Hi everyone,I'm in the process of setting up our instance of Jamf School and I got stuck on the Exchange setup. I created a separate Profile for iOS devices for this and was able to add most of the information so the users could just type in their password to authenticate. The only thing I was not able to do in Jamf School was to add the "Domain", which is needed for the process. If I set up manually on the device, the "Domain" field says "optional", but it is indeed the only difference, that makes the process successful for me.Does anyone know of a way to implement this in the Jamf Profile?Best,Wadim

Hello, does macOS 10.13 keep an authentication log anywhere? I don't see the accountpolicy.log in /var/log anymore... so Im assuming Apple moved it into log facility? I need to audit a Mac for login success/fail attempts at the screensaver/login window. Any help would be appreciated!

Hey everyone,I wanted to know what smart group criteria I can use that once a brand new mac device gets enrolled with jamf it will appear in the smart group. 

We introduced a notification capability for App Installers deployments in September 2022 and have continued to refine these notifications since that time. The original intent was to present a notification to the end users that as closely resembled the particular app that was being updated as possible. Unfortunately, we were unable to present a consistent notification experience which has led to end user confusion.Issues with the current process:Notification icons – For some applications we can show an original app icon, while for others we need to replace it with a generic “exclamation mark” icon. This may be confusing for the end user.BundleID for additional configuration profiles – If the Install supporting configuration profiles checkbox is selected, apps with a BundleID different than com.jamf.appinstallers.notify are configured to show permanent notifications (Alerts alert type). Because this setting is forced by the configuration profile, an end user cannot turn it off. As a resu

Hi all,I'm relatively new to using MDMs and to Jamf School, so forgive my ignorance.  Is there a way to push Google email accounts along with the password to iPads?  Many of the students at the school I work for forget their passwords on a somewhat regular basis.  From what I've been able to find on the topic so far, this is only possible with Jamf Connect?  I have also tried looking into using certs, but that seems to only be an option with Jamf Pro? Any help is greatly appreciated! Josh

Hello Everyone,We are adding Active directory certificate for users. But sometimes jamf remove the configuration profile automaticly. Why does JamfPro do that?     

Hello AllIm trying to create an Extension Attribute that searches the JAMF log in /private/var/log for a particular word (an error code) and if its there to report a positive or negative.  Any idea of the scripting for this?  

Hello All!We are running a policy that resets the password on a particular account every month.  Its works on some machines but doesnt work on others. The policy returns the logs and lists this error on the machines it DOESNT work on:Script result: Setting username for API updateSetting password for API update 2024-04-02 09:13:09.326 sysadminctl[24327:1393264] ### Error:-14167 File:/AppleInternal/Library/BuildRoots/a0876c02-1788-11ed-b9c4-96898e02b808/Library/Caches/com.apple.xbs/Sources/Admin_sysadminctl/addremoveuser/main.m Line:377 2024-04-02 09:13:09.327 sysadminctl[24327:1393264] Operation is not permitted without secure token unlock. Im trying to get an idea of how many machines this error is happening on. I thought that this error would be documented in the jamf log in /private/var/jamf so I figured I would make an EA that searches that log for the error, but I came to find find out that the error is NOT documented in that log or any log on the Mac (as far as I can see

Is there any way we can clear safari tabs at the start of each school day in Jamf School? It would be helpful to stop students caching websites before the profiles switch over to school mode.Thanks

Not sure if I am the only one experiencing this or not. We are using code 42 and some users folder /Library/Application\\ Support/CrashPlan was deleted. The app cannot be removed because it is locked and the uninstall script cannot be run because the aforementioned folder has been deleted. We also cannot reinstall the backup agent as we get a "Install failed contact the software manufacturer" error message. Has anybody experienced this and found a fix? I tried using the uninstall script from another computer but it failed saying that the script is not originally from the computer. 

Details Executing Policy Install Cisco Secure Client 5Downloading Cisco Secure Client 5.1.pkg...Downloading https.jamfcloud.com/jcds/downloads/Cisco%20Secure%20Client%205.1.pkg...Verifying package integrity...Installing Cisco Secure Client 5.1.pkg...Installation failed. The installer reported: installer: Package name isinstaller: Installing at base path / installer: The install failed. (The Installer encountered an error that caused the installation to fail. Contact the software manufacturer for assistance. The package is attempting to install content to the system volume.)

Unable to add screenshots?

We're rolling this out next week. Anyone have issues and if so, what were they?

Looking to pass custom scopes to jamf connect using entra ID. I've attempted to add it a few times, but am doing something wrong. Everytime i attempt to use the scope, the app breaks. Wondering if anyone else has gone through this process!

