Hi everyone, I'm a bit confused on this one. The MDM profile on the user's machine was about to expire so I manually sent out a "renew MDM profile" command.It worked with the exception of the SCEP cert. I'm honestly not sure what to do for it at this point. Any ideas?  

https://download.mozilla.org/?product=firefox-pkg-latest-ssl&os=osxhttps://download.mozilla.org/?product=firefox-esr-next-pkg-latest-ssl&os=osx Reference:https://bugzilla.mozilla.org/show_bug.cgi?id=1617992

I am looking for a way to find all Aliases which link to the "OneDrive-MyCompany" folder in ~/Library/CloudStorage When I use mdfind -name "OneDrive-MyCompany" It only finds the original folder but not the Alias which is in "$HOME". mdfind "kMDItemKind == 'Alias'" Does not show any output ...

I am trying to get a basic report of macOS versions and the count of Macs with that version. This seems like an easy report to generate but I can't seem to find a way in Jamf to display this. Am I missing something? If not, how do you all report on OS counts?

Microsoft Enterprise SSO plug-in for Apple devices - Microsoft Entra | Microsoft DocsHas anyone gotten this to work with Firefox or Chrome?  I only see examples where Safari works, but I have a requirement for the other browsers.I've installed the latest version of company portal, made the configuration profile as explained in the link and added the plist file for the options:  browser_sso_interaction_enabled and disable_explicit_app_prompt.  I even tried adding the bundle names for chrome and firefox, but when I go to office.com I am greeted with a sign in prompt in the browser.  In the azure ad sign in logs, I don't see anything unless I go ahead and log in.Edit:  This is working for chrome and firefox on our windows machines.

We have been using Jamf for some time, without classes and log ons and its been brilliant.However, we are moving towards using classroom logins.At the login screen the brightness is too low and the pupils can't see to log in. They can change it once logged in.Is there anyway to turn off true tone so that the screen is bright enough for the pupils to log in.I logged on to the ipad with an instructor account and turned off true tone but as soon as it went back to the login screen it was very dim again.

Ran into a first for me. I have a number of devices in JAMF, through ABM. All good, works great.User ends up loosing it in Airport, in airplane mode. No cellular, so likelyhood of it being online is slim.That said, its in lost mode now, etc. But, with the future of this ever seeing the light of day, Ill have to keep it in JAMF forever, and therefore paying for a license for it, in the event of it ever coming back on line.OR? Am I missing something? Ive never had to see this one before...

Does anyone know if it is possible to disable iOS Government alerts via a configuration profile?We have 4000+ iPhones used in a hospital setting and when the alerts go off it often occurs in and around patients that maybe trying to get rest.  I'm looking for a way to do this via profile as to not have to disable each one manually.I see the notifications config setting, but that appears to be restricted to managing individual application alerts.

If any of you are tired of your users receiving jamfAAD pop-ups, I would highly recommend transitioning to device identification using certificates. This method of conditional access allows you to control conditional access directly from your Jamf Pro server. Access is simply determined by the presence of your certificate. (This does require your users to have E5 licenses)The certificate is deployed via configuration profile...so no more manual registration either. Perfect for zero-touch deployments. To stop the pop-ups unload or delete any launchAgents related to the jamfAAD Agent. You can read more about this process here.  

When a user restarts their machine and clicks the Wifi Icon in the corner of the screen it does nothing. If connected to wired ethernet it joins fine. Users, after restarting, need to be on a network to use Okta Desktop MFA at login and if their laptops are not connected to a network, it will fail. In the office no problem just plug them in, but when they are working from home it is a problem because most don't have a wired connection easily available. I am wondering if I have somehow disabled this in a Configuration Profile setting. Any ideas where that might be, so I can allow my user to be able to select and connect to a WiFi network at the login screen. Sometimes after restart it will remember the network and remain connected but not always.

Hello Community, for iPad and Mac, we need to know if there are any limitations or special requirements for using a WPA2-PSK wireless network. These passphrase are typically 8 to 63 characters. We need to know if some of these platforms only accept fewer characters or have specific characters that they won't accept. We appreciate any help we can get.Jorge 

Has anyone had any success in connecting the Jamf API via the Zapier Developer platform.I've tried my hand at doing it while following both sets of documentation, but I seem to be failing somewhere. I would love to hear if anyone has found success. Thanks! 

I found this script for deleting accounts below which works a treat.However I work expect after a inventory update for Local User Accounts section in device record to be cleard also. But it still showing the delete accounts. Is there something I can add to the script or do to ensure this part of the device record get reset.# Get a list of all user accountsuser_list=$(dscl . -list /Users | grep -v '^_')# Specify the admin account(s) that you want to excludeexcluded_users=("admin1" "admin2" "root" "management account")# Loop through the user list and delete user profiles except admin accountsfor user in $user_list; doif [[ ! " ${excluded_users[@]} " =~ " ${user} " ]]; thenif [[ "$user" != "Shared" ]]; then # Exclude 'Shared' userecho "Deleting user profile for: $user"sudo sysadminctl -deleteUser "/Users/$user"sudo rm -rf "/Users/$user"fifidone

I'm working in a K-12 environment and we restrict certain apps on student laptops, such as Music, News, Stocks, Messages, Home, TV, etc.This is being managed through a Configuration Profile, rather than in Restricted Software.While this works for blocking those apps from launching, we're experiencing pop-ups informing the users that they don't have permissions to run app extensions within these apps when those extensions run on their own.Examples include: NewsToday2, MailCacheDelete, MusicCacheExtension, TVCacheExtension,MessagesCacheExtension, HomeExtensionAny idea on how to disable these intermittent pop-ups? Devices are 2020 M1 MacBook Airs, running on 13.4. 

