Phone worked fine with Jamf prior to resetting. Now it is posting SCEP server returned an invalid response error code. 

Hi there, I am looking for some help. I searched but did not find any hint, regularly people search for a solution to prevent the use of private Apple IDs on Macs, and I am looking for a solution to re-enable it for certain devices.We have a configuration profile in place with Restrictions and the respective Functionality settings that prevent all computers from adding private apple ID. In the Scopes, the device groups are linked that are allowed to bypass the restrictions. Again for such, the allow list is also a configuration profile.This worked quite well for the past three years - now out of the blue I can still see that the private Apple ID is registered on the device, but the majority of services stopped working, and when clicking on the Apple ID in System settings, everything is grayed out and a message on top says "Account changes are restricted by a profile."Does anyone have experienced similar or know a solution to recover?

Afternoon Jamf nation  I have recently @mosermat process here https://community.jamf.com/t5/jamf-pro/build-a-custom-macos-dock/m-p/264565 It working great if I use my admin account however for standard user I recive this message in the log filetdenton is not in the sudoers file.Has anyone seen this before    log file output belowdockutil-variable = /usr/local/bin/dockutilsleep-variable = /bin/sleepcurrentuser-variable = tdentonThe dockscrap file is set to /Users/tdenton/dockscrap.txtNo dockscrap found. Continuing to build the dock!Removing all Dock Itemstdenton is not in the sudoers file.This incident has been reported to the administrator.tdenton is not in the sudoers file.This incident has been reported to the administrator.adding /System/Applications/Launchpad.apptdenton is not in the sudoers file.This incident has been reported to the administrator.adding /Applications/Self Service.apptdenton is not in the sudoers file.This incident has been reported t

We have just discovered that by default the Status bar in Safari is disabled for some reason. We are doing our Phishing security training and are helping staff identify phishing and spam by hovering over links for example. Unfortunately, if they use Safari, that does absolutely nothing. So, I created a script that should enable it, but it doesn't appear to be working and was wondering if anybody else has come across this and how they addressed it. Here is my script; #!/bin/bash defaults write com.apple.Safari ShowStatusBar -boolean true exit 0 *edited for bad grammar

Hi All, I have a tool that needs to be deployed by region. I am trying to figure out a way to query Global Protect via script to determine the GP gateway that a user is currently connected to? I was hoping I could get this information via an extensions attribute. But, that didn't provide the information either.  Has anyone else been able to obtain this information and have it show in JAMF Pro? 

I thought I would share a workflow for enabling auto-login for Macs with pre-stage and JAMF Pro on Big Sur+First the tools you'll need: 1. MacUserGenerator app 2. Payload-Free_Package_Creator.pkg3. JamfConnectMetaPackage postinstaller.sh4. Jamf Pro Pre-stage setup like this.5. Jamf Composer installed6. Apple Developer ID Installer cert or a Jamf Pro Self signed cert to sign the pre-stage pkgs.Self Sign how to guide is in hereSteps:1. Create the auto-login account with MacUserGenerator.app file and export as python script.Make sure you check the two check boxes below.2. Use the payload free package creator and add the python script from step 2.3. Open Jamf Composer and create a blank pkg.    A. The pkg is created from step 2    B. Add post-install script and add this script and update the path and pkg name  JamfConnectMetaPackage postinstaller.sh   C. Create the pkg and sign and add to your pre-stage.4. Done! Now

Hi Everyone I know a way in windows to block an SSID to show in my computer via CMD script👇netsh wlan add filter permission=block ssid="SSID NAME" networktype=infrastructureif I run this command in windows, my neighbour's SSID won't even show in my wifi list  I tried so hard to find something similar for Mac but no luck, can someone tell me if this is possible and how ? Thanks Arman 

I am attempting to remove our guest wireless network (SSID) using WPA2 personal from all machines in my environment. I have scoured through JAMF Nation, in search of posts looking to achieve the same. I was able to find a handful of useful discussions but none were fully applicable to my current requirement. Some posts had suggested achieving this in a configuration profile and supplying a bogus password so the machine is never able to connect to the network. I would like to remove the guest wireless network from all machines rather than fully implementing an all out ban from ever connecting to it again. In short, I'd like to accomplish the following: Create a smart computer group which inventories all machines with the guest network SSID. That is, all machines that have the guest network saved as a preferred network. Remove the SSID from all machines in this smart computer group. Please let me know what your thoughts are and if this is best approached with an extension attribute

Hello I have a very dumb question. What is the most common way users deploy jamf connect in their org? we are doing it where we have config profiles and policies setup and we scope it to a users computer and through pre stage enrollment is that the common way to deploy jamf connect? Are there other ways to deploy Jamf Connect I saw you can download a config profile directly to the computer 

We have Office365 federated with Okta. When I use the Jamf Connect Configuration app with my Azure application everything works fine. I get tokens. However now that I've deployed it using a machine that's not a fresh install I enter my credentials at the Jamf Connect window and I don't get sent to Okta then it says my credentials are incorrect. Is this expected? Will this only work with a freshly wiped machine like in the Jamf connect training? Edit: It seems Jamf connect is unable to handle federated Azure so I'll likely be switching to Okta.

