I'm testing a script, but looking for a better suggestion that runs silently without any user invention. Running the uninstaller app isn't ideal.  #!/bin/bash# Path to the uninstallation appsUNINSTALL_APP="/Applications/Cisco/Uninstall Cisco Secure Client.app"DART_UNINSTALL_APP="/Applications/Cisco/Uninstall Cisco Secure Client - DART.app"# Check if the uninstall app exists and execute it with sudoif [ -e "$UNINSTALL_APP" ]; thenecho "Uninstalling Cisco Secure Client..."sudo open "$UNINSTALL_APP"elseecho "Cisco Secure Client uninstallation app not found."fi# Check if the DART uninstall app exists and execute it with sudoif [ -e "$DART_UNINSTALL_APP" ]; thenecho "Uninstalling Cisco Secure Client - DART..."sudo open "$DART_UNINSTALL_APP"elseecho "Cisco Secure Client - DART uninstallation app not found."fi

Hi Jamf Nation Users,We wanted to let you know that starting tomorrow, March 20th at 9AM CET (2AM CT), we will be making some changes to the Jamf Nation Feature Requests portal that will require us to temporarily take down the space. We expect to be back online by Friday, March 22nd, at 4PM CET (9AM CT).During that time, we’ll perform some maintenance that will make the Jamf Nation Feature Request portal a more intuitive place for users when creating new ideas (or browsing existing ones). This change will also make it easier for the Jamf Product team to review your feature requests and communicate with you about your ideas on a regular basis.We’ll make sure to post here when things are back up and running.Thanks for your understanding,The Jamf Team

Is there a way to view what apps are installed on all devices? I know you can view them individually but I want to see a report of everything. Something like Smart Groups where I can view the number of devices that have this particular application. This way I can get automated patching done on these apps.

Hey guys. New to JamfPro line-up but I've gotten the hang of it pretty well. During the integration between Jamf Trust (Security Cloud / Wandera / RADAR / Please setup a naming convention), and Jamf Pro as the UEM, you have the option to either authenticate with Basic Authentication (Username, Password), or with OAuth, utilizing an API client in Jamf Pro with the appropriate permissions. The permissions are listed here, under the Requirements section. This Requirements section is the same for all versions of the Jamf Trust (Security Cloud, Security, Safe Internet, Wandera, RADAR, Please setup a naming convention) documentation, even the deprecated ones.https://learn.jamf.com/en-US/bundle/jamf-security-cloud-setup-guide/page/UEM_JamfPro_Establishing_UEM_Connectivity.html#task-6779 A Jamf Pro API Role and Client with the required permissions. For more information about API Roles and Clients with Jamf Pro, see API Roles and Clients in the Jamf Pro Documentati

Currently, when you set up an SSO for Okta, it's not enough to give access to new users. You have to create users manually or integrate Okta with Jamf Pro using LDAP which is a little bit painful.As a user who only needs LDAP for provisioning/deprovisioning of users (and from all list of apps I use in company only Jamf Pro lacks SCIM support) I believe it would be beneficial to support SCIM as an alternative for LDAP in some cases.

Basically I'm running an ldapsearch command to grab the AD info for a computer record. I want to then grab the dn: line so I can feed this to ldapdelete to remove the Macs AD entry before trying to reimage it. I want to capture this entire line into a variable - dn: CN=faimd-a01392,OU=Macintosh,OU=Computers,OU=plantname,OU=Plants,DC=domain,D C=company,DC=com but piping it to 'grep dn:' gives me this: dn: CN=faimd-a01392,OU=Macintosh,OU=Computers,OU=plantname,OU=Plants,DC=domain,D. How can I get it all on one line?

I've been playing with some more robust ways to run softwareupdate than the built in implementation in Casper and came up with this. Modify as you like to make it work for your environment, it currently only works with 10.8 because 10.7 uses a slightly different structure for index.plist (and I just didn't have time to modify for it). Basically it checks if you are on 10.8, then if you have any updates, and if you do and they requires a restart, download them all and modify the proper files so that when someone does go to Apple - Restart, it'll bring up the built in Apple environment to show them a pretty progress bar on how their updates are going, and if there are updates but none of them require a restart, install them silently. This can be used in conjunction with a Policy so that you can warn users that it's running, that if it finds updates that require restart that it'll install those updates when they restart the computer, etc. etc. etc. Enjoy! #

We're testing Jamf connect for our Macs. I haven't bound our Macs to AD. I know people say that is usually a bad idea. However, I've ran into issues with our network printers. The Macs can't see the printers. I can try to install the printers, but I end up with the print job hanging with a message stating that the printer is busy. Any ideas on how to map these printers without binding to AD?