I am not having problems finding the JAMF Tools, but I am having an issue with providing administrative access to someone on my team.  They can login to the account.jamf.com but it doesn't show them as part of our organization. It shows they need to join an organization.

Does anyone have a way to restore defaults for keyboard and screenshot shortcuts? I perform a method that can be placed in self-service, but I am open to all possible solutions. We have testing software that changes the defaults to both of these areas, and upon exiting the testing software, the defaults are not restored. macOS version 13.6.1 and higher. 

Hi,Our fleet has just jumped from Catalina to Monterey and our users are struggling to locate the screen mirroring "Show in menu Bar" tickbox.  Ideally I would just like a script to enable this or our users. I have trieddefaults write ~/Library/Preferences/ByHost/com.apple.controlcenter.plist ScreenMirroring -int 18but it doesn't seem to work.weirdly sound and bluetooth work though which are controlled inside the same plist. e.g: defaults write ~/Library/Preferences/ByHost/com.apple.controlcenter.plist Sound -int 18anyone got any ideas how the ScreenMirroring preference can be set via terminal script? Cheers, ES

Hi folks, I just wanted to share a restart method I've written that can be easily embedded into any bash script. It leverages CocoaDialog (you'll need to change the path variable for your installation location) to create a countdown progress bar and forks a restart script via a launchdaemon, so you can include it at the end of a JSS policy and the policy will be able to complete and upload policy logs to the JSS. I prefer this over other methods of initiating restarts because the timing can be precisely controlled and it provides a better UI for the user. Hopefully some of you find this useful or it sparks some ideas. This method of echoing a script and launchdaemon to the /tmp folder has many other uses, allowing you to fork scripts/launchdaemons for one-time use which will disappear on reboot without needing to package anything. #!/bin/bash cocoaDialogPath="/etc/CocoaDialog/CocoaDialog.app/Contents/MacOS/CocoaDialog" rebootSeconds=300 restartTitle="Software Update Completed"

DO we have any option to enable the SSO using the kerberos jamf auto login with mindmanager application ? we have user based licence and just want to automate to login with there email ID SSo to be enabled when user open the application it should authenticate and login auto or atlease ask the password for the user account ?looking for the document and steps

There's been a bit of chatter in the Jamf community regarding the deprecation notice that would remove the ability to set a static password for the PreStage local admin account and how it relates to LAPS.  We hear your feedback and this deprecation is on hold.   Admins will continue to have the ability to set a static password for the PreStage account Workflows that require a static password for the PreStage account will remain unaffected LAPS will not be on by default for the PreStage account More information to follow in an upcoming blog post.  

Dear Team, Our organization have 80+ bounded devices, those devices need to be migrated to jamf without losing user data.if any have steps to perform, pls share the steps follow.

I am completely new to Jamf pro and I need to set up 30 iMacs for a music suite. I did get help in setting up the prestage enrollment settings and successfully set up a Mac with auto-enrollment. The issue is that I can't remember what I set the local administrator account password as, under 'Account Settings; in the prestage enrollments section. So I have now changed this but it isn't reflecting through on the Mac.  Would I need to wipe the Mac or remove it from MDM and add it again for the local administrator account to be added?  Thanks

I had some questions about the JC login page. It seems inconsistent in when it is shown. This is causing some issues when we are doing onboarding as some people see the JC login screen and some people see the local login page. I see it consistently immediately after logging out, but if i logout then shutdown and go to login again I am only presented with the local login screen

We’ve started seeing messages on students iPads in the classroom settings pane that „teacher and student certificates have expired“ and that classes cannot be joined. No idea where those certificates come from though. Any suggestions? TIA

Ok, I resisted posting this for a while, but I've finally given up and am throwing in the towel, in the hopes that someone who is/has experienced what I'm facing found a solution.As part of our hardening process, we follow many of the recommendations provided in the CIS Benchmark guides. One of them is the subject of this title - enabling the "Require an administrator password to access system-wide preferences" checkbox under the Advanced section of Security & Privacy. The CIS guide, even the current ones, recommend using a scripted method, something like/usr/bin/security authorizationdb read system.preferences > /tmp/system.preferences.plist /usr/bin/defaults write /tmp/system.preferences.plist shared -bool false /usr/bin/security authorizationdb write system.preferences < /tmp/system.preferences.plistI was using this all throughout macOS Catalina and Big Sur, and even, I think for earlier versions of Monterey. But somewhere along the line, this just stopped working. I can