I have found some information from a Jamf Pro system on creating a temporary Admin through Self-Service and would like to do the same using Jamf School but can not find any documentation if it is possible and how to get it set up.  Our teachers are standard users but there are times it would be beneficial for them to have admin access.  We are specifically having an issue with standard users not being able to update Chrome.  

I am seeing this issue with Macs running Sonoma and Connect 2.27.0. I am not sure if Connect is actually causing this but it is currently my prime suspect.What is happening is this. The Mac boots up, asks for a PW to decrypt the drive and then opens to the Finder no problem. I can also log in using the Local Login option. If I then log out, it brings up Connect and I can log back in no problem.But (you knew this was coming) if I lock the screen or put the machine to sleep from the Finder, when it wakes up and asks for a password, it will not accept whatever I enter. It acts like I'm entering the wrong password and I can't get past this and must reboot the machine to get back in.Anyone else seeing this? I have't seen it on any of my machines before Sonoma.

Hi all,Hopefully someone can give me some pointers on this one.  I've been tasked with getting the firewall enabled on our macOS devices and I was running a basic config profile for while and couldn't trigger any in-bound alerts but as soon as we enabled it on the wider estate there was one specific .app that was asking for in-bound communication which I thought was strange as all signed apps should be enabled and all apps need to be signed to run on macOS, right???Anyway, I tracked the binary down to..."/Library/Application Support/projectstore/nwjs.app/Contents/Frameworks/nwjs Framework.framework/Versions/87.0.4200.88\\Helpers/nwjs Helper (Renderer).app"Running "codesign -dv" against that app give me an identifier of "io.nwjs.nwjs.helper.renderer".  This is the Bundle ID, right?I've added the app name and Bundle ID to our firewall config profile and verified it's taken on a sample endpoint but I still get prompted for firewall access when I log in.I can't help but feel I am

Hi everyone,I'm looking to update all our Macs and establish a sustainable maintenance plan. Ideally, I'd like to leverage the ScheduleOSUpdate command with the InstallLater option.My questions are:Can these Apple commands be used within a configuration profile deployed via Jamf School? I'm struggling to find specific examples or guidelines for this approach.Are these commands strictly for Mass Action Commands, as suggested in Jamf Pro's technical paper on macOS updates (https://www.jamf.com/resources/technical-papers/deploying-macos-upgrades-with-jamf-pro/) and therefore not applicable in Jamf School?Has anyone used S.U.P.E.R.M.A.N. or anything similar in conjunction with Jamf School? Every single guide or example I can find is for Jamf Pro...If anyone has experience using ScheduleOSUpdate or has alternative suggestions for managing macOS updates in Jamf School, I'd love to hear them!

Howdy!I need some clarification on how Configuration Profiles interact with macOS. Specifically, when managing password policy via a Configuration Profile, should I expect to see output if I run the pwpolicy command locally on a managed Mac?I have an Extension Attribute that checks the output of that command, but I'm not sure if the output of pwpolicy should contain the controls set in the config profile or not.Thank you! 

When enrolling a computer I have the need to automatically add the device to an AD security group after the AD bind. I attempted to use dseditgroup for this but it does not seem to recognize computers (even though there is a "-t computer" option). Has anyone done this or know of a way to automate this via a script as part of the enrollment process? Thanks.

I am working on a script to automate naming, renaming, and name enforcement for our mobile devices. The script uses an API call to send the rename command to devices that don't meet our naming convention. I use this call all the time. It works perfectly from my account with full admin rights. However, when I run the script with my API management account which has limited rights the command fails with the following message: <html> <head> <title>Status page</title> </head> <body style="font-family: sans-serif;"> <p style="font-size: 1.2em;font-weight: bold;margin: 1em 0px;">Unauthorized</p> <p>The request requires user authentication</p> <p>You can get technical details <a href="http://www.w3.org/Protocols/rfc2616/rfc2616-sec10.html#sec10.4.2">here</a>.<br> Please continue your visit at our <a href="/">home page</a>. </p> </body> </html>I have  Send Mobile Device

[Remote MacOS Catalina machine accessed via SSH] Hi, I've created a new user via the command line (SSH), and though the new user is able to log in, the user's home directory has no pre-defined folders (as is the case for users added via the GUI). So, I've tried using sudo /usr/sbin/createhomedir -c -u UserName but that didn't do anything. Can someone please help me with the right command to do this? Thanks.

