Sorry for the weird title, but I just want to check with the community before moving forward! We have a fully setup Jamf environment where everything is humming along well (enough). We have Okta and don't utilize it for Users/Groups/Buildings/etc and would like to start (unfortunately Okta isn't native for Directory Integration yet. Vote for it here: https://ideas.jamf.com/ideas/JN-I-16061) I've setup Okta successfully in our sandbox Jamf Pro server and everything just fine so we're ready to move forward to Prod but we're not sure if anything will break. Since we don't have any policies, groups, extension attributes, that use LDAP in any way, we don't expect anything to take effect until we start using those, but we also weren't sure. Can anybody confirm that adding an LDAP server to Jamf Pro just adds the ability to start using going forward? Rather than take over some part of your server and break/change things immediately? Thanks a ton!

Hello all,I have a two-part question... Has anyone ever installed the Datadog agent into JamfPro so it can be accessed through SelfService? And do I need to get a script from Datadog to get it configured so it can be installed on the Mac using SelfService?I'm planning to get the free trial of Datadog, but I want to see if this can be done since the trial is only for 14 days. I want to be able to show my management that Datadog works and can be available for all of our users using SelfService. Thanks for any feedback :) 

Does anyone have suggestions how to maintain iPads in the Return to Service app scope after it is run? The iPads are dropped from static groups, and I can't think of a smart group that will retain the iPad after it is erased (other than all iPads and I don't want scope this to all iPads).

Hi Mac Community,I'm trying to correctly deploy Unreal to my lab environment and I'm having a time making this work smoothly. My lab setup consists of users logging with standard rights along with accounts being removed at every startup.My issue is, when Unreal is launched, the student has to wait until all the "Compiling Shaders" are finished which can take awhile. I'm aware of a setting called Global Derived Date Cache folder which I've pointed to the /User/Shared/Epic location but it doesn't seem to respect it. Anyone run unto this with a solution? I was hoping to be able to capture this cache folder on a test machine and have it pushed to the full lab. The times that I have done this it still goes through the Compiling Shaders process.

Hi everyone,I am looking to get in touch with any MSPs who are looking to automate their work and realise that the future of the MSP industry at the SMB level is end-user self service.Any one who fits the bill please dm me!

All,I've got an end user who I'm doing a favor for, he's retiring and buying a new Mac which I'm setting up for him. I'd like to use migration assistant to move all his stuff over, while just removing the Jamf stuff-- I don't want the self service app going over, and I certainly don't want any configuration profiles moving over.I haven't tried this in the past, but if I use migration assistant, and JUST move applications and the user folder, not checking any other boxes, will it also bring over configuration profiles, or other managed settings? All the apps on there are either free, site licenses (Which he won't be able to use once he's not connected to our network), or apps he purchased himself, so we're not worried about him taking any licenses he's not supposed to have. My big concern is that he's got an AD account, and we'll need to move him to a local account. Is this possible with migration assistant? Looking forward to hearing any possible suggestions that others have for h

Hello Jamf Nation! In this version Managed Software Updates are now out of "beta" status and ready to test! We've also resolved a few key issues such as PI-118519 and PI-117278.  You can find more information in the release notes when you enroll. How to join the beta: Enroll in the Beta Program under Product Feedback at account.jamf.com. Once you enroll you'll receive an invitation to join the Beta Forum, click "Join this group Hub" to gain access. Email beta@jamf.com with questions.The beta program is covered by the Jamf non-disclosure agreement; please do not share any information regarding your testing on any public forum, including the non-beta areas of Jamf Nation. Use the Jamf Nation Beta Forum or contact Jamf via beta@jamf.com with any questions. Thank you to all who participate in this program!

Does anyone have input on Docking station,  i have been using the J5 Dock's but they see to be hit or miss with the M3 chips i have use LandingZone in the past and they seem to be good but would like to not have to order based on the model type looking for RJ45 2-4 monitor support and 2 USB A and C can always add a hub for more ports

Hi everyone. I am using Composer to build packages a different MDM and really enjoying it.One question I have- am I missing on updates/upgrades? How do I check if a new version is available? Is it paid/free? Where to look for info? Couldn't find any useful info on the product page itself. Right now I have 10.40.0-[lots of digits].

