Hi Everyone, I have written a script to download the Mac OS update in background but its suck on admin password and followed by the user interaction to save all file and click on restart button to install the update. but somehow script works till popup message display. below is the script to update update os #!/bin/bash loggedInUser=$(stat -f%Su /dev/console)jamfHelper="/Library/Application Support/JAMF/bin/jamfHelper.app/Contents/MacOS/jamfHelper"windowType="hud"description="There is a critical security update available for your Company issued computer. To perform the update, Click on 'UPDATE' below and the security update will begin to run. This update can take upwards of 45 minutes.  NOTE: Before clicking on 'UPDATE', save all working documents and Connected the Charger.  If you require assistance, please contact ********** on Slack or by email at." button1="MacOS update"icon="/Library/Application Support/JAMF/logs/********

It has been many years since I used Jamf and I am trying to determine the capabilities of Jamf Now.  Can Jamf Now be used to deploy Sentinel One agents?

One of our users complained that his machine is running slow after Jamf enrollment. "Hi there,Might just be a coincidence, but the performance of my Mac has massively slowed down and become very laggy since the Jamf install. During a call earlier my laptop just restarted." Unfortunately this is not the 1st person to complain about that.  The specs are :  MacBook Pro (14-inch, 2021)Processor Type: Apple M1 ProNumber of Processors: 1Total Number of Cores: 10Apple Silicon: YesArchitecture Type:arm64Operating System Version: 12.1.0Operating System Build: 21C52 As admin are there any troubleshooting steps I could follow and check what is wrong with his machine ? I want to stress that this user hasn't complained at all before the enrolment. 

Hello,We have some document cameras that we issue to our users. There is a software that is recommended for the document camera here https://www.inswan.com/en/downloadWhat would be the best way to push this software to users laptop? Creating a PKG and adding it to a policy? What would be the steps to do this?Thanks

Alright so I am trying to set up Dropbox for a board meeting on a bunch of iPads, I am wondering if there is some sort of configuration that I could use to automatically have them sign in? Each device will be using the same account and it would be nice if I could skip the part of physically signing in to each device! Any suggestions!?

has anyone seen this error when configuring the google cloud ldap integration"Cannot verify cloud identify provider domain name"My keystone is showing as accepted and populated but I cannot save the config due to this error.  Using LDAPS as the connection type. 

Hi, Is anybody having an issue with prestage enrolments not syncing for the last 4 days. Our devices can be added to the prestage but do not enrol when the device is turned on and connected to the wireless. Our DEP program is working, and devices are showing in Jamf. Any ideas? ThanksSimon

Hi,We use EntraID for single sign on purposes are my organization. We use JAMF connect to serve our SSO login screen to users when logging into their Macs, and we also use passthrough authentication to streamline the process a bit. In our JAMF Connect config profile, we have OIDCPassthroughAuth set to true and OIDCNewPassword set to false, as per the passthrough auth instructions for EntraID. Here's the issue: we have a password rotation policy in our organization. When the a user's org password rotates, the SSO password they use no longer matches the local account password on their mac, and after the SSO challenge they will have an "incorrect password" error when signing in. Is there a way to make it so that when their organization password rotates, it updates their local account password on their mac? Thank you.

Hello Team,MS Teams is consuming high CPU utilization and mac is becoming very slow.Second one is, some times audio is not working in Teams call any solution will be appreacied.I can see MS is pushing new teams and it is causing issue, so please give me the solution for new Teams.

We have an iPad that switched on after 2 months now it has an expired certificate I cannot renew. (See the attached images)This iPad is connected to the wifi but it doesn't communicate with the JAMF server all the commands are in pending status.When I check the "  JSS Built-in Certificate Authority " in the server it's expires in 2033Can anyone help regarding this issue what should I do?      When I open the iPad from the JAMF server This is what I can see on the device When I got to the PKI certificate and checked the certificate expired in 2033 Most importantly self-service is not working       

I forget the origins of this, but posting since it's extremely useful...You can do an Advanced Computer Search on Applications to list all of the different versions of an application installed on managed Macs, but as of this writing there is no mechanism to export that report.You can do an Advanced Computer Search on Computers with Application Title and Application Version criteria, but that just selects the computers that match the criteria and doesn't list the version numbers in the report.Here's the ProTip...If you create a Smart Computer Group with an Application Title criteria and Operator "is" clicking View will show you a report of all Macs with that application, but notice there is no version information displayed. However, if you click Export (it doesn't matter if you select Comma-Seperated Values or XML) the exported report includes an Application Version field.

