Hello All,My current company is mandating that I install JAMF on my personal laptop and iMac due to "compliance requirements." While I am inclined to reject this request based on principle (since these are my personal devices), I am enjoying my job and do not plan to challenge it.However, since my personal devices contain sensitive information such as my banking credentials and personal data, I am concerned about the extent to which JAMF can access them. The IT team has stated that they will not be able to view any personal data and that I can continue to use my personal AppleID. Nevertheless, after researching the topic online, I am starting to have reservations about these assurances.

Hello Jamf Nation! I'm happy to announce a new open-source tool from Netflix called Escrow Buddy focused on helping IT/security administrators ensure all their Macs have a valid FileVault key escrowed to MDM.Check out the announcement on the Netflix Tech Blog, and see the GitHub repo for documentation and the latest release.I hope many people will find Escrow Buddy useful!

I am having troubles allowing non admin users to change the Date and Time on their Macbooks. There are quite a few teachers who let their Macbooks battery drain over the holiday break and when they got back in district their date and time were wrong and they could no longer connect to WiFi. We had previously enable Non Admins to change their date and time settings with the following command: #Allow Date/Time Change security authorizationdb write system.preferences.datetime allow This unlocks the date and time section within system preferences for non admin users but for some reason when users try to change their date and/or time it reverts back once they click save. For example if the year says 2018 instead of 2020 the staff member changes it to 2020 and clicks save, then the year will change itself back to 2018. (Settings that set the time automatically have been turned off at this point.) We can successfully change the time when logged in as a local admin account but our users are

just upgraded to 11.1.3 and when i go into a computer details management tab, theres no remote assist button

New to Jamf Pro and just looking to get things set up before rolling out company wide, and testing the initial configuration on my MacBook things haven't quite gone to plan.Have in the Configuration Profile set a Banner message and cleared the tick-box for Show "Other...", but after I enroll my laptop they doesn't appear to be any banner message, i.e. there is no message displayed above the login prompt, and I am able to select Other on the login window which then prompts for a Name and Enter Password.What am I doing wrong or not understand?TIA.

I use the block USB policy with Jamf protect, but it is still not working. Some USBs are working, and some cannot be used to move data. 

Hello,is there any way to disable to option? Regards

Is there a way to pull the battery health information? cycles and max charge info.

Hello,I hope you are well, I am new using jamf pro, we want to launch a policy with a script to uninstall Malwarebytes from all Macs, I found the following script  https://github.com/eth-its/autopkg-mac-recipes-yaml/blob/main/Scripts_for_Uninstallers/Application-uninstall.shWe ran it on some laptops as a test, and it does remove the Malwarebytes application from Applications, but the icon still appears in the top bar, and if I click on it, it asks me if I want to restore or uninstall Malwarebytes.Can you please help me to supplement the script to make the uninstallation completely and not give users a chance to restore malwarebytes.

Does anyone know of a way to record when a mac is wiped for auditing purposes? Like SOC?

Greetings everyone,I'm curious to know if any hospital institutions have implemented Epic's MyChart or MyChart Bedside for the purpose of facilitating the signing of preoperative and postoperative consent forms.

Hey, I have a problem with my TeamViewer Installation script.The download and installation part works great, but the assignment isnt working reliable.I have followed the steps from here: https://community.teamviewer.com/English/kb/articles/50739-mass-deployment-on-macos I have added a 'sleep' and increased the '-wait' parameter, both without success.Sometimes it works, sometimes it does not. Is there a more reliable way to assign the device in TeamViewer? Here is my script: #!/bin/zsh # # Downloads and installs latest TeamViewer Host with custom configuration # Runs the TeamViewer Assignment Tool after the installation # Provide configuration details via jamf parameter:# # Parameter $4 = Teamviewer configuration ID # Parameter $5 = Teamviewer assignment API token # # Created 16. March 2021 # # # # Precheck - configuration id if [[ -z $4 ]]; then echo "$(date): No teamviewer configuration id provided." exit 1 else tv_customID="$4" fi # Precheck - assignment api

Hi so i have APN certificates expiring with a former employee who setup our devices and I created a jamf distribution email /apple id for in the future we can renew easier and if I leave someone else will be able to renew.What happens to the devices when the apn certificates expire?Will I no longer be able to see devices until I re enroll them?Thanks

Hello and thank you for taking a moment to look at this. I will try and keep it short and sweet! I am running Jamf 10.4 and am having issues getting Patch Management to display any software titles. When I go into Patch Management > New I get the following error...(A connection error occurred while attempting to download software titles from this source.) Everything else is working as far s I can tell. However, I have not used this feature before, only glanced once or twice in the past and the software at one point did populate. Am I missing something easy here or has anyone seen this before at all? I appreciate any and all suggestions, thank you!

