I am using custom schema policies for google chrome browser and in my case, it is not working as of now.Can someone please share the pilist to skip the first login experience in Google chrome browser.

I'm seeing occasional issues where a machine going through our self service provisioning process occasionally get interrupted by our 'catch all' post deployment pushes (designed to catch machines that for whatever reason didn't get an app install/update when we were pushing out during the change request - it's on a recurrent check-in with a smart group of the app not being installed).  For this particular app it cuts off all internet traffic until the user signs into the app and during the deployment as the last application installed for this reason, but we're seeing our 'catch all' policy trigger on some devices while the provisioning policy is running and install the app before the other apps are done. What would be the easiest way to put a check in to prevent the catch all policy from triggering while the device is provisioning?       

If dlp is installed on the ipad, can an administrator use dlp to view the contents of the ipad's photos app or the contents of a video sent via AirDrop?Also, if dlp is installed on the ipad, can it be viewed in the vpn and device management section of settings?Is there a case where it does not show up?

Hello,Any businesses using conditional access model here? I would like to raise a forum to get some knowledge about practices you use once migrating from legacy Intune integration to new MacOS device Compliance.   As JAMF have no way to migrate for now and current legacy integration have issues of its own we have now a dilemma:Should we wait for Jamf Solution to migrate smoothly?  Or should turn off legacy and integrate new one without migration? If we go this way - all macs will lose office 365 access and will need to re- register every single device.That will create pretty big service disturbance. Just wonder what practices other companies' approach to deal with this?      

Hi All, We are running JAMF Pro on the local server / on prem "Windows Server" (not the cloud version). I want to use the Patch management to update the Apps (Chrome, Firefox VLC Office apps etc..), macOS etc.. I'm new to this is there any way I can get some help to set up this? Article videos etc..

Scenario is this tried to add macbook to ABM via Apple configurator 2 it worked but checked mdm server it shows correctly, but when we boot macbook, after the wifi connection it doesn't redirect to the policy pop-up via jamfpro can anyone face with this issue? 

I've recently been tasked with getting intune complaince/jamf working to test if its viable to go forward with. I've been working on setting it up on our sandbox environment and was wondering if anyone's tried setting up the conditional access policy on the Microsoft side. Like what they used for testing or anything they had to tweak or change to get working. Id to know what you guys used for a test policy thats easy to see quick results.  -In theory if a mac isnt compliant things like "Unable to sign into outlook" would be possible or some kind of email notification to prompt the user to update. -What have you guys used the integration for that you've been pleased with? 

HiThe fields bar code 1 and bar code 2 in a computers inventory / general list, can they be references from the mac? if so where is the file that data comes from?https://learn.jamf.com/en-US/bundle/jamf-pro-documentation-current/page/Computer_Inventory_and_Criteria_Reference.html

Overview:I was really struggling to configure SMTP with M365. We have a distribution list that our Operations team are all apart of and wanted to receive email notifications from Jamf for a variety of reasons.Our environment has MFA enabled and I was continuously fighting with both Jamf/Azure to figure out a workaround to the authentication errors I was seeing in the Jamf Server Logs.It wasn't until after creating a service account without MFA applied it(account being authenticated in Jamf SMTP) and enabling "Send As" and "Send on behalf" in the distribution list by adding the service account to the delegates list that mail was delivered.Lets look at a couple server logs I was experiencing first. Server Log Error generated from an account with MFA enabled:javax.mail.AuthenticationFailedException: Authentication unsuccessful, the request did not meet the criteria to be authenticated successfully. Contact your administrator.With the error above I messed around in Azure quite a bit a

