We recently updated to iOS 17.3 on our iPads, which required us to re-sign in to the students' Apple IDs. During the sign-in process, some of them encountered verification failures. In the past, we would resolve this issue by deleting the account in Apple School Manager, and overnight, the account would be recreated. However, recently, this method has not been effective. Currently, we have 5 students without Apple IDs. We contacted Apple about this issue and was told this was a problem with JamF. 

Reposting this from my personal website to gain some visibility.  UPDATE 1: I'm being told now that this change IS RETROACTIVE. Meaning your dozens/hundreds/thousands of endpoints that have been configured with Prestage enrollment, and an admin account created in that process, will have that password randomized. Which will break Secure Token/Volume Ownership/etc. Maybe you're okay with this, but if you're not, you NEED to reach out to your Jamf Representative and tell them.  I wanted to bring up that a big change is coming to Jamf soon and they (Jamf) seem to think it’ll be well received all around: forced LAPS for Prestage (ADE/DEP) admin accounts (See bullet 2 here, 

Intermittently our DEP/Auto-Enrolment devices do not complete the enrolment process. The MDM profile and cert is applied, Config Profiles apply and the device appears in JAMF Inventory however Policies never kick off and Self Service is not installed. We've seen similar issue to this over the past few years but never seem to get a solid answer from JAMF support, now we are seeing it on some of our new M1 Macs. It's seemingly completely random, I'll enrol 4 identical devices, 3 will complete as expected and the 4th will do as described above. All on the same network, same model, same Pre-Stage...Why is this issue so difficult to solve?  Why does it keep happening? When can we expect it to be resolved?

Hey all,I need to somehow be able to set the default backup folders for google drive, and while I was looking through the app config plist files, I was able to find that in the "com.google.drivefs.plist" file, there's a key called SyncTargets, which contains an encrypted <data> field, which has the folders that you want to backup to google drive.Has anyone been able to override or preset this value before?Thanks!

I've run into an issue with signing back into a Mac (macos 14.2.1) and I'm not exactly sure if it's related to JamfConnect. Our fully configured Mac is running Jamf Connect 2.29. I'm logging in with an administrator account created during PreStage enrollment. After no input for a while, the Mac goes to sleep or screensaver. If this state remains for too long, the mac won't complete the login. I can enter the credentials but it just give me the thinking circle and never completes the sign in. All input becomes disabled and I have to force reboot it. Afterwards, I can sign in again without issue. Troubleshooting is nearly impossible because I can't get response from the system while it's having the issues. Can anyone point me to logs or files I can reference afterward? Has anyone else seen this with Sonoma?

Afternoon AllIm aware that you need to run this command /usr/local/bin/authchanger -reset jamfconnect. Normal after a software update to authchanger the jamf connect login window.   This has been configured in a policy since we installed Jamf connect some months ago. However recently its become unreliable. In the same policy I have restart script which I understand is also required, if no one is logged in the device will restart this doesn't seem that reliable either. While the logs suggest that all is fine the jamf connect window doesn't seem to get reset after a restart. A few questions Aren't these key suppose to stop this from happening, they appear to been ignored?<key>DisableUpdateWatcher</key><true/><key>DisableRSRWatcher</key><true/>

I have a user that needs to use her school gmail account on a school ipad.  I've deployed the app to self service on her ipad but when going in to the app it wants her to sign in to her itunes account.  We do not allow itunes on the ipads.  Is there a way for her to login to gmail?

Is there a way to block the scrolling previews at the top of an Apple TV? I've blocked other apps such as TV, Movies, etc but I can't seem to get rid of the featured items at the top.

Can anyone provided details on what this feature does and how to configure it, as I'm not find the documentation very clear. I'm hoping that using it will allow a standard user to enable System Settings > Privacy & Security > Screen Recording & System Audio for Slack, but I can't work out what value is suppose to go in the Code Requirement field.

Hey everyone,  Anybody is using a script to rotate the EFI password on Intel Macs? I think having the same EFI password for all Mac fleet is not a good procedure!?  Any tips are very appreciated.

Hello Jamf Nation! This release is in support of the Apple Spring release. We have several exciting new features including beta MDM support for Apple Vision Pro, Self Service initial app detection, Support Digital Market Act app restriction, and more! You can find more information in the release notes when you enroll.How to join the beta: Enroll in the Beta Program under Product Feedback at account.jamf.com. Once you enroll you'll receive an invitation to join the Beta Forum, click "Join this group Hub" to gain access. Email beta@jamf.com with question

When creating a Settings > Global > Enrollment customization the Branding and Preview page shows the text box displayed with a scroll-bar, which is to be expected given the amount of text entered. However, during the enrollment process the user does not have the ability to scroll through the text so only sees the first part of what they are, in effect, agreeing to. Why is this?

