We have a pool of machines that are in a remote site. Had users sitting at the desks with their computers, this week they have moved to a different building and are now remoting in. A few of the users have developed the habit of shutting down their machines when they are done for the day. First day in the new office, and they shut off their machines on the way out. Neat!  I see there's a setting in the Configuration Packages > Finder > Commands tab that should disable shutdowns from the Finder dropdown menu, but it doesn't appear to do anything. And I'm also looking through many forum posts dated back to 2016, from other people encountering the same thing. We have this command that we have successfully to disable sleep:  Run Unix command 'defaults write /Library/Preferences/SystemConfiguration/com.apple.PowerManagement SystemPowerSettings -dict SleepDisabled -bool YES'  We have tried the following command to disable Shutdowns, but it i

I have an iPad in Lost mode. I am unable to connect the device to our WiFi to get it out of Lost mode. Please help.

Hi,  I know there are some similar posts notably this one here: https://community.jamf.com/t5/jamf-pro/popup-user-notification/m-p/235439/thread-id/223319 but I'm relatively new to jamf pro and just looking for a bit of similar more tailored advice. I want to be able to set up a 'notice for a new user' policy that pops up only once on a Mac for the first time a user logs in, which has an accept button that the user must click for it to disappear.(a bit similar to accept terms and conditions before downloading a new program I guess). If the user does not click accept, then the policy stays on screen/ keeps being presented until accepted. Is it possible to  do something like this, maybe using some of the ideas presented in this thread above?  I'm up to Jamf 200 but not had much experience with creating policies or with scripting  yet, but I'm fairly confident I could  hopefully follow along some tips or any advice given here, thanks.

I have a few examples now and can confirm, "in my environment", Mac OS Sonoma is causing authentication issues in my offices over Wi-Fi. I have my networking team assisting me trying to find the solution.  Most of my Mac environment is on Monterey, Catalina, with a few new devices running Sonoma. All Sonoma devices are not receiving an internal ip and forcing them to a 192.168 external IP. We do have a network access control system in place - ClearPass - we are using this to block external devices on the network. ClearPass provides complete visibility into users, devices, and applications across the entire network. This allows for the creation of detailed access policies that provide granular control over which users have access to which devices and applications. Does anyone know if Sonoma OS causes changes to the network settings, configuration, authentication, etc. on the device? I had a device that was profiled in clearpass running Monterey and the mome

I'm trying to establish the last time a user actually logged in to their laptop. I have, therefore, created a Computer Extension that runs a simple script that is supposed to display a String result in User and Location:#!/bin/zsh/usr/bin/last -1 -t console | <result>/usr/bin/awk '{print $4, $5, $6}'I added the Computer Extension to the Configuration Profile under ALLOWED EXTENSIONS but nothing ever seems to be displayed. How are Computer Extensions actually meant to work, i.e. how am I meant to actually see the data that is gathered???

Dear all.Is anyone of you aware of a way how to prevent the auto-starting of Teamviewer (and with that, the basic setup assistant) after the installation?I have seen that there are quite a few Launch agents and Launch Daemons included in the installer package, but I don't really know how to manipulate the portions in there to just block the auto start after installation.Any idea? Thanks a million.CheersChris

I'm trying to deploy FortiClient 7.0.2, and I have some questions about order of operations and whether this is going to cause trouble on specific OS versions. I still have some more testing to do but it seems to work on the one I tried, but maybe it was a fluke. I can post configs as necessary, but I suspect that they aren't needed for these questions as it's more about how these functions work.I have a script that grabs the file from our server and installs it. That works. I need to get curl to fail out of the script if the download fails, but I haven't looked into it yet so I'm sure I can find a way.Unfortunately though, FortiClient needs users to make tons of changes to System Prefs. Full Disk Access, requests for VPN connections, and request for System Extensions.I used PPPC to grab those Full Disk Access settings from an install and make a config profile.Will it cause a problem if I deploy those before the policy for the install, when the filepaths and apps don't exist yet? It se

Hey JAMFs!I try to automate the creation of Smart Computer Groups by API (within Powershell) based on the installed Apps criteria.I'm a bit confused as I don't find anything in the API-documentation fpr smart-computer-group with method POST.I already have a filtered list of all required groups with app name, path and name for the group.

We have noticed a strange bug with iPads running iOS 17. We use a content filtering Configuration Profile on all our student iPads to ensure that they are not able to delete their Safari history. The Clear History option within settings is still greyed out as well as the Delete option with in the History tab. However students are able to slide from right to left over their History to delete it now. Has anyone found another way to block deleting Safari history that would also block students from this method? 

Hi All,So admittedly I am a little new to Jamf Pro, but I have gone through the Jamf Pro 100 course. My question is, I have a few iPads which their MDM certificates had expired, and I had that the only 2 ways to re-enroll them were via web re-enrollment OR having to completely reset and clear all data from the iPads. I tried web re-enrollment and no luck there, so I reset the iPads. And now they have valid MDM certs, so thats good, but now when I try to send management commands, here is my issue -- commands like "enable/disable bluetooth" work just fine, but when I try to send commands like "Update Inventory", it doesn't work. Why do some commands work and others don't reach the iPad?

Hi,Recently our VPP token and ASM token expired, I went through and followed the renewal steps and got this all back to working order, the problem I am having now is that devices dont seem to be communicating back to JAMF.I went through to deploy a free app to a smart group, which on JAMF is showing that the command has sent, but is pending on the device. It even shows that it has taken 2 licenses from the ASM/VPP side of things.Please help.Kind regards 

So I recently updated the server token in jamf pro for our ABM instance as it expired on the 1st.  Both jamf pro and ABM show that they are sync'ed and communicating with each other, however, in jamf pro, when I go to check our existing prestage enrollments, they are all showing 0 devices available.