I discovered that this model only has an HDMI and power cable connection.  Previous TV models have connected to our network with a network cable, so how does one get this 3rd Generation connected and enrolled in JAMF? This new device configuration has prevented me from configuring them as I did before with a cabled connection.--The TV is present in Apple School Manager and enrolled in JAMF Pro.--I cannot find the TV in our JAMF inventory by searching on serial number. (makes sense as it has not connected to any WiFi yet)--When powered on and connected to a monitor, the TV sees but will not connect to our open guest network: " The WiFi network requires further authentication to connect. Use your iPhone or iPad to continue". Choosing this option goes nowhere.  So I then try a secured WiFi network... --We created a special wireless configuration for TVs to auto-join a secure WiFi network, but this is not automagically working as with previous generations.  It appe

Seems like I cannot finish jamfproinstaller  mysql  Ver 8.0.35 for Linux on x86_64openjdk version "11.0.21" 2023-10-17 LTSInstalling...Executing set-java-home...JAVA_HOME is ''...Setting JAVA_HOME to '/usr/lib/jvm/java-11-openjdk-11.0.21.0.9-2.0.1.el8.x86_64'Starting Tomcat InstallationDetected previously installed Tomcat...Upgrading Tomcat service...Reloading system daemon...Enabling Tomcat to run at startup...Copying backup of Tomcat (/usr/local/jss/tomcat) to /usr/local/jss/backups/tomcat/2023-11-07_07-53-12...Copying Tomcat files...Setting permissions...Restoring /usr/local/jss/tomcat/conf/*.xml...Transforming the server.xml...Error: Could not transform the server.xml Any thoughts? 

I am unable to find a way to added Cisco Thousand Eyes Uninstall to Managed Login Items as it is a EXEC file it doesn't have a bundle id or team identifier. Hoping someone has setup a different EXEC that might know what I need to add the config profile. Thanks  

Hi all, I'm wondering if anyone has had success in packaging Maya 2022 with a non-network server license key, which our institution is able to put on 1200 machines. I tried referencing this post, but havent been able to successfully deploy the program with my modifications. Any help would be appreciated. Thank you.

Hello All,We were using following script to rename the computer name and it was working before 2 months.#!/bin/bash# jamf ApiapiUser="####"apiPass="####"jssURL="our_jamf_instance_url"serial=$(system_profiler SPHardwareDataType | awk '/Serial\\ Number\\ \\(system\\)/ {print $NF}')serialc=$(system_profiler SPHardwareDataType | awk '/Serial\\ Number\\ \\(system\\)/ {print substr($0,length-5)}')base=$(curl -H "Accept: text/xml" -sfku "${apiUser}:${apiPass}" "${jpsURL}/JSSResource/computers/serialnumber/${serial}/subset/Location" | xmllint --xpath "/computer/location/building/text()" -)echo Building:$basescutil --set ComputerName $base-$serialc-Mscutil --set HostName $base-$serialc-Mscutil --set LocalHostName $base-$serialc-Mcname=$(scutil --get ComputerName)echo ComputerName:$cnameexit 0 Now the script is returning error cript result: -:1: parser error : Document is empty^Building:scutil: invalid option -- 8usage: scutilinteractive access to the dynamic store.or: scutil --prefs [

First time I've attempted an OS upgrade in Jamf. Trying to upgrade some devices at work from Monterey to Ventura. I have a Smart Group to show me how many devices are running Monterey. In Jamf, I went to "Software Updates", found the name of my group and selected the checkbox, then clicked "Update 1 selected".Then selected “Download, install, and allow deferral” and set “Target version” to the most recent version of Ventura (13.6.8). Set the deferral value to 1. End users have received plenty of notifications by now, but thought I'd try to make the upgrade process as painless as possible for them.Did this about a week ago. None of the devices installed the new OS. When I query a specific device in Jamf and look in "Management > Management Commands", I see this: Not sure what I've done wrong.   

Hi Guys, We are building out our login workflows, and a good question was asked. Why are we going Local and not using Mobile Accounts when we bind anyway? Most videos seem to hint that local accounts are the recommended option, but I can't seem to find a hard list of Pro/Cons for reasons to go local over mobile. Any insight as to why we would go local over mobile would be helpful. We are using the Kerberos SSO Extension to give user's Kerberos tickets after they login. The concern is that user's don't get a Kerberos ticket upon login which I believe is what a mobile account would do for us. Thanks in advance!

