I have a 10.13.6 fresh build mac with an local admin account created by macOS setup Assistant it has a secureToken, but then i bind the machine to our AD which has the setting enabled for mobile accounts, then login as a AD user and get the prompt Enter a secureToken Administrators name and password to allow this mobile account to use file vault.You can select bypass but would prefer we dont get this prompt in the first place for non filevaulted machines.Does anyone know how to suppress this?thanks

Hey Everybody, Ever since Jamf Pro 11.5 I have been seeing very long waits for packages to be completed via the GUI, for example, a single DMG that is 19MB in size can take 15 to 60 minutes for the Availability Pending alert to disappear. Is this now the new normal? If so, can't say it's an improvement.   

Hello All,   Looking to see if anyone has a bash script to pull brew installations and then use that in an Extension Attribute to pull from all machines.   Similar to this post: https://community.jamf.com/t5/jamf-pro/home-brew-and-collect-application-usage-information/m-p/249337   - Can't get the EA working from the post above though :(  

Here is a script that will remove all class data from your instance. If you use macOS' TextEditor, be sure to Convert to Plain Text. Ensure that the file is saved as .shI hope this helps!Have a great day and be well!Here is the script:#!/bin/bash###################################################################################################### THIS SCRIPT IS NOT AN OFFICIAL PRODUCT OF JAMF SOFTWARE# AS SUCH IT IS PROVIDED WITHOUT WARRANTY OR SUPPORT## BY USING THIS SCRIPT, YOU AGREE THAT JAMF SOFTWARE# IS UNDER NO OBLIGATION TO SUPPORT, DEBUG, OR OTHERWISE# MAINTAIN THIS SCRIPT####################################################################################################### DESCRIPTION# This script retrieves class information from the JAMF Pro RESTful API, saves it as an XML file,# and then uses that XML file to delete the classes.# Requires a user that has READ and DELETE privileges for Classes.#########################################################################

Hi Jamf AdminsThe annoying automatic logout from jamf after a short time. Every time login again and navigate back to where you were.Simply annoying.What do you think about this community?CheersPeter

Hi all,I am struggling to find a script that i can use to automatically set open with for certain file types: i.e. .csv to open with Excel, .pdf to open with Adobe Reader  I had a look at MSDA but couldn't find any working examples.  TIA. 

We are facing a problem where user accounts are locked for unknown reasons, and we are trying to find out if our users are entering their passwords correctly (we have a password policy that auto-locks user accounts after N failed attempts).So I'm trying to search logs for events of users typing the wrong password, and I'm running this command:log show --predicate 'subsystem == "com.apple.opendirectoryd" AND category == "auth" AND eventMessage contains "invalid credentials"' --style syslog --info --signpost --last 1h But it shows many "invalid credentials" messages; and every time the user locks the screen, an "invalid credentials" message is generated.Therefore, two questions:1) Does anyone know why an "invalid credentials" message is generated on the screen lock?2) How can I know when users are really entering their password incorrectly and not just locking screens?

Having lots of log-in issues, users getting stuck at loading page. Checking admin portal, it shows 'client crashed processing osupdate status'.I have bypassed by restarting in recovery mode and selecting start-up disk - machine runs very slowly for 10mins then is currently operating at c.90% functionality.Anyone else experiencing this issue? 

Is it possible to change the message "Your Microsoft Entra ID password does not match your local account password。 Enter your local account password to sync your passwords."  to something like "Enter your previous /old password her " ? Most user don't understand what it mean ,....   

Hey Guys,no real Question but i saw some similar posts and questions or request for something like "$sbuject_title" ..I want to share my solution for this scenario and perhaps some of you has an idea to optimize it:User got new mac and wants to transfer all Static Groups from the old to the new mac.I provide this script as policy in Self Service:#!/bin/zsh #region - Prerequisites ################################################################################################################################################################################################ ## Create tmp location # Define the path for the temporary folder TMP_DIR="/Users/Shared/tmp" # Check if the folder already exists if [ -d "$TMP_DIR" ]; then echo "The folder $TMP_DIR already exists." else # Create the folder mkdir -p "$TMP_DIR" # Check if the creation was successful if [ $? -eq 0 ]; then echo "The temporary folder has been successfully created at $TMP_DIR."