Hi, I have an issue with one specific app (Flash Academy) that I am trying to roll out in my schools network. When a user tries to load flash academy it immediately crashes and sends them back to the home screen. The app doesn't work on any iPads, both the app and iPads are fully up to date. No issues occur with any other app. The app works absolutely fine when I remove the JAMF profile from the device. Any ideas?

How long does the alert play when you use the Play Sound command in JAMF School for a device in Lost Mode? 

The last time I had to follow the article for integrating GSX into Jamf Pro, I found the instructions quite lacking. I'm referring to this article: https://docs.jamf.com/technical-articles/Integrating_with_Apples_Global_Service_Exchange_GSX.htmlI worked on my own documentation and figured I'd share it with the community. I won't necessarily keep this up to date, but hopefully it helps people that might be looking to do the GSX integration with Jamf Pro. Hopefully Jamf will integrate these details into their technical document I linked above.==============This article explains how to create a GSX account and obtain an Apple certificate. You can integrate Jamf Pro 10.15.0 or later with Apple's Global Service Exchange (GSX).Note: As of October 1, 2019, Jamf Pro 10.15.0 or later is required to integrate with GSX. If you are using an earlier version of Jamf Pro with a GSX integration, you must upgrade to Jamf Pro 10.15.0 or later to continue integrating with GSX.General RequirementsBefore y

Hello everyone,I wanted to update our Cisco client which works without any problems. But unfortunately the following messages appear in the Cisco client:Has anyone had this problem before?

we have an issue lately with devices enrolling with Intune.. many devices are getting a sign in loop after a few days. This issue started after migrating to Jamf Connect, it's most common with Ventura and Sonoma. We used to fix it by removing stale device records in both Intune and ME-ID (AAD), or removing stale ADAL cached passwords from Keychain. Unenrolling from Jamf to fix Intune enrollment is not helping... removing plist from library preferences is not helping as well. The only option is to rebuild the device.  Any ideas? I'd really appreciate anyone's help! 

Sorry for the long title.We were doing some testing with Nudge and found out that once you hit the deadline and Nudge enters aggressive mode that it still pops up even after you click to update the device.  My manager said when he waited and got to that date he was unable to use his device while it updated since Nudge kept popping back up. Is there a way around this?  I just added a long refresh cycle in the user experience tab to test but wanted to check here in case that is wrong.

We currently use DEPnotify to deploy apps and settings when a user logs in for the first time on a new/newly wiped computer. Works great but its no longer being updated so when Jamf announced macOS Onboarding at JNUC we were really excited. Looking at Jamf 11.1 and the onboarding feature and its pretty disappointing. First you need self server enabled (which we do not).When you enable macOS onboarding this fun event happens:"Important: When you enable macOS Onboarding and add the items to be deployed, the onboarding workflow initiates for all computers in your environment. This includes newly enrolled computers and those that were previously enrolled." So does this mean already enrolled and in-use computers will get these applications/config profiles installed?Also there does not seem to be a built in way to ask users questions like what they want the computer name to be, what the asset tag is, what department etc..If find it odd that the company that wrote DEPNotify which is stil

I am having an issue with Jamf having "Start screen saver after" unchecked within a configuration profile, yet after 20 minutes each one of the iMacs run their screensaver. Does anyone have a workaround to changing the screensaver time from 20 minutes to never without me having to apply it individually per workstation?

Hi, I have trie couple cmd through terminal and still not able to remove DG from Mac os X tried : rm -rf sudo uninstall file://but no luck and even kind find where is the Digital Guardian file is located Thanks

We are in the process of recreating policies and configuration profiles in preparation for a new lease cycle later this year and I have been testing on a couple of M1 machines using my login and have had good results. I just set up one of those MacBooks for another user and even though the screensaver is disabled it will still eventually come on and when it does it will close out of any browser that he has open. Has anyone seen anything like this before? We haven't found that any other app behaves this way, just browsers...

Can someone post how I add two dictionary items together?  From here, Troubleshooting_Microsoft_Azure_Login_Using_JamfAAD .  I don't know if I need an array added for both.  Also, can I add 2 of the same Preference Domain in a Configuration Profile?  An example of the below would be appreciated.  Thanks in advance!! <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>tokenRetryCount</key> <integer>3</integer> <key>tokenRetryWaitTime</key> <integer>42</integer> </dict> </plist>and <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>useWKWebView</key> <true/> </dict> </p

Hello everyone,We're going over to Outlook/M365 next week and we're gonna set Outlook as standard mail app but just in case anyone badly want to continue with have mail as befor in Apple Mail I'm trying to set it up so you can install the Outlook profile from Self Service.The device I'm testing on gets the profile and asks for the account password but it doesn't accept the password.Does anyone have any idea why it doesn't accept it?

Hi all,I go for the Jamf 300 cert in March. I passed the 200 with a 100. So I’m not too worried, just wanted to know if anyone has any tips, tricks or advice to be on the look out for?My support role has been more on the endpoint side of things. Ie, troubleshooting failed enrollments, self service, onboarding ADE, etc….This year my goal is to lean more on the Jamf Pro side of things. Configuring integrations, creating and implementing maintenance scripts, etc….Any advice for the 300 is greatly appreciated.

I have tried downloading the tool from here AcroCleaner — Acrobat Desktop Tools and Utilities (adobe.com)There are instructions for Windows but nothing for mac. Does anyone know how to run this silently?