I'm looking for a way to send the 'wipe computer' command in bulk to our Labs so that they can be refreshed at the end of semester.I gather this will require use of an API client and secret.I'm wondering if anyone has come across a script that can do this?

Hi All, Is anyone else having issues with enrolling MacBooks in their Jamf Pro environments? Every time we've tried to enroll a new MacBook Pro this week we're getting hit with "Enrolling with management server failed. Unexpected error (MDMResponseStatus:502)". Jamf Support had me try a few things like trying a different Prestage Enrollment Profile or even removing some packages from Prestage but no luck. Any help would be appreciated. Thanks

Everytime  I try to delete an old smart group or static group that happens to be in scope of multiple policies I  then have to go to each policy and remove it from scope first and then I'm able to delete it.There's gotta be a better way to do this.Is there a feature request or something that will allow me to delete it without having to remove it from a bunch of policies first?It's a big waste of time. Add a checkbox for the user to select to allow removal from any policy the group is in. 

Hello everyone!On every mac using JC3 / SS+, the “Local Account Password Expires” counter never shows a correct days number, no matter what I try.-Kerberos is valid.-Signed out and back into SS+.-Changing the PW using the integrated workflow WILL change the password, but the counter never changes. The new PW will be accepted with SS+ and JC.-New-to-that-computer users who login will show a seemingly “random” date that does not match the idP Thanks for any help y’all have!PS: Sorry if this is a common fix, I searched all sorts of threads but didn’t find anything that helped.  

Happy Monday! So I just came across this issue.  When a user tries to change their password using Jamf Connect, they get this Kereberos error 4.So they go into Okta and change it there.  Later Jamf prompts them that the Local Password and Network password don’t match.  They are able to enter the old and new passwords and get the local mac password changed to match.  But Jamf still shows “password expires in 0 days”.I didn’t do the Jamf Connect setup, it was here when I joined the company, so I’m not sure exactly how to start fixing this.  I’m hoping you have some tips, maybe someone has seen this before, really anything.  I’ll keep doing my research, but It’s always nice to get some expert advice.-Pat

Can't seem to find an answer to this so I suspect that there isn't (a satisfactory) one...Security and Privacy best practice says to disable iOS notification previews, especially when a device is locked. This is what I want to set using Jamf Pro.I know I can set Notification preferences per app, but the setting in the screenshot is global and can be set on the device, but is there a way to configure this device-wide setting with Jamf Pro?There is a specific Jamf article on this, from the UK NCSC (National Cyber Security Centre), which refers to this specifically, but does not reveal how to achieve this exactly.https://www.jamf.com/blog/updated-device-security-guidance-from-the-uks-national-cyber-security-centre/This is the relevant paragraph: Hopefully I'm just missing something 🙏   

Hi guys, I’m the IT guy in my school and have been encountering this issue that happens to 2 of my IT Colleagues. Their classes disappear in JamF Teacher from time to time. However on my Teacher account that I am using for testing, it stays. Not too sure what is the cause of this.  I have been retagging them back to their classes and this has put a hold for us to integrate in our School. Anyone else has encountered this before and has a solution? 

Hi,I really hope that someone here can help me with this. We have had this error for a few weeks now and I am getting a little desperate here. Jamf and Apple support have not been able to provide a solution either.Some of our Macs are getting the “Enrolling with management server failed. An unexpected error has occurred <HTTPStatus:502>”. I know that usually means communication issues, but with those Macs that cannot be the case because I can enroll different Macs under the exact same circumstances without any problems. Same time, same cable, same server, everything is the same. On the other hand those Macs always have that problem and it wont go away no matter what I do. I have already tried enrolling via a different network, moving them to a different site, enrolling them via a different PreStage enrollment and much more. Nothing worked. And really bad part is that this issue is spreading. At first only a hand full of my Macs were affected, but now almost 50% of the Macs I try

Hello, For software updates and the type of install action, does “Download and Install” reboot the computer automatically or will it allow the user to restart on their own to complete the installation?If it does reboot automatically, how is it different from the option to “Download, Install, Restart”?

