I was having trouble getting ANY VPP apps to deploy on Big Sur machines. I discovered that in Big Sur, in the "Restrictions" configuration profile, I had to UNtick "Require admin password to install or update apps". This was not needed in Catalina, but VPP apps will not deploy on our Big Sure Macs unless this box is unticked. See attached screenshot. Hope this helps someone!

I package Figma desktop application after download the app as .dmg via composer and deployed thorugh policy with no issue. It was working fine on macOS Monterey but after upgrade to Ventura it is not working saying corrupted. I also tried to re-install from policy still get same error. But if I right click the app icon from docker and click "open" a new window pop up from there if I click open again that will launch Figma desktop and this need to do for the 1st time after upgrade. Any suggestion for that. Any one know how I can kipp Figma process running that way i will script to remove the Figma App from /Applications folder and re-install to see that resolve the issue or not.

Hi,  I am trying to deploy a new plist from JAMF but this one contains <array> and it failed to deploy.here the example :<?xml version="1.0" encoding="UTF-8"?><!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"><plist version="1.0"><array>  <dict>    <key>organization</key>    <string>company1</string>    <key>display_name</key>    <string>C1</string>    <key>onboarding</key>    <false/>  </dict>  <dict>    <key>organization</key>    <string>company2</string>    <key>display_name</key>    <string>C2</string>    <key>onboarding</key>    <false/>  </dict></array></plist> if I remove array ti

Good Afternoon!I'm not sure if someone could help me figure out what is going on with this. We are currently deploying the CrowdStrike Falcon Sensor in our environment, and have a policy that pushes out the install package and a script. The install package works without issue, but we are having some issues with the script.When the endpoint is licensed already, the script returns a failed status code and a status message as to why it failed in Jamf ("ERROR: The machine is already licensed"), but does not return that message in the script so we can tell it to succeed in the case that it is already licensed. #!/bin/sh # THIS SCRIPT LICENSES THE CROWDSTRIKE FALCON SENSOR RESULT=$(/Applications/Falcon.app/Contents/Resources/falconctl license "$4") echo " OUTPUT: ${RESULT} " Which results in the following:Script result: Error: This machine is already licensed OUTPUT: Any idea what is going on here?

Hi,every now and then I come across a Mac which stopped communicating with the Jamf server and Apple's MDM.As our MDM profile is non-removable I have the question how to uninstall it? Sending the MDM-removal command obviously will not work nor jamf removeMDMProfile.Any ideas?

Hi all,I have a machine consistently producing the error below in the jamf log - does anyone have any info that might help?jamf[925]: Error Domain=NSCocoaErrorDomain Code=4099 "The connection to service named com.jamf.management.daemon.binary was invalidated from this process." UserInfo={NSDebugDescription=The connection to service named com.jamf.management.daemon.binary was invalidated from this process.}I've pasted the full loop of log entries below (starred out username).For context, the 'Google Chrome - Install & Update' policy is one of a few similar scripts that use Installomator (plus variables) to install some apps not on the Mac App Store.jamf[10839]: Checking for policies triggered by "recurring check-in" for user "*******"... jamf[10839]: Executing Policy Google Chrome - Install & Update jamf[10839]: Checking for patches... jamf[10839]: No patch policies were found. jamf[10839]: Error Domain=NSCocoaErrorDomain Code=4099 "The connection to service named com.jamf.manag

Does the new feature macOS Onboarding support Jamf App Installers? Why Using Installomator etc. for Basic Apps like Office365 and so on. But in the Settings of Onboarding there is no way to include App Installers or am looking wrong? And when I am going to use the new feature, do I have to put the policy in Self Service for initial Setup?

Hello,We're deploying MS Defender, but need some help with how to remove or hide the "Exclusion" option from MS Defender user interface, if it's possible. My current configuration "MDATP MDAV configuration settings" appears to enable to exclude a default path, but I prefer to not have "Exclusion" option available or visible. 