Hello, I've found this script and it is working fine (to create the file). But when trying to open the actual file [link] from the desktop, it gives an error. I noticed that the permissions show this file as being owned by ROOT, since it is populated through a script via Jamf, but I'm not sure if that's the issue. If I try to create my own webloc file by dragging a webpage from Safari to my Desktop, that works just fine. But not one created by this script.

Hello everyone,I have a strange issue happening on the M2s and it is running me nuts, I hope that someone can help. I have not open a case with Jamf support yet, that will be my last resort.Long story short, I have an SSO Authentication customization that is supposed to happen during the PreStage enrollment so that our users can authenticate via our IdP (OKTA) so the macbook gets automatically assigned to the user enrolling and go through the provisioning process. Well this is working great for Intel and M1 macOS devices, but when we are deploying the M2s in somehow the SSO authentication window does not appear, and it goes through the enrollment process and stops at the Account Creation setup assistant, where the User details will need to be punched in manually instead of getting them carried over from the assigned user.Obviously the config works on the older macbook, I cannot figure out what would be so different on the M2 that could prevent that SSO window to come up at the enrollme

Hi,Is it possible for an organization to disable the factory reset option on an iPhone? Alternatively, is there a policy or script that can accomplish this?

I seems I cannot remotely clear the Safari cache on non-shared iPads, but I'm close to finding an alternative solution.Ojisan Seiuchi has found that when iOS Safari is presented with a URL in a certain format, it will execute preference settings on the device. Settings → Safari → Clear History and Website Data has its own URL and by loading that URL through an iOS Shortcut created using the Shortcuts app, you can quickly clear Safari.  This worked immediately for me.Now I'm looking for a way to deploy that shortcut via JAMF Pro.  Any suggestions will be gratefully received. 

We have a classroom that is set up in such a way where the students connect to the teacher's NAS that is hooked up to the computer. That NAS is shared out via the teacher's computer, and the student's connect to it using the IP address of that computer. We haven't had issues with this, however, with students that have changed their password in the last day or so, they are not able to connect with their updated credentials.Typically this would not be an issue, but something must've occurred today. From what I have deduced, the local credentials stored somewhere are not being updated with the new password, so when the student goes to connect to the NAS, it can't authenticate. With one of the students I verified this by changing his password in the Users & Groups menu to what his Entra ID credentials were that he was able to log onto the computer with. When I changed it to match that, he was able to connect to the NAS successfully. Somewhere along the lines an entry isn't being update

I'm deploying the latest version for Cisco Secure Client (5.1.2.42), which I have the configuration profiles for to provide the needed permissions for deployment, but this version of the Cisco Secure Client prompts users to add or enable the "Cisco Secure Client - AnyConnect VPN Service" as a login item. Any suggestions as to how to enable this without any user intervention for all users?  

We recently stopped using Cisco AnyConnect on the majority of our machines.Uninstalled the app, and unscoped the config profiles and thought that was that.Well, a couple months later, we update our new Zero Trust platform and start having network issues.I assume it's the Zero Trust software because we just updated it, but even after uninstalling it, some users machines were still acting up.I remote in, and check the network settings, and see the Cisco DNS Proxy and Content Filter are still installed, even though the user's device is no longer scoped with the config profiles that provided those setups.How do I remove these things? I thought removing the config profiles would have taken them off automatically?

Hello World!I am trying to add a custom quick look option to safari via the shortcut app on my iOS\\iPads and have it automated through JAMF. Does anyone have any experience or know if this is possible?Shortcut app process:- Open shortcut app, then click on plus and make a new quick look with some custom settings\\variables.- I have created the custom quick look option and verified it works in safari on the iOS device. (the custom quick look option creates a QR code of the website I am viewing)Issue: Is it possible to copy\\push this shortcut app/quick look custom shortcut to all my jamf pro iOS devices?Thank you! 

The adventures of deploying Cisco's Secure Client continue... After going through Cisco's documentation, the HCS technology group guide, and building a PKG, changing the choices XML, and creating the config profile , I have hit another snag. When deploying through a policy, the install fails: Script result: installer: Package name is Cisco Secure Clientinstaller: choices changes file '/private/tmp/csc_choices.xml' applied installer: Installing at base path / installer: The install failed. (The Installer encountered an error that caused the installation to fail. Contact the software manufacturer for assistance. An error occurred while running scripts from the package “Cisco Secure Client.pkg”.)However, if I push the policy through sudo jamf policy , the installer will go through and this will appear:  If I click "cancel" the installation completes and everything seems to be in working order. I see the Umbrella Module appear and it is indeed active. Admittedly, I am n

Hello,Is it possible to cleanup Safari history with a bash or powershell command for iPads?

