I am having trouble figuring out the ideal way to accomplish this goal:   Our campuses use UDP addresses to launch video announcements streams through VLC player. Up until now we had been putting bookmarks in Jamf Self-service with the udp address to pretty good results, but management wants to for us to deploy desktop shortcuts to achieve the same thing.    A shell script like below would accomplish the goal, but we have terminal.app locked out to all end-users.   #!/bin/bashopen "udp://@192.168.0.1:1234"   I could make an .app to run that command through Automator, drop it in the /Applications folder or another directory, and have a script use the "ln" command to make an alias on the user's desktop, but is there not something similar to .webloc that could be used for a UDP address that's an all-in-one type solution?    I feel like there is a very simple solution to this staring me in the face but I am being unintentionally obtuse.... help?

Hello! We've been using Installomator for automatically installing and updating some apps. It has been working well for us so far. One thing I was curious about is if there is a way for Installomator to write to the plist file of the app that it is working on. From what I could tell thru their github, I don't think there is and currently I am planning to just use config profiles to manage the plist files. But if there's a better way or if I could do it using the same Installomator script that would be nice.For context, the apps in question are Firefox, Chrome, and Zoom.Any advice would be appreciated or if anyone would be willing to give me some insight on how they do it.Thanks!-Frank S.

Hi Everyone. I'm running into an interesting issue (maybe?) with Jamf Connect and Ventura. I have my workflow setup and it is deploying correctly to my test machine. After initial login, the local and IdP account mapping/creation works and everything else seems fine. What's interesting is when I reboot my laptop: I get the local account login which accepts my IdP credentials, then it takes me to the Jamf Connect login screen where I have to sign into my IdP account twice (Once to log in and then second time to verify the password). It's like I have to unlock locally before Jamf Connect can take over. Has anyone run into this issue? I feel like I'm missing something simple...FWIW:I have my login agent delivered through the Jamf-provided pkg, not via config profile.The laptop in question has Jamf Connect deployed via workflow, not PreStage Enrollment.

Hi all,We've had a few users in our org come to the Help Desk that have Macs signed in to iCloud with a MAID – these users are also automatically signed in to the App Store by default with their MAID as well. Pretty sure this is expected behavior of macOS. The problem, however, is that when a user is signed in to the MAS with a MAID, there is no option to sign out. I don't know why this is, but I certainly understand how and why it can be frustrating.That said, I've created a script that takes care of it. The TLDR is that it does the following, in order:Downloads and installs Homebrew.Installs the mas/mas-cli binary.Runs the "mas signout" commandScript ends.Apologies for not at all understanding how Github works, but here's a link to the script: https://github.com/teezyyoxo/choate-scripts/blob/main/MASbrewpls.shI welcome any feedback as I am only still learning :)Last tested this on an 14" MacBook Pro (M3 Pro) about two weeks ago and it worked with no incident.Hope it he

Hi All,I've seen several older posts in the community regarding this issue:Running through setup assist, creating a computer account results in failure with the standard " account could not be created with name and password" message. Has anyone come up with a solid workaround or fix for this? Things I've tried per community recommendations:- Removing any configuration profiles involving password policy, filevault, lockscreen. (currently have 0 config profiles)-Toggle on/off Location Services & Information Transfer in General/Setup Assistant Options- Creating a local administrator account before setup assistant (undesirable for workflow, but tried anyway) Any other tips or tricks I can try?New Jamf Admin, so apologies for any ignorance.

Hey Guys,One of my users recently changed his password on JAMF Connect. We are currently syncing all our passwords with Azure AAD. No issues with resetting it with Azure but when prompted to change his password for the local user (to match with his AAD) he unfortunately forgot the password. The user now is logged out from his device.Is there a way to reset the Local Password for the user from an Admin perspective? so that it can match with the AAD one?Or if we can simply remove the disk encryption (FileVault) in order to recover some data folders from the user profile?Thank You