Hi Folks. I've been put on the job of designing Jamf configuration profiles and policies for my environment. Jamf is totally new to me so I'm starting from the ground up with their Jamf training modules. The infrastructure has already been put in place by the main campus techs at our university. They've already made me a production environment for our college, so I feel that most of the heavy lifting is already complete.Could you share any thoughts that would be helpful to me while I go through this process? What are best practices for working with the MDM? What are mistakes you made? How should I start off on the right foot? Are there any crucial best practices that I should know about from the start? Etc. etc.

It pays to stay at JNUC until the very end. The last session at JNUC 2019 gave me the inspiration to finally solve the issue of finding duplicate computer serial numbers using Splunk. This is extremely helpful in finding computer records after a computer has had a mainboard replaced by Apple. The Serial Number is the same, but a new JSS Computer ID is created. Download the .tgz here:https://www.splunk.com/en_us/download/splunk-enterprise.html#tabs/macos*The .dmg didn't seem to install properly for me, but the .tgz did. Create a read-only user in JamfPro that Splunk can use to access an Advanced Search. Create an Advanced Search whereCriteria "Managed Is Managed" or "Managed Is Unmanaged".Display: Serial Number, Computer Name, and JSS Computer ID. Install the Jamf Pro Add-On and configure it with your instance and the Advanced Search:https://splunkbase.splunk.com/app/4729/ Use this code and set a 1-hour Window: sourcetype="jamfmodularinput" | stats count, values(computer.Compute

Recently new MacBook Pros have been presenting an empty dock after user enrollment. I cannot find any setting that would make this happen. Seems to only happen on brand new computers and not re-provisioned computers. Jamf Pro Version11.2.0-t1705676508

Optimized to leverage SYM-Helper (1.1.1), Setup Your Mac (1.14.0) leverages new features of swiftDialog (2.4.0) Introduction Apple's Automated Device Enrollment helps streamline Mobile Device Management (MDM) enrollment and device Supervision during activation, enabling IT to manage enterprise devices with "zero touch." Setup Your Mac aims to simplify initial device configuration by leveraging swiftDialog and Jamf Pro Policy Custom Events to allow end-users to self-complete Mac setup post-enrollment. Continue reading …

Just upgraded to Jamf Pro 10.5. When I run a quickadd.pkg or enroll via Jamf Recon, everything works perfectly except running jamf commands from the terminal. I run any of the following commands the terminal returns with "sudo: jamf: comand not found": sudo jamf reconsudo jamf policysudo jamf enroll -promptsudo jamf manage Has anyone else run into this issue? I'm using the thin image method, so the quikadd.pkg & recon are vital to my process. OS is currently High Sierra 10.13.5

We have an environment that already is set up for Apple devices.  I don’t know anything about how it is setup or what any of the configuration looks like.  My question is how do I enroll a new iPad into the application Jam Pro and is there a limit on how many devices can be setup? I think but I am not sure this application houses two departments' worth of devices mine and another department, and I am not sure how to differentiate between mine and theirs except by the serial but as far as I know, there is no information telling me what our serial’s numbers are.  So another question how can I tell which are mine and which are not, it seems like they are all dumped into the same area. These iPads are brand new out of the box, usually with iPad previously managed when they were wiped during the iPad setup we would get to a point where you would put in a username and password to connect to the MDM at which point I am guessing the MDM config would sync to the device?

I'm attempting to create a script to remove .app files from User's trash bins. I have the following script that is returning "No such file or directory."  #!/bin/bash# for each user in the /Users folder that is (!)not the Shared folderfor dir in /Users/[!Shared]*do# Create a variable with just the users nameloggedInUser=$( scutil <<< "show State:/Users/ConsoleUser" | awk '/Name :/ && ! /loginwindow/ { print $3 }' ) # Delete app files from the currect user's trashrm -R /Users/${loggedInUser}/.Trash/*.app # For logs or viewing progress--shows when the users trash has been emptiedecho -e ".app files removed from Trash for: ${loggedInUser}"doneHas anyone done something like this?

Hello everyone!I've added a MAC via BYOD and user auto enrolment, but the Self Service portal won't deploy despite enabling/disabling setting and forcing policy updates on the MAC.I can't find any trace of a deployment attempt in /var/log/jamf.log. Do you have any leads or ideas?Thanks a lot! 

