The adventures of deploying Cisco's Secure Client continue... After going through Cisco's documentation, the HCS technology group guide, and building a PKG, changing the choices XML, and creating the config profile , I have hit another snag. When deploying through a policy, the install fails: Script result: installer: Package name is Cisco Secure Clientinstaller: choices changes file '/private/tmp/csc_choices.xml' applied installer: Installing at base path / installer: The install failed. (The Installer encountered an error that caused the installation to fail. Contact the software manufacturer for assistance. An error occurred while running scripts from the package “Cisco Secure Client.pkg”.)However, if I push the policy through sudo jamf policy , the installer will go through and this will appear:  If I click "c

Hello,Is it possible to cleanup Safari history with a bash or powershell command for iPads?

We are trying to run a script that will change a Mac's name to the asset tag of the device. It is supposed to run on devices at an ongoing check in on each device but it won't make it past the first test run. I know the script is fine running locally as expected but running the policy on JAMF (via a scope and self-service) gives me this error:Shell type is set as "Shell/Bash" and here is the code (omitted username, password and url for security reasons but tested each individually and they work as expected).  #!/bin/zsh # server and credential information jamfProURL=url username="username" password="password" # request auth token authToken=$( /usr/bin/curl \\ --request POST \\ --silent \\ --url "$jamfProURL/api/v1/auth/token" \\ --user "$username:$password" ) echo "$authToken" # parse auth token token=$( /usr/bin/plutil \\ -extract token raw -

Hi all,I'm trying to locate the Virtualbox License file on managed devices. I followed the guide outlined here https://community.jamf.com/t5/jamf-pro/best-methods-to-search-for-the-existence-of-a-file/m-p/286067 but a Smart Search doesn't yield any results (I personally created a dummy file to check that)I created an EA with the script outlined  #!/bin/bash LicenseFilePath="/Applications/VirtualBox.app/Contents/MacOS/ExtensionPacks/Oracle_VM_VirtualBox_ Extension_Pack/ExtPack-license.html" if [[ -e "${LicenseFilePath}" ]]; then EA_RESULT="Installed" else EA_RESULT="Not installed" fi echo "<result>${EA_RESULT}</result>"  I created a Smart Group with EA-Name as Criteria and Value InstalledAny suggestions? 

Hello Everyone,I tried enabling the Full disk Access for Qualys Agent from the Jamf Pro console and the profile has been pushed to the endpoint. However, the Full disk Access isn't enabled for the Qualys agent. Can someone help me to troubleshoot.

I am having a problem with the Device Compliance to Intune.  I have followed all the steps and the partnership is active in Intune but in Jamf I have a connection error Connection verification status: Failed. Ensure the Microsoft Intune configuration is correct. I am unsure of where to look next so any help would be appreciated.Thanks

I have 7 devices that I am trying to push Logic Pro to via self service. We have enough licenses so I know that is not the issue. Looking at the console logs I get the below. default 15:07:16.234430+1300 appstored [DIS1962A88F/com.apple.logic10:634148309] Waiting for installation to completeerror 15:07:16.250534+1300 authd credential: failed to get user uid -1error 15:07:16.256192+1300 authd credential: failed to get user uid -1error 15:07:16.261858+1300 authd credential: failed to get user uid -1default 15:07:16.266027+1300 authd Validating session owner invalid (-3) for is-appstore (engine 116)default 15:07:16.266052+1300 authd session owner -3 invalid (does NOT satisfy rule) (engine 116)error 15:07:16.266540+1300 authd Fatal: interaction not allowed (kAuthorizationFlagInteractionAllowed not set) (engine 116)error 15:07:16.266747+1300 authd copy_rights: authorization faileddefault 15:07:16.267709+1300 appst

Has anyone successfully implemented SUPERMAN for their MacOS patching? I've got in place the Config for the settings I want, I have the API set and an policy to deploy out SUPERMAN. Question now is that if I set everything through the config file and deploy out SUPERMAN does it's own thing in the background and from a management standpoint I don't know what its doing. The first time deployment I can see that its pulling the device info, can see its authenticating with the API and then says that Jamf is the parent process, restarts super in LaunchDaemon then Jamf gets nada after that. The local log shows exactly what its doing. At the end of the log it restarts all deadline counters and the workflow schedules itself to relaunch after the time I set.So my question is, has anyone been using Super and figured out a process to see the logs of what its doing on the devices? I'm still in the testing phase as I want to know what to expect before pushing it out to actual user devices.

