Hi there,I try to remove all "old" users from our iMacs, managed with JAMF School. The useres have an AD account and during first login on an iMac we create a local (mobil) account on the mac. At the end of the year we want to rmove all these users and there data.If I run a "sudo /usr/sbin/sysadminctl -deleteUser $user" on the client, the user is totally removed (after I once gave the terminal full access to the drive in system preferences). But if I run a JAMF Script with the same command, I got the error:### Error:-14120 File:/AppleInternal/Library/BuildRoots/91a344b1-f985-11ee-b563-fe8bc7981bff/Library/Caches/com.apple.xbs/Sources/Admin/DSRecord.m Line:563Nearly the same, if using the command "sudo dscl . delete /Users/$user": dscl DS Error: -14120 (eDSPermissionError)All users, the first local Admin and root have "Secure Token" enabled. After I disabled System Integrity Protection in rescue mode with "csrutil disable", the JAMF Script is doing the job without error, but this is no

Hello dear Community,overnight the entire login screen disappeared two managed silicon Macs, MacOS 14.5.The login screen only shows a guest account, which is not available either because the FileVault is actived.I was able to access the hard drive using Target Mode and the data and user folders are still there. Has this ever happened to anyone? What could be the causes? I would be grateful for any tips.

I have added the OneDrive app from App Store via Jamf Pro for our domain networked iMacs. Installation of OneDrive on iMac is successful, however, when trying to log in as a user I keep seeing the error: OneDrive Files On-Demand didn't start. Please restart your computer and try again. Error code: -1912600610 I have tried all the fixes via terminal commands to enable files on demand, but the error still shows on the iMac. Has anyone experienced this with new iMacs on Sonoma 14.3? Is there another way to get this working? I have unscoped and rescoped the OneDrive just to make sure but still the same. Thanks

For those that have implemented Memcached for your on-prem environments, what kind of hardware specs did you give your server? Looking at the latest release notes, I saw that Ehcache has been deprecated and Memcached is now required.

Is it possible to run a report on which devices have a passcode assigned?

Trying to get the latest Apple Silicon Adobe installer to work. Anyone done it very recently successfully?I used to use this:https://community.jamf.com/t5/jamf-school/adobe-creative-cloud-install/m-p/253089/highlight/true?lightbox-message-images-253102=12661i385B93C05EBFE0B5#M574But the most recently downloaded version downloads a pkg (that JAMF School won't accept.  So I tried compressing the pkg per this:https://community.jamf.com/t5/jamf-pro/adobe-product-package-fails-to-install/m-p/301598And that didn't work. I also tried putting the new pkg inside a folder and using composer and the procedure from the first link and that didn't work either.Anyone have something that does?

Hii need help.We  want to monitor Time Machine. If Time Machine is disabled on Macs, Jamf Protect should trigger an alert and notify me. In the custom analytics, there is a sensor type called "File System Event" that can monitor which files are created, updated, or deleted. The question is, is it possible in Jamf Protect to match the content of files (plist) when creating custom analytics? For example, to search for a key "LastKnownEncryptionState" in /Library/Preferences/com.apple.TimeMachine.plist?We also want to monitor the firewall . If users disable them, we need to be notified. In Jamf Protect, we can create custom analytics and upload scripts. I have already implemented this for the firewall. When I use the terminal and execute the command 'socketfirewallfw', Jamf Protect is alerted and I receive a notification. However, Jamf Protect does not get alerted when I disable the firewall through the System Preferences on the desktop.please with examples :)Thanks

hello. Does anybody know how to modify the password requirements to remove this requirement "Not have two consecutive, or three sequential characters". I checked all over JAMF and i looked at apple's pwpolicy and there is nothing that shows that requirements. Our computers are not attached to AD. Thank you!

Hello,After going through efforts in attempt to get the AutoDesk Maya application packaged up, wanted to post here with regards to how I did it so that others can leverage it (its a culmination of multiple different techniques, and some digging deep to get the right scripting language). Maya includes Arnold Render and will be installed along with Maya. There are two passes that need to occur, as I had found that the licensing components don't always work the first time around.1) Mount the dmg acquired from AutoDesk and copy the 'Install Maya 2024.app' to /tmp/, and remove all the spacing to just 'InstallMaya2024.app'2) Leverage this script (test local first, then attach as post-installation script in WhiteBox Packages) #!/bin/sh #Application Info (For each AutoDesk app, change the app/year/pKey/package) app="Maya" year="2024" pKey="Product Key" #Location where the application file is going to sit (remove the spaces) pkgpath="/tmp/InstallMaya2024.app" #For Redundant Servers (3),

How is everyone capturing new print qeue now jamf has removed Jamf admin which had a nice feature to do it. This Jamf alternative https://github.com/jamf/jamf-printer-managerHowever it didnt seem to pickup the new print qeue I created.ThanksTom  

Hello, we are preparing for Jamf 11.6 upgrade and losing JAMF Admin.Our JAMF Pro is on-prem with local file distribution point - so the way we are going to manage packages is copying it directly to distribution point folder, then creating a matching record in JAMF Pro packages.Recently I was going through a list of our packages, and noticed some of them have pkg.zip format, not just pkg or dmg. Moreover, when I tried to re-upload new versions of those apps packages as pkg - JAMF Admin converted them to pkg.zip again, while the size of those packages wasn't big.Do you know, why is JAMF Admin doing that?  And what are the possible consequences if we upload just pkg, not pkg.zip for those apps to distribution point in future, when JAMF Admin is gone?Thank you!

