From AP:cisco C9120AXI-B ARMv8 Processor rev 0 (v8l) with 1875204/1065904K bytes of memory.Processor board ID FJC26381AZTAP Running Image : 17.6.4.56Primary Boot Image : 17.6.4.56Backup Boot Image : 0.0.0.0Primary Boot Image Hash:Backup Boot Image Hash:1 Multigigabit Ethernet interfaces Controller:Cisco Catalyst 9800-40 Wireless Controller17.3.4c My thoughts were that the controller was supposed to downgrade or upgrade an AP if the versions did not match to match the controller.  Is that not how this works?  Or do I need to update the controller to match the 60 AP's we just bought?

My original posting for this started off as just an Extension Attribute. In the past 3 days, it has become a full blown workflow. Here's that workflow. JAMF Software Deployment: Nessus Agent for Apple Macintosh INTRODUCTIONTenable Network Security's Nessus software is currently being utilized for vulnerability scanning and vulnerability management within the enterprise. JAMF Software's Casper Suite (JSS) is used to manage Apple Macintosh systems within the enterprise. This includes the deployment of software packages such as the Nessus agent. This article describes the various elements and requirements as utilized by the Casper Suite in order to package and deploy the Nessus agent to Macintosh systems within the enterprise. TOPICS....Preparing for Deployment........The Software............Acquiring the Nessus agent............Creating a Custom PKG Payload................Acquiring and Installing Casper Composer................Overview and Purpose of Creating a Cust

In a computer lab environment, we are currently redirecting student’s desktop documents etc to an alternative ‘Local’ folder created within the profile on logging in. This is done using symbolic links in a script. We were previously redirecting the desktop documents to their network homefolders but these have now been decommissioned, so we are looking to do a local redirection for the purposes of space management.Unfortunately, the local redirection doesn’t appear to work well, in that when you save to the desktop, documents etc, the file doesn’t automatically appear in the relevant folder. You would need to go into Finder and select the relevant folder for it to appear.  This isn’t even the case with the Documents folder, selecting it in finder doesn’t bring up the most recent file, you need to put the full path to the redirected Documents into “Go to folder” in order to see the files, else logout & back-in. The files are seen in terminal and using preview app. Relaunchi

I had asked this as a reply to a solved issue but I figured I would open a new conversation here. I've been asked if we can have Jamf Pro capture information (type, serial number, etc.) USB devices and monitors are attached to our managed computers. I've seen on forums that this can be done with the an Extension Attribute utilizing system_profiler but I haven't found clear instructions on how to set this up. I found that running "system_profiler SPDisplaysDataType" and "system_profiler SPUSBDataType" from Terminal provides the info I need but I'm stumped on how to have those commands run in Jamf so the info populates per machine.Thanks in advance!

Good afternoon.I am trying to set up Kerboros SSO in place of binding MacBooks to active directory and using mobile network accounts. This will be on laptops that only have a single user.  The only thing I want Kerboros to manage is to sync local account passwords to match a users active directory password. I got things working to the point where the passwords sync and it works pretty slick.The problem I am having is that window to sync their mac password and their Active directory password comes up on every login.  The user can cancel out of the window our type their two passwords again, but its a bit annoying that it comes up on every login. Is there a way to have this password sync check pop up maybe only monthly? Thank you, Doug

Is Jamf capable of reporting what monitors and external devices are connected to Macs? If not, is there a 3rd party app that is capable of this? Thanks!

Our institution's push certificate expired, a new one was created and uploaded. My question is around getting the MDM profiles updated on our machines. Is there an easy way I can utilize JAMF (or even ARD?) to automatically update the MDM profile on all of our machines? We have ~200 Macs and I'm hoping we don't have to manually re-enroll them all. Thank you in advance for any advice you can offer!

Hi, communnity!I have a problem regarding app branding. I have set an icon for testing in my DEV instance to check that both app icon and self service banner were working fine. The issue has arrived after having implemented in PROD when we've noticed that Self Service app is not retrieving nor app icon or banner from Jamf Pro/ Settings/ Branding/ MacOS. After that we've been testing in DEV to change to a different icon to check if changes will applied but it's applying the old icon image who's been removed from settings. It's like the old image remain cached.Any clue on that?Thanks in advance,

Hi - so the box tools (or box edit) is a .dmg file. the only way i know how to silent install is a .pkg format (installer command). 1st step via composer is to convert the dmg to pkgthen package it via casper admin.then push out as a policy i get what looks like a confirmation that it installed successfully: Verifying package integrity...Installing BoxToolsInstaller.pkg...Successfully installed BoxToolsInstaller.pkg. but it's not working. box tools is not installed. please help. thanks

instead of waiting for jamf policy to run at the jamf execution frequency Is there a way to force a policy to run instantly?

Hello, I am looking for a solution for the accessibility settings that the NWEA testing app asks for after installation from self service. I have created a package using composer for both Catalina and Big Sur and placed them in self service. The apps are installing on the laptops but now they are asking for the Admin password to make changes in Security and Privacy/Accessibility. We are using both standard user and admin user accounts depending on the location (elementary-standard user, middle school-admin). I would like to avoid this during first launch of the app since we do not want to have to give out the admin credentials to the elementary school users.

