As Cisco is phasing out just Umbrella we have to create a package using their secure client instead.  Whilst I have followed the instructions here (https://docs.umbrella.com/deployment-umbrella/docs/customize-macos-anyconnect-installation#prerequisites) to customise the installation on a single machine, I have been completely unsuccessful is creating a package from the customisation.  Has anyone done this and if so could they share what they did?  It does not help when the help documents refer to the product as anyconnect still, and some of the documents online I did find about building a package in Composer refer to xml files which do not exist in the updated secure client...so I am stuck on this.Many thanks!

Hello, I would like to enable an admin account that gets filevaulted during enrollment and gets a securetoken and recovery key. What is the best way to do this via Jamf?

I am running into an issue with a script where the new API token is expiring before it finishes.  I know there is a way to renew the token with a keep-alive command, but I'm not having any luck getting the syntax of the command correct.  Does anyone know how to renew an active token in the new API?  Thanks for your help!

I've been trying to use the api/v2/mobile-devices/detail endpoint to get data on all mobile devices registered with Jamf. I have already done the same for computers using api/v1/computers-inventory, but for mobile-devices there is a bug.When calling the mobile-devices endpoint with sections IOS and LOCATION, I get a 400 response back. The request looks like this:api/v2/mobile-devices/detail?page-size=1000&section=IOS&section=LOCATIONThe response returned says "INVALID_REQUEST_PARAMETER_TYPE, Invalid value of request parameter: section, Required type: java.util.Set".If I do the same with sections GENERAL and HARDWARE instead, I get a 200 response with the data I want.api/v2/mobile-devices/detail?page-size=1000&section=GENERAL&section=HARDWAREGiven that sections that exist on the computer endpoint work while others don't, it seems like the endpoint might use the same enums for sections as the computer inventory endpoint despite the sections on the object being different.I

Hello everyoneI currently have JAMF Connect with Entra deployed on my MACs.And I noticed that when locking the screen, only the User + Password option is offered to me, and TouchID is not offered even though it is authorized in the options and a fingerprint is configured.I can't find any more information on this subject.Do you have any tips?Thanks!

Hi Jamf Community,Our users are notorious for not shutting down their Macbooks nightly, which leads to countless issues and occasionally Jamf stops checking in or sending inventory. Currently I have a smart group that finds users that haven't rebooted in 5+ days. I have this smart group scoped to a policy that notifies the user and forces a shut down after 120 minutes, unless the reboot themselves. The problem is, if the laptop isn't checking in or the policy fails, the shut down never occurs as the policy remains pending and the laptop remains forever disconnected from Jamf (until we get our hands on it).I am hoping to find a way to force shutdown or force restart any laptop that hasn't been rebooted in 5 days regardless of it's connection to Jamf. My thought is this needs to be a Policy rather than a Profile and needs to be sitting waiting on the device so that it can execute even when offline or failing to communicate with Jamf.Any ideas?Thank you!

I've been having some issues whereby JAMF Composer just seems to hang during the after snapshot on some software. It makes it through the initial indexing phase fine, however it looks like it hangs while adding files to the package staging area. It hangs on a different file each time, it is not consistent, but it is usually a file within the .app I am packaging. When I cancel creating the package source, it will usually spit out on error stating that it "can't communicate with the helper application." I've tried changing a few settings, namely I've whether or not the executables in the package require rosetta, but to no avail. (for the record, this software is advertised as being fully silicon-based, so there should be no requirements for rosetta).Anyone have any ideas? I am wondering if I just want to throw up my hands and try making the package completely manually. I have been very frustrated with composer lately, but I digress.