While uploading any PKG, I'm getting the message There was a problem uploading the package to Jamf Cloud.Connection failure: "The operation couldn't be completed.(error 500.)" , so please reply to me with the solution.  

https://learn.jamf.com/en-US/bundle/jamf-pro-documentation-current/page/Jamf_Push_Proxy.html   In our JAMF Pro server logs hosted in jamfcloud, there are a lot of proxy push errors.   We've had Jamf Pro for seven years.  This has never been setup.  Should it?   Is it important?    I'm not aware of any real issues occurring, just these errors in the log over and over. Doug     java.lang.Thread.run(Thread.java:829) [?:?]2024-03-18 19:01:41,645 [WARN ] [@Async-1 ] [NotificationEventListener] - Exception occurred when trying to add macOS Self Service push notification to queuecom.jamfsoftware.jss.exceptions.pushnotification.PushProxyConfigurationException: JAMF Push Proxy is not configured  

Has anyone begun migrating Cisco Umbrella client to Cisco Secure client yet?I have Cisco Umbrella client distributed with Jamf Pro, now it is announced as EOL in 2024, with Cisco Secure client as the new client.Is there someone out there that has tried migrating? Looking for caveats or something worth thinking about before getting hands on upgrading my workflows and enrollment profiles.

Is anyone else experiencing devices falling out of registered status and thus being marked non-compliant in Microsoft Entra when using the Jamf Pro Device Compliance integration? The users are still within the "Compliant" Smart Group in Jamf Pro but they fall out of registration. The Jamf AAD plist is missing and there is no MS-ORGANIZATION-ACCESS entry in Keychain. If I have the users re-register using Self Service/Microsoft Company Portal it will be fine for a while and the Jamf AAD plist and Keychain entry will reappear but then after a couple of weeks the same thing happens all over again. Jamf Pro version is 11.3.0 so it shouldn't be related to the recent product issue.

Hello,I would like to get all of our Macs up to date and create a plan to maintain this.    I would like to use the ScheduleOSUpdate command with the InstallLater command as described in Use MDM to deploy software updates to Apple devices - Apple Support My questions are:Can these apple commands be used in a configuration profile that gets deployed via Jamf Pro? I am having trouble finding an example or specific guidelines.Or are these commands intended only for a Mass Action Command as indicated Introduction - Technical Paper: Deploying macOS Upgrades and Updates with Jamf Pro 10.34.0 or Later | Jamf ?How can I see the status of a Mass Action Command after I

Our students have discovered the password to our "vendor" network, which is unfiltered, and have been putting both their personal devices and their school devices on this network.  We are working on dumping all connections and changing the password, but I am wondering if there is a way for me to block this network from being joined on our student devices?  I had thought initially that I could push this network out to all devices with the wrong password associated with it.  This does work but it also is interfering with our student network and causing an error with not being able to join that network either.  Thoughts?  Suggestions? TIA

When the machines have been started this morning, compliance issues were found and the Company Resources were unavailable. In the Company Portal application which is also connected to the Jamf Pro, there were two different devices with the same serial number: one was marked as compliant and the other as non-compliant. Upon refreshing and the status, the same device had still two entries: one entry showed as compliant and the other one as non-compliant. As a solution for Compliance issues, we have the dedicated procedure as seen below:Restoring ComplianceIn the event of non-compliance, users can follow these straightforward steps to restore their MacBook's compliance. Click on the respective button on the right to open the respective guideline in your support app.1. Install System Updates:Make sure that all relevant system updates are i

We are new to JAMF Cloud and would like to integrate our Google G Guite as our identity provider with our JAMF Cloud instance. We got the following linkhttps://www.jamf.com/jamf-nation/articles/440/configuring-single-sign-on-with-g-suite-google-apps Followed the steps, but got app_not_configured_for_user 403 SAML2 error. Anyone has a sample config template that works? Thanks for your help.

