Hello Teams, Kindly help me with a script to remove admin right on some of our MAC managed by JAMF.

Hi, It there a way to not allow users to sync their device with their personal iCloud? Ie not allowing icloud drive. ThanksJared

Hi,We've got a Mac that was in ABM but was released and re-added via Apple Configurator (for iOS). Initially, it showed in ABM and Jamf Pro but now it doesn't show in Jamf Pro, despite being attached to it in ABM.Remove from Jamf Pro and re-allocate via ABM doesn't bring it back in to Jamf Pro.New Token generation and re-sync doesn't bring it back in to Jamf Pro either.Any ideas?

Hello everyone,I'm trying to assign a MacBook Pro to my company's MDM (from Apple Business Manager), but the serial number does not appear in a PreStage Enrollment section, as it should. It's a first time, I have this problem. Previously everything worked fine. During 11 months, I have unassigned and assigned many of our laptops to MDM, but today it did'nt work. Is there any delay in synchronization between MDM server and Apple Business Manager? It's already more than 6 hours that I assigned a laptop to MDM, but it still does not appear in the PreStage Enrollment list.

Hi there,we are trying to set up the Jamf-Proxy for Venafi PKI and we are running into issues. We set up everything according to the manual. From my understanding Jamf-Cloud is getting connected to the Proxy as I can see a request on the Proxy itself. There is a POST command in the direction of the Venafi PKI which then is stopped with an error : x509: certificate signed by unknown authority.Also we are able to connect to the Venafi PKI from the Proxy via API. Has anyone ever seen the same error and knows what we might have to configure? 

Is it possible to change the statement Re-enter your Microsoft Entra ID password... at the creating account window? 

Hello Experts,  I am trying to run the subject scriptJAMF ECOSYSTEMI have been struggling since yesterday to run the script and getting the following error even my username and password are correctUser Input is NOT OK, we cannot connect to JAMF API and now will EXIT! status_code: 401Could you please help me out what I am doing mistake?

I need to pull a report of all MAC addresses for the computers in my environment and the built-in reporting only can display the Primary MAC address. From other posts it seems the only way is with Extension Attributes but the few scripts I've found (https://community.jamf.com/t5/jamf-pro/how-to-customize-what-gets-inventory-for-primary-mac-address-and/m-p/193541#M182332) don't return any results when creating extension attributes. Does anyone have any ideas on how I can grab this info?Thanks!

How to enforce local backup on the machine for one dive using JAMF Pro? is it policy on jamf pro  

So I need to renew the VPP certificate for our cloud server and we don't have access to the apple id last year's was created with.  I tried uploading one from the main apple id that is admin for Apple School Manager but it says it doesn't match.I know you can add another VPP token, do i just make a new one?  Will i have to reassign all the app licenses?Suggestions? Thoughts? Prayers?

Good morning all!I just had a couple of questions.I have been task to add hardening to the Macs. It occurred to me that it would be easier for the users and to me, for troubleshooting purposes, to deploy 14 rules per week and see how the users get affected.so at first I starting typing the rules that shows under the profile then going to the files and adding the configs one rule at the time. Now, reread the how to use the tool and the only part that it mentioned to do manually if I use the Jamf Pro Upload is to add the Json, which I did. However, Im seeing that the Json is only for exceptions.I'm a bit lost if I have to also do a new policy and runt he script that is uploaded.?Or by using only the profile and allocating it to the machines is enough and I can ignore the Json unless I have to do an exception?I would appreciate if someone can assist me shed some light on the question.  

Hey all!We're working on deploying Jamf Connect for our org. In parallel, our security team is working on moving all our MFA for our Okta environment over to WebAuthn with the option of either biometrics or a Yubikey to fulfill it. Does anyone know if Jamf Connect can support WebAuthn methods (or as a bonus, a future state of passwordless with WebAuthn as the only authentication factor)? I've not found any documentation on it, so I'm not hopeful, but wondering if anyone has any experience with this.Thanks,Colton

Hello,Looking for a way to disable end users from changed the Name field on MacBooks using Ventura.System Settings /  General / About .....NameI set the name for my student machines and don't want them changing it.

I have noticed, when user start Microsoft teams screenshare for 1st time it asks for 'screen & System Audio Recording' permissionWarning box shows message as below"Microsoft Teams (work or school)" would like to record this computer's screen and audio.grant access to this application in privacy and Security settings, located in system settings.As a user I am allowed to give this necessary permission, is this can be automated, so users don't have to perform additional step in 'privacy and Security settings' while they are on call?

Hi All, I need to replace an existing agent functionality which limits outgoing connections. We are in the process of testing another agent and need to be able to replicate the same functionality on the outgoing firewall.How have been reading about editing the PF config file. Are there any other more manageable and "cleaner" options.TIA.

Vendor Overview BeyondTrust Endpoint Privilege Management allows organizations to: Enforce least privilege dynamically to prevent malware, ransomware, and identity-based attacks, achieve compliance across Windows, macOS, and Linux endpoints, and enable your zero trust strategy — without compromising on productivity. Learn more BeyondTrust EPM: Flexibilities Easily assign macOS computers to a BeyondTrust Endpoint Privilege Management High, Medium or Low Workstyle Flexibility via a Jamf Pro Script Parameter While BeyondTrust Endpoint Privilege Management for Windows policy Workstyles can be filtered based on Microsoft Entra ID groups — as of this writing — macOS policy Workstyles cannot. For macOS, each users’ account must be added to an existing local group for every Mac in your fleet. Continue reading … BeyondTrust EPM: Inspector Leverage swiftDialog to display a user-friendly message about the health of BeyondTrust Endpoint Privilege Management for Mac, while capturing various

With this stupid Apple School/business Manager now,  for macs not in ASM/ABM do enrollment invitation using enrollment url still work? I sent one to an email and i enrolled it using that invitation and that seemed to.work fine  but SELF SRVICE never installed.  MDM profile installed,Configuration profiles installed. Inventory information showed YES for Managed. Why didn't SELF SERVICE install? Looks like all settings are configured correctly for it to install.