Has anyone been able to get Goodnotes working on the iPad via Jamf Pro?  I've received an Education License from them, but I'm unable to get it to push out to our ipads.I've tried adding the settings listed at this link to the App Config without any success.https://support.goodnotes.com/hc/en-us/articles/6543387103503and I've also looked at this article to see if any of this could help.https://support.goodnotes.com/hc/en-us/articles/6859707661455-Installing-GoodNotes-for-Institutions-via-JAMF-SchoolI've been back and forth with their support, but it seems like they have more experience with Jamf school settings and not Jamf Pro.Any help would be appreciated, thanks

Hello,I can't find a way to add the new licence for the goodnotes 6 app.The manual from goodnotes (https://support.goodnotes.com/hc/en-us/articles/7353742669455-Install-Goodnotes-for-School-Business-or-Enterprise-via-Mobile-Device-Management) is only for jamf school / simpleMDM or jamf pro."To add your license key via MDM software, you will need to create a property list file (.plist file) containing your license key and upload it to the Goodnotes app using your MDM software. [...] Navigate to the section called "Managed Configuration" (this name may vary slightly in different MDM platforms)."I can't find anything resembling "managed configurations".I contacted goodnotes already, but maybe some of you have had similar problems and can give me a hint. Thanks a lot, Maura

Hi all. Looking for a fast way to verify a device is enrolled before shipping. We often receive Mac's to a central location before shipping-on to end-users around the world. Our supplier has a mostly-automated means of DEP-enrolling Mac's into Business Manager. But a part of that process still involves manual-input (the Organisation ID primarily) which can occasionally lead to a device arriving with us not enrolled into ABM. Is there an app/solution available for iOS whereby our logistics team can scan the Serial No barcode on the side of box to verify if that device serial is present in Jamf Pro and/or ABM before shipping the device? Thanks in advance.

Hello,I received this message from Jamf Pro Server :jamfim.lfz.ch Infrastructure Manager instance has not checked in with the JSS. What does this mean? Is it critical? Can you help me with any action I need to take? Thanks !

What permissions are required to use the Search function for mobile devices?  Trying to add this for our service desk but when I have the test user try searching nothing is returned.

Is it just me or is the inventory field for "Last Inventory Update" kind of decorative only? We have Macs which are on a shelf in stock and not been online checking into Jamf Pro for months but the "Last Inventory Update" claims they were updated today. That's a little misleading and not at all useful. It may well be when Jamf tried to check on them and got no response but why report it? What good is that information? Maybe telling me when it was last successfully inventoried would be useful. Anyone?Thanks,- Scott

What method are people using these days to either force push an update (for a lab for example) or allow users to update their OS from Self Service.This process use to be very simple to do but with multiple Apple changes over the last few OS versions I haven't been able to get it to work properly.Any help is appreciated, thank you!

I'm seeing so many job postings wanting someone familiar with deploying Jamf and ther hosting servers through some automated method usingChef or Ansible. I've built bare metal servers and installed all of Jamf manually ... but have never done it in an automated fashion. I've never used Chef or Ansible.    I'm a noob with CI/CD and DevOps.  I Short of RTFM for those products - does anyone have a good site or articles to help jump-start me in how that would work?  'm looking for any resources on deploying Jamf via Chef or other automated methods.

Hi,I have two Macs that have Declarative Device Management: Not enabled and I think they should actually have it enabled.They are on macOS 14.2.1 and 14.3.1 and are enrolled in Jamf 11.4.1Is there anything I can check or force them to have DDM enabled? 

Hi, I am facing an issue where I have followed Microsoft instructions here: https://learn.microsoft.com/en-us/defender-endpoint/mac-jamfpro-policies?view=o365-worldwide To get Defender running on our Macs, however it breaks Onedrive. Throwing the "OneDrive Files On-Demand didn't start. Please restart your computer and try again." I have done some digging and 'I'm pretty sure the issue is the MDATP MDAV System Extensions configuration policy. This is set to only allow system extensions you add to the list, the document tells you to add the below:com.microsoft.wdav.epsextcom.microsoft.wdav.netextThen OneDrive breaks so i'm pretty sure I just need a specific system extension to add for OneDrive but I can't get this information from Jamf support or Microsoft.

Hi,Ran into something just recently that I know has been occurring for at least the last week or two, not sure exactly when it started. We have a cloud Jamf pro instance, and maybe about half our macs were joined via user invitation (user-initiated enrollment), every single one of them is showing the wrong user for enrollment. So say it's User1's machine, and I know they enrolled by an email invitation, I go into details on the device and it shows that User2's was the email invitation. If I check User2's, it says User3's was the invitation, and so on.While I don't know for sure when it started, I do know it wasn't always doing this, at least at the end of 2023 I am sure it was showing correctly.I don't think this is causing any issue, apart from confusion, local user accounts and all are showing up correctly, but is this something that other people are seeing?