Hey Guys,I´m currently looking to get a List of Static Groups from a specific computer. I found the API command: v1/computers-inventory-detail/{id} getting a large JSON with the Details.Now I want to cut it down to:1. only the Arrays from Key "groupMemberships"2. maybe to all Arrays with "smartGroup=false"I tried with plutil -extract, but I cant get the right Keypath...Here is an example of my JSON:"id" : "866", "udid" : "6A94F1BD-XXXX-XXXXX-XXXX-ECB58DFA0B61", "general" : { "name" : "MC-XXXXXXXX", "lastIpAddress" : "XX.XX.XX.XX", "lastReportedIp" : "XX.XX.XXX.XX", "jamfBinaryVersion" : "11.7.1-t1721056075", "platform" : "Mac", "barcode1" : null, "barcode2" : null, "assetTag" : null, "remoteManagement" : { "managed" : true, "managementUsername" : null }, "supervised" : true, "mdmCapable" : { "capable" : true, "capableUsers" : [ "XXXXXX" ] }, "reportDate" : "2024-08-21T06:55:17.421Z", "last

Hi, I'm Andy.I finally figured out how to do this.So if there are other Archicad Users out there... enjoy! Just thought I would share this since I couldn't find any posts on how to do it. I will be using Composer & Archicad 25 Full Installer 4013 for Mac.Download the Installer to your Mac, and mount it.https://graphisoft.com/resources-and-support/downloads?localization=USA&type=AC&version=25to the side, open a Finder window to /Users/SharedDrag the Archicad Installer.app into /Users/Shared Open ComposerDrag the /Users/Shared folder into Composer on the left bar This may take some time to copy overRemove everything in the folder inside composer that you do not want. Click on the > next to your Shared Folder in the Left Bar Select ScriptRight Click > Select Add Shell Script > postinstallCopy this script: (reference: https://helpcenter.graphisoft.com/user-guide/76135/)/Users/Shared/ARCHICAD\\ Installer.app/Contents/MacOS/installbuilder.sh

Hi, we have recently started using Jamf connect for our Mac Users. We are using a test user right now. I have noticed that, when you restart the computer it will ask for a username and password, and it will not show the Microsoft Entra login screen. It will show the Microsoft Entra Login screen once the user signs out, but if the user restarts the computer it will show the filevault login screen. So the issue with this is, we have a password policy for our end users to change their passwords every 90 days. So it's possible they will change their password and will not be able to login the mac unless they use their old password. Or they might forget their password altogether then I am not sure how we will be able to get back in on the Mac.  Is there a way to disable the file vault login screen so the user will just see the Microsoft Entra login screen even when they restart the computer? The Microsoft Entra login screen only appears when the user signs out instead of

I have been having problems getting Symantec Management deployed during my enrollment process. Like a lot of Apple admins, I use a script that runs the whole ZTP process. All other apps deploy reliably with no issues. What makes this even harder to figure out is that if I use Terminal to run the SAME POLICY that is being ran during ZTP, it works. Every time. The ZTP script is running "jamf policy -event install-symantecmanagement". The only difference between this and me using Terminal is that in Terminal, I need to use "sudo" before the Jamf policy command. Also, a Symantec Management install policy that we have setup to run at check-in for Macs that don't have it installed for some reason works. There is only one Symantec Management install policy. It works when we use Terminal. It works with a check-in policy, but it won't work when the ZTP script runs the policy. Here's the breakdown of the install policy. I get a "Cloud-enabled Agent Installation Package" from the app owner at my

Hello Team,I am asked by manager that to make the Microsoft Copilot available as Dock item, as you know there is no separate app to install on macOS for CoPilot, so I created .webloc file which contains the URL https://copilot.microsoft.com with a CoPilot icon, but I am not able to place it on Dock by any command(Shell, Applescript), it is always showing me ? sign, any idea how to do it?

