Team,We are experiencing an inventory update issue with 3 Intel Jamf-managed machines. Whenever we run the "sudo Jamf recon" command to execute the inventory update policy or from the self-service, we encounter the following error at the end: "Error running recon: Unknown Error - An unknown error has occurred."We have thoroughly checked all the configurations and reviewed a few logs, but we have not found any challenges. The Jamf Support team has also investigated the matter, but we still haven't been able to identify a possible solution.Furthermore, we tried completely erasing and reconfiguring the affected machines. During the initial configuration, the inventory update ran successfully without any errors. However, after a few hours, when we attempted to run "sudo jamf recon" or perform the inventory update from self-service, the issue resurfaced.Are there any others who have experienced a similar issue, particularly with Intel Macs? We would appreciate any insights or assistance in

A pair of scripts to help Jamf Pro admins easily display actionable, custom branded macOS Notifications Introduction One of the more welcome features of swiftDialog 2.4.0 is actionable, custom branded macOS Notifications. When leveraged with Script Parameters, Jamf Pro administrators can easily display custom branded macOS Notifications to their users. Continue reading …

When a Device is going through the user initiated enrollment jamf is scoping extra policies and configuration profiles that are not actually scoped to the device in any way. When the device is enrolled during prestage enrollment this does not happen. Our policies are scoped to smart computer groups which are set up by device name, the devices are not in any of the wrong policy groups nor has a name close to any devices. Is there anywhere to find out why the user initiated enrollment is scoping all these policies to the devices?

Hi , For some of our users jamf login window has stopped showing up, the users are only seeing mac user to login. OS version is Sonoma 14.0Jamf connect version is 2.30is anyone else having similar issue and can share a fix , i know re isntalling the profile might fix it but i dont want to perform last resort as first. Thanks,

Hello,we have several iPads at school which were purchased before using jamf as MDM.I now want to enroll them into jamf using Apple Configurator. After following the steps described in jamfs support documents (https://learn.jamf.com/de-DE/bundle/jamf-school-documentation/page/Apple_Configurator_2_Enrollment.html) I am now stuck when trying to select one of our prepared Automated Device Enrollment Profiles in jamf. Here's what I did:Enroll the device via Apple Configurator using a blueprint as described above ✅Change the MDM server of the device in Apple School Manager from Configurator to our jamf server ✅Device shows up in device inventory now, is marked as supervised and can be managed ✅...but...The device does not show in the list of devices when I click on "devices - automated device enrollment profiles". And since I know no other way to do so, I now cannot select a different enrollment profile from one of our prepared profiles inside jamf, I am stu

 When trying to add https://apps.apple.com/us/app/home/id1110145103 to some iPads I get the usual, "go get a volume license OR download it directly and let local iCloud accounts get it for free." Well, I dont want local iCloud accounts so I want to go get the license... ...but over in biz manager I can't seem to find this app, no matter how I search! Anyone else figure out how to deploy it?

I wanted to check the current gatekeeper status using a bash script preferably to find out whether the status is set to:1. App Store2. App Store and identified developers3. AnywhereBy running below commands will enable Gatekeeper with "App Store" only and but does not help to change it to "App Store and identified developers"  spctl --master-enable defaults write /Library/Preferences/com.apple.security GKAutoRearm -bool true  Kindly suggest how to achieve both these tasks.

I am running into an issue with my company's Mac's not launching the application nomad version 1.2.2. I have tried removing and did a clean reinstall. Reinstalled Rosetta. Also tried launching thru terminal. Is this not compatible with Sonoma? I have attached the error I see when attempting to run with Terminal.zsh:  illegal hardware instruction  /Applications/NoMAD.app/Contents/MacOS/NoMAD -v

Hi allWe have mac suite with 31 devices. Ech device has like 150gb or so used up by students profiles. 1gb -5gb per user.What is best way to delete these? can it be done via jamf pro? If it can delete on log off or after days it be better to avoid doing manual work thanks

Does anyone know if it is possible to enable MFA authentication to also disable screensaver lock (without touchID)?Normally the user has to enter their account password (local or idP Password) or their touchID (within 48 hours) to disable the screensaver lock.
Is it possible to enable MFA authentication in addition to login after the screen lock?
I ask this because it is important for security reasons. MFA authentication should provide a "second" layer of security in case the account password is hacked or stolen. If the computer is in screen lock mode, a malicious person can unlock the computer with the user's stolen password without a second check.It would be good if the OTP pin, already configured with offline MFA, would be also requested for screen lock mode.

I have been using krypted's MakeMeAnAdmin script. It works great for elevating standard users to admin users and demoting them back to standard users. I cannot get the script to generate a log. Does anyone have an updated fully functioning version of this script available?

Users cannot log in to their device after logging out or rebooting. Sometimes the login works, but currently it happens very often that users receive the message Invalid Response Code 401. The Sign In Logs in Azure looking good too. Did any of you had this problem already and if so, how did you solve it? 

Hi, I am relatively new to Jamf, but just dabbling in some Plists to force a Google Chrome homepage. I have got this working, but the issue I'm having is that it only works once the app has been force quit. (So if I normally cross off Chrome and reopen it, it opens on a blank Google Search page. Then if I manually force quit Chrome and reopen it, it works as I want it to).Is there a way to make it so that apps automatically force quit once they are just normally crossed off or even so that they automatically force quit when a user logs out? Students won't listen and go the long way around of manually force quitting - so this would be an ideal solution.As well as this (similar query) is there a way to completely disable the option to 'reopen windows when logging back in'? I believe this would be a big help to this issue. Many thanks

In Sonma the default behavior when you click on the Desktop is to show Stage Manager. This is going to cause a lot of calls to our help desk. I'm writing a KB article for them, but a Config Profile to change the setting from the default "Always" to "Only in Stage Manager" would help, a lot. Never created a custom profile before but I'm looking through documents now. Anyone already done this though? or faster at it than I? We probably won't be deploying until end of the month at the earliest (Netskope won't have a compatible release for at least another 2-3 weeks).