Since I don't see the info currently available in Jamf Pro as built-in Smart Group or Advanced Computer Search criteria I created the following EAs to report the macOS version and deadline date of any pending Declarative Device Management Scheduled Update command. I expect/hope Jamf will add them as eventually, but in the meantime...  EA script that returns a String Data Type with the version number for any pending DDM scheduled macOS update: #!/bin/sh DDMSoftwareUpdateInfo="/private/var/db/softwareupdate/SoftwareUpdateDDMStatePersistence.plist" result="No Update Pending" if [ -e "$DDMSoftwareUpdateInfo" ]; then pendingUpdate=$(/usr/bin/defaults read "$DDMSoftwareUpdateInfo" | /usr/bin/grep TargetOSVersion | /usr/bin/cut -d \\" -f 2) if [ -n "$pendingUpdate" ]; then result="$pendingUpdate" fi fi echo "<result>$result</result>"   EA script that returns a Date Data Type with the deadline of any pending DDM scheduled macOS update (since returning a non-date f

Edit: Replaced beginning with updated Mac Studio and M2 Mac details now that i've finally gotten some in my environment to confirm.Hi all, I've gone ahead and taken the liberty to modify the existing Regex from @talkingmoose to account for the devices that are currently being listed as compatible with macOS Ventura, along with a little bit of future proofing:(^Mac1[3-9]|MacBook\\d{2}|MacBookAir([8-9]|\\d{2})|Macmini([8-9]|\\d{2})|MacPro([7-9]|1\\d)|iMacPro[1-9]|iMac(1[8-9]|2[0-9]),\\d|MacBookPro(1[4-9]|2[0-9]),\\d)This can be used in a smart group or inventory report using the criteria item Model Identifier and then selecting "does not match regex" operator. Copy/paste the regex into the value and save the Smart Group to view all mac's that ARE NOT compatible with Ventura, or set the operator to "matches regex" to see devices that ARE compatible.Let me know if I made any mistakes. Thanks all! 

Hi All Community Members,We are trying to setup JAMF Teacher for use with our Teaching Staff using am issued ipad, and students using shared ipad.We have created a Teacher Group and a Student Group for use by the Students and configured them as required by the Configuration Guide.  The students seem to be able to log on to the Jamf School Student fine if they are sign in to the shared ipad with their apple id, but the Teachers Cannot log on to the Jamf Teacher app.  nor can they log on to the site specified via the Jamf Teacher Online URL.  when i try a password reset for the Teacher Accounts we simply get the error "InvalidAuthMethod"?Any help here would be appreciated.

When using #!/bin/bash in an Extension attribute script in Jamf Pro (10.46)  Jamf will error when trying to save. Not sure this has been fixed in a later version. #!/bin/zsh works fine though.

Hi All,I am trying to package SPSS 29 on Apple Silicon M1, using Composer to package. I tried to install it through script and activate through script and as soon as I launch the application after installation and activation it just crashes. also, I did through snapshot that crashes too.Basically, even the manual installation and activation didn't make any difference.Any help much appreciated.Thanks.

I am able to add the Apple clock app to self service, but because I cannot assign a license to it, it won’t download on the managed iPads.I tried “buying” licenses from Apple School Manager, but I can’t get licenses for a system app.

Hi all,   I need an iOS emulator i can enroll it with Jamf for testing. Any idea ?   thanks

This just recently started.  Wipe a test machine and go thru the setup.  The jamf framework loads but not self service nor do policies run. config profiles load including MDM.The Macbook is in ABM assigned to our Jamfcloud server. DEP runs and JamfConnect in the Prestage makes the end user account based on Entra ID.Here is the log file.  Not sure what has changed to make this occur.mac.test@MacBook-Air ~ % cat /var/log/jamf.log Mon Dec 11 12:39:58 MacBook Air jamf[733]: The SSL Certificate for https://domain.jamfcloud.com must be trusted for the jamf binary to connect to it. Mon Dec 11 12:39:58 MacBook Air jamf[733]: Enrolling computer... Mon Dec 11 12:39:59 MacBook Air jamf[733]: Skipping trustJSS command... Mon Dec 11 12:40:00 MacBook Air jamf[733]: JMFCommons.JamfKeychain.JamfKeychainSecurityError.failedToReadJmfKeychainPassword Mon Dec 11 12:40:01 MacBook Air jamf[733]: JMFCommons.JamfKeychain.JamfKeychainSecurityError.failedToReadJmfKeychainPassword Mon Dec 11 14:4

For our Lab and Classroom deployments, we create several accounts via policy as part of our deployment, including one that is an auto-login account. The problem that we just discovered is that while we do create a local administrator account, since the auto-login account is the first to actually log into the computer, it is the account receiving the secure token.Does anyone know of a way - other than disabling auto-login and manually logging in to every computer first - to make sure that our local admin account has the secure token, rather than the generic user we are creating?

Hi all,i wanted to remove MDM Profiles from a client and used sudo jamf removeFramework instead removeMDMProfile. So now i have a problem..i can´t enroll this device because the profiles are still there and cannot be deleted.How can install jamf on a mac manually und do sudoremoveMDMProfileThe easiest solution would be to remove the old profiles on a mac but they are not removable. I cannot remove them as admin.Any ideas?greetz Frank 

 I get this annoying generic ask for Admin log/pass.I have the PID and process name/number, but again it is generic. It just lists [Security Agent] I'm not sure where to look after this. I don't see anything in the logs either....or maybe I am looking at the wrong logs. any help would be appreciated.