I’ve passed the JAMF 200 and have been learning about JAMF from Jamf Catalog and also trying to get more hands on experience at work.I'm keen to learn more and aim to do JAMF 300 in 6 months time. Are there any good books for new Mac Admins? I’m keen to learn more about scripting and macOS so maybe a book on AppleScript? I’m open to any suggestions that may have helped others in their Mac Admin careers.

I've used command sudo jamf removemdmprofile and  sudo jamf removeframework to fix certificate expired issue, After that I renerolled my mac with Jamf with web. My mac received all configuration profiles, but self service applicaton and jamf binary can not be pushed on my mac. Anyone knows how to install that manually?

Autodesk sadly doesn't have a removal script for macOS.  So I made one using their collection of random documentation.  It removes all Autodesk apps, the system files and user files.One piece missing is FlexNet, since this is used by other Applications and should be kept. #!/bin/bash # Autodesk Cleanup Script currentUser=$( scutil <<< "show State:/Users/ConsoleUser" | awk '/Name :/ && ! /loginwindow/ { print $3 }' ) # Removes Autodesk Applications sudo rm -rf /Applications/Autodesk/ # Removes Autodesk User Library Files rm -rf /Users/$currentUser/Library/Application Support/AdSSO-v2 rm -rf /Users/$currentUser/Library/Application Support/Autodesk rm -rf /Users/$currentUser/Library/Application Support/Autodesk Installer rm -rf /Users/$currentUser/Library/Logs/Autodesk rm -rf /Users/$currentUser/Library/Logs/Autodesk Installer rm -rf /Users/$currentUser/Adlm sudo rm -rf /Users/$currentUser/Autodesk # Removes all com.autodesk files from user's logs and

Hey y'all! I'm currently mass uninstalling an antivirus program within our environment. I got the script to run as I need it to but with one problem: to complete the uninstall, it prompts for a local admin password to remove the system extension. How do I get around this without going to almost 200+ computers to input local admin information?

Hi All, I haven't seen any discussion regarding OBS Studio and creating profile settings using PPPC or manually through JAMF Pro. Many of our teachers are requesting this software for teaching due to remote learning and any input is appreciated. Thank you!

I started getting a SSO timeout issue a few weeks ago when trying to sign in to my jamf pro instance. every morning, i get this time out warning and need to sign out of my office account, quit chrome, then hot my bookmark. Once i get there, i have to then select my account and sign out again, then sign back in.    Any way to stop this other then using my failover account?

Hi AllCan anyone tell me, why is isn't possible to switch off the wifi for the App " TI Nspire CAS" over Jamf Teacher and for the App "GeoGebra" is it possible. Because the Apps need the "Guided access" to start Exam mode.Is this a matter of an App developer oder Jamf ?Thanks for you comment or help.Peter

Hello all, Would anyone out there be able to provide me with a Script that on execution would delete all Users and/or User's home folder's with the exception of the user that is logged in and an option to specify specific (admin) users that need to stay on there? It is likely that my Macs have a User Home folders that don't have a local user. So if the Local user doesn't exist, it still should wipe the Home folders of anyone but the current logged in user (and the specified admin user(s). I would be tremendously gratefull!

Hi allSince iOS 17, students can change the background with the new "Focus" function. When will this be integrated into the Jamf restrictions?Thank and best RegardsPeter

Dear community,I´ve got following problem:When erasing a device and wanting it to return to service afterwards, I use this configuration:Return to Service is checked, a valid network configuration is scoped. The option:"Install MDM profile after erasure" is NOT checked, because all our devices are registered in ASM. The documentation says:"If the device is registered in Apple School Manager, the MDM configuration can be omitted."Now when I confirm these settings, I get an error in the activity log saying "Für „Wiederinbetriebnahme“ ist ein MDM-Profil auf diesem Gerät erforderlich." Meaning: "A MDM-profile on the device is required for "return to service"". No erasure takes place.So I cannot use this option, although it is described this way in the documentation.https://learn.jamf.com/bundle/jamf-school-documentation/page/Return_Device_to_Service.html Does anybody experience the same problem or knows a possible solution?Thank You in advance, Daniel 

Hi All, I am having issue with Microsoft Login (Azure) appearing on a Pre deployment with computers on Jamf ProCan anyone help me with this issue  or send some instructions?

Hi,We have a set of classroom iPads which have been configured in Jamf School to prevent pupils from deleting their browser (Safari) history.Recently a pupil has been searching for inappropriate subjects, how do I delete the browser history now the matter has been dealt with? Thank you. 

It would be nice if we were able to have a smart group of all lost mode devices to make it easier to follow up on. I don't see a way to do this.

I can see one mac is present in ABM and assigned to the correct MDM server in ABM but when we are going to provision the mac, it is configuring locally as personal mac device but not enrolling in JAMF automatically. I unassigned the mac from the present MDM and reassigned back to the same MDM server but still no luck. I can see the storage is showing Unknown in ABM portal for this mac, but for other macs it is showing the storage and those are getting enrolled in JAMF automatically. What might be the possible causes and what should be the resolution here?