Hi everyone,  i can for the life of me work out how to efficiently deploy updates to my devices. I have been testing with Sonoma 14.0 as a baseline and JAMF 11.2 in the lab.What i want to achieve is deploy an update and allow the end user to defer it by a number of days. I have tested deploying an update and installing immediately and it works. In JAMF, Computers > Software Updates > i can target a group with the option : Download, install, and allow deferraland i can specify a number. Apparently these are the deferrals i can allow the user. How do i specify the days i want the user to be able to defer? Do i need a config profile?Is software updates solely from JAMF really achievable ? I think i am wasting my time here. Will Nudge or any other script help with that? I am at my wits end with how updates work on Macs.Any insights would be appreciated. 

Hello Guys, I have a rare instance where I have users that Have macs and will be switching back to pc... Long story but The powers the be want this so I have to assist. Anyone know of a simple way to convert the Mac data from outlook back to a windows PST format? I have done other work arounds in the past where I have my exchange admin make the users mailbox very large and just upload the data to exchange then bring it down into a PST on the windows side. but Id rather have a less involved option.

This pop-up started 02/06/23 and has been hit or miss with different users reporting it goes away and some stating it shows up every 30mins. What has changed for this to take place? 

Hi folks, is there an overview which variables are available from computers and mobile devices that can be used in scripts?Greetings Frank

I have had users follow the Apple procedures to enable FileVault 2  but on a few the Partition Encryption State still shows not encrypted even though than the users ID is showing as a FileVault 2 Enabled user.   Also of note there are no other local accounts on the system.  Any thoughts on what might be causing this?  

Good morning,I've been having an on-going issue with Apple TVs dropping WiFi on tvOS 17.x.I had a random device that show up on my automated nightly report that wasn't on 16.6, thought it was odd it didn't check in for over 24 hours. I know it's plugged in.Saw the MDM profile expired. Alright, no biggie, it's a Apple TV 4th Gen. USB-C port, reset, go about my day.I created a Smart Group that emails me when Apple TVs have an expiring MDM profile within 30 days.20 devices show up on it. I sent a Renew MDM profile command... errors out. They're on the network, updating inventory. Command won't go through. 

This is kinda complicated, but the Mac is not checking in every 15 minutes.  In fact, it hasn't checked in since Mid-December, but a few management commands have run. Is there a way to remote force a check in without removing in and running the sudo command?  It would seemingly have to be a configuration policy?  Since it is only one user, I should be able (if responsive) to remote in and run it the terminal, but if the user isn't responsive, I still want it to check in since there have been updates that need to be installed.

Hello In my network is an AirPrint Printer from an UniFlow Server (on-prem, not cloud).When i'm installing this AirPrint Printer manually, the finishing settings are completely wrong.But anyway, at the end i want to install this printer automatically. 1. So then i've configured under "Computer management > Printers" a new Printer.   Correct Device URI etc.2. But when the printer is deployed, it takes the "Generic PPD" file.  3. So i copied the PPD file from the manual installed printer & modified it (location: /etc/cups/ppd)4. unchecked the "Use generic PPD file" & uploaded my modified file --> But it still uses the "Generic PPD" file what i'm missing?

Hi All, Is there a script that automatically email us when we reaching certain limit of Jamf Pro license (or jamf connect)?Currently, i checked our Jamf Pro license Usage on a monthly basis - im just wondering if this can be automated.

Is there a way to disable downloading email attachments in Mac . Thanks

Do the 'Start Screen Saver after:' and 'Use Screen Saver Module at Path:' settings still function properly for the 'Login Window' configuration profile (JAMF Pro 10.46) in macOS Ventura? We attempted to apply both a custom screen saver and one of the built-in options but are not seeing any of the desired results.Curious if I'm missing something. 

I'm having trouble getting Jamf AD CS connector to work flawlessly, and wondering if anyone else has a similar use case, and if they managed to solve it. Recently procured JamfOn-Prem ADAD CS setup in a different domain, but there is a trust relationship (and it works for other MDMs and bound clients)Using a domain user account, instead of the local user (AdcsProxyAccessUser) created by the .\\deploy.ps1 The domain account has been configured on both the AdcsProxy site configuration, for  oneToOneMappings under system.webServer/security/authentication/iisClientCertificateMappingAuthenticationIt's also been modified to be the Identity for the AdcsProxyPool.  Certs issue successfully, but only if the same user account is a member of the administrators local group on the server.Jamf Support are saying this shouldn't be the case, but cannot get to the bottom of which permission it needs that's granted by Administrators, that it needs to successfully issue cert

I was looking everywhere for this info so hopefully this will help some of you too: With the new v70 of Firefox, DNS over HTTPS is turned on by default. Our Network and InfoSec dept do NOT like that and asked us to disable and block this. After some research I have found that a policies.json file with the following text will disable and grey out the DoH setting in Firefox. { "policies": { "DNSOverHTTPS": { "Enabled": false, "Locked": true } } } Tested in ESR and normal FF, v 68 and up. This file has to be in Applications/Firefox.app/Contents/Resources/distribution to work and it is global not user based, which is a good thing. The distribution folder is not there so you will have to make it and add the json file It does require a restart to FF after the push There are a number of ways to deploy this: use a script to mkdir and write the file, create an ongoing policy to deliver the file from a dmg with smart group or Extension Attribute to scope,

Hello All, In my company's workday portal, normaly Windows device doesnt ask company's user name and password if user visit the workday from company's LAN, but in case of mac device it is asking username and password every time user visit the workday portal, and it is for all browsers,(GC,Edge, Safari), what might be the cause or what is the resolution?I already check the to turn on the autofill password feature and also pushed a confog profile to turn on SSO/bypass credential for workday URL but still no luck, any idea will be appreciated.