I have a script to lock a Mac via API. No issues with that. It works very reliably.I would like to use this script it to lock a Mac system when it has not updated inventory in over X days. Think of a Mac that has been shoved in a desk drawer for a while. This would force the user to contact the help desk to get it unlocked and explain why it has not bee online.This is an easy enough policy and smart group to build. Last Inventory Update more than x days ago.But testing is a pain in the butt. I have to wait 24 hours for “Last Inventory Update” to get to at least 1 day effectively test the policy.Anyone know of a way to change “Last Inventory Update”?

Looking for some guidance with Jamf Pro - PreStage Enrollment and FileVault.The issue: In PreStage, we pre-create and hide a local admin account. During setup, the workflow prompts for end-user account creation. FileVault is enabled immediately after the user account is created and the user logs in for the first time. As a result, only the end user is added to FileVault , the local admin account is left out of the FileVault enabled users list. I haven’t found a way to ensure the local admin is automatically included in FV2 during enrollment.Should this be configured differently in PreStage, or would scripting the local admin addition after FileVault is enabled be the right approach?

Hello folks,Looking to schedule our next Jamf / MacAdmins meeting.How does the week of June 15th or June 22 work for everyone? Yes, I’m looking a bit ahead of time, but my thinking is that it would allow for us to put this on our calendars and be able to join.I’m thinking a Wednesday or Thursday evening event after work hours 5/6PM - …Would we want to do this in the Loop, River North, or perhaps Fulton District areasorsuburbs near a train stationDowners GroveItascaArlington HeightsHave a wonderful weekend all, and wishing Happy Mother’s Day to all the moms! 

Up until Sonoma I was using this script https://community.jamf.com/t5/jamf-pro/wifi-switching-script/m-p/139275/highlight/true#M128353 But now I can no longer find something that will work. This was handy because it only worked when the school SSIDs were available.Does anyone have something they use in a school environment? Thanks in AdvanceMatt

All,We just signed up for Jamf pro and I am in the naming instance area during set up. Does it matter what I name this such as the company name? I am new to the setup area so just making sure as its not changeable afterwards.

We are building a Python application using the JAMF Pro REST API (OAuth2 client credentials) to send MDM restart commands to iPads. We are calling POST /api/v2/mdm/commands with a Bearer token and the following body: {"clientData": [{"managementId": "<device-management-uuid>"}], "commandData": {"commandType": "RESTART_DEVICE"}}. The API client has the following privileges assigned: Read Mobile Devices, Update Mobile Devices, Send Mobile Device Restart Device Command, Send MDM command information in Jamf Pro API, Send Blank Pushes to Mobile Devices, Update Mobile Device Inventory Collection, Update Sites, and Update Change Management. Despite all of these permissions being assigned, we are consistently receiving a 403 INVALID_PRIVILEGE: Forbidden response. The managementIdUUID is retrieved from the device detail endpoint /api/v2/mobile-devices/{id}/detail and confirmed correct. We have tried two separate API clients, both returning the same 403. Reading devices works perfectly wit

Hey,I am looking for way to disable the newDisable Google Chromes KI-Modell Gemini Nanohttps://www.heise.de/en/news/Commotion-about-unsolicited-AI-file-downloads-in-Chrome-11285401.htmlDoes anyone have an Json ready that can manage this setting?Is there any other way, to disable this unwanted “feature” ?Thanks in advance.

About 75% of the apps I'm trying to push to an open enrolled freshly provisioned Macbook Pro aren't installing, I am using Jamf Now Plus and have test a variety of apps including Keynote, Numbers and Pages. I have "purchased" a pool (100 licenses) through Business Manager and they show up correctly in my Jamf portal. However when trying to install I am getting a "License Not Found" error dialog (with the Mac App Store icon) on the Computer and an "Installation failed. Will retry in 24 hours." error inside of the Device profile on Jamf. The odd thing is I've tried with some paid licenses such as Pixelmator and that worked and in some cases Pages work but Keynote and Numbers keep failing.

Hi All,I have noticed a strange issue after upgrading to 12.4. Post upgrade, automatically the device's registration status has been changed to "Unregistered". I tried registering the device from self-service portal and it got registered. However, compliance information is not getting updated in AAD and due to that unable to access office resources. I did force update of sending Intune integration logs from Jamf Pro --> Device's history --> "macOS Intune Integration Logs" and it's sending the update to Intune. Somehow the compliance is not getting changed.As part of troubleshooting deleted both the entries from AAD and re-registered the device but still the compliance is not getting updated. Any help is much appreciated.