Hello Jamf Community, I previously posted this a couple weeks ago but still am struggling to figure out exactly how to get it working. I am trying to create a script that will prompt a user with a popup box on which application they'd like to uninstall (only apps we deem approved). For example, a popup would come up and ask someone "Select an app you'd like to uninstall" with a list of apps such as, Google Chrome, Firefox, Adobe, etc. Currently I have script that I feel is about 90% of the way there but still can't figure out how to get it completely working. I'll post it below. Also, if there's any easier way to do this, please do let me know as well! Any help is greatly appreciated! There may be some unnecessary lines in the script just FYI. Here's the script: #!/bin/bash # Parameters app1="$4" app2="$5" app3="$6" app4="$7" app5="$8" appList="$4 $5 $6 $7 $8" uninstallApp="choose from list every paragraph of \\"$appList\\" with title \\"Application Uni

Dark mode is live and its epic!Nice job devs!

Hi all,   It took a week or two, but I've finally figured this app out. I was inspired by this old thread, and kept hitting a brick wall when it came to using my own photos. So the TLDR, I: Can confirm that the app reads both PNG and JPG/JPEG files Can confirm that the  Set up a basic HTTPS server in IIS on a Win11 virtual machine that is always online Worked with my NetAdmin to get a fully signed SSL certificate – this is required as all testing prior to this point resulted in failure. A self-signed cert WILL NOT work (confirmed). Set the MIME type for .csv to text/plain. Unsure if this is actually necessary, but the demo .csv opens in a browser like any other text file does – mine kept downloading by default at first. Opens like the demo file after changing the MIME type. The point of my troubleshooting was to try and mimic the demo configuration as closely as possible to avoid inconsistencies. Added my Playlist.csv and photos to the site's wwwroot. Double check

I have a pair of iPads where the device certificate has expired, and they no longer seem to be communicating with our instance.How can I renew these certs, or otherwise get these in working order again?

Is there an option to force students into a specific WiFi i.e. they are sitting in the room 001 with the room WiFi 001 but some students connect to 002 so the iPad appears as offline in Apple Classroom. Thanks in advance.

I'm trying to install google chrome on the iPads and it looks ok but when I search for the app and try and open it on the iPad it tells me that the Jamf configured restrictions are not allowing it. I don't want to remove the restrictions but I also need to check if an app works properly through chrome. If anyone knows which restriction would keep chrome from loading on the iPads that would be awesome. 

Hi there,We are trying to deploy a Configuration Profile that, combined with the latest version of Cloudflare WARP allows users to switch between Zero Trust Organisations.However, when deploying via Jamf Pro in a Config Profile to a test device it keeps failing with the error message "<CaughtException:1>"Here's the plist we are deploying (Org names & IDs redacted for security purposes):<?xml version="1.0" encoding="UTF-8"?><!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"><plist version="1.0"><array><dict><key>gateway_unique_id</key><string>REDACTED</string><key>organization</key><string>REDACTED</string><key>display_name</key><string>REDACTED</string><key>onboarding</key><false/></dict><dict><key>gateway_unique_id</key><string>REDACTED</string><key>organization<

Greetings JAMF NationersI am looking to create a uptime Extension Attribute.I have created an Extension Attribute with the data type: IntegerInput Type: Populated by ScriptMac OS C Script Contentes: #!/bin/sh echo -n"<result>" uptime "</result>" exit 0 This results in:23:40 up 14:02, 2 users, load averages: 0.50 0.35 0.35 /private/tmp/extensionAttributeScript: line 7: I would like a simple number in days, so I need to edit the result.Something like:uptime | awk -F'( |,)' '{print $2}'Results in:up 45 mins or up 4 daysHow do I get a simple number in days? Thanks in advance for any help!

Apologies in advance, our entire Jamf Pro environment was set up by a consultant...and I know just enough to make very minor changes.Trying to figure out the best way to copy an .RDP file through Self Service to a user's desktop from a Windows share (or Jamf cloud storage - I did copy the file over in Jamf Admin). Anyone have a pointer on how to accomplish?Thanks for any help!

Hi there, What permissions would a Jamf Pro standard user account need to have to only be able to add or remove users from static groups using Jamf Pro API?

