My org has setup persistent alerts for JAMF so critical alerts (such as "You are no longer enrolled in MDM") are not missed; however we have thousands of employees getting daily persistent alerts for Chrome/Slack/Grammarly/Skype/etc app having an update available. This is a huge productivity hit in aggregate and I expect all JAMF customers are hitting the same issue. Is there any feature to be able to separate between Critical alerts and random notifications from JAMF ? 

I've got a few weird things happening in JAMF, I'm assuming this is not by design.  Say I create a new smart group, I give it a name, I don't scope anything to it, then save it, when I go back to the list of smart groups, the membership count is automatically 200 or more devices.  That does not seem like a feature anyone would ever want, atleast by default.  I've got another weird issue going on also, but we can start here.I appreciate your time and help!  Have a great morning!

How are you guys handling this situation User a has a Macbook and creates Time Machine backup of all his data. This computer is enrolled in Jamf.User a gets a new MacBook and wants to transfer all of his data and settings to the new computer from his Time Machine backup. Normally (before having Jamf) he would use migration assistant to transfer his data from the old to the new computer. As far as I know with jamf it would cause to mess up the MDM profile.How do you guys handle this situation? After migrating the data just do a new self enrollment?

Hello can someone please send me pictures of how your erase-install script is set up inside of Jamf Pro. I can get the script to execute locally on the test machine, but when I try to add it via self service it will not execute.. I have the Package downloaded and added to a Policy as well as the script attached and the Execute command of: /Library/Management/erase-install/erase-install.sh --update --reinstall --cleanup-after-use --check-power ...I have tried it with just the package, I have tried it with the script and the package, and the script alone and still no success. I have read the Jamf Pro section of the script  GitHub about 30 times and still can't find a solution trying to execute it on a computer with Sonoma 14. via the self service... the icon will show but when click nothing happens If you have it running Properly I would appreciate if I could get pictures because Im stumped. 

Hey everyone,I wanted to know if there is a smart group  i can create that shows all locked computers Or create a policy or extension attribute that can lock devices based on a users computer that has not been checked in for a long time I do not want to use the Jamf API key. 

Hi All! I am kind of in a weird situation and curious to know how everyone is handling BYOD. Here is the scenario:We manage all company owned iOS devices through Jamf. We use Entra ID for SSO everything (mostly). Currently we do not have a good workflow for BYOD restrictions. I have been testing enrolling BYOD iOS devices directly into intune using Intune Company portal app for iOS on personally owned devices, and then setup CA Policies based on mdm profile or any attributes that enrolled devices can be filtered with. We want to provide the same level of access to Jamf enrolled (Company owned) devices as well.Problem: Entra or Intune does not have any way of knowing the difference between a personally owned device and a company owned device that is managed by Jamf. We ask user to register devices through MS Authenticator app so the devices are in Entra as “Microsoft Entra Registered Devices” for both company owned and personal.Solutions that I can think of so far:We setup device compli

These are the download links for the standalone Safari 17.2 installers Apple released today (2023-12-11): Safari 17.2 for macOS Ventura: https://swcdn.apple.com/content/downloads/44/38/052-15649-A_KZBNFQSITY/ysi6vwkrh10exv80t27dqyh0id90f5102l/Safari17.2VenturaAuto.pkg Safari 17.2 for macOS Monterey: https://swcdn.apple.com/content/downloads/38/10/042-89473-A_9Y87AOEFV3/yx5d55apw0z2bxm7gv3na7xljbpjbpghvk/Safari17.2MontereyAuto.pkg As is normal with current major macOS releases updating Safari to version 17.2 on macOS Sonoma requires updating to macOS Sonoma 14.2.

Hi, I have deployed a login window profile to display additional system information from the login screen.It works perfectly in Ventura but not in Sonoma. Anyone experience this?Thank you

I have a preboot script that I install on my Macs to initiate some Jamf policies but it requires Rosetta 2 to be installed prior. I usually pre-install Rosetta with "softwareupdate --install-rosetta --agree-to-license" but with 13.5, you now get this error: "Package Authoring Error: 032-69584: Package reference com.apple.pkg.RosettaUpdateAuto is missing installKBytes attribute" and my preboot script package fails to install.Has anyone else experienced this with macOS 13.5? 

Hey all, I'm using (trying to use) Adobe Cleaner tool deployed via Jamf policy to uninstall CS6 from our iMacs. The trouble is that it opens a UI for the logged in user where they have to click accept for the EULA. Does anyone know how to get this to install and run from a command or script without user input? I've tried this: sudo [Path to Adobe Creative Cloud Cleaner Tool.app]/Contents/MacOS/Adobe Creative Cloud Cleaner Tool ‐‐removeAll= CREATIVECLOUDCS6PRODUCTS From this resource: https://helpx.adobe.com/creative-cloud/kb/cc-cleaner-tool-installation-problems.html

Hi everyone,I’m a little bit stuck with setting up Updates via declarative Device Managment on MacOS and iOS.Fiddling with this for weeks without it working at all, I finally realized that when I set MacOS Updates to “Scheduled” and define the version explicitly, then this seems to work. The MacBooks get a new entry in the MDM Profile where it states, that this version is to be installed on the specified date. Additionally the user gets a notification that the update is scheduled and the MacBook even just installs the update on the specified date.. So.. YAY! :)But for iOS I have no such luck. I know, that “Download, install, restart” as well as “Download and defer” does not work on iOS due to it not being supported. So for my understanding it should be possible to set it up the same way as for MacOS: Schedule and define the version. But there is nothing happening on the devices and to be honest: I have no idea where to check, if the action was successful or, if not, why not..I als

I'm trying to create an extension attribute to report back ipv6 addresses but not having much luck... So far I got this... Anybody had success with doing something similar?