Everything I'm reading states we should be able to deploy the anyconnect package with only the Umbrella and Dart portions. We don't need the VPN (if this is needed we can still deploy it) or any of the other pieces. But the xml I am trying to deploy keeps failing. I am also using a script. Any assistance would be appreciated.Choices XML:<?xml version="1.0" encoding="UTF-8"?><!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"><plist version="1.0"><array><dict><key>childItems</key><array><dict><key>childItems</key><array/><key>choiceDescription</key><string>Installs the module that enables VPN capabilities.</string><key>choiceIdentifier</key><string>choice_anyconnect_vpn</string><key>choiceIsEnabled</key><false/><key>choiceIsSelected</key><integer>1</integer><key>choiceIsVi

What is everyone's thoughts on using Jamf's Mac Apps for patching Office apps vs Microsoft Auto Update (MAU)? I know MAU gives you more channel options, but I see a fair number of machines that aren't up to date using MAU and I have to assume it's because they aren't quitting out of the apps that need to be updated so MAU can do the update. Mac apps on the other hand seems to only give you one version to patch for (The most current), so I'm trying to get a grip on best practices for patching. Any help is appreciated! 

I am posting yet another trying to pass the CIS audit message! This time I have and issue with Jamf Pro and the plist processing. It took me some time to figure out, but the CIS PDF "CIS Apple macOS 12.0Monterey Benchmark" v3.0.0 makes for some hilarious reading on this and the other Safari controls. The main issue seems to be that my profile is quoting special characters in the keys, but the checks aren't expecting them. I used the Jamf Pro console to edit a plist scoped to com.apple.Safari and verified the settings are applied using System Preferences and the Safari UI. Still couldn't get all of the checks to pass, but then I realized all the checks that were failing used keys with a "." in them, which get quoted for some reason on the end-user mac and break the CIS regex match. Here is the content of my "Upload" text box for the Jamf Pro profile:<?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyLis

I've fought to get off binding and I can do so next year with Jamf Connect.. In the meantime - do you bind using a Configuration Profile - or policy with the directory binding option? Which is better? Doing a profile now and it continues to fail on about half the fleet.   We use machine based certificates so I'm hesitant to change anything - but for those still stuck with this - do you via a policy?

I found some iPad’s used in our department that are in Apple School Manager but in Jamf they are unmanaged but supervised.  I need to wipe them out so we can use them elsewhere, but they are locked with a pin # and the PIN I was given does not work.  If I reset them via DFU they will not reset, it will go through the process but never do anything, when it reboots it goes back to the lock screen.   Is there anything I can do as far as wiping them or will I need to contact Apple? I read that Apple will not mess with devices that are in MDM, while the devices are supervised by our MDM they are not enrolled, will Apple consider that as enrolled?

My ADE configuration installs Jamf Connect in the pre-stage enrolment, so that when the setup wizard is exited the user is presented with the JC login screen, and can sign in through IdP.Jamf Connect creates the account, as there's no account creation done during the ADE setup. This works fine with JC v2.28, however when recently trying to enable the auto-update of JC, and installing v2.31 (and again since then v2.32) the same configuration no long works, and an account is not created.The JC screen will accept credentials, prompt for MFA, and then loop back around to the login screen. Using PingFederate as the IdP, and therefore OIDC connection within the JC setup. Anyone had a similar issue? How did you resolve it?I can't see anything on the release notes for known issues, or resolved issues in previous versions that might point towards the root cause.I do have a case open with Jamf Support for this, but also wondered if the community might have some first hand experien

I have noticed that ever since our JamfCloud instance was upgraded to 11.1, scrolling in Jamf Pro frames using 2-finger scrolling or a scroll wheel on a mouse rarely works. It seems to happen at random in some pages, but the one place I can replicate it 100% is Computer record > History > Policy Logs.  I can NEVER scroll down the frame in the page using 2-finger scrolling or a scroll wheel. I have to either manually drag the thumb up and down or I have to use my arrow keys.  I use Safari exclusively, so I don't know if it happens in other browsers. This seems to be too specific to be a system issue. Scrolling works everywhere else in my browser and the OS. Has anyone else noticed this too?

