We have an application, Coginiti Pro, that requires a user to have elevated rights before installing on the Mac, or else the install doesn't work correctly.We use Jamf Pro, and currently I've added some text to the Self-Service installation page telling users they need to elevate their rights before running the install. We use the Privileges app for temporary rights elevation.I was wondering if I could script this. The current Coginiti Pro install we use is a script rather than a PKG. I'd like to add some code to the script that says "check if the current user is running as a standard user". If so, I'd display a message reminding the user to elevate their rights before proceeding.Is something like that possible? 

We are doing some testing on the office 2019 update issue and we setup a test policy to fix this. We are trying the startup trigger policy as that will confirm all office apps are closed but are seeing sometimes this policy never executes (says pending in the policy) even after multiple reboots. Is the startup trigger not reliable?

Am I able to stage a .sh file on my user's computers?This script contains a sudo command but I want to be able to run from the user's account. This will be a break glass script to fix the stupid Sonoma Time/Date bug. What file permissions would I need to assign as well?

Hi All,Does anyone know why the Management Command tab  (See the attached image -02) is missing from some iMacs on the JAMF? Imac is communicating to the JMAF server but I can not push any software or any commands.Help will be much appreciated       

Hi All,I'm trying to install the app using a Self-service on iMac. I can see the app on the Self-service portal but When I click on the install button I get the error  Cannot reach a JAMF MDM serverWhen I check the device on the JAMF server it communicates with the server  This is the error that I get When I click on the install button Help will be much appreciated  

We have a pool of machines that are in a remote site. Had users sitting at the desks with their computers, this week they have moved to a different building and are now remoting in. A few of the users have developed the habit of shutting down their machines when they are done for the day. First day in the new office, and they shut off their machines on the way out. Neat!  I see there's a setting in the Configuration Packages > Finder > Commands tab that should disable shutdowns from the Finder dropdown menu, but it doesn't appear to do anything. And I'm also looking through many forum posts dated back to 2016, from other people encountering the same thing. We have this command that we have successfully to disable sleep:  Run Unix command 'defaults write /Library/Preferences/SystemConfiguration/com.apple.PowerManagement SystemPowerSettings -dict SleepDisabled -bool YES'  We have tried the following command to disable Shutdowns, but it i

I have an iPad in Lost mode. I am unable to connect the device to our WiFi to get it out of Lost mode. Please help.

Hi,  I know there are some similar posts notably this one here: https://community.jamf.com/t5/jamf-pro/popup-user-notification/m-p/235439/thread-id/223319 but I'm relatively new to jamf pro and just looking for a bit of similar more tailored advice. I want to be able to set up a 'notice for a new user' policy that pops up only once on a Mac for the first time a user logs in, which has an accept button that the user must click for it to disappear.(a bit similar to accept terms and conditions before downloading a new program I guess). If the user does not click accept, then the policy stays on screen/ keeps being presented until accepted. Is it possible to  do something like this, maybe using some of the ideas presented in this thread above?  I'm up to Jamf 200 but not had much experience with creating policies or with scripting  yet, but I'm fairly confident I could  hopefully follow along some tips or any advice given here, thanks.

I have a few examples now and can confirm, "in my environment", Mac OS Sonoma is causing authentication issues in my offices over Wi-Fi. I have my networking team assisting me trying to find the solution.  Most of my Mac environment is on Monterey, Catalina, with a few new devices running Sonoma. All Sonoma devices are not receiving an internal ip and forcing them to a 192.168 external IP. We do have a network access control system in place - ClearPass - we are using this to block external devices on the network. ClearPass provides complete visibility into users, devices, and applications across the entire network. This allows for the creation of detailed access policies that provide granular control over which users have access to which devices and applications. Does anyone know if Sonoma OS causes changes to the network settings, configuration, authentication, etc. on the device? I had a device that was profiled in clearpass running Monterey and the mome

I'm trying to establish the last time a user actually logged in to their laptop. I have, therefore, created a Computer Extension that runs a simple script that is supposed to display a String result in User and Location:#!/bin/zsh/usr/bin/last -1 -t console | <result>/usr/bin/awk '{print $4, $5, $6}'I added the Computer Extension to the Configuration Profile under ALLOWED EXTENSIONS but nothing ever seems to be displayed. How are Computer Extensions actually meant to work, i.e. how am I meant to actually see the data that is gathered???

