Skip to main content

General Discussions

What your peers are saying about all things Apple

  • 10000+ Topics
  • 246,273 Replies
10000+ Topics
Stuart_P
Stuart_PContributor
asked in General Discussions
Intermittent login issues on macOS 15.1.1

Hi,We're starting to see a number of cases being raised internally about some of our Macs (all on macOS 15.1.1) having intermittent login issues.  Our devices are bound to AD and our users have been logging on fine for some time but now we're starting to get issues.  Sometimes the logins are fine.  Sometimes they take ~10 mins and sometimes they appear to stall completely (waited over 2.5 hours in testing) even on the same device.  The login screen appears to freeze (the time doesn't change) and you eventually get the spinning beachball.  SSH is still working and you can run a "jamf policy" successfully.  "Screen Sharing" reports that the user who has attempted to log into the device is the active user when you connect.Can anyone share some tips as to how we would start to investigate this sort of issue let alone resolve it???ThanksStuart

113274
Stuart_P
andymason
andymasonContributor
asked in General Discussions
J
jbanksContributor
asked in General Discussions
GrantPM
GrantPMVisitor
asked in General Discussions
gilmatok
gilmatokVisitor
asked in General Discussions
Automatically register with Platform SSO

Hi everyone!I have a macOS machine running macOS 15 (Sequoia). I created a configuration profile with the “Single Sign-On Extensions” option configured with Microsoft Entra ID.This allowed me to register with Platform SSO natively on macOS, using the notification that popped up on my machine after installing the profile.However, that requires my users to manually click the notification and register. To make the process easier, I created a new configuration profile with Jamf Connect (com.jamf.connect.login), also configured with Microsoft Entra ID.Now users are able to see the Microsoft Entra ID authentication page on their login window. However, I was under the impression that once they connected at the login window, it would automatically register with Platform SSO - but it still requires them to go throu

841
AJPinto
Ilya
IlyaNew Contributor
asked in General Discussions
Jamf api returns html page in .net

Hello. This is my code in .net.var client = new HttpClient();var jamfUrl = "https://{server}.jamfcloud.com/";var clientId = "xxxxxxxx";var clientSecret = "xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx";var byteArray = Encoding.ASCII.GetBytes($"{clientId}:{clientSecret}");client.DefaultRequestHeaders.Authorization = new AuthenticationHeaderValue("Basic", Convert.ToBase64String(byteArray));var response = await client.GetAsync($"{jamfUrl}/apps/");response.EnsureSuccessStatusCode();var json = await response.Content.ReadAsStringAsync();But when I execute this to get the list of applications I get following response<!doctype html><html lang="en"> <head> <meta charset="UTF-8" /> <link rel="apple-touch-icon" sizes="180x180" href="/apple-touch-icon.png" /> <link rel="icon" type="image/png" sizes

7811
Ilya
N
nick.kiddNew Contributor
asked in General Discussions
JustinFincher
JustinFincherNew Contributor
asked in General Discussions
whiteb
whitebValued Contributor
asked in General Discussions
Leveraging LDAP Groups for Scoping

So we have Google LDAP connected to Jamf. It's working great for populating User & Location information, etc. However, I'd really like to leverage 'Directory Service User Group' to scope stuff. It just doesn't seem to be working. I've tried to do some reading and I've found people saying it's unreliable. When I go to Cloud Identity Providers > Google LDAP > and do a lookup of myself or others + and also search for a group name - it correctly returns that I'm a member of ___-staff group. There's a specific policy I want to exclude for this staff group. I can go to exclusions for this policy > Directory Service User Groups > search for the staff group I'm apart of > it finds it, and I add it. After doing that, I still see my computer as pending like it's still in the scope. User & Location info is accurate, my local account matches LDAP user name, etc. How are people future-proofing scoping?

503
Chubs
injuriesgalore
injuriesgaloreNew Contributor
asked in General Discussions
How to get rid of eapolclient prompt via JAMF Pro

Hi,I have recently deployed a new wifi cert for our wifi office network and I am testing it at the moment.Once I choose the network, it will ask me to choose a certificate or enter credentials. I choose the new certificate and then afterwards the “eapolclient” prompt pops up. I click Deny and then I am able to connect to the Wifi with the new cert. I am wondering if there is a way to either always click Deny, or during these network authentications allow it to have permissions to the System keychain. Also if someone has a way to allow users to use our new certificate without even having to choose the new cert themselves, that would be even better. What I am trying to do is to minimize the steps that users have to do to connect to our Wifi with the new certificate. On the configuration policy, I only have the p12 cert and t

461
howie_isaacks
R
randyg
asked in General Discussions
F
foreverkanContributor
asked in General Discussions
Guidance on Managing Local Admin Account and FileVault Integration with Jamf Pro

Hello,Before asking my question, I’d like to briefly describe our current environment:We are using Jamf Pro on-premises. MacBook devices are enrolled using the User-Initiated Enrollment method. During enrollment, a hidden local account named jamf is created on the machine. All devices are domain-joined, and FileVault is enabled. Users log in with their Active Directory (AD) accounts, which are configured as mobile accounts. Initially, we manually create a local admin account named support during setup. This ensures that both the support account and the user’s AD account are enabled for FileVault.Our security team has raised a concern because the support account currently uses the same password across all devices. They have