Hi,I'm new to Jamf and have a problem with a minimac.After i erased the mac in jamf to put it in factory settings, it boots into bootmanager...But there I cannot do a fresh install because there's no administrator known for some kind of reason...What can I do to do a fresh install...Thanks

In the Mac App Store Apps section under Content Management, I have a policy to install Logic Pro X, which we set to stay at version 10.4.8 since it's a student lab and the teacher does not want the software to update in the middle of the semester.  They bought some new outboard gear and there's a requirement for Logic Pro to be on at least version 10.5 to use it, so it necessitates an update.I want the teacher to test the software prior to updating the entire lab, so I removed that MacOS device from the scope of the policy for version 10.4.8 (and later also added it to the exclusion list).  Afterwards I see the VPP license free up, and Logic Pro is still installed on the computer and no pending actions on the device after it checks in.  I created a new policy for Logic Pro v 10.7.2 and set it to Automatically Force App Updates, set the distribution method to Install Automatically/Prompt Users to install, and then I added the device to the scope.  Afterwards, I

Our teachers routinely use Jamf Teacher to restrict students access to apps, websites and resources during class. Sometimes the restrictions stay active longer than the set duration. There are a few ways to solve this:Cold reboot: this way restrictions are easily lifted. Don't tell your students or they will also start using it during class, or worse: during tests.Clear the restrictions from the Jamf Teacher app: usually works. If not:Clear the restrictions from the Jamf School management website.This last option has always worked until now. I just had an iPad that just couldn't forget these restrictions using one of the above ways. The iPad did receive all kinds of other commands that are scheduled (update a profile, update OS, etc.) or that were actively sent (restart, and eventually erase).Anybody with similar experience? What could have caused this and how could it be solved/prevented?RegardsA

Hi,one of our teachers got a "MCMDMError" for one or several students after settings a restriction in Jamf Teacher (screenshot attached).Contacting the Jamf support is locked for us and our reseller can not help in this case. Pressing on the error does not show anything. More details are also not shown.The teacher said, that the restrictions are pushed to the students iPads and it works. But this error is shown more often.Does anybody get this error shown too, knows, what it means and how can it be prevented?Thanks in advance. 

We upgraded one of our Mac labs from Ventura to Sonoma  and I’m now having an issue with the login screen. Once a user (mobile accounts) is logged into a machine and that machine either went to the screensaver or the user locked the machine to leave. No one could login to that machine.  -In previous versions of the macOS a new user could simple click on the switch user button at the bottom of the screen and log in. Now those options are gone. What I've Done:Fast User Switching is turned on. The Jamf Config also has Fast User Switching  Checked. FireVaullt is also turned off. Any ideas?Again, only issues with Sonoma and not Ventura.

I am hoping someone has a good idea on what to do here. I have been using Docutil for a very long time but with Ventura, it hasn't been as consistent as I would like. For example, in one of my labs, the dock will work on one of two admin accounts, and its a crap shoot as to which student will get the modified dock upon login. (the computers are setup to clear student accounts upon reboot as the students often work with assets larger then a gig...and many at a time). What I am looking for is a way to get the dock cleared using the Jamf GUI, then create the dock I want. Making the dock with Jamf has been very consistent for me, but I usually end up with a bunch of apps on the dock I don't want or need.

I am trying to figure out how to best manage upgrades for JAMF Pro.  It seems like there are upgrades constantly available for the server.  I am wondering what is appropriate for implementing these upgrades.  Upgrading once a year seems extreme, but upgrading monthly seems extreme also.  Does anyone have a good handle on this?  Thank you.

Hello,Has anyone deployed the Perch Log Shipper for MacOS? I am having some issues deploying it with their documented method. https://beta.perch.help/siem/perch-log-shipper-on-macos/. curl 'https://cdn.perchsecurity.com/downloads/pls_install' | bash -s "perch-client-token-here"I get the following result. Any help would be appreciated.  

We are having a problem with devices removing themselves from Jamf (jamf server logs indicate it received a 401 error).  The problem is that since it seems pretty random, we need to get an alert when it drops so we can start to narrow down times.  What would be the best way to do this?  I'd imagine just monitoring the MDM Profile (profiles command?) but then I need a timestamped popup and log to refer back to... Anybody have any thoughts on how to do this (please)?