I've had some free and paid Mac Store Apps setup for distribution for a long time and for a long time they have worked just fine. Now, all of a sudden, they're not always installing on a newly enrolled iMac. Is there any way to trigger an automatic install of Mac Store Apps?

I am trying to set up Single Sign-On for Generic OpenID Connect using Duo Mobile. I have configured Jamf connect to talk to Duo and after logging into the MFA it asks to sync the network password with the local account but i get an error message that the requested grant type "password" is not supported. Has anyone got duo Mobile to work with Jamf connect?

Hi All!We are experiencing problems with access to the "VPN & Device Management" menu.We use an app called Zscaler that creates a VPN configuration to protect and filter all connections from each device (iPad).Our high school student users are breaking our settings by removing the VPN profile so they can freely browse outside of the filtering.We want to restrict the use of this menu to prevent users from being able to modify the security presets established for the use of educational devices.

looking to the community for recommendations on keeping tabs on Apple updates.My org is strict about keeping things up to the latest version within 30 days.What sites/ RSS feeds, etc do you use to track upcoming updates?

We are a school district with staff setup as standard users on their Macbooks. We do not allow the App Store because, by law, we have to approve apps to protect student data. I just found out today that our M1 Macbooks that have been updated to MacOS Sonoma are completely bypassing any "Restricted Software" settings in Jamf. So users that update are able to open terminal, the App store, etc. even though the restrictions are setup and were working on Ventura. We are on Jamf version 10.49.0 so I don't believe the update is the issue. Any suggestions are appreciated!

Hi All, I'm looking at deploying Android Studio through Self Service for non-elevated users. I've uploaded the dmg file, and written a script to move the .app file to /Applications on each users machine. The package is dependent on JVM, so I've also packaged the JDK and have deployed that. My current challenges are: Once deployed, users are prompted with a message that this application was downloaded from the internet. I've tried using the spctl to add a label but to no avail... #!/bin/sh spctl --add --label "Android Studio" "/Applications/Android Studio.app" spctl --enable --label "Android Studio" On the first launch of Android Studio, the application downloads and installed supporting artefacts. One of these requires elevated rights... Has anyone packaged Android Studio and is able to provide any tips? Thanks, Jaems

Hi there,Recently, I have to publish some pdf by using eBook module. I have done this before many times without problem. However, I got "availabiltiy pending" message under the eBook entry I've made and the pdf won't publish to the iPads that I have included in scope. The status keeps pending. Please help. Thanks.Gary

Hey Everyone,I am trying to disable Edge updates via MAU, but they keep going through MAU and its conflicting with Jamf App Installer updates, specifically around re-opening the app after an update. The process just hangs and never fully re-opens, you can't quit the app via the dock either, it needs to be Force Quit from the Menu Bar option. I am using the most recent MAU 2.0 and Edge isn't even an option anymore. I disabled the EdgeUpdater updates via keystone and set the MAU option to disabled on the Edge config profile. My old MAU profile had Edge Updates set to change freeze and they still occurred. Any ideas? 

Hello everyone, I am just wondering if there is a script out there for iOS which I can roll out in the app config, which will auto fill the "hostname" for filemaker go 19? This would be a massive help if there is due to having over 1.7k devices on site. Or if anyone knows where i can get the plist config for filemaker go 19 I have gone to the location for it, but cant seem to find it! <home>/Library/Preferences/ Any help would be great CheersChris.

Hello,While testing Jamf App catalogs apps via self-service, I noticed that if the app is deleted from a Mac, the deployment status in the App catalog does not change, and it still shows as installed. While going through the FAQs, I noticed that it mentions that the app will not re-install, but when the new version is released, it will be installed back on.My question is, does that only apply to apps set to auto-install, or does it work the same way for apps installed via self-service? 

Guys,We are using systrack for end point analytics on Macs. Post installation of Systrack agent, we configured profile in Jamf pro of lsiagentd to get allowed on full disk access. After successfully sync between Jamf and device, profile getting installed successfully, but under 'Privacy and Security' it's not getting enabled. Kindly advice.We tried with bundle id as well as path, no luck. Below is the code requirement we received from systrack.identifier "com.lakesidesoftware.lsiagentd" and anchor apple generic and certificate 1[field.1.2.840.113635.100.6.2.6] /* exists */ and certificate leaf[field.1.2.840.113635.100.6.1.13] /* exists */ and certificate leaf[subject.OU] = SQL6SRUA2Y

Hi All,I have created PPPC Utility as suggested in Systrack Documentation for giving Full Access to Disk.However, after pushing the configuration profile to the device I am see that the settings in the Security and Privacy - Full Disk Access - Isiagentd has not changed. Anyone can help me on how can I enable teh full disk access or what is missing in PPPC settings.Thanksrecommended setting by Systrack - Enterprise Deployment Through MDM (lakesidesoftware.com)Attaching screenshots from JAMF and device   

Hey everyone, I recently got passed handling our Netskope deployment. My predecessor claims that with the v71 client, due to us using Azure AD for our IDP we cannot auto populate the tenant information. Basically once the install finishes we get a popup where we have to input our company name. I know there has to be a way around it, anyone have any familiarity with it?

