Is it possible to proactively block application downloads through JAMF pro? For example, we determine and set up a whitelist of applications, and anything not on that list is blocked, rather than us finding it through our computer lists and removing it after the fact.

We're trying to initiate a Jamf Connect password change workflow from a policy, rather than from the Jamf Connect menubar item.I see there are options for opening menu items using URL schemes (open jamfconnect://) but there doesn't seem to be a Change Password option, and the action command (open jamfconnect://action/Change%20Password...) doesn't work.Anyone have a solution?

Does anybody have a way to look for Rapid 7 and it's version? it doesn't seem to put anything in the /Applications folder.

We are using apple business manager in my organazation.  Our jamf pro sync with azure ad , when we try to enroll a new mac os device its ask e-mail password but does not the accept . Because of that we cant pass this step and couldnt open the device.   

Good morning,I am having the hardest time trying to find where I disable Apple ID Login in Restrictions for Configuration Profiles for iPads. Can anyone point me to where that is? If it matters, the iPad OS I'm running is iOS 15.x.Thanks,llckhrt1

We are using Jamf Connect and Azure to sync accounts/passwords with MacOS.  The computers are not AD bound.  Is it possible to get Jamf to warn users when their password is set to expire (we have a company policy to reset every 90 days)? If not, what are other fellow admins doing in this case?

Reason for this post is to start a conversation around Jamf IDs.As of late, my Jamf ID is missing Organization email, organization association, certifications, as well as products.(Last I checked, I can still access support tickets sot this is a good thing)I reached out to support, and they had me create a seperate Jamf ID using my business email and I'm being told that this account will be tied to the organization.I asked for my Jamf certifications to be connected with my personal Jamf ID again.Is this really how we are doing this now?Having to maintain a private Jamf ID and work Jamf ID?There is a bit of discussion on this on Slack, however I wanted to share this information here, for those of us who are not using/not able to access Slack.

HelloAnyone here, which used the guide for the xcode installation from:Deploying Xcode on managed devices (jamf.com)everything works for me til i start to install it via self service. After downloading the pkgi receive in my log:no app at /Applications/Xcode.app, exiting I am using the script from:Configure Xcode post installation script with SDK download for Xcode 14 and 15 (github.com)#!/bin/sh export PATH=/usr/bin:/bin:/usr/sbin:/sbin xcodePath="/Applications/Xcode.app" if [ ! -e "$xcodePath" ]; then echo "no app at $xcodePath, exiting..." exit 1 fi # select Xcode xcode-select -s "$xcodePath" # accept license xcodebuild -license accept # install additional components xcodebuild -runFirstLaunch # add everyone (every local account) to developer group dseditgroup -o edit -a everyone -t group _developer # enable dev tools security DevToolsSecurity -enable # download platform SDK # all available platforms # xcodebuild -downloadAllPlatforms # update previously down

Hey so we use Jamf to deploy our Macs and recently whether it's a new Mac or one that's been wiped, we're unable to open and start OneDrive. Tried everything from uninstalling and installing from O365, installing from the microsoft page and so on. When running Onedrive I get an error saying Onedrive Couldn't Start, a system component is preventing OneDrive from starting. If I quit from Onedrive and try to start it again the error become We couldn't find the location of your onedrive folder, and the cycle repeats itself. Only thing I can find on the internet is involving Files on Demand.

Hi All,Just wondering .. Using the JAMF API - Can I check that prestage a macOS in enrolled in or part of? Rk

Hello everyone,I have received command entries from JAMF tech support to adjust our password policy that is reporting errors. I have been running these commands manually with a remote session with the user and it works. Is there a way to create Policies so that this will run without the user and myself involved? Reboot is not required but to run the commands requires user name and password in Terminal. On the user's Mac in Terminal run  sudo jamf removeframeworkOnce that completes stay in Terminal and  run  sudo profiles renew -type enrollmentAny help is much appreciated.  

Hi All, My end goal here is to force the local user (end-user) to update their password upon 2nd login (I will explain). Here is my current workflow for new hires (note: we don't have jamf connect) so I have to work with what I got.Current Workflow:1. Enroll the computer into pre-stage enrollment and let it cook.2. Create the local user (new hire) account in the create local account page in apple setup assistant. in this step we are manually creating a "temp" password 3. Log out of the current user's (local user) account and log into our jamfadmin account to finish manual set up steps (additional privacy permissions, re-naming hostname, enabling FV, etc)4. Log out of the jamfadmin account and shutdown.5. Deliver the laptop to the new hire with login information securely enclose. We leave it up to them to update their default password.So, with that being said, we now want to enforce our users to update their default/temp password to a secure one. After doing some research I ca

I tried creating shortcuts directly on iPads and it let me do that but after refreshing the profile they disappeared! I then found out about the Web Clips and put those in my profile and organised them on the Layout however they don't show on the iPads either!Can someone explain how I get URL shortcuts on to a home screen please!

I looked all over the internet, tried ChatGPT and can't find anything to allow a few websites to pop up windows.  This is affecting our Intune Integration when Safari opens and it goes to login.microsoftonline.com and device.microsoftonline.com. It take 2-3 times before we can successfully get through the enrollment.Does anyone know how to do this, I don't want to allow all pop-ups as I think that is dangerous. Apple isn't making this easy.  