Hello,We have set in a profile that a password expires after 500 days.Now we want to know how long the user has until he has to change the password.How can I find out when a password expires on a Mac?We currently have an extension attributes:#!/bin/bash #Shows the loggedInUser loggedInUser=$(echo "show State:/Users/ConsoleUser" | scutil | awk '/Name :/ && ! /loginwindow/ { print $3 }') #Returns the value of the date when the password was last changed or created setPassDate=$(date -r $(sudo dscl . -read /Users/$loggedInUser accountPolicyData | tail -n +2 | plutil -extract passwordLastSetTime xml1 -o - -- - | sed -n "s/<real>\\([0-9]*\\).*/\\1/p") +"%Y-%m-%d") #The Global Policy from Configuration Profile pwGlobalPolicy=$(pwpolicy -getaccountpolicies) pwGlobalPolicy=$(echo ${pwGlobalPolicy:32}) echo $pwGlobalPolicy >/private/tmp/pwGlobalPolicy.plist pwGlobalPolicy=$(/usr/libexec/PlistBuddy -c 'print :policyCategoryPasswordChange:

Hi,We are using Parental Controls to default deny all websites except for a list of approved websites on our Macs (Parental Controls > Content Filtering > Limit Access to Websites by > Allowing access to the following websites only). Users only have access to Safari for web browsing.One of the issues we're seeing is that Safari will display the entire list of approved websites to users when they navigate a blocked page. That is they will see the "Opps! You can't see pages on this website" error page and then at the bottom of the page is a list of all approved websites.Is there a way to hide the list of approved websites?Thanks!

HiOur Jamf AE is being deliberately unclear on licence requirements when it comes to Jamf Connect.I was under the impression that we only needed one licence to add Jamf Connect to our Jamf Pro environment.He says we may need more but can't say why?!What is required?We have many machines added to our JAMF Connect pre-enrolment scope with no issue.Are licences required for each machine?

Hi.i need bulk appleIDsign up in business.apple.comAfter create user and sign in need phone number to verify.Is there a way that does not require a phone number?Or do you have a way to make Apple ID in bulk?

Hi, I am currently trying to replace Teamviewer 12 Host with Teamviewer 14 Host.I previously found a script on here and got it to work using Dropbox to host the PKG and Assignment files, as seen in the below script. Teamviewer have now bundled the Assignment file with the installer but trying to call this doesn't seem to work via Jamf. If I run it in Terminal, or from a local script file it will work but neither option works when calling from Jamf. I can continue Installing v12 and then running the v14 installer on top, which will retain the assignment but I'd rather it was installing cleanly on new devices. Run Assignment Tool (trying to run this directly from Jamf) /Applications/TeamViewerHost.app/Contents/Helpers/TeamViewer_Assignment -api-token *******-********************* -group-id g******** -alias "${ComputerName}" -grant-easy-access -wait 10 or creating a PKG to drop the Assi

Upgraded on prem Jamf to the current version (10.22.1).Prior to the upgrade we were experiencing DP problems not only with large downloads but small as well. I repackaged Office and the new file name did not have spaces and that helped for a while. For some time now all downloads from the DP fail. With Jamf 10.22.1 I see the following error message: Error: Package was not successfully downloaded. -1202 Error: insertthenameofyourpackage.pkg is not available on the HTTP server. The DP is on a Mac running the Server.app with htttp/websites service.

Leverage switftDialog and Jamf Pro Policy Script Parameters to easily display engaging end-user messagesIntroductionUsing Bart Reardon’s swiftDialog and Jamf Pro Policy Script Parameters, creating engaging end-user messages is easy.When you really want to get your user’s attention, one of favorite options is --blurscreen, which “will blur the background of the display while dialog is showing.”Continue reading …

I have a configuration profile that adds our VPN configuration. I then have a policy that kicks off this simple bash script. open “/System/Library/CoreServices/Menu Extras/vpn.menu” All this does is check the box for "Show VPN status in the menu bar"This is the error that I'm getting.Script result: The files /“/System/Library/CoreServices/Menu and /Extras/vpn.menu” do not exist. When I run the command in the terminal it completes successfully.

We have an app called Spaces Edu loaded on all of our iPads. The app is set to automatically update itself both in Jamf and on the devices. I can see that the version of this app in Jamf is the most current when compared to the information in the App Store. Recently we have discovered that the app is not updating on some of the devices. Most of these devices have stopped communicating with Jamf. I can resolve this but here is the strange part.I discovered one iPad that did not have this app. I assigned it to the Scope and the app loaded to the device. The strange part is that the version of the app that loaded was not the most current and not the version that is in Jamf.Any thoughts would be welcome.

I am working on printer deployments and have a question. I can push the HP or Xerox printer drivers to a machine, however the files are usually in .gz format. This is an issue since Casper wants the PPD file. Is there a more direct way to get the ppd sent to the machine? Do I need to script this, or am I making this harder than it needs to be? Thanks for any help!

How do I re-enroll, using Automated Device Enrollment, a MacBook that was factory reset by a user on being issued a new MacBook. Looking to repurpose the device for another user, but when booting it up it goes through the standard user experience rather than MDM.The device is still listed in Apple Business Manager and associated with the MDM server, and in Jamf Pro in the corresponding PreState Enrollment set-up it is listed as being in Scope. Despite this it doesn't appear to be running the PreStage Enrollment.

Hello there! I'm having an issue where items I set to be available in Jamf Self Service are not appearing. It doesn't seem to matter if it's iOS or macOS apps or policies--I check to make them available in Self Service, and if it's a policy I ensure that the Check In is set to Recurring. They do not populate. I tried the Installation URL from the Self Service tab but it results in an error from JSS: "This item is no longer available." As far as I can tell, it definitely is, but clearly I've got something wrong somewhere and I've hit a wall so I thought I'd ask Jamf Nation for help. Any ideas are much appreciated!

We have a Jamf Pro cloud set up to use entra 365 SSO for authentication. I would like to use the Teacher App to set up classes and students and potentially Apple Classroom - any advice before I get started ?