Is there anything more you got to install/upgrade before moving from jamf pro 10.46 to 11.2. When i'm reading https://learn.jamf.com/bundle/technical-articles/page/Incremental_Upgrade_Scenarios_for_Jamf_Pro_10-0-0_or_Later.html i cannot find anything that we have to do. Kind regards Joachim

I can and a macOS App to JAMF just fine using Apple Business, but iOS Apps do not show up.  I can't even see it in Global\\Volume Purchasing\\company\\Content. I can't add anything new and I increased a products count by 10 and the product shows the original number of licenses in JAMF.  Updated the Service Token hoping that would kick things off but still nothing is coming in.

I can provide more detail if needed, but I'm noticing a good amount of devices with last inventory updates of months ago or over 1 year ago. Is there a common theme to this sort of reporting issue or could this be due to a number of different things?Before I dive in to this issue I wanted to ask the world instead of reinventing the wheel and wasting time. Troubleshooting has been minimal, I've just been correcting it with using scutil to set device names sudo profiles renew -type enrollment, sometimes I have to sudo jamf -removeFramework to re-enroll.Thank you guys!

Hi,    Has anyone come across this issue?  Since updating safari to version 17.3 on M1 iMacs, no matter what site we navigate to it just showing a black screen. Safari loads and it seems the pages are loaded too but everything is blacked out.  Any ideas?   thanks 

Good afternoon JAMF Nation. Just want to get your professional guide/advice on how to install the SentinelOne agents in our MacOS devices using JAMF. I have the PKG file needed but when I tried installing it as normal, it failed. Looking for a friend, TIA!

We have recently trialed using Classroom & Classwork (schoolwork in the US) on our student iPad fleet but are having issues with students being stuck in "Authorising" on the teacher iPad in the Classroom app. I thought that it may be an issue with the student a teacher profiles we use, but I have made sure that all the toggles for auto prompting have been set to allow in the configuration profiles. Classroom to perform AirPlay and screen observation without prompting - AllowClassroom can lock student devices or apps without prompting - AllowAutomatically join Classroom classes without prompting - Enforce The strange thing about this is that it is not consistent across teacher devices. We ran up and identical iPad for one teacher as a test, same teacher, same config profiles, same students and class. Yet one iPad has no students working and the other only 4 worked out of the whole class. All Students have the same profile as well, so I am baffled why two otherwise identical iPad

Hey guys, powershell has worked great for me in the past with classic API, but it is giving me fits while trying to use the UAPI for the first time. I need to script swapping computers between prestage scopes, but this is not available in the classic API. This is my code so far: function getAuth() { $url = "https://mytenant.jamfcloud.com/uapi/auth/tokens" $creds = Get-Credential $call = Invoke-RestMethod -Method Post -Credential $creds -Authentication Basic -Uri $url -ContentType "application/json;charset=UTF-8" return $call } $token = getAuth $token = $token.token function apiCall() { $url = "https://mytenant.jamfcloud.com/uapi/v1/computer-prestages/4" $headers = @{ Authorization = "Bearer $token" } $api = Invoke-RestMethod -Method Get -Uri $url -Headers $headers -ContentType "application/json;charset=UTF-8" return $api } Same exact thing works fine with bash, but I get errors with

Hey all together,im pretty new to Jamf Pro so be a little bit patient with me. ;)Our company wants to enroll the devices in the BYOD context.For my understanding it was needed to configure the user initiated enrollment - personally owned.So far, so good. I can access the /enroll URL and sign in with my connected SSO / EntraAfterwards i log in with my fresh created managed Apple IDEverything seems to work fine... but know my understanding problem:Its installing two MDM profiles. One is called "MDM profile" and the one i created.But its not applying my for example code restrictions i set in the configuration profile.So im just confused where im doing the mistake.Don't know if there is a coherence:I saw, that there are two different "methods" if we are talking about the BYOD mobile device connection. But i dont have to host a webserver on my own for this right? Hope you can help me through the Jamf jungle.

We are noticing the Departments in User and Location inventory getting removed automatically for Mobile Devices. We manually update the Department in User and Location but it gets removed as soon as the device updates inventory. We are not noticing this in Computers. Thanks. 

We recently upgraded our Meraki Wireless APs and now have the capability to run Wifi 6 for faster network performance.My understanding is that to use Wifi 6 (or 6E) you need to use WPA3 Enterprise (with EAP-TLS). This shouldn't be an issue for us as we're currently running WPA2 Enterprise with EAP-TLS however i cannot see any documentation on setting up WPA3 Enterprise on Jamf Pro/Cisco Meraki, does anyone have an guides or info on setting this up? TIA.   

We are using Ivanti Secure Access for VPN on our iPhones, and we configure it with a config profile. I have noticed that if the config profile is pushed before the app has installed, the app wont see the settings, even after a restart. The settings config profile must be pushed AFTER the app.But when deploying a new iPhone out of the box, all the "apps and profiles install in a big dump and you dont really have control over them. We even tried scoping the profile to a smart group "Ivanti app installed" but it still sometimes gets overeager... it sees the app before it has finished installing, and pushed the profile too soon.How do we ensure the profile installs after the app? or are we solving the wrong problem and theres a way to make Ivanti see the profile regardless of when it was installed?