fully managedOur helpdesk, for Mac, iPhone and iPad |
| macOS and iOS releases | Co-managedWe plan each release with you and handle the parts you hand over | Fully managedWe test, schedule and enforce them |
| Changes and projects | Co-managedMade by your team or ours, agreed in advance | Fully managedMade by us, agreed with you first |
| Ownership | Co-managedYou keep your Jamf instance, Apple Business and data | Fully managedYou keep your Jamf instance, Apple Business and data |
| Best for | Co-managedIT teams that want senior Jamf help without giving up control | Fully managedOrganisations without Apple expertise in-house |
Whether Jamf comes from another partner, a departed administrator or your own team, the handover follows the same four steps.
See where Jamf stands
A read-only review of the whole instance: enrolment, profiles and policies, updates, security, identity and licences. You get a written report and a prioritised fix list, walked through on a call.
Book a Jamf Pro health checkA careful handover
We agree admin access with you, record which Apple Account owns the push certificate, and bring every renewal date into our calendar. The handover is planned so that devices keep checking in throughout.
The important things first
We work through the findings in priority order: update enforcement with Blueprints, FileVault key escrow, admin rights, scoping, and the compliance link to Microsoft Entra ID that Conditional Access depends on.
Jamf, month by month
We handle renewals, Apple releases, app patching, new devices and change requests, and review the instance and your plans with you regularly. Jamf licences can be renewed through us on one date.
The three situations we hear about most often from UK organisations running Jamf.
The person who built Jamf Pro has moved on, and nobody is sure which Apple Account owns the push certificate. We take it over, document it and keep it running.
Your IT team runs Microsoft 365, Windows and the network, and Jamf only gets attention when something breaks. Co-managed Jamf gives them a specialist to call.
You need to show that every Mac is encrypted, up to date and hardened. Our cyber security work and Jamf reporting give you that evidence.
Can’t see your question? Call us on +44 20 7550 9103 or book a call.
Jamf managed services mean a Jamf specialist runs your Jamf Pro instance for you, or alongside your team. That covers renewals, Apple releases, update enforcement, app patching, policies, security baselines, licences and support for your people.
We hold both. As a Jamf Professional Partner we supply and renew Jamf licences. As a Jamf MSP we run Jamf for clients as a managed service. Both are shown on our listing in the Jamf partner directory.
Yes. We start with a Jamf Pro health check, then plan the handover, including the push certificate, which must be renewed with the Apple Account that created it. We can become your licence partner at your next renewal.
Yes. As a Jamf Professional Partner we supply and renew Jamf licences. Because we also run the instance, we see retired devices and unused add-ons before the renewal, not after it, so you get one renewal date, with usage reviewed before each renewal. See Jamf licensing.
Not for us to manage it. But Jamf says its Jamf for Mac and Jamf for Mobile plans are only available to Jamf Cloud customers, so if you host Jamf Pro yourselves, talk to us well before your renewal.
Our managed support starts from £25 per device per month, excluding VAT and licences, so Jamf licences are charged separately. The health check is quoted before we start. Agreements normally run for two years, with a one-year minimum.
Yes. We manage Jamf for organisations across the UK remotely, from our team in Canary Wharf, and support Apple devices in the GCC too. See Apple and Jamf for everything else we do with Jamf.
Whether you need Jamf run for you or a specialist beside your team, start with a health check and a clear plan. Managing Macs alongside Windows? See Mac IT support.
London head office
Postremo IT Limited
Level 24, One Canada Square
Canary Wharf
London E14 5AB
+44 20 7550 9103
info@postremoit.com
Also in Dubai
Business Bay, Dubai
Your brief: