Hello All, In my organization, user connect to company's SSID using by certificate based authnetication and with EAP-TLS mode and WPA2 Enterprise security protocol, but few users are not able to connect, it is showing connected and then moving another SSID which was connected before. I am getting the below error in wifi log, any idea to fix it? Usb Host Notification Apple80211Set: seqNum 698 Total 0 chg 0 en0Thu Dec 28 00:35:48.002 Usb Host Notification Apple80211Set: seqNum 699 Total 0 chg 0 en0Thu Dec 28 00:52:26.525 Usb Host Notification Error Apple80211Set: Device power is off seqNum 700 Total 0 chg 0 en0Thu Dec 28 00:52:26.856 Usb Host Notification Apple80211Set: seqNum 701 Total 0 chg 0 en0Thu Dec 28 00:52:26.887 Usb Host Notification Apple80211Set: seqNum 702 Total 0 chg 0 en0Thu Dec 28 01:09:02.634 Usb Host Notification Apple80211Set: seqNum 703 Total 0 chg 0 en0Thu Dec 28 01:09:02.933 Usb Host Notification Apple80211Set: seqNum 704 Total 0 chg 0 en0Thu Dec 28 01:09:0

FYI: This is for newly imaged/enrolled machines only. I'm not attempting this with machines currently deployed.  Is it possible to force Filevault to enable with 0 interaction from the end-user? Currently we have it auto-enable during enrollment but there is a small window that pops up that says "Turn on" or "Cancel" and they are unable to login for the first time without selecting "Turn on", but I'm hoping to skip that altogether. Since they have no option to move forward without enabling it, ideally we can force it in the background. We have: Jamf Pro, Jamf Connect, "Automatically install PPPC" with Jamf management framework and Jamf Connect. We currently have 2 Config Profiles that enable FV (though I'm honestly not sure which does what or if they're redundant):Application and Custom Settings > Jamf Applications > com.jamf.connect.login > Enable Filevault: TrueSecurity & Privacy > Filevault > Enabled Filevault > Enabled (At Login)

Hi, happy new year to everyone!!I have a complicated problem, when I create any policy (packages, scripts etc.) with any trigger method (ongoing, once per a computer etc.), devices are not getting policy before 1 day or more. When I try to get the policy with sudo command like "sudo jamf policy -id XXX", it says "No policies were found for the ID XXX". I can see the policy on Self Service but when I try to install (trigger method selected as ongoing), it says "This item is no longer available".I tried to change apache certificates, giving more RAMs to apache but nothing works.I found that when I restart DMZ server's apache service, it is working fine. What should I do? any suggestions? 

I am trying to install a different self-signed cert for each device. Is it possible to do it in JamF Now? I was able to install the same cert for all the devices through a custom profile configuration, but I want to install a unique cert for each device. Is this scenario only supported in JamF Pro?

Hello, a little newer to Jamf, our users aren't able to share to messages via safari. it's not even showing the option in there and I was wondering if there could be something configured in JAMF that would stop that from happening and where  could find that setting. We show airdrop, email this friend and share to notes, but not share to messages. Any help would be great, thank you! 

Is this possibe? Can force install the 2021 license but some users use an O365 license so want to make an smart group that only users with an 2019 license update to 2021 thanks 

We've got a small amount of Macs and use JAMF Pro to manage them.It seems that our Macs users have an issue where their prints are only printing in Color. Doesn't matter where they print from (which application), which device (happens on at least 3 different Macs), or to which printer.The printer in the main Mac office is the same make/model as elsewhere in the building. I'm told the issue may have started prior to this make/model anyhow, so it's not likely related to the printer itself.The same printers don't have any such issue when printing from our Windows PCs or Chromebooks.I'm not overly familiar with Mac management (due to the tiny portion of our environment they consist of) so I've had help with getting JamfPro setup to do things like deploy this printer to them.We've confirmed there's no apparent setting on the Mac that is helping - you can switch the print to "B&W" and it'll still come out in color. It shows B&W in the print preview.So..I'm at a loss as to where such

Our feet are currently on Ventura, with a few exceptions on Sonoma. We plan to migrate our devices to Sonoma in the near future. Due to Jamf Connect and Sonoma issues, we deployed 2.29.0 to our devices before our migration. I like to state our previous Jamf Connect Policy has the following Files and Processes Payload to ensure our devices default to the local login, "authchanger -reset -preAuth JamfConnectLogin:DeMobilize,privileged". When I created the new Policy with 2.29.0, I included this same payload. On our Sonoma devices, there really wasn't an issue during testing. I have shut down and restarted the devices a few times, and the default, Local Login, was the default. When Sonoma 14.1.2 was released and the devices updated and restarted, the Local Login was the default. But a restart after that first restart, those Sonoma devices are now doing the idP login, which we don't want. Has anyone else had this experience?

Our company recently installed Jamf on our Mac. Me and some colleagues on Sonoma are locked out of our accounts because a new password is required but the password is not accepted. In short:No Jamf installed. All is well.Upgrade to Sonoma. All is well. Install Jamf. Accept the certificate, check it out in System Preferences. All seems well.When the screen saver lock kicks in, try to log back in.A new password is requested. Enter it, in both fields. Password is rejected because "Your password does not meet the requirements of the server."Some notes:The built-in macOS password check shows all rules in green.I did try every password config that would make sense, no luck, and I don't think that's itI'm very puzzled about the need for "the server" to see my local admin password, WTF?! 

We are just rolling out new computers to our staff, the currently have MBPs with local accounts, on the new computers, we are adding them to the AD domain to ease with logins and password across our district. If we let them use Migration Assistant, they will create new users on the computer with their settings and files and not use the new account that we are trying to get them to use. We will assist them in moving their files, bookmarks,images and music over, but don't want them to use Migration Assistant. I have tried to rename / remove the app, I tried to restrict the app, nothing works. Any ideas?

Hey all! I have an issue that some of you can, hopefully, help with. Apple has made some changes to the way macOS handles screensavers and wallpapers over the last couple of iterations and, with Sonoma, I'm hitting a blocker when trying to deploy a policy to add an image and set the wallpaper to that image for all displays. This is how I currently have the policy setup: I created a package that adds a folder containing the image to to the system library I added the following script to run after the package was installed: #!/bin/zsh new_wallpaper_path="/Library/CompanyFolder/Company\\ Wallpaper/Company_Wallpaper.png" /usr/libexec/PlistBuddy -c "set AllSpacesAndDisplays:Desktop:Content:Choices:0:Files:0:relative file:///$new_wallpaper_path" ~/Library/Application\\ Support/com.apple.wallpaper/Store/Index.plist && killall WallpaperAgentI've executed the policy on my test machine successfully but when I had another user test for me, the package installed but the scrip

Hi, we have a MacOS we enrolled via configurator app and now have it in Jamf. It clearly is getting the profile as settings are restricted, user is set up as standard, profiles are there etc. But most management commands are missing. Also can not run any jamf commands, as there is no jamf in usr/local/ at all. I run sudo jamf version and get jamf command not found This is what management commands looks like for this mac very limitedwhile others have more:already tried wiping it and reinstalling MacOS as well. No dice

We are trying to setup some of our field iPads to have a passcode, but then restrict the user from being able to change the passcode.  We have a payload that requires a 6 digit passcode on all our iOS devices.  I tried a couple things and have not had the results we are looking for.First tried to set the Restriction->Functionality->Modifying Passcode to Restricted but when new devices enrolled they bypassed the prompt to set a passcode and the won't let the user go into settings to set one.Then I turned that restriction off and had someone put the passcode on one of those devices and then turned the restriction to restricted and they couldn't change it, but that's too manual for each device.Second thing we tried was to setup a smart device group for any device where the passcode compliance with profile was compliant hoping that a new device being enrolled wouldn't pop into this smart group until the passcode was set; set the Restriction->Functionality->Modify

Hello Jamf Pro users,I'm currently facing a situation where I need to update a specific app on only a select few devices within our organization. We utilize Jamf Pro as our Mobile Device Management (MDM) solution, and I'm looking for guidance on how to achieve this efficiently.Specifically, I want to understand the process of updating the app on specific devices using the Jamf Pro Administrator console. I have already identified the devices I want to update; however, I'm unsure about the steps involved in initiating the app update command and directing it only to those desired devices.

I'm encountering an issue with installing Sophos on a machine through Jamf Self Service, I've packaged Sophos using Composer, and the same .pkg works flawlessly when deployed through a Sophos policy to all devices. However, when attempting to install it through Jamf Self Service, the process appears to complete ("Done" message), but the app doesn't actually install on the machine and I'm seeking some guidance from the community. 

