Good morning,I am having trouble deploying the custom dock, https://github.com/bluemoosegoose/Build-a-Custom-MacOS-Dock. I am able to get it work in my test environment (vm), my work computer and another's tech computer. When we run the policy from self service on either three of the machines it works, however, when we run it on a new machine during enrollment nothing happens. We have tried using self service to run it but we get the same error. The logs show that it went through but none of the icons are removed.

I have been stuck on this for the longest time. I am unable to do an iPhone to iPhone migration. The new device is enrolled in DEP/ABM and my current phone is not. The setup assistant shows up, I take my old phone and scan the blue globe. At this point I only get the option to do iCloud backup/restore to the new device. I no longer get an option to go device to device. Has anyone else experienced this issue before? Apple support is stating that it could be an issue with DEP/Jamf not allowing the Device to Device option. If I remove the device from Jamf/DEP, that would essentially throw away the reason to even have these devices in jamf or pre-stage.   As the screenshot shows, I am not blocking any of the Setup Assistant steps or auto advancing.   What I did is I went into Apple Business manager and removed the new phone from hitting any MDM server. I wiped the device and attempted the Setup Assistant with my old iPhone next to it and that gi

I am getting an issue on Mac mini (Late 2014) after upgrading it from 10.14.6 to macOS Monterey 12.7.3 through downloading installer from App Store. It says it cannot open a perl script. I've given the full disk access to terminal, sshd-keygen-wrapper. I am still getting the same issue. I am able to run the script directly from my ssh terminal but when automation tool (through ssh) tries to run the script the error is getting. /NFSmountDir is actually /System/Volumes/Data/NFSmountDir

We have some tools in Self Service only available to Jamf admins. Like a Microsoft uninstaller. I remote into user's computers and try to log in to Self Service to get to my admin tools but whenever I click on the log in button, it is already trying to log in with the local user credentials and I can enter my admin credentials. Is there a way to prevent that from happening? 

We are currently using Pulse Secure v9.1.x and need to upgrade this to the latest offering from Ivanti, Ivanti Secure Access v22.2 in preparation for Ventura.We have done many Pulse to Pulse upgrades in the past, all PPPC's and System Extensions have been accounted for.However, going from Pulse to Ivanti, when it is removing/upgrading we are getting a pretty generic popup that we felt could be accounted for with either a new PPPC or addition to existing.At this time, nothing we have done will stop this particular popup from showing up.Looking for any info/guidance from anyone that has possibly already gone through this upgrade or similar? 

I'm in the process of testing out jamf installers for Box Drive and Workspace and I checked the Install supporting configuration profiles box, which from reading should disable the autoupdating. It did update both applications, but I noticed it added the autoupdater files. My question is, even though it added the files, will it still disable the updates with that option checked?

Hey Jamf people We are working to push more and more of our standard apps out via the Mac Apps section (either 'App Store' or 'Jamf App Catalog'). Slack, Zoom, Chrome,etc. The part I'm confused about, is when they require Configuration Profiles to be installed with them. It looks like they're only if you want to suppress the developer updates so you can control updates yourself? Or is that wrong.Separately, is there a way to control the Config Profile deployment so it automatically gets installed when the app is installed? For a few forced apps, this isn't an issue because we can use the same Smart Group for both the app and the config profile installation, but if we have an app 'Available in Self Service', how do we ensure the config profile is installed after the user installs via SS? Creating a Smart Group that checks for installation of that app isn't too trivial but it's just more work when it seems like there should be a setting in the settings for each Mac App that say

Hello,  we currently distribute ipads to users and then walk them through entering Vantagepoint server info and registration. We also do the same for apple id registration. I was wondering if it is possible to automate this info using Jamf? Like for example, once a user is assigned to an ipad in Jamf, is there a way for Jamf auto sign into their icloud account?For Vantagepoint, would their be a way to prepopulate server info? Thank you!

Hello, Jamf Nation! Thank you for being a part of our community. We appreciate your feedback as we continue to work to enhance your experience with Jamf. March 1-2, 2024, Jamf ID will be receiving exciting improvements and security enhancements. As a result, all Jamf ID users must reset their passwords after the update. There is no action required today and further instructions will be provided in March.

Students figured out if they change DNS settings to manual, they can bypass OpenDNS rules. any suggestions?

Hello all, My company has transitioned away from Chrome and now use the Island app as the main corporate managed browser. Island is a Chromium based browser that we have more control over. Our Jamf Connect is configured to use Chrome and we can only change it to Safari. Does anyone know how we can make it accept this new browser or if that is even possible?

Hi All. I have a bunch of Mac Studios that came with macOS Monterey and I'd like to upgrade them all to macOS Sonoma before proceeding to provision them with JAMF autopilot.With Intel Macs, one could boot while holding [OPTION]+[COMMAND]+R and then be presented with the latest compatible OS as the installable option, but with Apple silicon when you boot into Recovery mode you are only offered the OS that is already installed.Does anyone know how to boot into the latest OS in Recovery mode on Apple silicon Macs?