We need to downgrade a bunch of machines back to safari 17.3 from our recent update to 17.4 as the devs need it for their contract work with our clients, any ideas on how to do this?

Good afternoon, I am at a loss in an improvement that I am trying to make to speed up our student enrollment process.Current Situation - We have 2500-3500 students that enroll in our Further Education establishment yearly and each one of these students receive an iPad. In our current setup, we have it that the iPad is freshly wiped and the students will have to go through the process of; Signing into Wi-Fi (This is a pain because the students password is set to change on first login, they cannot authenticate to our Wi-Fi before they change their password. So typically, they will have to use a secondary device to go to Office365 to update their password first.). Using their Active Directory account and credentials to enroll the iPad. Signing into their managed Apple ID. Agreeing to Terms and Conditions, etc. and turning on Location Services.This is a time consuming and tedious process when you're running four enrolment sessions over four different zoning are

Hello, I need a daily report. Our security team want a daily report like this. Does Last users has admin rights? How can i do that? I need your help. Thank you. 

Just in case anyone needs this I wanted to post it for an updated resource.#!/bin/bash # Script Name: Disable Slack updates.sh # Author: [Michael Cleveland] # Created On: [Creation Date, e.g., 2023-10-31] # Last Modified By: [Michael Cleveland] # Last Modified On: [2023-10-31] # Version: 1.0 # Description: # This script modifies the Slack application's preferences for the currently logged-in user on macOS. # It specifically sets the 'SlackNoAutoUpdates' key to 'true', which prevents the Slack app from auto-updating. # Usage: # Ensure that Slack is not running or is restarted after this script runs to apply the changes. # Note: # This script uses PlistBuddy for editing plist files, as it ensures the file's integrity. # Be cautious when editing plist files and always ensure backups are made before script execution. # [Here starts the actual script code] echo "Starting the update of Slack preferences..." # Get the current logged-in user USER=$(stat -f %Su /

Hello all,I have an issue showing up at random with only a select few of the iPads I manage. A certain app will not install but will show up on the device grayed out and typically says Waiting (it is properly scoped and we have enough licenses). When you click on the grayed-out app, it either does nothing or prompts to be installed via the App Store.I'm also not able to install it through Self Service. The "Install" command is non-responsive and JAMF shows the command as failed, citing that the app is already scheduled for management. I am not able to delete the grayed out app because it's not installed. I supposed I could install it through the App Store but I shouldn't have to. The iPads are 7th gens running the latest iOS and have enough storage available to install the apps.Thanks!

Hello,what is the best way to remove Jamf Trust from the devices (macOS)?The configuration is quickly deleted, but what about the app? We have rolled it out via the App Store using VPP licences. Thank you

Hi,Jamf is supporting default scripts for checking time machine backups. But with new versions of mac os this won´t work beuacse diskutil is using PlistBuddy. This has no disc access. If i enable Terminal in full disk access those scripts are working again. Without disc access With disc access   How can i set Terminal do full disc access via configuration profile? Greets Frank

Wondering if there is a way to change the default shell for all users?I see that a user can themselves type  chsh -s shellnamee.g. csh -s zshbut they have to authenticate.  I could run a script at login, once, but not sure how to tackle the need to provide their password.Also, I'd like to change the system so that new users have the newer shell (zsh)

Hi , we are trying to setup SSO and ran into an issue where users in an ldap group are not recognized and get access denied. Only ldap users directly added to JSS are recognized and signed in. Any idea how this can be solved ? thanks