We encountered a problem with our APN certificate; it was mistakenly replaced rather than renewed. We had to track down the previous Apple ID to renew and restore it, preventing the need to re-enroll all devices.Additionally, an automated enrollment token expired. A technician uploaded a new token from our Apple Business Manager account and created a new pre-stage profile, assigning all devices to it. However, the old token still appears in settings > global > automated enrollment, marked with a yellow alert and a "sync failed" message; the last sync for both tokens occurred one minute ago.A iOS device was wiped for re-enrollment and is now stuck on the remote management screen displaying"Jamf Pro enrollment issues, the configuration profile could not be downloaded the MDM server certificate is invalid."Although initially enrolled with the now expired token, it was assigned to to the new profile using the non expired automated enrollment instance. No devices remain assigned to th

Greetings all,We are in the very earliest stages of setting up Okta.  I'm currently working on configuring our JSS Dev environment to use Okta for SSO.I'm working directly with our internal Identity Management team who manages our Okta instance.  They setup the integration on the Okta side, but I have no idea how they went about it.In the JSS dev, I've enabled SSO using Okta, added the necessary metadata URL provided by the IAM team, etc.When attempting a login, I am presented with the expected Okta user name screen, followed by the password screen, suggesting that the login process is working (and I've received notifications of a successful login), but then directed to an error message:Safari can't find the server.Safari can't open the page "https://https//<mysandbox>.jamfcloud.com/saml/SSO" because the Safari can't find the server "https".Note the extra "https// in the Url.The Okta team says everything is OK on their end, and I've reviewed the JSS SSO settings with th

Hi,if i want to be sure that after deployment with Jamf a file (i.e /usr/local/bin/dockutil) persists on the mac, what is best practice to accomplish that with jamf?I think a combination of Extension Attributes, Smart Groups and Policies will work, but I'm wondering if anyone has figured out what works best yet. Maybe so that it is universally applicable and easily reusable.Maybe someone has written an article about it?Many thanks in advance 

Monterey: https://swcdn.apple.com/content/downloads/44/03/052-69776-A_IHW739H9C3/904vsye1mrk5aq7zghtggnknxt40s9rz2d/Safari17.4.1MontereyAuto.pkg Ventura: https://swcdn.apple.com/content/downloads/32/05/052-69305-A_SZ6GUIGGCN/qsqqizujnfycg5iqr2re99l9qbpofbvi3k/Safari17.4.1VenturaAuto.pkg As always, remember that you cannot downgrade Safari without reinstalling macOS.

Hi all!I've created a nice little Extension Attribute which will list any pending updates for installed Adobe Creative Cloud applications. #!/bin/bash # Check if the Adobe Remote Update Manager (AUSST) is installed if [ ! -e "/usr/local/bin/RemoteUpdateManager" ]; then echo "<result>Adobe Remote Update Manager (AUSST) not found.</result>" exit 1 fi # Run the Adobe Remote Update Manager and capture the output output=$(sudo /usr/local/bin/RemoteUpdateManager --action=list) # Check if no updates are available if echo "$output" | grep -q "No new applicable Updates. Seems like all products are up-to-date."; then echo "<result>No new applicable Updates. Seems like all products are up-to-date.</result>" else # Filter and print the available updates updates=$(echo "$output" | grep -o "\\([A-Z]\\+\\)\\/[0-9.]\\+\\/[a-zA-Z0-9-]\\+" | grep -E "ACR|PS|AI|ID|AE|PR|AU|DW|FL|ILST|PSST|IDSN|AICY|PSCC|IDCC|AECC") if [ -n "$updates" ]; then

Hey All,Still pretty fresh to being a JAMF admin and had some questions. When I picked it up I know that we had a local, hidden, admin account created during the PreStage and that works wonders when something auto enrolls. Although on the off chance that one of us have to manually enroll the device, the local account we create does not always populate. I see that in the Global settings there is a section for User-initiated enrollment, will this assist with creating local accounts when someone does it themselves or am I misunderstanding this? Is there a better way to make sure the local account we want get setup when someone manually enrolls a device?

I created a package using jamf composer, These are the error messages I get when trying to install. For some reasons the package install works on newer devices (2020 MBAs) and failing on older devices (2017 MBAs)After searching for some suggestions I changed the package validation to never instead of "when checksum is present". This is the error after changing that setting. Any suggestions why it is not installing on the older MBAs? 

Hi, We use the Jamf SCCM Plug-in. With Jamf Pro 11.5 removing the ability to use basic API authentication, what solutions are you moving to? Any workarounds? All ears and curious about what other Jamf SCCM Plug-in customers are doing. Thanks a lot...   API basic authentication deprecation In Jamf Pro version 11.5, the ability to use basic API authentication will be removed. Before upgrading to this version, review any scripts or extension attributes using API calls and update the authentication method to use a bearer token.  

Hey everyone, Is there a way to increase the size of the Jamf Connect login window? And if so how can I go about doing that?

Hello everybody !I'm encountering a rather blocking problem in JAMF Pro.I need to enable the AirDrop & Handoff option in the General tab of System Settings to allow users to configure AirDrop.I have excluded my MAC from all the configuration profiles that I deploy, but despite this, I arrive on the page 'AirDrop and Handoff settings are not available' "These settings are controlled by a profile", while the button to access the settings is not blocked. Do you have any idea how to unlock these settings? Thank you !

whats the best appoach to deploy new Jamf Protect plan in to machines?currently we have a Default plan that is deployed to all Macs using configuration profiles in Jamf Pro. I want to either deploy a new plan that has tamper prevention enabled or edit an existing one to enable it.what is the best way to fix this?it’s enough to edit the current profile and deploy it in Jamf Pro and I don’t have to create a new one?