I'm working on a client setup right now where the computer goes through ADE/DEP and a tech logs in as the administrator account. That kicks off the DEPNotify Helper script and that workflow. This includes the naming of the computer which, in turn, scopes the FileVault Configuration Profile to the computer. It also includes binding the computer to AD. At this point, if I check fdesetup for a list of enabled users, I just get the admin account. So far, so good. After that the admin logs out (but doesn't reboot or shut down or other wise go back to the FileVault lock screen) and a staff person logs in which creates the mobile account. Now if I run fdesetup I see the admin account and the staff account are both enabled. Jamf confirms the same thing. Both accounts are enabled and FileVault is turned on at this point. However... if I reboot, only the admin account is visible on the lock screen. If I don't reboot, but instead log in as either the staff account or the admin account again and j

Random puzzle for the day. I had an issue that I was over thinking and did not realize the vendor just changed the application name, but it raised a question that I wanted to solve for funzies.    You have a plist that you need to read CFBundleGetInfoString from (not that this ever happens), but the path to the plist has a random folder name in it (the example I was working on is the application vendor uses a random string at the end of the app name for whatever reason). Due to the variable, defaults cannot be used to read the plist. I was using find which works fine locally to identify the path of the plist but would take too long for an extension attribute and would make check-ins take too long. find /Applications -name "*.app" -print | grep "/Remote Support Customer Client.app/Contents/Info.plist" | while readplist; do defaults read "$plist" | grep CFBundleGetInfoString | awk -F'"' '{print substr($2, 1, 8)}' done   ~ % defaults read /Applications/.com.Applicatio

We have four networked printers that are pushed out to all Macs through our company that are tied to different locations where offices are located across the world.  We noticed that these printers have recently started installing duplicates on users' Macs and I cannot figure out why.  I have tried to write some scripts to delete duplicate printers on a few test Macs but no luck.  This has been working great for about a year and just recently started installed duplicate printers. I have also tested to push multiple printers to my own Mac but it never duplicates after the printer policy runs. Scratching my head on this. This is what I have setup in Jamf. 1. Printer Policy Trigger: LoginExecution Frequency: Once per monthPackages: Canon PS Installer pkgPrinter: XXX Printer Action: Map (I also have the ppd printer setup in Jamf Settings)Maintenance: Update Inventory Here is the script I am using to try and delete the duplicate printers:#!/bin/bash # Chec

Hello All,I was asked to generate a report for all mac devices with three columns printing total physical size of the disk, total  used space by user and OS/system and available free space can be used by user in future.Now the problem is that if I use diskutil list, diskutil info / and df -h for all commands I am getting different values for each and every requirement, please help to find the most appropriate command for each. I think diskutil list can provide me the most perfect physical size of the disk, and df -h is good for end user's available space and total space consumed by user and OS/system. Please correct me if I am wrong here.

We have an annual PCI audit that we have to run on randomly selected Macs once a year. After the Macs have been selected, I scope those Macs to a policy that runs the script below. Everything works up to the point of uploading the resulting .zip file to the computer record on the Jamf server. I keep getting a "curl: (26) Failed to open/read local data from file/application" error. Unfortunately my curl skills are weak and I can't figure out what I'm doing wrong. I think I'm doing something wrong with the -F option or I'm not using the variables correctly in the curl command (line 91).#!/bin/bash # this script s used to collect a full system profiler dump in txt format # as well as user accounts, groups, crowdstrike info, open ports # it will put all the files in /Library/company/PCI/<computername>/ # for later retrieval and submission for PCI audit # Set variables for the JAMF API jamf_url="https://company.jamfcloud.com" jamf_user="API-only-account" jamf_password="password_here

About 75% of the apps I'm trying to push to an open enrolled freshly provisioned Macbook Pro aren't installing, I am using Jamf Now Plus and have test a variety of apps including Keynote, Numbers and Pages. I have "purchased" a pool (100 licenses) through Business Manager and they show up correctly in my Jamf portal. However when trying to install I am getting a "License Not Found" error dialog (with the Mac App Store icon) on the Computer and an "Installation failed. Will retry in 24 hours." error inside of the Device profile on Jamf. The odd thing is I've tried with some paid licenses such as Pixelmator and that worked and in some cases Pages work but Keynote and Numbers keep failing.

I think that some of the 3rd party plugins offer this but I'm hoping someone might have a tool they can point me to.I'm re-visiting our JSS after some personnel turnover and am finding myself chasing my tail comparing working computers to non working computers when troubleshooting.  I'd like to see if anyone has a tool that might make a 'map' of the various policies / Config Profiles etc  and what groups they connect to etc.TIAEric

Might anyone have any words of wisdom on managing Apple Watches?  Found documentation but it does not appear to recognize the watch paired to the supervised iPhone after several attempts.Thanks either way