How can you export the Outlook 365 My Computer Archive files? I have a user that is migrating to a new Mac and wants to transfer these files from Outlook 365 on his old Mac to Outlook 365 on the new, but I do not see a way to export the My Computer archived files. In Outlook 2011 you can export and create a .OLM file but in the new Outlook i do not see it. Thanks

Just seeing if anyone has had success in deplying through Jamf Now a blueprint with a Custom Profile that has a DNS Setting payload.The Profile works find when installed manually but when it's deployed via Jamf Now isn't being enabled.

I know some of this has been covered once or twice before, but I'm VERY new to Jamf. I just recently started with this company and saw Jamf for the first time. Now, I'm basically the admin for an app I've only recently become acquainted with that manages computers running operating systems I've never supported in my short IT career. As you might imagine, I have a million questions, but I'll start with Mass Action commands.After a bunch of attempts, I finally got 2 machines to update from 12.6.0 to 12.6.1, but when I try and get them to Ventura, I get this in Jamf: Unsupported InstallAction for majorOS updateIt doesn't matter whether I've checked the option for majorOS update or not.I always choose the option to defer as I was tasked to do.When I run the mass action command, I see nothing on the target computers (no notifications etc) and after 5 minutes or so I get the failure result in Jamf. It's frustrating to say the least.This happens on an iMac and a MacBook.I have a third Ma

Hello, I am kind of walking into a weird situation here where I have been upgrading our jamf environment that has essentially been limped along for the last 2.5 years with no updates and I am trying to see if anyone might have experience implementing patchbot by chance? I want to give our workstations guys a more streamlined less hands on approach to patching so looking for options

Having a weird issue. After updating to macOS 12.3, right before the filevault login, I am presented with our PoilicyBanner, and I cannot click on the accept button. This is pre-OS right before FileVault login. I have to click the white text, tab, and hit return to get to my filevault login avatars. At this point, I can login and then am presented with the OS’s PolicyBanner. According to How to set up policy banners in macOS - Apple Support https://support.apple.com/en-us/HT202277 Expected behavior should be: If you use FileVault full disk encryption on your computer, the policy banner appears after the first user logs in, before the desktop appears. The first login is performed to unlock the startup disk. Present behavior: Computer startup boots to PolicyBanner that is stretched to the edge of the screen. You must click to focus and tab to Accept. Then we get FileVault login profiles. Enter password. Unit boots to PolicyBanner to check accept and continue, then to desktop.Anyone

Hi, A couple years prior to joining my current organization, they moved their On-Prem Jamf Pro to the cloud. While the JCDS is setup, it isn't the Master DP, with the master being an on-prem smb server shared between our two campuses. I plan on doing a replication and then making the JDCS the master. My question is, does it make sense to keep an on-prem distribution point? 

Hello all! For many months now, the audit log for EVERY one of the computers on my instance show 'Viewed FileVault Encryption Key' with my username. I am somewhat new to JAMF but a moderate technologist generally and have recently taken over the System Admin role at my company under a lesser title. I have very rarely viewed any of these logs and it would be arduous for a human to view them as often as the logs display. To me, this log raises brows and I have reported it to my administration counter part who has a very high level title but the response is its probably just me and are not concerned at all (no reason for this, no background to share). I am planning on setting up monitoring on the instance's server with wireshark but I also plan to build a three story tree house and thought it might be a better idea to reach out here in the meantime ; -) The server instance has gone through at least three version upgrades in the last few months led by my administration counter part and unr

Hi,  Is it possible to delete SSIDs via script that have not been connected to over 30 days? if so, can someone assist?   We are trying to see if we can make a self service policy so employees can execute it as needed Thank you,  

Trying to distribute an in-house app with a .ipa file.  The salesman who pitched JAMF Pro assured us multiple times that we did not have to have a paid Enterprise Developer program with Apple.  I'm starting to think they were wrong.Does anyone have any experience generating a provisioning profile without going through Enterprise?  Will AD-Hoc distribution work?I am the developer for the app.

Hi all. We have a local Jamf Pro server. Anyone know what to look for in the log file to find the date and time a Jamf Pro update was done?