Greetings all,Until last JAMF Pro update i had no issue with the script below. But as of today, the script returning blank result without error. Any idea ?   APIUsername="" APIuserpassword="" JAMFServer="" EAID1=69 JAMFAPIToken=$(curl -X POST -u $APIUsername:$APIuserpassword -s $JAMFServer/api/v1/auth/token | plutil -extract token raw -) DeviceSerialNumber=$(system_profiler SPHardwareDataType | awk '/Serial/ {print $4}') curl -u $APIUsername:$APIuserpassword -H "Accept: application/xml" $JAMFServer/JSSResource/computers/serialnumber/$DeviceSerialNumber/subset/extension_attributes | xpath -e \\ "//*[id=$EAID1]/value/text()" 2>/dev/null 

Today I Setup up pool IPads with temporary guest user only on shared iPads and couldn’t install all apps. There was a lot of available space on the iPads. What did I miss?

Is it possible to proactively block application downloads through JAMF pro? For example, we determine and set up a whitelist of applications, and anything not on that list is blocked, rather than us finding it through our computer lists and removing it after the fact.

We're trying to initiate a Jamf Connect password change workflow from a policy, rather than from the Jamf Connect menubar item.I see there are options for opening menu items using URL schemes (open jamfconnect://) but there doesn't seem to be a Change Password option, and the action command (open jamfconnect://action/Change%20Password...) doesn't work.Anyone have a solution?

Does anybody have a way to look for Rapid 7 and it's version? it doesn't seem to put anything in the /Applications folder.

We currently have an instance installed on tomcat and working on getting memcached working.memcached out of the box works fine, but it supports TLS encryption.  When we enabled this, it appears that JAMF doesnt know what to do with the TLS connection.We will firewall off that port as suggested.  But TLS seems like a good idea.

We are using apple business manager in my organazation.  Our jamf pro sync with azure ad , when we try to enroll a new mac os device its ask e-mail password but does not the accept . Because of that we cant pass this step and couldnt open the device.   

Good morning,I am having the hardest time trying to find where I disable Apple ID Login in Restrictions for Configuration Profiles for iPads. Can anyone point me to where that is? If it matters, the iPad OS I'm running is iOS 15.x.Thanks,llckhrt1

We are using Jamf Connect and Azure to sync accounts/passwords with MacOS.  The computers are not AD bound.  Is it possible to get Jamf to warn users when their password is set to expire (we have a company policy to reset every 90 days)? If not, what are other fellow admins doing in this case?

Reason for this post is to start a conversation around Jamf IDs.As of late, my Jamf ID is missing Organization email, organization association, certifications, as well as products.(Last I checked, I can still access support tickets sot this is a good thing)I reached out to support, and they had me create a seperate Jamf ID using my business email and I'm being told that this account will be tied to the organization.I asked for my Jamf certifications to be connected with my personal Jamf ID again.Is this really how we are doing this now?Having to maintain a private Jamf ID and work Jamf ID?There is a bit of discussion on this on Slack, however I wanted to share this information here, for those of us who are not using/not able to access Slack.

HelloAnyone here, which used the guide for the xcode installation from:Deploying Xcode on managed devices (jamf.com)everything works for me til i start to install it via self service. After downloading the pkgi receive in my log:no app at /Applications/Xcode.app, exiting I am using the script from:Configure Xcode post installation script with SDK download for Xcode 14 and 15 (github.com)#!/bin/sh export PATH=/usr/bin:/bin:/usr/sbin:/sbin xcodePath="/Applications/Xcode.app" if [ ! -e "$xcodePath" ]; then echo "no app at $xcodePath, exiting..." exit 1 fi # select Xcode xcode-select -s "$xcodePath" # accept license xcodebuild -license accept # install additional components xcodebuild -runFirstLaunch # add everyone (every local account) to developer group dseditgroup -o edit -a everyone -t group _developer # enable dev tools security DevToolsSecurity -enable # download platform SDK # all available platforms # xcodebuild -downloadAllPlatforms # update previously down

Hey so we use Jamf to deploy our Macs and recently whether it's a new Mac or one that's been wiped, we're unable to open and start OneDrive. Tried everything from uninstalling and installing from O365, installing from the microsoft page and so on. When running Onedrive I get an error saying Onedrive Couldn't Start, a system component is preventing OneDrive from starting. If I quit from Onedrive and try to start it again the error become We couldn't find the location of your onedrive folder, and the cycle repeats itself. Only thing I can find on the internet is involving Files on Demand.

Hi All,Just wondering .. Using the JAMF API - Can I check that prestage a macOS in enrolled in or part of? Rk

Hello everyone,I have received command entries from JAMF tech support to adjust our password policy that is reporting errors. I have been running these commands manually with a remote session with the user and it works. Is there a way to create Policies so that this will run without the user and myself involved? Reboot is not required but to run the commands requires user name and password in Terminal. On the user's Mac in Terminal run  sudo jamf removeframeworkOnce that completes stay in Terminal and  run  sudo profiles renew -type enrollmentAny help is much appreciated.  