Hello All!Our Management Team is wanting to align our Mac Update process with our Windows Update process.  For Windows we use Intune Update rings to check for updates on the devices once a month, download the updates and then give the user's 3 days to install them before forcing a restart.  The users get prompted daily to either Restart Now, Schedule a Time, or Remind Me later.  I understand that we may not be able to do the exact same process using Jamf on a Mac but what would be the closest option to that?  We have intel and Apple silicon macs.  I am in charge of Jamf but I am not a Jamf or a Mac expert.  I'm a Windows/Intune/SCCM admin who was instructed to take over the Mac support as well so I'm having a tough time figuring this out.

When you create real-world school setups you are encouraged to separate out Profiles with specific payloads. So you can end up with lots of small / atomic Profiles. One of the big management challenges is "which payload is store where?"One of the ideas I had a while ago (before Jamf Nation was taking feature requests) was to have the payload icon visible at the top level of the profiles so you could see which payload was defined in which profile.Just had another idea, that is probably simpler to implement programmatically and that is to include in Profile search field a way to find by payload name. Type in "cert" in the search field and you see the profiles that have the name "cert" but also show (perhaps in a different section) the ones that have payload names matching.Propagating the icons would be helpful.This would be super useful for when you are taking over the management of another site. Others do things differently and it is difficult to find subtle payload configs in plac

We're in the middle of a large upgrade to Big Sur and we're discovering the Dymo Label Software no longer works on Big Sur, and the app to use instead is Dymo Label Connect. The new Connect app isn't great, and the biggest problem for us will be that it no longer can use a local address book, which means our users will lose years of contacts they've been building in the Dymo Label Software app. We have hundreds of Dymo Twin Turbo 450 printers, so this is a big headache...Does anyone else use Dymo Labelwriters and deploy the Connect app through Jamf Pro? The Connect app doesn't seem like a straightforward deployment, and it looks like I'll have to account for its helper tool and permissions needed, so any advice there would be appreciated. Like I mentioned above, even after I have it deployed, the new Dymo Connect app is a huge problem for us, mostly because of how it handles contacts/saved addresses. Maybe there is a better option than the Dymo Connect app for printing labels with Dymo

Hello,Over the past few weeks, I've noticed the following behavior on several computers:approximately every 1-2 minutes, the screen of their computer goes black for 1 second and then the display comes back.This started when I deployed the Jamf PaperCut Print Deploy Client on the computers. Having a machine with the problem on hand, I scanned the system logs and every time the screen went black, I had this in the logs:jamfRemoteAssist[15726] triggered unnest of range 0x7ff85c600000->0x7ff85c800000 of DYLD shared region in VM map 0xc3e4dd3aacf1a315. While not abnormal for debuggers, this increases system memory footprint until the target exits.system.log However, Jamf Remote Assist was activated at the end of November and the problem appeared in mid-December (PaperCut deployment). I then deactivated Jamf Remote Assist (Settings -> Computer Management -> Security). 15 minutes later, the machine took note of the change:Checking for policies triggered by "recurring check-

A really frustrating feature of this table is the use of "Keep Existing Owner".This is a goto table for checking devices. At the same time you need to confirm the owner of the device.Nowhere in this page can you actually see who the existing owner is. You then have to go back to devices to check who is the current owner.Perhaps use a symbol to show that we are keeping the existing, but be redundant and show the current name as well. In the UI / psych world we call this split attention.

Here are the download URLs for the standalone Safari 17.3 update for macOS Ventura and macOS Monterey... Safari 17.3 for macOS Ventura: https://swcdn.apple.com/content/downloads/63/16/052-37298-A_XN59PDU2GI/0rqxiyieo4zwzxxbjo97kd2zgan9ng0274/Safari17.3VenturaAuto.pkg Safari 17.3 for macOS Monterey: https://swcdn.apple.com/content/downloads/36/50/052-38948-A_Q3I2HFP5N7/iwb00hgsqv3gykdzv54gupbx54bt2r3prg/Safari17.3MontereyAuto.pkg  

Hi folks, please forgive my lack of knowledge in advance.  I am very new to Jamf Pro and have been slowly making my way through the mountain of training but also need to be able to utilize it dailiy, for my current position.In our environment, which I inherited, We have exactly 5 items available in self service.  2 of which I created, 2 that relate to existing packages and 1 that I cannot find in Policies (or anywhere else for that matter.) I've tried to look up possible package locations, as well as the app itself, to no avail.  I'm trying to figure out what it does...   I'm guessing it's a script of some sort, created by my predecessor, but I'd like to investigate the script, to see what it does, and remove it or update it if necessary.  If you're wondering, yes, I've run it.  It did not give an error message or any other type of message.  It seemed to run through it's process and stop. My question is: How to I locate the package?&nbs