Hi GuysI’m looking for a solution for this unusual situation. I’ve spent few hours searching for it but all I found was few posts “how to avoid connecting MDM servers”MacBook Pro 13, M1 2020Ownership is clear, bought new by company where I’m employed. MDM profile was installed on Monterey in 2021. There were no issues after updating to newer versions till Sonoma update.the story in points I’ve asked IT colleagues for letting me to switch off the MDM as it was required by Apple for screen replacementAfter repairing I’ve asked my IT colleague if it’s fine to update the system to Sonoma as it was not possible when the MDM was runningReceived green light, clicked update button.First start, logged in with my credentials (Mac admin) and shortly after connecting the network a full screen enrolment window popped outIt will be fine to go forward but the company details appearing on the screen are completely different as they supposed to be. This is saying that MacBook is owned by another c

Hello,I am trying to determine if there is a way using Jamf for me to restrict particular users to only being able to log into specific machines.Example, a student worker account can only log in on the designated student worker machine.The challenges I see with this are: We use Microsoft Entra with Jamf Connect for authentication and we do not have users with Apple IDs in Jamf.Can this be done?

I am trying to configure our profiles so that supervised Ipads will get apps of our choice pushed out to the Ipad at the beginning of the installation and also have the possibility to do it after OOB installation. I am currently having trouble doing this without having to be logged into the app store with an managed applied. The reason for this solution is that we want the users on premise to be able to use in app purchase with non managed appleids. Does anyone have a solution for this using device groups for an example? I cannot find documentation for this and i am starting to think it might not be possible.. Thank full for any suggestions!

Is there a possibility to disable the new feature in macOS Sonoma *Video Reaction* by default with a profile?It leads already with us several times to the fact that in an important meeting from the nothing e.g. balloons came. This is not very professional.Would there also be the possibility that the users (if they want it) can activate this feature again?Thanks for any advice on how I can disable this.

Is there a way for me to deliver my organizations certificate for our wifi without configuring the Wifi payload with a configuration profile? The reason for this is due to the way our Wifi is configured, I can't preload the $username wild card without requiring the end user to log in every time they connect to the Wifi. 

Hello to all. My Security Team wants to link Hyperproof Hypersync to our JAMF system. Has anyone heard of this and/or have had success getting this to work? I'm providing the link to HH documentation. https://docs.hyperproof.io/admin/en/hypersyncs/connecting-jamf Thank you for any help with this. 

How do I locate my stolen tablet 

Hi there, We've just begun testing Jamf Connect in our environment and noticed that the Jamf Connect login window doesn't allow the use of WPA-2 Enterprise authentication against a RADIUS server. How do we navigate around this? We use UniFi OS with RADIUS configured on a USG.

Hi again,I have solved my previous issue - now just wondering if there is a json or plist file which I can use to force this highlighted setting to be toggled 'On' by default for all users by default. I have looked in the general settings on the configuration profile and not been able to find anything related to this. Many thanks again for any suggestions!

Provide users more detailed feedback when updating inventory via Jamf Pro, at durations you specify Background Fall 2022 In the fall of 2022, while conducting some internal training, one of our TSRs asked: “Is updating inventory where the blue circle just spins and spins but doesn’t appear to do anything?” “Yes,” was my deflated reply. Shortly thereafter, we implemented Inventory Update Progress with swiftDialog. Later that same year, we introduced Jamf Pro Self Service racing stripes when using Installomator with swiftDialog. All was right with the world. Groundhog Day 2024 Fast-forward to Groundhog Day 2024, I logged into a test Mac mini to update its OS and was greeted by not one, not two — not four — but three pending updates: Mozilla Firefox Google Chrome Adobe Acrobat Reader I watched as inventory was needlessly submitted after each and every update, just like I told it to. Hopefully after implementing this approach, you’ll never have to be asked the above question or exces

Is it possible to give full disk access to apps like cron, sshd-keygen-wrapper and terminal (other apps as well) through the ssh terminal session of a M1 MAC

Hey, not sure if this is a particular DEP issue or more so to do with macOS but I'm wondering if you've seen the following. I'm starting to get a lot of new Macs shipping and while they are added to a particular PreStage, they do not immediately pick up that it's required. The issue goes like so: New employee opens sealed laptop Starts running through Setup Assistant and is prompted to connect to wifi Mac connects and the next screen is the Migration Assistant screen NOT DEP page informing employee that the Mac is to be managed. If the employee continues, they can successfully setup their Mac without the DEP PreStage being completed or being enrolled in JAMF. In order for the User to be presented with the DEP Setup Assistant page they must do the following: Start Mac and proceed through Setup Assistant Connect to wifi and click Continue On Migration Assistant page click Back button Connect to wifi again (can be same or different network), then click continue Now they see DEP S

We have been running Jamf on our computers since the launch of our company three years ago. From time to time we have computers that need to be removed from our system and I would like to know the best practices. Up to this point all my attention has been on getting computers enrolled.All our computers are in Apple Business Manager (ABM) and they are enrolled in Jamf using PreStage enrollment. This works well.When an employee leaves the company I lock the computer in Jamf before the computer is shipped back.When I receive the returned computer, I use the unlock code from Jamf to unlock the computer. I then release it from ABM. Next I select Remove MDM profile. Once I confirm that the profiles have been removed, I then delete the computer from Jamf.Is this the best, or at least, correct way to do this, or is there a better way?