I work for an MSP and we use Jamf Now to manage a clients iPad devices. With Jamf Now we have it setup to auto update applications but we have noticed this feature will not work when the app is open. They use these iPads to access there EHR and they always have the app open. Most of them lock the ipad with it still open. This prevents the app from updating even if we manually push the update to the device, it won't install until they close the app.I have looked at Jamf's documentation on auto updates and all I see is you can turn it on. No option to set a time to update.Is there anyway we can force apps to update at 3am while they are not using it?

Dumb question I know, but I can’t find a straight forward answer for some reason

Hi.A couple of days ago I checked the "Jamf Remote Assist" checkbox in settings->security and was looking forward to finally have remote support in Jamf again, but then I ran into a pretty strange problem. After the Jamf Remote Assist PPPC was pushed to all Macs (no scope, just on or off) we are having strange issues with Outlook (16.x versions). We need to push "send and receive" in order to get mails. Normally the mails would pop up as soon as you receive them, but no more. It seems something is blocking the incoming mails?. Could this be a firewall thing?. I tried to get some answers from Jamf regarding what exactly happens when you check "Jamf Remote Assist" but so far no luck.Any advice? After I deselected Jamf Remote Assist, any new machines that I enroll works fine, but now I have 90 machines that doesn't :-( Thanks

according to jamf protect I am supposed to set computers to keep the install.log file for 365 days, does anyone know how you can do this, preferably in a policy or config profile so it can be done on a larger scale.

We have an issue where an Extension Attribute value is becoming hex code in a Configuration Profile. To give a bit more background, we use Cisco Umbrella for web filtering. In order to identify the user to Umbrella, we use a Configuration Profile which contains an Extension Attribute which is mapped to userPrincipalName from AzureAD. For most of our end users, this populates correctly in the format "username@company.com". However, in a few cases it becomes "username@company.com". "@" is the unicode hex code for "@". Looking at the Computer itself in Jamf correctly displays "@". Does anyone have any suggestions? Is this related to an old bug of PI-006195?

"Perhaps it's just me, but it appears that softwareupdated became more stable around macOS 13.4. Is it still causing crashes or hangs on your Macs? What about in Sonoma? Has Apple officially addressed these issues?Do we still need to use 'launchctl kickstart -k system/com.apple.softwareupdated' in a policy nowadays? Is this still a common practice?"   

I'm facing an issue with the Mac onboarding process using Jamf. The problem arises when configuring a machine on ADE Prestage – the remote management profile displays correctly. However, after installation, login is restricted to admin credentials only. This is because we are deploying a local admin account from Jamf Pro, and any attempt to log in with other user credentials is unsuccessful.    It's worth noting that this issue occurs within the internal corporate network. On the contrary, successful logins are possible on public networks or personal hotspots

I'm needing to delete a ton of Smart Device Groups but they all have apps associated to them.  How can I delete these groups without having to go into each one and remove the apps first.  I have 80+ groups and do not want to do each one manually.

Hey all, We are in a one-to-one for Macs in our district and have given instructions to parent on how to set up screen time on their children's MacBook Air's.  Our problem comes when a parent doesnt remove the screen time lock during testing.  Sometimes the screen time filtering gets in the way of testing apps and websites.   So we figured out a solution.  Log into an admin account on the students computer, go to System Settings/Users and Groups and click the i button for the students user account and click delete account, then choose "Dont Change the Home Folder". Now you must navigate to the user folder and remove the word "(deleted)" from the users folder.   Once complete log out and have the user log back in.  Screen time should now be disabled. This helps us deal with testing for specific students who need this feature disabled for tests.

Configuration profiles pending and failingCan update check in normally, but a large number of Configuration profiles pending and failing

I am having trouble using Jamf Pro to run the SUPERMAN script. It works for minor updates of 14.0 but not working on 13.6. Any Suggestions? 

It is possible to set a group picture in a device groups. The intention is to display this image as a header graphic in the Jamf Student/Teacher app in article style. But unfortunately only a placeholder (white space) is created in the app. The image will not load.  If I remove the image from the group, the white space within the app is removed again. Is it the wrong image format (PNG-8, PNG-24, JPEG)? the wrong image size? Or does this generally not work?     Another hint, "Ermitteln" is a very unfavorable translation in german. Perhaps "Discover: Entdecken" would be more appropriate.

Hey everyone, I am wondering if i could get some advice on setting up an API Script for JAMF School that will restart 2 specific iPads at a set time each day. What would be the code and do I have to run it on a Mac? I have seen a few older forums that have restart scripts but i could not get them to work with JAMF School. I would appreciate any help on this.