Hi,Recently, I've been doing some cleanup work with our jamf pro instance and have gotten to printers. We have around 15 Konica Minolta BizHub 554e/754e's that our macs direct print to using LPD. Another admin has one giant AppleScript used to add all applicable printers, but I feel like there has to be a more efficient way. I've played around with Jamf Admin mapping, and it works fine; however, it seems like scripting might be the way to go. Does anyone have any advice or a good script they can share? 

Hello, is there a way to sync Sharepoint online libraries in OneDrive on Mac computers using a script/jamf? Thank you!

Hello,   I want to enable 'Lost Mode' for a lost device. I cannot find this option in 'Management Tab' for the concerned device. This option is also missed for other iOS devices.   Any idea how to troubleshoot that? Thanks  

How can I create a Patch Management Rule to distribute Safari for macOS Monterey and for macOS Ventura Clients? The Patch Management Policy does not offer an option for both systems. I created one for the Ventura Clients which is scoped to a Smart Group, but how can I setup a second one for the Monterey Clients?

Hell Team, I am looking for a solutions to get the recovery key in my JAMF console for those mac devices recovery key is missing, but user should be interrupted. I can see it has happened for both personal and institutional key. What is the main concept of personal recovery key validation, some time it is showing invalid or unknown but recovery key is there, strange! Please help to understand and also with a perfect resolution I am looking for. BTW device is getting encrypted by a config profile and to escrow the key in JAMF.

Few macs are not encrypted as per JAMF console but JAMF is showing me their individual recovery key, how it is possible, do you think those are false key for those macs or macs are encrypted but showing me false info as not encrypted? In this case what is the solutions?

(Apologies in advance for the long post) Upon seeing the news of Jamf Pro 11 and the new versions of JAMF 200, 300, 370, and 400 classes and certifications, I have a bunch of thoughts and questions. For further context, I currently have Jamf Pro 10 versions of my Jamf 100, 200, and 300, also a flavor of 170 that still has the resulting certification named as "Jamf Certified Endpoint Security Associate" and (with my certification stored in SkillJar and not Credly). First off, while I appreciate that validity periods make sense for a product that (even throughout version 10, alone) was and is constantly evolving, spending $2500 every three years on keeping certifications current seems like a hard sell in this economy.  I can't even fathom $4500 for the training pass every three years (whereas it was a no-brainer the last time I did it).  Does anyone know if there will be (more affordable) renewal courses or exams that one can take shortly prior to the end of the

I work for an MSP and one of our clients is a school with around 150+ iPads over multiple campuses.We've recently made the move from Meraki to jamf and with 115 of them sitting in various states of OS versions, I don't seem to be able to get them past the update scheduled stage without getting hands-on with it and manually installing it.They're set to allow automatic checking for updates and scheduled times are outside of school hours. Pushing the install doesn't seem to override this and in a lot of instances, the OS doesn't seem to autonomously update as expected during the set time frame.Is there a command or function to FORCE/override the scheduled update for the installation of new OS? It's school holidays, I don't want to spend the next 2 months checking the portal daily, taking inventory of what refuses to work.

Hi,I have recently generated and pushed a new Local Admin account which successfully deploys however I am unable to immediately sign in with this account until I manually enable filevault access.The account is being pushed to an already setup device and in the Policy I have enabled Allow user to administer computer and Enabled user for FileVault 2 however this does not appear to apply the FileVault access I need and no error appears in logs to indicate why.Can anyone advise on what I may of missed or should try next? 

 Saw this in the changelog for the Jamf Pro API -- anyone know what this is? I tried googling "Jamf Pro Scheduler," but the only results were bringing me back to the API documentation. 

Greetings. Wanted to know if anyone was able to install Microsoft Visio through JamfPro?

I'm using Jamf Pro with some Macs and for some reason I have trouble getting a few M365 apps to update; specifically the Mac App Store versions of Microsoft Word, Excel, and Powerpoint. Interestingly, the Mac App Store versions of Outlook and OneNote update fine. I know the apps having issues are larger sized, but they should still work. I have tried removing and adding the apps to Jamf, removing the VPP option, and a few other things. I have also read about others having the same issue with Mac App Store M365 apps not updating.Anyone experiencing this issue? Any suggestions on how to solve the issue?