When creating a new Extension Attribute, I don't have the option to set the input type to "Script" I've been trying to create a smart group based on "uptime," but each guide that I go over says to set the extension input type to "Script"Am I missing something? Am I in the wrong place?Thank you! 

Hello All,I'm researching other solutions to deploying cert-based WiFi authentication via Jamf Pro for our office Macs. I'm familiar with the AD CS connector, but our cyber security team will not open network traffic to ports 443, 8443, etc. I don't believe Jamf Pro provides a block of secure IPs that can be used, so we need to find an alternate solution. What other solid solutions are available to us that will allow Jamf Pro to provide cert-based WiFi authentication?

Team,We are experiencing an inventory update issue with 3 Intel Jamf-managed machines. Whenever we run the "sudo Jamf recon" command to execute the inventory update policy or from the self-service, we encounter the following error at the end: "Error running recon: Unknown Error - An unknown error has occurred."We have thoroughly checked all the configurations and reviewed a few logs, but we have not found any challenges. The Jamf Support team has also investigated the matter, but we still haven't been able to identify a possible solution.Furthermore, we tried completely erasing and reconfiguring the affected machines. During the initial configuration, the inventory update ran successfully without any errors. However, after a few hours, when we attempted to run "sudo jamf recon" or perform the inventory update from self-service, the issue resurfaced.Are there any others who have experienced a similar issue, particularly with Intel Macs? We would appreciate any insights or assistance in

A pair of scripts to help Jamf Pro admins easily display actionable, custom branded macOS Notifications Introduction One of the more welcome features of swiftDialog 2.4.0 is actionable, custom branded macOS Notifications. When leveraged with Script Parameters, Jamf Pro administrators can easily display custom branded macOS Notifications to their users. Continue reading …

When a Device is going through the user initiated enrollment jamf is scoping extra policies and configuration profiles that are not actually scoped to the device in any way. When the device is enrolled during prestage enrollment this does not happen. Our policies are scoped to smart computer groups which are set up by device name, the devices are not in any of the wrong policy groups nor has a name close to any devices. Is there anywhere to find out why the user initiated enrollment is scoping all these policies to the devices?

Hi , For some of our users jamf login window has stopped showing up, the users are only seeing mac user to login. OS version is Sonoma 14.0Jamf connect version is 2.30is anyone else having similar issue and can share a fix , i know re isntalling the profile might fix it but i dont want to perform last resort as first. Thanks,

Hello,we have several iPads at school which were purchased before using jamf as MDM.I now want to enroll them into jamf using Apple Configurator. After following the steps described in jamfs support documents (https://learn.jamf.com/de-DE/bundle/jamf-school-documentation/page/Apple_Configurator_2_Enrollment.html) I am now stuck when trying to select one of our prepared Automated Device Enrollment Profiles in jamf. Here's what I did:Enroll the device via Apple Configurator using a blueprint as described above ✅Change the MDM server of the device in Apple School Manager from Configurator to our jamf server ✅Device shows up in device inventory now, is marked as supervised and can be managed ✅...but...The device does not show in the list of devices when I click on "devices - automated device enrollment profiles". And since I know no other way to do so, I now cannot select a different enrollment profile from one of our prepared profiles inside jamf, I am stu

 When trying to add https://apps.apple.com/us/app/home/id1110145103 to some iPads I get the usual, "go get a volume license OR download it directly and let local iCloud accounts get it for free." Well, I dont want local iCloud accounts so I want to go get the license... ...but over in biz manager I can't seem to find this app, no matter how I search! Anyone else figure out how to deploy it?

I wanted to check the current gatekeeper status using a bash script preferably to find out whether the status is set to:1. App Store2. App Store and identified developers3. AnywhereBy running below commands will enable Gatekeeper with "App Store" only and but does not help to change it to "App Store and identified developers"  spctl --master-enable defaults write /Library/Preferences/com.apple.security GKAutoRearm -bool true  Kindly suggest how to achieve both these tasks.