Dear all.Is anyone of you aware of a way how to prevent the auto-starting of Teamviewer (and with that, the basic setup assistant) after the installation?I have seen that there are quite a few Launch agents and Launch Daemons included in the installer package, but I don't really know how to manipulate the portions in there to just block the auto start after installation.Any idea? Thanks a million.CheersChris

I'm trying to deploy FortiClient 7.0.2, and I have some questions about order of operations and whether this is going to cause trouble on specific OS versions. I still have some more testing to do but it seems to work on the one I tried, but maybe it was a fluke. I can post configs as necessary, but I suspect that they aren't needed for these questions as it's more about how these functions work.I have a script that grabs the file from our server and installs it. That works. I need to get curl to fail out of the script if the download fails, but I haven't looked into it yet so I'm sure I can find a way.Unfortunately though, FortiClient needs users to make tons of changes to System Prefs. Full Disk Access, requests for VPN connections, and request for System Extensions.I used PPPC to grab those Full Disk Access settings from an install and make a config profile.Will it cause a problem if I deploy those before the policy for the install, when the filepaths and apps don't exist yet? It se

Hey JAMFs!I try to automate the creation of Smart Computer Groups by API (within Powershell) based on the installed Apps criteria.I'm a bit confused as I don't find anything in the API-documentation fpr smart-computer-group with method POST.I already have a filtered list of all required groups with app name, path and name for the group.

We have noticed a strange bug with iPads running iOS 17. We use a content filtering Configuration Profile on all our student iPads to ensure that they are not able to delete their Safari history. The Clear History option within settings is still greyed out as well as the Delete option with in the History tab. However students are able to slide from right to left over their History to delete it now. Has anyone found another way to block deleting Safari history that would also block students from this method? 

Hi All,So admittedly I am a little new to Jamf Pro, but I have gone through the Jamf Pro 100 course. My question is, I have a few iPads which their MDM certificates had expired, and I had that the only 2 ways to re-enroll them were via web re-enrollment OR having to completely reset and clear all data from the iPads. I tried web re-enrollment and no luck there, so I reset the iPads. And now they have valid MDM certs, so thats good, but now when I try to send management commands, here is my issue -- commands like "enable/disable bluetooth" work just fine, but when I try to send commands like "Update Inventory", it doesn't work. Why do some commands work and others don't reach the iPad?

Hi,Recently our VPP token and ASM token expired, I went through and followed the renewal steps and got this all back to working order, the problem I am having now is that devices dont seem to be communicating back to JAMF.I went through to deploy a free app to a smart group, which on JAMF is showing that the command has sent, but is pending on the device. It even shows that it has taken 2 licenses from the ASM/VPP side of things.Please help.Kind regards 

So I recently updated the server token in jamf pro for our ABM instance as it expired on the 1st.  Both jamf pro and ABM show that they are sync'ed and communicating with each other, however, in jamf pro, when I go to check our existing prestage enrollments, they are all showing 0 devices available.

Hi GuysI’m looking for a solution for this unusual situation. I’ve spent few hours searching for it but all I found was few posts “how to avoid connecting MDM servers”MacBook Pro 13, M1 2020Ownership is clear, bought new by company where I’m employed. MDM profile was installed on Monterey in 2021. There were no issues after updating to newer versions till Sonoma update.the story in points I’ve asked IT colleagues for letting me to switch off the MDM as it was required by Apple for screen replacementAfter repairing I’ve asked my IT colleague if it’s fine to update the system to Sonoma as it was not possible when the MDM was runningReceived green light, clicked update button.First start, logged in with my credentials (Mac admin) and shortly after connecting the network a full screen enrolment window popped outIt will be fine to go forward but the company details appearing on the screen are completely different as they supposed to be. This is saying that MacBook is owned by another c

Hello,I am trying to determine if there is a way using Jamf for me to restrict particular users to only being able to log into specific machines.Example, a student worker account can only log in on the designated student worker machine.The challenges I see with this are: We use Microsoft Entra with Jamf Connect for authentication and we do not have users with Apple IDs in Jamf.Can this be done?

I am trying to configure our profiles so that supervised Ipads will get apps of our choice pushed out to the Ipad at the beginning of the installation and also have the possibility to do it after OOB installation. I am currently having trouble doing this without having to be logged into the app store with an managed applied. The reason for this solution is that we want the users on premise to be able to use in app purchase with non managed appleids. Does anyone have a solution for this using device groups for an example? I cannot find documentation for this and i am starting to think it might not be possible.. Thank full for any suggestions!

Is there a possibility to disable the new feature in macOS Sonoma *Video Reaction* by default with a profile?It leads already with us several times to the fact that in an important meeting from the nothing e.g. balloons came. This is not very professional.Would there also be the possibility that the users (if they want it) can activate this feature again?Thanks for any advice on how I can disable this.

Is there a way for me to deliver my organizations certificate for our wifi without configuring the Wifi payload with a configuration profile? The reason for this is due to the way our Wifi is configured, I can't preload the $username wild card without requiring the end user to log in every time they connect to the Wifi. 

Hello to all. My Security Team wants to link Hyperproof Hypersync to our JAMF system. Has anyone heard of this and/or have had success getting this to work? I'm providing the link to HH documentation. https://docs.hyperproof.io/admin/en/hypersyncs/connecting-jamf Thank you for any help with this. 

How do I locate my stolen tablet 

Hi there, We've just begun testing Jamf Connect in our environment and noticed that the Jamf Connect login window doesn't allow the use of WPA-2 Enterprise authentication against a RADIUS server. How do we navigate around this? We use UniFi OS with RADIUS configured on a USG.