Hi all, After upgrading several of our Macs from older versions of the OS, we have started getting pop-up dialogs asking users to provide admin credentials to add helper tools for various apps (Skype, Brave Browser, Spotify, etc). Most users just click Cancel to dismiss the boxes but I'm concerned we're not staying updated. Also it's pretty annoying. Google led me down a rabbit hole with Skype that didn't fix the problem, and this seems to be happening to several applications. Has anyone seen these pop-ups and if so, what's the fix? Thanks!

Hi everyone, I. HATE. PRINTERS. That being said, we have to work with them.  and... Canon does not make it easy. Here is what I was able to find out from several places online, in order to get this "installer" to actually work. So let's jump on to our Macs and get this over with.Downloading the "Installer"1. Log into your Uniflow Online (web)2. Start Printing (Side Bar)3. Install Printer Driver > Click [Download macOS printer driver] Navigate to Download FolderOpen SmartClientMac.iso > Open SmartClientMac Volume > Notice here you only have 1 file. But actually there are 4. 3 are hidden.On your Keyboard us the show hidden files shortcut: Command+Shift+.(Period)Getting Files in the Right LocationYou will now see 3 other files. We only need the SmartClientForMac.pkg and tenantcfg.plist files.Next, Go to Finder > Go > Go to Folder (Shift+Command+G)Enter 'private/tmp'Next create a new folder called 'uniflowclient'Which is now located in private/tmp/un

Kevin White (creator of S.U.P.E.R.M.A.N.) joined LaunchPad for a Q&A on where super stands today, where declarative device management currently is in the pipeline, and the limits Apple and Jamf are putting on update workflows.He also gave a sneak peek at Pseudo, his tool for enforcing Platform SSO enrollment. Full Pseudo demo coming to LaunchPad in August.Full replay and resources:https://rocketman.tech/lr-jn Also on YouTube:https://rocketman.tech/ly-jn Upcoming meetup:https://rocketman.tech/lp-jn 

Hi Everyone,!I am working with a client who renewed their APNs certificate using a different Apple ID. This resulted in a Topic ID mismatch within their Jamf Pro instance. While some devices are approaching their MDM profile expiration, a majority are set to expire by the end of the year. Because the current APNs certificate is inactive for these devices, the "Renew MDM Profile" command is failing with a "Topic ID mismatch" error. Does anyone have suggestions for automating the re-enrollment of devices that still have valid MDM profiles but are tied to the old APNs certificate? I am looking for a way to transition them to the new certificate without manual user intervention.!--tgqphd|[]-->  

We had touch fail on an iPad so we purchased a replacement. The original iPad is for a special education student and has a lot of specialized and customized apps on it. Is there any way in Jamf that we can transfer the apps and their configurations over to the replacement iPad? Thank you!--a=1-->

Hi,We're starting to see a number of cases being raised internally about some of our Macs (all on macOS 15.1.1) having intermittent login issues.  Our devices are bound to AD and our users have been logging on fine for some time but now we're starting to get issues.  Sometimes the logins are fine.  Sometimes they take ~10 mins and sometimes they appear to stall completely (waited over 2.5 hours in testing) even on the same device.  The login screen appears to freeze (the time doesn't change) and you eventually get the spinning beachball.  SSH is still working and you can run a "jamf policy" successfully.  "Screen Sharing" reports that the user who has attempted to log into the device is the active user when you connect.Can anyone share some tips as to how we would start to investigate this sort of issue let alone resolve it???ThanksStuart

I know this has been a “feature, not a bug” for a while with Jamf App Catalog titles but it’s becoming enough of a problem that I would REALLY like a better solution.  The problem:Macs fall into a Smart Group being used for scoping of Jamf App Catalog titles Jamf App Catalog scoping does not reliably update with those recently added Macs unless you toggle the deployment off and back on again to force it to recalculate. (Count is differing by 100 or more Macs for some titles in our instance today.) Jamf Pro lacks any way to alert us that an App Catalog title needs refreshing, so we have to monitor every title’s deployment count manually to see if any of them needs a reset.I started a support “ticket” (i.e. JamfBot conversation) about this just in case there was a new checkbox or something somewhere I wasn’t aware of, and it informs me that everything is functioning as intended as far as documented solutions.  I’m in line for a human support agent to see if they have any pointers or undo