Jamf published Build a Computer Information script for your Help Desk on the Jamf Blog this morning. In that post I used the term "module" to refer to a short script snippet that can read a piece of information from a Mac and display that information as part of a dialog shown to the end user. For example, this gets the computer name: # Display computer name runCommand=$( /usr/sbin/scutil --get ComputerName ) computerName="Computer Name: $runCommand" This Jamf Nation Discussion is for anyone who's needing assistance creating additional modules and/or helping others create modules.

Hello,A laptop was recently deployed to an end user and when the user attempts to install the MDM Profile, it prompts her for a username and password since she is not an admin.There is a local admin account that was created by the pre-stage enrollment but it's not accessible.I can see the laptop within Jamf Pro but cannot push any changes.Are there any suggestions on how to proceed since she's not an admin on the computer?

How do we manage the "Automatically allow built-in software to receive incoming connections" and "Automatically allow downloaded signed software to receive incoming connections" options in the Firewall pane of System Settings? The only options in Jamf Pro are "Block all incoming connections and Control incoming connections for specific apps." Am I missing something?Screen shots for reference.

Does anyone know of a way other than Composer of creating a .pkg package containing folders to be installed at specific locations? I'm trying to package the latest Unreal Engine for installation on our Media Department's Macs. Epic doesn't provide any sort of deployment tools, they just tell you to "install it through the launcher and mirror that using your deployment tools. Or you can compile it from source!" which is extremely unhelpful. There are two folder structures, both are in /Users/Shared - one is /Users/Shared/Epic Games and the other is /Users/Shared/UnrealEngine. Unfortunately, it seems that in recent years the size of Unreal Engine has ballooned massively and in total these folders take up 29GB. To put it into Composer I'd need double that amount of free space (29GB for Composer to copy it into its Source folder structure, and another 29GB for when it writes the package) and I just don't have that much free space right now. Is there a way I can create a package from th

Afternoon!I reimaged around 30 iMacs 2017s and erased and reset up the HDDs as APFS and everything seemed good to go. However, I noticed that the Hard drives are filling up fast (school isn't in session so I'm the only one who has logged on) and are now maxed out. I originally thought that I must have spaced out and just sloppily messed up*. So, I re-imaged them again (I paid special attention to what I was doing this time around) and the same thing happened. They are Smart verified and I also ran Disk Inventory X which shows only about 80 GBs of real usage (this sounds about right). I'm wondering if the age of the HDDs could be doing this since they are used A LOT and constantly on. Any thoughts or articles would be great because the college won't want to buy new iMacs (but maybe new SSDs).*I've tackled setting up maybe a few thousand (if not many thousand) and this is the first time that I have encountered this.Thanks in advance!

Hey everyone,Just an FYIIn our organisation we found that Airdrop was not working properly on MacOS Sonoma (14.2.1 at the time of writing). After troubleshooting I found that this was caused by the CrowdStrike Falcon sensor.Crowdstrike have already released an updated version of Crowdstrike on the 9th of Jan (7.10.xx) that appears to fix this issue.Just an FYI to help anyone who may be troubleshooting a similar issue. Perhaps check your sensor deployment policy and alter it if required.Thought I'd post as I couldn't find anything here about this. There a little chatter about this issue on the MacAdmins slack too.

I'm seeing an unusual issue (I think).  Our M1's are getting Bootstrap Tokens Escrowed correctly.  The for some reason (I've worked with Support on this), the Mac's are then becoming unmanaged ticking "Allow Jamf Pro to perform management tasks" as per Support brings the Mac back into managed.I'm noticing that the Mac's that have gone through this process no longer have an Escrowed Token.  To fix this I was going to deploy a policy that users would run to re-escrow the token, however the Mac's still believe the token is escrowed as per terminal command.While I'm still trying to work out the root cause as to why Mac's are becoming unmanaged, I'm not sure how best to move forward with the Bootstrap token issue?