We have been using Nudge as a means to prod users to update for a few years and it has been flawless until recently. In test machines Nudge is no longer running despite having the launch agent installed being included in our managed login item profile. Manually installing the Nudge suite causes the service to run, but it doesn't pick up its settings in our Nudge config profile (minimum OS and whatnot). Granted we created our Nudge config profile back with version 1.x. Comparing the json for 1.x to 2.x looks identical, so I don't think that is our issue. Has anyone experienced something like this? 

Anyone else having issues with the new update to the JAMF Student app?  After it updates it won't auto login any more and we have to un-assign and re-assign the device owner.

I haven't used the Software Updates feature before. In the past, I have tried performing a mass action using a static group for testing. Yesterday, I decided to do that for some of my hot spares on the bench to take them from 14.5 to 14.6 and discovered that we had enabled the Software Updates feature. This understandably removed that ability from an action, so I figured I would give it a try with an eye towards deferrals as the "killer app" of the process.We control updates on our active machines with some restrictions payload and restricted software, but the spares are a little more relaxed. The only thing they get is our software update payload, which is set to make sure updates are automatic and enabled:So I decided to take two of them, put them in a static group and run the following:This ran very much like previous experiences with the MDM action. Devices eventually handled the commands and downloading/staging commenced. I set one machine aside with the 'REBOOT(8)' man page open

We are looking at testing CrowdStrike for mobile, we currently use Cisco Security (DNS Security & Endpoint Visibility)I have created a new CS profile and when I first scoped it to one of my test devices I get Permission denied,  I can only get this to successfully install after I remove Cisco Security,  any suggestions on why both config's wont work on a single device,  appreciate it

So this may be a stupid question. All of the notifications that come from jamf policies (patch management for example) always show with the default jamf icon. Where do you set a custom image?

Hey everyone. I deployed a policy that runs a script which notifies users that they need to reboot their Macs. The policy is scoped to a Smart Group that contains users whose Macs have been up for 10 days or more. The issue I'm running into is that after the users reboot, they're seeing the notification again. My guess is that an inventory update isn't happening quickly enough after the reboot to remove them from the Smart Group. Can anyone help me configure this properly? Happy to provide any other details. Thanks in advance!

Greetings all, We're getting our Fall builds ready, and again I am facing the issue of automating the software installation for the Wacom tablets in our Industrial Design (17 Cintiq 27" panels) and Multimedia (10 Wacom 12" LCD tablets) labs.  I'd really like to not have to walk around to each one of these to individually allow the permissions they need (which is Wacom Technical Support's position). Does anyone have, or know of, a way to automate this, particularly in Jamf Pro, but I'll take anything.  We are running Big Sur on a variety of Mac types, but no M1's have Wacoms hooked to them yet.  There were a variety of suggestions in Jamf Nation last year, but most of them were for Mojave and we were unable to get them to work successfully in Catalina. Thanks in advance for any suggestions.

I am working on a script that uses Swift Dialog to prompt users who have been running their Macs for a long time to reboot. The script creates a launch daemon after getting user input from Swift Dialog. The user is offered a drop down menu with 4 options: Reboot Now, 1 hour, 4 hours, 1 day. The StartInterval for the launch daemon gets set based on the option the user chooses from the drop down menu. Users are allowed 3 deferrals which I track using a PLIST. After the time set in the StartInterval elapses, the user is able to choose a different option. This changes the StartInterval to a new value. I included a step in the script to bootout the launch daemon just before it gets deleted and replaced with a new one containing the new StartInterval. When the new launch daemon is installed, there's a step to bootstrap it. I see in the policy log that the bootout step is failing, which then leads to the bootstrap step also failing since the launch daemon is still running.  Boot-out fail

We're using Jamf Pro 10.50 on prem in an educational environment.In the past we have used the MUT to assign devices to specific users. As soon as the device is assigned, the MDM automatically creates an EDU profile configuration and installs it on the device so that the user is able to use Apple classroom as either a teacher or student - whatever their account specifies.Now, if we use the MUT for a device assignment, it appears to properly assign the device to the user and apps/polices/etc work appropriately for the assigned user, but the EDU config is not installed on the device.If we manually (find object, Inventory, User & Location, search for user and save change there) assign the device to the same user, it then creates and installs the EDU config on the device.Has anyone else seen this or does anyone have ideas on what is going on? @mlev The log looks normal.I downloaded clean templates.It does appear to have set the device name and username as we set in the CSV use

Hi All,We have a few laptops that are actively checking in and performing inventory updates however, there are a couple commands that have been pending for a week, like the "lock device" command.I have attempted the following in an attempt to fix:Canceling all pending commandsSending a blank pushAny ideas on what could be the issue? The lock command has worked well in the past and the only thing recently changed was the MacOS updates(beta) was turned on and we've been upgrading people from 14.0 to 14.6. All devices were already on Sonoma before the issue arose.

Last week, maybe 2 or 3 days after our Jamf instance went up to 10.48, we've been running into issues with Automated Device Enrollment.During a fresh install of macOS 13.4, we get stuck at the Remote Management screen, where the message "Waiting for management server" hangs on the screen, seemingly forever. Sometimes, after 20 or so minutes a laptop might decide to move on to the User Account creation screen.If we reboot these stuck laptops, then navigate back through Set Up, we can create Users and see that they have all the Managed Profiles installed, but need to run "sudo profiles renew -type enrollment" in Terminal before Jamf fully installs itself on the devices and then runs policies as normal.Any thoughts or similar issues?