We have 300 Macs. Most of our users are developers with standard accounts, but they have the SAP Privileges app installed which allows them to elevate their account to admin.We notice a lot of unapproved apps are installed. We need to stop this, so we are going to release the necessary apps to Self Service. We are planning to remove SAP Privileges from all users or limit SAP Privileges only to certain users.Couple questions about this:1. Once we have released the necessary apps to Self Service, is there any way to prevent users with SAP Privileges from installing other apps from other places (App Store, DMG and PKF files)? Dont want to use JAMF restricted software. Might be using Santa.2. We know that adding printers require admin rights. What else should be configured in JAMF in advance to allow users to continue working normally and to minimize the number of contacts to the Service Desk? Which user tasks really require admin rights?3. Are you still allowing adminstrator accounts? Why

Hi Everyone, I am new to Jamf Pro and i need a bash script to upgrade brew in our environment. Command i want to run - "brew upgrade xz". Could someone please help me with the shell script on priority? Thanks

how to do custom subdomain for jamfcloud to point my own domain

Microsoft has released Company Portal 5.2401.2 with support for Platform SSO.Users with SSO profiles receive a pop-up requesting registration with Azure Account to synchronize the local Mac password.Has anyone had this experience?

Been playing with this today I have everything working fine except for the DefaultSearchengine. it won't switch to Ecosia (don't ask)I created 2 versions one witha forced extension for the ecosia plugin. But this locks the user from being able to change setting..without extension<?xml version="1.0" encoding="UTF-8"?><!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"><plist version="1.0"><dict><key>DefaultSearchProviderEnabled</key><true/><key>DefaultSearchProviderName</key><string>Ecosia</string><key>DefaultSearchProviderSearchURL</key><string>https://www.ecosia.org/search?tt=</string><key>HomepageIsNewTabPage</key><false/><key>HomepageLocation</key><string>**********</string><key>NewTabPageLocation</key><string>https://www.ecosia.org/?c=en</string><key>RestoreOnStartup</ke

I recently had a user complain to one of our technicians that the low power mode setting requires admin credentials to modify. A vast majority of the macs in our fleet are laptops, and I don't mind letting users change this setting on the fly. Looking into it online, most folks have said to allow system.preferences.energysaver, but it doesn't look like that is actually linked to the low power mode option at all. Is there another key I can use to modify the behavior of low power mode in the battery pane? Thanks.

Dear Team,I use the profile to enforce password policy for MAC OS computer.But sometimes, the user reported that the password is not meet requirement even though the password typing does meeting the requirement.Can I know  anyone has meet this issue yet?     

Hi! New to Jamf and discovering all the APIs! I wanted to find out if there is an API command to Unenroll an iOS device from Jamf? I can see that we have a Deletes a mobile device enrollment profile by ID API, does this have the same result of removing the enrolled profile and all the configs from the managed iOS device in Jamf.  

Hello everyone,I hope to find some help here with our issue. We are using the Kerberos SSO Extension to synchronize the passwords of Mac users with their Active Directory (AD) passwords.During initial setup, the user logs in with their AD account, followed by a password synchronization window. Here, they enter both their AD password and the Mac password to synchronize them.This process works initially.However, we have a department at one location experiencing an issue where the password synchronization window pops up as many as 50 times a day. It doesn’t matter whether a password is entered or if someone just clicks "cancel".We have reinstalled all the Macs at this location. Everything was fine for about a month, and then the problem gradually started again.I went to the location with my MacBook and did not experience the problem there. The colleagues also have this issue at home over VPN.All are using macOS 14.4.1. However, the problem was also present in previous versions, including

Hello everyone, I've been searching high and low for a way to be able to update the username in a VPN profile based on the user who is logged in. We are currently using a configuration profile which works only when only 1 person uses a Macbook but as soon as a 2nd user logs in, the username of the 1st user remains in the VPN settings when the 2nd user tries to connect. Has anyone managed to find a way around this?

Hello everyone, I would like to know if it is possible to deploy pkg from a url. The reason I'm asking is because the linked url contains a version of the pkg that automatically logs in our agent. If I simply download the pkg of the agent and store it on a cloud or other distribution point, it simply installs a generic agent which then needs to be logged into. You can understand how it’d be problematic to log into every computer individually after the agent has been installed. Atera has a terminal command that allows one to download an instance of their agent with a url. This instance automatically logs in the user into the linked Atera environment upon completion of the install through terminal. Does anyone know of a way to use Jamf Pro to ease that process so the agent of the url can be deployed on computers rather than the generic one from the pkg file? Thank you.

Hi all  i tried all to deploy the 1 password Google Chrome extension but it is not working did anybody do that and able help for me 

What are we talking about? Handling json in the macOS shell of your choosing. Why? Because there still isn't a great way to do this natively, it's extremely useful given how many macOS binaries & logs output json-ish data, and, there are ways of working around this limitation. Arg-nauts is an unforgivable pun, however, there are some real explorers in this area. I rounded some of them up here: https://community.jamf.com/t5/jamf-nation/firefoxy/td-p/266970 I will try to be a bit more exhaustive this time... • From the crafty Joel Brunner (you may know him as @brunerd...) jpt: https://www.brunerd.com/blog/2022/02/01/jpt-1-0-can-deal-with-multiple-json-texts/ljt: https://www.brunerd.com/blog/2022/02/22/ljt-1-0-0-a-little-json-tool-for-your-shell-script/ I have used ljt in production. It's lightweight & works a treat. Once you're on Joel's blog, check out ALL of his json related posts! • The post below inspired much ado in the Mac Admins Slack channels rega

With recent IOS updates, the "Bringing Devices Together" settings reverts to default despite users toggling it off. This is problematic because some users carry both a work phone and a personal phone while on duty. The person may toggle off this setting in the Airdrop settings menu, only to have it toggle back on with IOS updates. We would like the option to keep Airdrop on but toggle off this setting in a persistent way or turn off device proximity notifications, because it's annoying to the users. Any thoughts on how to do this?