573
howie_isaacks
G
GetCart3rContributor
asked in General Discussions
D
duxedContributor
asked in General Discussions
Home and Lock Screen Wallpapers are no longer separate

New behaviour in iPadOS 17 - when you only define a lock screen wallpaper and do not define the home screen wallpaper and you do not click the check box to use the same image for lock and home, iPadOS 17 now magically makes home and lock screen identical. (Huh? That's not what I asked for)I filed an Apple Feedback Assistant ticket and they said it is "currently functioning as intended".It didn't do this in 16.So what's the issue? If you make a reasonably great looking lock screen wallpaper it is totally distracting as a home screen wallpaper. The app icons become too cluttered with the background - there's no visual sense of depth to separate. If you use the QR code, it looks terrible on every page.The consequence is that you have to allow changes to wallpaper and you have to choose a plain style home screen. Then if you want your beautiful lock screen to stay "locked" so that students don't remove it you have to play the restrictions dance in both Restri

1483
C
Buoux
BuouxNew Contributor
asked in General Discussions
D
DanVTContributor
asked in General Discussions
mvu
mvuJamf Heroes
asked in General Discussions
shikhartodaria
shikhartodariaNew Contributor
asked in General Discussions
JtheMac
JtheMacNew Contributor
asked in General Discussions
M
marekm
asked in General Discussions
Retrieve members of static, smart computer groups and members of reports

HII apologize in advance if that question was asked but I cannot find answers :( I need to retrieve following information through API: 1. retrieve members through API from static computer groups - i need to list computer names that belong to specific computer groups.  All i'm able to find is how to list computer groups, but not how to retrieve members. # Endpoint to retrieve computer groups$computerGroupsUrl = "$jamfUrl/api/v1/computer-groups"# Request computer groups$responseComputerGroups = Invoke-RestMethod -Uri $computerGroupsUrl -Method Get -Headers $headers -ErrorAction Stop 2. retrieve members through API from smart computer groups - i need to list computer names that belong to specific computer groups 3. retrieve data through API from "reports" found under "Search inventory" 

1334
mattjerome
T
tsmithpoulsen
asked in General Discussions
JtheMac
JtheMacNew Contributor
asked in General Discussions
howie_isaacks
howie_isaacksEsteemed Contributor
asked in General Discussions
Solve Jamf agent and MDM problems automatically?

Like a lot of other Jamf admins I see a small number of Macs that have stopped checking in and sending inventories. I see some that appear to be having problems with MDM. I am curious about what everyone else is doing to solve these issues. Since we also use some other management agents I can see that a lot of the Macs that are having Jamf agent issues are working with the other management agents. They appear to be in use. I wrote a script that leverages the Jamf Management Framework redeployment API command. I was able to deploy it through Tanium to some systems that had stopped checking in and sending inventories. This has worked on some but not on others. For the systems having MDM issues, this may not work since the Jamf Management framework redeployment using the API needs MDM functionality to work. Here’s the current version of the script that I created.#!/bin/zsh --no-rcs:<<ABOUT_THIS_SCRIPT-------------------------

1569
mattjerome
Rahul Sagar
Rahul SagarNew Contributor
asked in General Discussions
Terminal Command in Self Service

Hello Everyone, I have recently completed Jamf 200 and I am trying to fix an existing issue which Employees faces time to time on Company Provided Mac.We have a Microsoft Device Compliance Policy in place, where User registered their Mac (once per computer policy in Self Service) to make the laptop complaint as of the criteria to access company resources.However, this Policy always get stuck in Pending status when checked over Jamf Admin Portal and device fails to become compliant and hence No access to company resources. When we try to run Sudo Jamf Policy - it does not show any policy to run.But when we run MS Device Compliance policy using the Policy ID it runs successfully and helps to register the device and access to company resources. Sudo jamf policy -id xxx 

854
easyedc
kelsey_kramer
kelsey_kramerVisitor
asked in General Discussions
Wallpaper locks on iOS 26+

Student devices have had iOS 26 deferred until recently. They’ve been on iOS 18 until this month. But with the students finally upgrading the “Modifying wallpaper” restriction hasn’t been working as usual. They still can’t access the wallpaper menu in their system settings however when they press and hold to edit apps and widgets on their screen they can edit their home screen wallpaper from there. As a last ditch resort we can make a home screen layout payload but this locks in all app and widget customization. We have made and automated management action that will change the wallpaper every day but we do have some tenacious kids who continue to change it every day. Does anyone know another fix for this or maybe it will be something patched in the future? What would be really amazing is if they could restrict it so they cannot select photos but only pick the gradients or a solid color. but it doesn’

370
kelsey_kramer

Want to write for Tech Thoughts?

Earn a cool badge and Jamf Nation Reward Bytes for your published articles. We’re looking forward to your submissions!

Submit A Blog Post
Terms & ConditionsCookie settingsAccessibility statement