Hey Everyone,Ran into an issue today that was out of the blue and fun I think would be helpful for some of you. Earlier today a couple of my users were signed into Teams and sat them at a disconnected screen and to sign back in. After relaunching Teams it brought them to a "We Ran Into Trouble 1002" and a "Something Went Wrong 1001(or 1000)" error page. Effectively making them unable to open and even attempt to sign into Teams.Troubleshooting through this and blowing out the cache in ~/Library/Application\\ Support/Microsoft/Teams/Cache and a restart did not resolve it and there are no Microsoft Teams Identities Cache entries in the Keychain to remove either if you are using either or both Jamf Connect and the Microsoft SSO Extension. To resolve this I had to delete the Teams Cache folder from the machine, un-scope the MS SSO Extension to the device and after a restart the user is prompted to sign into Teams again without an issue. I believe this is stemming from an issue of users

Have a Mac that's lost contact with Jamf...Trying to update the MDM profile with "sudo profiles renew -type enrollment" but end up with a "different server URL" error.  (I guess the prestage changed)sudo jamf removemdmprofile didn't work - maybe because the machine has Ventura?When I ran jamf policy I got "device signature error"After running jamf removeframework the "bad" MDM profile persists. ...  Is the only solution to wipe the device or have I missed something?

We have limited number of licenses for MainStage, just enough for the number of teachers. We're now replacing their ageing Macbooks with newer ones but they can't install the app using self-service because there are no free licenses. How have others worked around this (without purchasing extra licenses)? I have created a script that deletes the app and do a recon (the record for the device in Jamf no longer shows the app as installed in inventory) but the license is not released (Mac Apps still show all licenses are used). Is there a delay when this gets updated or do I really have to wipe the old device before the record is updated?

Has anyone had any luck getting defender config profiles to block USB storage in jamf? I had gotten it to work using the guide provided by Microsoft a few months ago, but recently it appears to no longer be working. We've tried changing the plist that microsoft provided in the config profile to disable USB but it just doesnt appear to work. If anyones in a similar situation and gotten it to work, id love to know what you did.  Our company isnt looking to use jamf protect just for the USB blocking. 

I'm trying to create a smart group to remove applications.  Normally I just do application title 'has' Application.app.   However, I'm finding users have renamed 'Application.app' to other values, like 'Application (1234).app or 'Application (112233) (445566).app' and so on, probably to maintain specific build numbers of the app.     Is there any smart group criteria that I could use to catch all those modified names?  I tried the `Application %.app`  wildcard in the name, but that returned 0 results.      

Hi,I am running Mac OS X 13.3.1 for 100 iMacs, after a schedule maintenance update, I would want to make sure student account is able to login to the iMac. I used to be able to use osascript but now it give an error keystroke not supported.`osascript -e 'tell application "System Events"' -e 'keystroke "admin"' -e 'keystroke tab' -e 'delay 0.5' -e 'keystroke "abcd1234"' -e 'delay 3.5' -e 'keystroke return' -e 'keystroke return' -e 'end tell'`I was reading the articles but not getting any results.https://community.jamf.com/t5/jamf-pro/10-7-auto-login-with-osascript-at-welcome-screen-just-isn-t/m-p/52599https://community.jamf.com/t5/jamf-pro/issue-running-a-script-at-the-login-screen-with-casper-remote/m-p/128877#M117994Any others successful method that can share?Thank you 

I've read in all the other articles/discussions on people having the same issues as me in deploying the new version of AMP... but have yet to see a clear-cut solution on getting this deployed... I've seen the "solution" of finding the hidden policy.xml file in the DMG, but am still a little confused about that part.... Can anyone (maybe not exactly) step-by-step have an easier way of deploying this?

This isn't a big deal, but it worked when I tested over a month ago. When running installing the client, it does the update correctly and removes the old icon, but it's not adding the new icon to the end of the dock. If I run the update without the old agent installed, it installs and adds the icon to the end of the dock, just doesn't do it when there is a previous version installed.

Hello, I would like to configure the "Wait to send Messages for -+ " under the "Undo Send" to 20 seconds for all MacBook Outlook clients through JAMF Pro. Can this be done?