Hello All,In our environment the Loggen in User name is in firstname.lastname format and I am trying to figure out how to extract the first name with a script. Till now what I have is below #!/bin/bash#gets current logged in usergetUser=$(ls -l /dev/console | awk '{ print $3 }')Echo $getUser#gets namedfirstName=$(finger -s $getUser | head -2 | tail -n1 | awk '{print toupper($2)}')computerName="ABCD-ABM-"$firstName"-MacBook"Echo $computerName#set all the name in all the placesscutil --set ComputerName "$computerName"scutil --set LocalHostName "$computerName"scutil --set HostName "$computerName" sudo Jamf reconAnd the result I am getting is - ABCD-ABM-LASTNAME-MacBook I am not good with scripting however what I understand is the 'firstName' is unable to fetch first name from firstname.lastname however same works good when the name is like firstname lastname. 

Hello All, One of our premier clients is looking for someone who has experience with jamf for imaging, deployment on Servers and project coordination.  Key Skills•Knowledge of Mac OS X and iOS, as well as mass deployment using NetBoot on OS Server•Proficient at managing multiple projects and priorities concurrently in a result driven environment, must work exceptionally well under pressure•Solutions driven in challenging situations and a keen ability to deliver optimum results•Exceptional organization and documentation skills•Independent and self-motivated•Experience at developing relationships quickly; well-respected, trusted partner that others want to work with•Global thinker who performs well in high-pressure situations in a fast-paced, sometimes ambiguous environment•Change agile•Excellent written and verbal communication skills•Exceptional attention to detail•Prior experience with Apple procedures and systems requiredDescription•Create images for Macs and iOS devic

I'm having an issue with my local admin accounts on machines enrolled in JAMF Pro.The admin account was added during prestage enrollment. Now that the devices are enrolled, the laptops will not take admin password, when needed for admine prompts. I also noticed that the local admin sign has been disabled in the plist file as well, so from the main login screen it will not allow you to sign in as an admin. It comes back with an error message that says, local authentication is restricted.  

Does anyone have insight on upgrading ssh on 10.13x and 10.14x machines?

Hi,  How can I create new admin user using command line and user home will be delete automatically when remove from System Preferences?I successfully create new admin user using the following command but when I delete this user from system preferences the home folder will not delete automatically compare to users create manually from system preferences.Any advice?Thank yousudo sysadminctl -addUser Admin -fullName "Admin" -password admin123 -home /Users/admin -shell /bin/zsh -admin

Our Cisco Secure Client is prompting to export the "Microsoft Workplace Join Key" installed by Jamf. Not so sure if this is a good idea to export the key. Any suggestions to prevent the Cisco export prompt from popping up?  

It's very glad to push the OS software updates with the recent software update feature through JAMF Pro.But it will be great to provide any tracking of these deployments, as once we push the software updates we couldn't track them and unknowingly deploying further deployments to the same target machines and it causes the issues with this feature.

Heard today that there is no option for Virtual Attendance at JNUC 2024. ------------------------------------------------------------------------- EDIT 02/15/24 - It appears that recorded sessions will be made available in November. Information regarding this was buried in the FAQ for the event.  Still a bummer though.    The original message below may be ignored.  ------------------------------------------------------------------------- This development saddens me, and I'm sure it will make others sad as well. Charge us more to attend virtually if you must to make things happen this year. Many customers cannot attend live for whatever reason. Some may not be able to get hotel rooms to make the stay, others may not be able to break away from work. Having the virtual option keeps us all in the loop, without it, it is like being on the outside of a movie theater during a major summer release.     Don't shut out your customers Jamf. Be more inclusive tha