We are trying to run a script that will change a Mac's name to the asset tag of the device. It is supposed to run on devices at an ongoing check in on each device but it won't make it past the first test run. I know the script is fine running locally as expected but running the policy on JAMF (via a scope and self-service) gives me this error:Shell type is set as "Shell/Bash" and here is the code (omitted username, password and url for security reasons but tested each individually and they work as expected).  #!/bin/zsh # server and credential information jamfProURL=url username="username" password="password" # request auth token authToken=$( /usr/bin/curl \\ --request POST \\ --silent \\ --url "$jamfProURL/api/v1/auth/token" \\ --user "$username:$password" ) echo "$authToken" # parse auth token token=$( /usr/bin/plutil \\ -extract token raw - <<< "$authToken" ) tokenExpiration=$( /usr/bin/plutil \\ -extract expires raw - <<< "$authToken" ) localToken

Hi all,I'm trying to locate the Virtualbox License file on managed devices. I followed the guide outlined here https://community.jamf.com/t5/jamf-pro/best-methods-to-search-for-the-existence-of-a-file/m-p/286067 but a Smart Search doesn't yield any results (I personally created a dummy file to check that)I created an EA with the script outlined  #!/bin/bash LicenseFilePath="/Applications/VirtualBox.app/Contents/MacOS/ExtensionPacks/Oracle_VM_VirtualBox_ Extension_Pack/ExtPack-license.html" if [[ -e "${LicenseFilePath}" ]]; then EA_RESULT="Installed" else EA_RESULT="Not installed" fi echo "<result>${EA_RESULT}</result>"  I created a Smart Group with EA-Name as Criteria and Value InstalledAny suggestions? Thanks! 

Hello Everyone,I tried enabling the Full disk Access for Qualys Agent from the Jamf Pro console and the profile has been pushed to the endpoint. However, the Full disk Access isn't enabled for the Qualys agent. Can someone help me to troubleshoot.

I am having a problem with the Device Compliance to Intune.  I have followed all the steps and the partnership is active in Intune but in Jamf I have a connection error Connection verification status: Failed. Ensure the Microsoft Intune configuration is correct. I am unsure of where to look next so any help would be appreciated.Thanks

I have 7 devices that I am trying to push Logic Pro to via self service. We have enough licenses so I know that is not the issue. Looking at the console logs I get the below. default 15:07:16.234430+1300 appstored [DIS1962A88F/com.apple.logic10:634148309] Waiting for installation to completeerror 15:07:16.250534+1300 authd credential: failed to get user uid -1error 15:07:16.256192+1300 authd credential: failed to get user uid -1error 15:07:16.261858+1300 authd credential: failed to get user uid -1default 15:07:16.266027+1300 authd Validating session owner invalid (-3) for is-appstore (engine 116)default 15:07:16.266052+1300 authd session owner -3 invalid (does NOT satisfy rule) (engine 116)error 15:07:16.266540+1300 authd Fatal: interaction not allowed (kAuthorizationFlagInteractionAllowed not set) (engine 116)error 15:07:16.266747+1300 authd copy_rights: authorization faileddefault 15:07:16.267709+1300 appstored Requiring admin authorization for software install by managed prefer

Has anyone successfully implemented SUPERMAN for their MacOS patching? I've got in place the Config for the settings I want, I have the API set and an policy to deploy out SUPERMAN. Question now is that if I set everything through the config file and deploy out SUPERMAN does it's own thing in the background and from a management standpoint I don't know what its doing. The first time deployment I can see that its pulling the device info, can see its authenticating with the API and then says that Jamf is the parent process, restarts super in LaunchDaemon then Jamf gets nada after that. The local log shows exactly what its doing. At the end of the log it restarts all deadline counters and the workflow schedules itself to relaunch after the time I set.So my question is, has anyone been using Super and figured out a process to see the logs of what its doing on the devices? I'm still in the testing phase as I want to know what to expect before pushing it out to actual user devices. I'd also

While uploading any PKG, I'm getting the message There was a problem uploading the package to Jamf Cloud.Connection failure: "The operation couldn't be completed.(error 500.)" , so please reply to me with the solution.