Dear Jamf Pro Support Team,I hope this message finds you well. My name is Somnath and I am a user of Jamf Pro currently working on the integration of our system with the Jamf SaaS App.I am currently facing an issue when attempting to update a user's password through the Swagger interface. The error message received is: "You cannot change information in an LDAP account or change the password."Api URL:https://somnathrode.jamfcloud.com/classicapi/doc/#/accounts/updateUserById Upon further investigation, it appears that the Swagger API does not currently support the updating of user passwords through an admin user. As part of our administrative requirements, we need to perform password updates via the API using administrative privileges.Could you kindly assist in providing the necessary API endpoint or guidance on how we can achieve password updates for users with administrative credentials?Your support in resolving this matter is highly appreciated. If there are specific details required

Hello again! I have a new issue!Despite our prestage enrollment through the configurator saying to skip Siri and Apple ID, it's doing it anyways. I was told about iMazing and creating a profile with that. I did so and selected skip on everything. It's still happening.These are shared computers. When a new user sits down and logs in with the Jamf Connect SSO it creates an account for them and then takes them through these setup steps. I want to skip these. I either set up the iMazing profile wrong something else.Could anyone help?

Hi All,I was just wondering if the following was possible, I would like to use JAMF to remove the kTCCServiceAppleEvents entitlement of Script Editor.I have tried to use this guide https://learn.jamf.com/bundle/jamf-school-documentation/page/Privacy_Preferences_Policy_Control.html but not having any luck I have put theidentifier ascom.apple.ScriptEditor2and the Cod requirement asidentifier "com.apple.ScriptEditor2" and anchor appleAny help would be appreciated.  

Hi all,i am installing a security Appstore app (Tailscale) by default profile. I want this app to be started at login. Therefore mac has settings -> logon objects. How can i add an app to this via policie?Have a nice weekFrank

Hello, is there any way to make multiple computers unmanaged in JAMF without unticking the box for each of them individually or deleting them completely?Previously, there was a way to edit management account via mass action and set it to blank, but now that's not an option anymore.All those computers are un-enrolled already, however still listed as managed in JAMF database, and we are talking about hundreds of those - going through each of them would a pain..Thank you.

Hello Everyone,In preparation for the JAMF Laps rollout and the depreciation of the MacOS admin account static PWs, I was hoping to get some headway on converting all the local admin accounts that have been created upon enrollment to be MDM-enabled. We have 125 machines that are enrolled but the local admin account is not MDM-enabled, from my understanding of the JAMF Pro documentation, am I going to need to unenroll and reenroll all of the machines on our JAMF Pro instance(125 machines)?Is there a command that i can push via Policy to make all the local admin accounts MDM-enabled? It seems like a lot more foot work having to pretty much touch all machines again, (as we just did this for JAMF Connect recently). Aside from that, as we have a good amount of extra machines that just sit in a cabinet, how are we to account for Machines that don't check-in with JAMF? Would a policy that runs "sudo jamf-recon" upon start-up suffice? What about if a device does not check in anymore with

Just wondering if anyone has seen this. The machine is Ventura (Mac OS 13.6) and trying to upgrade to Mac OS 14.1Machine is bound to an AD domain and the user has a secure token and is an administrator on the machine.  The user is logged on with a domain account i.e. a mobile account.  The machine is an M1I tried forcing the update/upgrade via Jamf using the MDM framework from the server as they are overseas but it got to the end of preparing and prompted them again

We decided to take installomator for a test drive after JNUC last year and all worked really well until we realised that we could get it to work on our CORP wifi.After several goes my colleague came up with a perfect fit for our environment which is demonstrated by adding a few lines to the installomator script shown down below in case anyone has the same challenge...(the orange text is the required proxy setting) if anyone has a better solution would like to know... #!/bin/zshlabel="" # if no label is sent to the script, this will be used # Installomator## Downloads and installs Applications# 2020-2021 Installomator## inspired by the download scripts from William Smith and Sander Schram## Contributers:#    Armin Briegel - @scriptingosx#    Isaac Ordonez - @issacatmann#    Søren Theilgaard - @Theile#    Adam Codega - @acodega## with contributions from many others export PATH=/usr/bin:/bin:/usr/sbin:/sbin #start yourcompany&nbs

Stumbled upon a way to use animated icons within the Self Service app - Simply use an animated PNG file (APNG format). Looks like support has been around since iOS 8 and OS X 10.10. Have not tested this in Self Service for iOS. This seems pretty harmless and if you stick to the recommended 128x128 canvas size, you should be OK. Maybe JAMF can comment :D Below is an example I put together, two frames looping. This will animate if you use Safari or Firefox but not Chrome.