Hi,We have a couple of apps/certs that require the email field in Jamf to be filled out. Currently we do not use Jamf connect or have LDAP integration set up, our users are shipped a Mac and then set up on their own then later a tech manually updates the email field.If we add LDAP to Jamf I believe we should be able to pull the email address field, but I'm a little lost on what the steps are after LDAP has been added to Jamf. When a new computer is enrolled is the user prompted for their AD credentials during set up? What happens to Macs that are already enrolled into Jamf? Sorry for the dumb question, just trying to wrap my head around once LDAP is configured, how Jamf then gets the correct user mapping and if the end users get prompted and what that prompt looks like. Thanks

We would like to open up use of iCloud on our iPadOS devices, but only want to allow users to log in with their managed iCloud account. Is there a way in Jamf Pro to either pre populate the domain and/or user and lock the user into only signing in with their managed AppleID?

When I filter a list of computers in Jamf Pro there is a column heading that says BOOT FULL. What does this mean? Thanks,Jim

We had a script that renamed the MACS (Building Name:Serial Number). Very simple but it no longer works.  Jamf Support hasn't been able to help me and I am stuck.  It has worked for years, and now has stopped working. Thoughts, help?#!/bin/sh#            Name:  rename_from_building_api.sh#     Description:  This script renames a computer#         Created:  2017-10-03#   Last Modified:  2018-06-11#   Created by:  SWeinstein###### Wait for dock to loaddockLoaded=$(pgrep -x Dock)echo "Waiting for user to login..."while [[ "$dockLoaded" == "" ]]do  echo "Waiting for dock to load."  sleep 10  dockStatus=$(pgrep -x Dock)donesleep 5loggedinuser=$(/bin/ls -l /dev/console | /usr/bin/awk '{ print $3 }')echo "$loggedinuser is logged on!"##### Set computer name from user nameloggedInUser=$(python3 -c 'from SystemConfiguration import SCDynamicStoreCopyConsoleUser; import sys; user

Hi All,While trying to setup SSO for our mac devices, we've discovered that this is a bit of a headache trying to work with Chrome unless the devices are enrolled in Intune (which we are not looking to do at the moment), so we are looking to switch our users over to Safari, as we have managed to get SSO up and running. Our issue is that some basics are missing, such as the home button - if this can be pushed out through a config file rather than getting every user to manually toggle it on this would save us a lot of hassle - and we would also like to set some general restrictions on things like; blocking installing extensions, block changing the default search engine etc (as these are student devices).If anyone could provide any pointers to configuring this it would be greatly appreciated! Cheers! 

Hi everyone, please, what is your best method to retrieve the uninstallation figures of a Mobile Device App in a dashboard, in order to monitor this ? 

Hi, I recently setup "Citrix Files" in our Self-Service to be available for users to install as needed to use with ShareFile. The installer runs correctly and installs everything, but Catalina blocks a system extention the app needs to run and only an admin can authenticate to allow it. How do I get around this? Thanks in advance.

Hello Jamf Nation! I am encountering a rather vexing issue with Forcepoint's Safari extension. The extension is prompting for users to enable it, however upon enabling the extension they are still prompted every few minutes that the extension is not enabled. Closing and reopening Safari causes the extension to once again show as disabled and continue to prompt the user to enable it. I've had mixed success with rebooting machines causing the extension to finally stay enabled however this has been incredibly inconsistent, sometimes requiring 2-3 reboots or sometimes not working at all. Has anyone else seen behavior like this with a Safari extension or have any pointers on where to even look with troubleshooting this? I admittedly don't have a very strong understanding of how extensions for Safari work and could use any and all advice! Thank you!

I have been able to successfully add dock items but I would like to remove several default items from student users docks.  Do I need to add them to the Dock Items and then delete them?  I don't see any information on how to remove default items like facetime, etc. I am new to jamf and have new macs to set up for our classroom labs.  Any help is appreciated.