I want to create some device provisioning videos.  Back in the day we could use VMware fusion to create a blank OS and go into the settings file and add the model and serial number.From my understanding you can't do that with the M series devices, which is fine, I have an Intel machine here to use., but I realize that those days are numbered.Has anybody found a new method or way to do record the whole process?  

Hi Mac Experts,I have an end user who started the Sonoma upgrade and powered their laptop off during the upgrade process. When they powered it back on, it finished the upgrade, but they can't login with their main account.  My tech team was able to login with our admin account. I also was able to create a new account for them on the computer, which works fine. I know I can just migrate their data over from the corrupt account to the new one, but I really want to fix the old one. So here is what happens:They boot their laptop.At the login screen they enter their original username and passwordIt starts loading their profile and they see the new Sonoma desktop background.Then it gets stuck,  nothing else loads, you can't control the computer with either your keyboard or mouse. Their only option is to power cycle the machine and log in as another user.So from a MacOS technical prospective, what items are necessary for a profile to work correctly? What parameters, plists, etc

Hi,After upgrading a suite of iMacs from Big Sur to Sonoma, the dock now has ? instead of applications. They do not work when clicked on.I have read some posts on here but nothing has helped me understand where the problem is.To be upfront I am new to Jamf Pro and this system was already setup before I looked at it.I have gone to Settings, Computer management, Dock items. In there are entries for the dock items. Each one is currently in the same format and here is Google Chrome as an example:file://localhost/Applications/Google%20Chrome.app/ Is this entry correct? Is there something else that controls that Dock that I am missing? Adam

Hi all,I have a question about using both JSS and MS Intune together with Apple Classroom. The (student) iPads will be managed with JSS and the (teacher) MacBooks will be managed with Intune. Will it still be possible to use Classroom? Thanks in advance!J

We currently have a Chrome extension, which is force installed on all Devices. We also have a website, which all employees use daily, but unfortunately, that extensions gives annoying pop ups on that site, which are not needed. Question is, is it possible to disable that Chrome Extension, just for that 1 website, but have it working for all other sites? Thanks in advance. 

We're in the process of getting ready to roll out OneDrive, so I've been tasked with creating a plist for Mac. Trying to limit the prompts that come up. I thought I had the plist setup correctly. 1. Prevent the logon screen from coming up an auto logon? It's populated with the email address and I then have to enter password. Trying to match it like our Windows side. 2. I have a default folder path, but still getting prompted to choose and I can change location other then onedrive.   <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>DisablePersonalSync</key> <true/> <key>DisableTutorial</key> <true/> <key>DefaultFolderLocation</key> <array> <dict> <key>TenantID</key> <string>tenantID</string>

We already have a database that controls what to do with damaged iPads.However it would be cool if that database could, through api calls, create an incident in the jamf school for that serialnumber.however, strange enough, incidents are not part of the API. I am sure im not the only one, using incidents and some outside JAMF School tool to manage these incidents

Hi Everyone, kindly raise your hand who willing to make one to one conversation to share knowledge of Jamf Pro from you. If you guys interested kindly reach me through yogeshnk92@gmail.com

Hello,I have 2 ADE Server integrated in my Jamf Prof.Is it possible to group these devices into smart groups based on their ADE server or on the PreStage profile that the devices have used? I already use the different ADE servers in the PreStage profiles.

Hello.We use Google Drive for Desktop to backup users folders on Macbooks.I'm looking for a way to automatically deploy this configuration on all workstations.Today we do the operation by hand and I want to avoid human error.Do you have a solution or an idea for this?Thank you!

Hello,Wondering if anyone else has seen this before and looking for some guidance. I am experiencing an issue with Privacy Preference Policy Control (PPPC) Configuration Profiles in our Jamf Pro environment. Any time I create a new PPPC profile, paste in the code requirement, and hit save, I notice the pasted text only shows the 'identifier' component of what I pasted.For example, here is what I paste-in for Microsoft Teams:But after clicking save, I only see this:Variations of this same issue apply to other PPPC profiles as well. Here is an example of what I paste-in with Pulse Secure VPN:Versus what I see after clicking save:I am curious if this is intended behavior and if anyone else experiences this in their environment. Another strange issue that is potentially related; if I make any change to the PPPC profile, (including modifying the Macs the profile is scoped to) the profile will fail to deploy until I manually re-paste the code requirement in its entirety. Once re-pasted,