Hi All, My end goal here is to force the local user (end-user) to update their password upon 2nd login (I will explain). Here is my current workflow for new hires (note: we don't have jamf connect) so I have to work with what I got.Current Workflow:1. Enroll the computer into pre-stage enrollment and let it cook.2. Create the local user (new hire) account in the create local account page in apple setup assistant. in this step we are manually creating a "temp" password 3. Log out of the current user's (local user) account and log into our jamfadmin account to finish manual set up steps (additional privacy permissions, re-naming hostname, enabling FV, etc)4. Log out of the jamfadmin account and shutdown.5. Deliver the laptop to the new hire with login information securely enclose. We leave it up to them to update their default password.So, with that being said, we now want to enforce our users to update their default/temp password to a secure one. After doing some research I ca

I tried creating shortcuts directly on iPads and it let me do that but after refreshing the profile they disappeared! I then found out about the Web Clips and put those in my profile and organised them on the Layout however they don't show on the iPads either!Can someone explain how I get URL shortcuts on to a home screen please!

I looked all over the internet, tried ChatGPT and can't find anything to allow a few websites to pop up windows.  This is affecting our Intune Integration when Safari opens and it goes to login.microsoftonline.com and device.microsoftonline.com. It take 2-3 times before we can successfully get through the enrollment.Does anyone know how to do this, I don't want to allow all pop-ups as I think that is dangerous. Apple isn't making this easy.  

We have been using Nudge as a means to prod users to update for a few years and it has been flawless until recently. In test machines Nudge is no longer running despite having the launch agent installed being included in our managed login item profile. Manually installing the Nudge suite causes the service to run, but it doesn't pick up its settings in our Nudge config profile (minimum OS and whatnot). Granted we created our Nudge config profile back with version 1.x. Comparing the json for 1.x to 2.x looks identical, so I don't think that is our issue. Has anyone experienced something like this? 

Anyone else having issues with the new update to the JAMF Student app?  After it updates it won't auto login any more and we have to un-assign and re-assign the device owner.

I haven't used the Software Updates feature before. In the past, I have tried performing a mass action using a static group for testing. Yesterday, I decided to do that for some of my hot spares on the bench to take them from 14.5 to 14.6 and discovered that we had enabled the Software Updates feature. This understandably removed that ability from an action, so I figured I would give it a try with an eye towards deferrals as the "killer app" of the process.We control updates on our active machines with some restrictions payload and restricted software, but the spares are a little more relaxed. The only thing they get is our software update payload, which is set to make sure updates are automatic and enabled:So I decided to take two of them, put them in a static group and run the following:This ran very much like previous experiences with the MDM action. Devices eventually handled the commands and downloading/staging commenced. I set one machine aside with the 'REBOOT(8)' man page open

We are looking at testing CrowdStrike for mobile, we currently use Cisco Security (DNS Security & Endpoint Visibility)I have created a new CS profile and when I first scoped it to one of my test devices I get Permission denied,  I can only get this to successfully install after I remove Cisco Security,  any suggestions on why both config's wont work on a single device,  appreciate it

I am looking for the code for the Configuration dictionary for IXL iOS app to set the custom domain in the app. There is a setting for it in iOS Settings - IXL. Unfortunately IXL is anot aware of how to set this via MDM commands.

So this may be a stupid question. All of the notifications that come from jamf policies (patch management for example) always show with the default jamf icon. Where do you set a custom image?

Hey everyone. I deployed a policy that runs a script which notifies users that they need to reboot their Macs. The policy is scoped to a Smart Group that contains users whose Macs have been up for 10 days or more. The issue I'm running into is that after the users reboot, they're seeing the notification again. My guess is that an inventory update isn't happening quickly enough after the reboot to remove them from the Smart Group. Can anyone help me configure this properly? Happy to provide any other details. Thanks in advance!

Greetings all, We're getting our Fall builds ready, and again I am facing the issue of automating the software installation for the Wacom tablets in our Industrial Design (17 Cintiq 27" panels) and Multimedia (10 Wacom 12" LCD tablets) labs.  I'd really like to not have to walk around to each one of these to individually allow the permissions they need (which is Wacom Technical Support's position). Does anyone have, or know of, a way to automate this, particularly in Jamf Pro, but I'll take anything.  We are running Big Sur on a variety of Mac types, but no M1's have Wacoms hooked to them yet.  There were a variety of suggestions in Jamf Nation last year, but most of them were for Mojave and we were unable to get them to work successfully in Catalina. Thanks in advance for any suggestions.