I am using Jamf cloud and  Microsoft Entra ID to login. User password will expire every 3 months.currently I run a script in windows to retrieve their password expire day and remind all mac user.I am thinking to add an user extension attributes and use api to update it daily.Then, run a policy daily to check if the date is less than 7 days Jamf will prompt a message to ask user to change the password .. Is it the way to go ?ThanksEdwin 

hey folks!I Need some help with my Script to trigger API Computer Command "Remote Device Lock"Purpose: I want a script which requests user input with "Computer Name" , get the Computer Jamf ID (this works!), and afterwords send the Remote Command "Lock Device" with this ID -> at this point I get a Error:Script result: <html><head><title>Status page</title></head><body style="font-family: sans-serif;"><p style="font-size: 1.2em;font-weight: bold;margin: 1em 0px;">Unauthorized</p><p>The request requires user authentication</p><p>You can get technical details <a href="http://www.w3.org/Protocols/rfc2616/rfc2616-sec10.html#sec10.4.2">here</a>.<br>Please continue your visit at our <a href="/">home page</a>.</p></body></html>Here are more Informations: I user the API Client&Roles Setting in Jamf, created a API Client with some Priviliges:"Read Computer Inventory Collection

I am looking for a pilist which has Adobe Acrobat feature lockdown settings in plist,

 As shown in the below screenshots, after clicking "Change Password" then authenticating, I am taken to a home page screen. I then have to scroll down and select "Change Password" again. When changing the password there, an error occurs. I am using Jamf Now's Jamf Connect option with Azure.    

Since the 11.2 update I can't seem to have the checkbox that says Show in Jamf Dashboard stick on Smart Groups and Policies and Config Profiles. I check it, go to the Dashboard and it's not there. Back in the group the checkbox is unchecked again. Have tried on a few different browsers. Other admin users reported the same. Anyone else seeing this?

We use Okta as our main identity provider, and I'd like to leverage that alongside Jamf Connect to get Zero-touch working in my environment.  is there any advice for disabling Nomad and getting Okta and JC working nicely together?

I have installed ADCS connecter to get PKI certs on mac devices.After everything correctly configured found that JAMF cloud is communication was rejected by ADCS connecter server. IIS logs shows error code 403.7 this error code generally talks about missing/incorrect client cert.when I looked into IIS settings from:"IIS>ADCSProxy website >Configuration Editor>system.webServer > security > authentication >iisClientCertificateMappingAauthentication" iisClientCertificateMappingAauthentication config is as below:Enabled --> FalseoneToOneCertificateMappingsEnabled-->TrueoneToOneMappings-->(Count=0)My question is it expected behavior? do I have to manually add the client cert details in IIS iisClientCertificateMappingAauthentication? Ideally certificate connecter installation should have been taken care of this.      

✨ Exclusive Offer: Free Jamf Health Check for the First 10 Registrants! ✨ Optimize your Jamf environment with a comprehensive health check, available at no cost for the first 10 people. This free service includes: • In-depth review of policies • Analysis of configuration profiles • Assessment of enrollment methods • Verification of certificate renewal dates • Evaluation of scripts & packagesDon’t miss out on this limited-time opportunity to ensure your Jamf setup is running at peak performance.Secure your spot now:Book Here

Our org has been using erase-install 33.1 off and on for full macOS upgrades but now we want all users on Sonoma 14.When testing on a (Intel) VM logged in as regular user, it runs through and finishes the update properly.  It also worked on about half the client Macs but also fails to work on a lot of other client Macs.  A common failure in the logs is:2024-08-16 12:16:11 | v33.1 | [get_user_details] user cancelled dialog so exiting...How are they doing this as it's set for no user interaction and I've done all the screenshots to track the procedure.  Is it hanging somewhere and the error is spurious?  The script is long and convoluted and I'm definitely not comfortable with scripting and therefore not good at interpreting it's errors.One user was not present for the procedure as they were out of town and later on when trying to upgrade their Mac manually in Software Update, it errored out twice with an 'internal error'.  Manually downloading the Sonoma install

Hi there, Jamf App Catalog is great at patching applications. The only caveat is the method that it uses to communicate with the end-user that an update is pending. Most of our users ignore or are unaware of the notification from Jamf App Catalog when a new update is pending and as a result complain of their apps getting abruptly closed. This is compounded by an ongoing issue of inconsistent notifications (an issue that has been open for a couple of years).   Is there a way to mitigate the above issue by maybe a passthrough of a notification to a prompt or dialog box that the user can interact with? All my attempts at trying to resolve this issue is cut short by there being no direct feedback on the local machine that is recording Jamf App Catalog interactions with the local machine i.e a log that can be leveraged to base notification triggers on a Jamf Pro policy and Notifier App.   I thought to leverage IBM Notifier for this task as it would be ideal. Except that once