I was having issues getting smartcards to work on my M2 MacBooks. I'm able to pair the card and unlock the system using the card, however when it shuts down and gets to the FV2 logon it says " smartcard configuration is invalid for this account"  Has anyone else run into this? Any ideas where to start? Thanks,

Hi, When trying to download Self Service from the JSS (JAMF cloud), I am met with the above error message. I have performed this ask previously with on premise solutions and had no problem - but it seems unless I automatically install it (which I don't want to do as it will install for everyone) I cannot use the app and test out the functionality. Is there a way around this?

As of macOS Sonoma 14.4 using "/System/Library/PrivateFrameworks/Apple80211.framework/Versions/A/Resources/airport --getinfo" no longer returns info about the active Wi-Fi connection. If you want to collect the active SSID for macOS 14.4 or later you can use the wdutil tool and here's an EA to do that:    #!/bin/sh # EA - ActiveSSID # # Note: Using wdutil instead of networksetup so I don't need to know what # interface is Wi-Fi # Returns the currently active SSID activeSSID=$(/usr/bin/wdutil info | /usr/bin/awk '/SSID :/ { print $NF }') echo "<result>$activeSSID</result>"  

We have a bunch of machines that have done their initial check-in but have not inventoried yet.As such the Console reports them as having the name "DEP - sernum", I need a smart group that can capture those devices so I can use it to exclude the devices from other Smart Groups that produce E-Mail Security alerts.As an example ....We have an Extension Attribute that checks the root user, if it has been enabled it returns "Enabled" if not it returns "Disabled" We then have a security Smart Group, that checks the attribute and populates with devices that have the "Enabled" state, and sends a Security Alert to relevant people.However we are seeing that group populate and trigger Alert E-Mail for devices named "DEP - sernum" and we want to exclude those devices as they are in an initial check in limbo. We tried a simple Computer Name like "DEP -" Criteria, but it seems to ignore those devices in any Computer Name based criteria.Any advice would be greatly appreciated. 

Hello-We've recently been setting up our iOS/iPad infrastructure, and are trying to get a configuration for shared iPads ready. We are generally a microsoft org so I looked into and configured the Microsoft Authenticator app + the Microsoft Authenticator Enterprise SSO extension (or whatever it is called), and to my chagrin it still appears to be in preview mode (I think). The other solution I've been looking into is just putting the iPads in shared mode and then syncing managed AppleIDs from EntraID for users to log in. My issue with that solution is there appears to be no (easy) way to enforce that users use our managed appleID domain at login. This is really frustrating, because without a way to ensure users are using our managed AppleIDs, our org will likely have to plainly disable most features that make AppleIDs useful (and we'd like to make sure people are using only managed accounts on our devices). Does anybody have a recommendation to either serve SSO directly from EntraID or

I'm working on a new post install script for Nudge. Delivering Nudge settings using a profile has not been as reliable as I would like it to be. I found Dan Snelson's Nudge post install script (https://github.com/dan-snelson/Nudge-Post-install/wiki) and it has been a good starting point. Its command to load the launch agent doesn't work. My understanding is that we need to use Launchctl bootstrap instead of Launchctl load as we did with older versions of macOS. I have other scripts that load launch daemons that use bootstrap/bootout. These work well. Since a launch agent loads when a user logs in, it's different. What is the proper command to load a launch agent using a script deployed by Jamf Pro? If I can get this one thing to work, it pretty much wraps up getting this done. 

Hello, So I'm circling back to this as last summer I have been having the same issue I am experiencing now. Which is Mac Apps both App Store and Jamf Catalog do not work at all. I have created a test with Loading the 2024 Creative Cloud suite put my test mac into a group and made sure mac was online, connected, and open. I send off the App to automatically install but absolutely nothing happens. I tried with a couple macs I have here to test. Nothing works, I've checked our firewalls to make sure nothing in there is blocking anything, and nothing. I dont know if someone knows some way of better troubleshooting or finding out where in the process of software install it is. We need to do a mass upgrade this upcoming weeks it would be nice to use this feature instead of making bunch of profiles and scripts.