Dear Jamf Pro Support Team,I hope this message finds you well. My name is Somnath and I am a user of Jamf Pro currently working on the integration of our system with the Jamf SaaS App.I am currently facing an issue when attempting to update a user's password through the Swagger interface. The error message received is: "You cannot change information in an LDAP account or change the password."Upon further investigation, it appears that the Swagger API does not currently support the updating of user passwords through an admin user. As part of our administrative requirements, we need to perform password updates via the API using administrative privileges.Could you kindly assist in providing the necessary API endpoint or guidance on how we can achieve password updates for users with administrative credentials?Your support in resolving this matter is highly appreciated. If there are specific details required from my end or if further clarification is needed, please let me know.Thank you for

Since this morning I am trying to get APNS to work for a customer. After downloading the signed CSR from JAMF. The apple certificate portal always gives the Invalid Certificate Signing Request error.The Certificate Signing Request you entered appears to be invalid. Make sure that request file uploaded is in the correct format and not empty.

Hey All, Trying to build 3 policies for our JSS regarding the google chrome browser but I'm having 0 luck! 1: I need to force chrome installs with the automatic updater installed to run 2: I need to be able to install the automatic updater on machines that do not have it installed or configured but DO have chrome 3: I need to install chrome and have its automatic updater configured on for new enrollments. I've got the policies figured out and the extension attributes in place to identify the presence of the automatic updater, I just can't get the programs to install correctly! I've tried composer and while I can get chrome to install, its automatic updater breaks and fails everytime it tries to go download a new version. I'm pretty new to Jamf and for that matter, the mac platform as a whole and we're just feeling a little stuck. Any help would be appreciated, Thanks!

Hey everyone... I wanted to make Google Chrome a part of my automated deployment process and also be available within Self-Service. Why? Users can just download from Google on their own. True dat. But hey, one-stop shopping in Self-Service, right? As we all know, Google deploys Chrome via a DMG file. The Google Chrome.app file must be dragged to the /Applications folder. You could effectively re-package everything using Composer, but then things get REAL STALE, REAL FAST - Google updates Chrome frequently. So stale software is bad software. So how can we deploy Google Chrome with the freshest of the fresh so we don't get that not-so-fresh feeling? Well, lemme share my story, morning glory. . THE SCRIPTI wrote a simple script that does the heavy lifting... I tossed this script into System Settings > Computer Management > Scripts within the JSS... NOTE: Yes, I am aware that I don't have any error checking taking place. This is v1.1 - quick and dirty. Feel free to add som

Hi all, Does anyone know how to add a second input source to the keyboard? I have the keyboard ID, but don't know how to add it to the input sources? I would also like to show the input menu in menu bar for users. Thanks in advance for any guidance.

Hi We restrict our Apple TV's for just airplay only with conference room mode enabled. This is to stop folk messing with settings and adding apps. This works a treat however we have found an issue, the Apple TV is enrolled via DEP and the device once configured has the conference room mode enabled. We then change the Apple TV name via Jamf Pro. The issue following this is that we have had reports of the Apple TV going into a sleep mode / unable to wake and a hard reset of the device is required. This at times is impractical as the Apple TVs at times are high up behind a 65" TV. Is there a way to manage the power on the Apple TVs or do we need to remove the restrictions and manually configure? Is there anything in Apple Configurator to assist?

I use a script to update Zoom to what ever version the app owners at my company say we are allowed to install. The script runs a curl command to download the installer for the version we want, then it installs the package. It first checks if Zoom is running. If it's not, it runs the install. If it is, it does not install the newer version of Zoom. The policy runs at check-in scoped to all comptuers with an exclusion for computers already running the version of Zoom we want to install. I have been trying to figure out how to detect if Zoom is running a meeting or not. Somoene may simply have Zoom launched, but not have a meeting running. I know a lot of my users just keep Zoom running. This results in the update taking longer to get done on all of my Macs. Does anyone know what process to look for if Zoom is in a meeting?

Hello allI'm experimenting with the new Software Updates feature available in Jamf Pro 10.48/10.49 for macOS updates but it seems to it's not working.I've created a smart group that includes only my Mac device and I deployed the OS update for myself but nothing happens.In the device management, I don't see any pending or failed commands.What am I missing? Did someone manage to deploy the OS update using this method?Thanks in advance,Michael. 