Hi,We are starting to see issues where installing locally via the payload file and postinstall.sh works fine but installing it after being packaged (either via Packages or PKGBUILD) results in the following error when launching the application (Pro Tools 2023.3.0 as an example here)...' "Pro Tools" is damaged and can't be opened.  You should move it to the Bin.'Following the help icon opens a page stating, "The app has been modified, and its code does not match the original signed code."In Privacy and Security we can go ahead and choose to "Open Anyway" but this is not a viable way forwards for applications that we are trying to deploy hands-off.It feels like the packaging process is stripping some attributes from the files.  I have tried to use xattr to re-add "Date Downloaded" data but that doesn't resolve the issue.In the case of our Pro Tools 2023.3.0 package, it copies a DMG to /tmp (we've tried other areas in case this was the problem and we're trying this way due to th

I have MacBooks and iMacs (both M-series and Intel) ranging from macOS 12.3 up to 14.3.  We have lab computers and do not want students signing with Apple IDs or using the App Store.  I've created a Restrictions config profile with both "Apple ID Preference Pane" and "App Store" disabled.  I login with a local admin or standard account and it will show it locked down (sweet!).  Then you close system preferences/settings then re-open it, and there is the ability to login, as if the configuration profile isn't even there.  Reboot and do it again, then its back to restricted... then not.  This is clearly broken.  The App Store also opens right up every time... So what's the fix? 

My org has set up Jamf Connect to sync passwords between my local account and IdP. I do not understand the rationale here, as the 1st rule I ever learned about passwords was to not share them between accounts. Can someone either explain the logic or perhaps link to some relevant docs on why this is a good idea?

Hey everyone ...trying to install a package to all my fleet, it got installed successfully on all of them except 1 Mac !!"Installation failed. The installer reported: installer: Package name is XYZinstaller: Installing at base path / installer: The install failed. (The Installer encountered an error that caused the installation to fail. Contact the software manufacturer for assistance. An error occurred while running scripts from the package “zyx.pkg”.)What does that mean? why only that endpoint!?

When typing serial numbers that almost match a real word, Safari autocorrect jumps in and makes the correction. You end up not finding the device you are searching for and have to go back and make the correction. Possibly hitting ESC to avoid the change.Also happens when typing student names that might have variations on spelling.Frustrating because are typically focused on the left side of the screen after typing the search text and don't notice. Sometimes you jump into the habit of hitting escape to avoid the issue. But most of the time, you don't.There is a way to load the HTML field so that auto correct is turned off.It would be great if Jamf School turned off autocorrection in search fields, especially if they could be capturing serial numbers.input autocomplete="off" autocorrect="off" autocapitalize="off" type="text"

Greetings all,Is the Jamf One app for iOS obsolete?  I hadn't used it in quite a while, and when I tried today it gives a network connection error.  In investigating, I don't see it on the App Store anymore either...

We want to manage New Users with a script upon enrollment and disable iCloud Drive in the Finder Sidebar. Does anyone know the defaults write command for that? No command works for us. Thanks a lot

Hey guys. I have a website we use that asks for a client certificate from the users. I'd like to auto-accept it in Safari and are pushing these custom settings with the SCEP certificate, but it wont work in Safari. We are using this documentation and it works for the TENANT.vmwareidentity.eu. I can get Google Chrome to auto-select the certificate. This is the custom code that I'm pushing <dict> <key>Name</key> <string>WEBSITE HERE</string> <key>PayloadCertificateUUID</key> <string>UUIDHERE</string> <key>PayloadUUID</key> <string>UUIDHERE</string> <key>PayloadType</key> <string>com.apple.security.identitypreference</string> <key>PayloadDisplayName</key> <string>Identity Pref</string> <key>PayloadVersion</key> <integer>1</integer> <key>PayloadIdentifier</key>

Hello Everyone, I am testing out a new enrollment process and testing different use cases.I seem to run into an error every time when I enroll a device with a user who DOES NOT have a Jamf Pro Account, within the Jamf Pro Console (Account Users and Groups setting). I able to enter my SSO credentials and complete MFA, but after that step, the enrollment Management Screen just hangs, doesn't move forward in the process. Is this expected? I was previously told by Jamf Support that the Jamf Pro Console account should not be a factor, but it looks like it is? Any help would be appreciated, thanks! James Rodgers 

Hello.I'm trying to ensure teams is closed prior to updating app and getting errors when trying to force close it. killall "Microsoft Teams (work or school).app" Works fine with Classic teams i'm sure it's something about work or school part getting lost in code just don't know how to fix it. Thank you for your time.

Hi there, Does anyone know of an app (preferably tied to Jamf) that is capable of hardware diagnostics? i.e temp, storage limits and general performance related variables.  

OOI, does anyone know of a way of deleting existing icons uploaded when creating Policies?Have a couple of duplicates/redundant icons that I'd like to just tidy up.

hello all, does anyone know how to disable remote login using a profile/policy