Have a lab of 20 Mac Minis using Jamf Connect & Google IDP.  The login screen shows Sign in with Google as it should but it'll randomly resize the login window which is behavior we're not looking for.  Sometimes it'll show the complete Sign in with Google box including the Create Account & Next button, and further down.  Other times it'll load a much smaller cropped window with a scroll bar (showing the field for the e-mail or phone login but missing the ability to see the Next button without scrolling down) and place it towards the bottom of the screen instead of centering it on the screen.  All systems are using the same model of monitor, same resolution. Not sure if anyone else has experienced this behavior?  My thought is maybe it's the newest version of MacOS as they've now been upgraded to 14.5 and this was not happening on 13.x.  Just very odd behavior that it'll sometimes load properly then you reboot the machine and it's a 50/50 chanc

I have been tasked with setting up a Ring deployment for all my supported platforms. JAMF is the last on my list.I cannot figure out how to setup a Ring deployment approch within JAMF. Does this management platform support such a deployment model?

Has anyone made a script or profile to rename devices in jamf pro? right now, there is onl;y 1 option (within pre-stage enrollment) and i'd like to have a 2nd. my goal it to name the phones using a prefix of P followed by the serial, and a prefix of a T for the ipads.  anyone doing something like this?

Hello,We are currently working on the macOS Beta program and would like to remove the Feedback Assistant from the Beta testers. However, the Restricted Software option to remove or kill the process is not working. We also attempted to uninstall the application using the script below, but nothing seems to be effective. Do you have any suggestions or alternative methods to achieve this?Remove script:sudo rm -rf "/System/Library/CoreServices/applications/Feedback Assistant.app"

So, our Jamf cloud instance has started displaying the above when sending management commands to all our Mac OS devices...Device newly enrolled and still the same..anyone have any ideas..cancelled and cleared all commands and still no joy..all push certs etc are valid..pulling what hair I have left out at the mo..:-( 

Hello, I have a big issue with Jamf Connect using Google as the ID provider,when trying to log in with Google, after the 2FA validation, I get an infinite loop.so then I tried to log in to local mode with "allow local connection when no network" I also got an endless loop.Also when trying to switch network SSID I get a black screen for 30 seconds...There are also visual issues with Google ID and Jamf Connect, the MFA screen is cut in half, and it always asks for authorization, I mean it's an awful experience.The only way to log in to the MacBook was to nuke the installation of Jamf Connect completely.Is someone having the same issues? 

Hi,we are using JamfSchool for our school lab with M2 MacMinis. We would like to disable some apps like Messages, TV and Music. Therefore, we put those apps into the "Paths to disallowed applications" in the "Safelist and Blocklist Applications" payload. This mainly does the job and blocks the apps.However, shortly after login the users get a pop-up that they don't have permissions to run "MessagesActionsExtension", "MusicCacheExtenstion", or "TVCacheExtension".Any idea how to disable those extensions from loading or how to disable those pop-ups?

I am trying to create a PLIST for global protect to have the portal address populated so that our users do not have to enter it manually.  Any suggestion?Current version of GP is v6.0.2

Hi all, Relatively new User to JAMF Pro here, I'm looking to enable access for users for multiple tenants.Within our business we have 10+ JAMF Pro instances and a user has requested access to administer machines in another tenant to what his account is created in.After doing some research I can see the best way to accomplish this appears to be to create some access groups, one for the domain they are not currently a part of (I plan on creating a 'enrollment only' group and a 'admin' group for each) and give it the requisite level of access, that's all fine until I come to add the user as a member, the user in question is not visible in the subset of users.If I change the 'site', the list from the 'Members' section doesn't change, so I can only assume this list is static.So I have a few questions:• Why doesn't the user I need to administer appear in the 'members' user list for any of the groups and are these lists specific to the tenant?• How can I make them available to this selec