Hi I seem to be having issues with our shared iPads, The iPads are set up for temporary users only.. They seem unable to always download all of the apps we have assigned, in total the apps assigned only add up to around 5gb at most. However the iPads state that they are unable to download several apps as there is insufficient space. Even when the iPads have downloaded the apps assigned, when I check them in the system they seem critically low on space, so I'm concerned when I get asked to deploy further apps to them that they will need wiping in order to get the new apps pushed out, which I can see being an increasing problem.I've spotted the thread in JAMF pro with a similar issue:https://community.jamf.com/t5/jamf-pro/shared-ipad-temporary-user-storage-problems/m-p/236392#M224211But just wanted to see if anyone has the same issues, or better, a solution for JAMF school?thanks,

We seem to have an issue since around the time we updated from Jamf Pro 10.50 to 11.0 (on-premise). Now when we enroll a Mac with user-initiated enrolment it fails to do an inventory update right away. We're seeing for instance our Rosetta 2 install policy not run at enrolment time as it's scoped to a smart group of our Apple Silicon Macs. In Jamf the name of the Mac is its serial number even though we set a custom name on the Mac (in both About and Sharing). Other things also seem to fail until we run a manual "sudo Jamf recon" - anyone else seeing this?

Situation: In Apple Business Manager we have two MDM server settings. We want to migrate our Mac laptops from the America MDM profile to the India MDM profile. What is the best approach for this?According to me first change the MDM setting from America to India in Apple Business Manager then reset the device and enroll the device again. Or do we have any other way of doing it?

Hi All, Hope this script help you all to install the home brew from JAMF for standard account users and admin account users. It also supports for BigSur OS. #!/bin/sh # # Script Name: installHomebrew.sh # Function: Deploy Homebrew (brew.sh) to the first user added to a new Mac during the post-DEP enrollment DEPNotify run # Requirements: DEP, Jamf # # Copyright 2020, Route 1337, LLC, All Rights Reserved. # # Maintainers: # - Matthew Ahrenstein: matthew@route1337.com # # Contributors: # - "Dakr-xv": https://github.com/Dakr-xv # # See LICENSE # # Apple approved way to get the currently logged in user (Thanks to Froger from macadmins.org and https://developer.apple.com/library/content/qa/qa1133/_index.html) ConsoleUser="$(/usr/bin/python -c 'from SystemConfiguration import SCDynamicStoreCopyConsoleUser; import sys; username = (SCDynamicStoreCopyConsoleUser(None, None, None) or [None])[0]; username = [username,""][username in [u"loginwindow", None,

Hey EveryoneIs there a way to collect a usage report on an entire Smart Computer Group? I know you can click on individual machines and collect, but I cant seem to figure out how to do it with a smart group.

Hello All,'grep' has been a great tool in my tiny script for many years running from Jamf Remote(deprecated)....now, through Jamf Pro Policies, the grep command is getting a 'Usage Error':**************************************************************************************************Script result: usage: grep [-abcdDEFGHhIiJLlMmnOopqRSsUVvwXxZz] [-A num] [-B num] [-C[num]][-e pattern] [-f file] [--binary-files=value] [--color=when] [--context[=num]] [--directories=action] [--label] [--line-buffered] [--null] [pattern] [file ...]**************************************************************************************************....Basic form of my tiny script:**************************************************************************************************#!/bin/bash#ENV variable for current logged in user = $LOGNAMEfor home in $(ls /Users | grep -v $LOGNAME | grep -v Shared)do rm -rf /Users/$homedone***************************************************************************************

Our company has our Macs domain joined and we use NoMAD. We have this issue plaguing our users where when they try to change their password through NoMAD it will tell them "New password doesn't meet policy requirements" even though the password they are using does meet the requirements. It's seemingly random but seems to pop up for one or two users every month.The solution that works for us is to unbind the MacBook from the domain and rejoin it. After that the user is able to change their password like normal through NoMAD. Has anyone else encountered this or have any solutions?

Good, better and best methods to leave and retrieve client-side breadcrumbs with Jamf Pro Introduction As a Jamf Pro administrator managing Apple computers running macOS, you frequently need to leave a client-side record when a policy was executed, which is sometimes referred to as a “breadcrumb”; you also need an easy way to retrieve this data. Continue reading …