I'm curious if anyone has an extension attribute or script to detect the presence of homebrew anywhere on a device(not just the default install location)? Thanks for any help!

Hi all, Looking for if anyone has had this issue in the past and how it was resolved if so. This week I updated our Jamf Pro Instance to 10.43.1 and have been having issues with enrolment ever since. It's worth noting our environment is hosted On-Prem and in an air-gapped network so has no access to the internet whatsoever. If I try and enrol a new device via User Initiated Enrolment and access the enrolment URL, I am greeted with the login window as normal. Any LDAP user is allowed to enrol devices. The initial stages of the process work as normal, until the final stage where the 'Download and Install this package' message is displayed. If I am trying to enrol with a standard LDAP user account, when pressing the 'Download' button I am redirect to '<Enrolment URL>//flatpackagedownload and a message is displayed 'HTTP Status 403 - Forbidden' and I can't go any further. The stranger part is if I initiate the enrolment using an Admin LDAP user, when pressing the 'Down

I had a Mac that lost its connection with JAMF. I ran the following command on the machine, sudo Jamf enroll -prompt, and the machine started reporting into JAMF. The issue is that it will not push down any new Configuration Profiles and the "Management Commands" option is missing. I have tried to run the following commands to see if I could resolve any of these issues but nothing helped.sudo jamf -removeFrameworksudo jamf reenroll -promptsudo profiles renew -type enrollmentI also tried to do a manual enrollment but since the old "MDM Profile" is still on the machine it will not install a new one and I can't remove the old "MDM Profile" since it was enrolled with DEP. Is the only option I have is wipe the device?

Hi folks,I was looking through the logs on several iPhones in Jamf Pro today and noticed a pattern in many devices. I see a long list of apps installing themselves on established iPhones. Then I look back a few days and see the same list of apps installing themselves. These are the same apps and app versions, installing themselves over and over again. Of course during those times, the user has several icons on their home screens that are busy reinstalling, and that could make some unavailable for quite a while if outside WIFI range.Any thoughts on why this would be happening? I checked multiple department affiliations, so it isn't just one department profile. It's almost as if the device is not acknowledging the installed app list and thinks it needs to keep installing apps repeatedly.Thanks in advance for any ideas,Rob

Hi Everyone,I put together a policy to allow users to self-initiate MacOS updates from Self Service without the need for a local Admin to authenticate using the erase-install.sh tool ( https://github.com/grahampugh/erase-install) However one issue in our build is that when updating MacOS to a newer version, it breaks Jamf Connect as noted here  - (Re-enabling_the_Login_Window_after_a_Major_macOS_Upgrade)I'm bouncing around a few ideas but I'm wondering if there is an easier way to have the system, upon reboot completing a MacOS update, automatically re-enable the login window.Its important that we retain the flexibility of having users initiate the MacOS update on their own time and while there are many ways to push the jamf connect fix, they lack the automation i'm hoping for. Thank you in advance. 

Has anyone else seen this? We have seven buildings with three grades using iPads, and around two classes per grade per building. 28 iPads per class means we had to touch a lot of devices. About 1000 iPads.  We have a Configuration that includes the SSID and password, so what happened? It only happened to the iPads that have a more restrictive Configuration Profile.  Has anyone else had a similar experience? Bill

I tried uploading new packages, old packages I knew that worked and nothing is uploading today. So frustrating! Does anyone know what's going on?Just getting this error:Upload failed: undefined

I have "purchased" the free app Record It from ASM and then assigned the app to a static group.  This app has an in-app purchase option to allow longer recording time.  We do not need the longer recording time, so we do not plan to make the in-app purchase.  When the student installs the app from self service they are asked to verify their Apple ID.  The Apple IDs are managed, so the students are not able to complete this.  I can go to settings and enter the password on the individual iPad, but the app still does not install.  When I look back in self service, the app is just spinning.  If I close self service and open it again, I am given the option to install the app.  Again, it only spins and does not install.  Any suggestions would be greatly appreciated as I am new to jamf.

Hello Folks, We have stumbled upon a weird one in our environment. We have devices that have updated to macOS Sonoma (14, 14.1, and even 14.1.2) that are having issues accessing certain websites via Google Chrome—Safari is working as expected. It is not our entire fleet of individuals, and what is even weirder is some of these folks are able to connect to these services when on our office wifi, but not at home (various ISPs). The websites that we are seeing issues with are Atlassian-run, notably Confluence and Jira. This one is really kicking us in the behind. Thus far we have completely nuked Google Chrome (Library file, etc.) and reinstalled with it prevailing. Looking around online we see a handful of similar issues but it looks like either there is no resolution or people just stop replying to the Reddit threads, etc. We reached out to Atlassian just to see what they would say and unfortunately we were simply asked to just restart our endpoint devices having issues.

We just switched to JAMF Now from Apple Business Essentials. In ABE the users signed in with a managed Apple ID, which allowed me to centrally view which employee was assigned to each device in ABM. In JAMF Now, all I can see is the list of iPad devices with serial numbers.What is the best way to track device assignment in JAMF Now?Will this require tracking manually in a spreadsheet? We have around 75 devices.

Free and Paid Options for Capturing macOS Screen Recordings Introduction Documentation. Takes. Time. A lot of time. Including screencasts in your documentation not only enhances the final product, but is frequently the best way to communicate the often complex steps required to successfully complete a given task. The following are free and paid options for recording the screen of your Mac. Continue reading …

Hi there, Does anyone have a script to sign out of Apple ID? We intend to restrict Apple ID usage and have another one to do offline backups of apps that are linked to the Apple ID like Notes, Sticky Notes etc.

I'm looking to make a set of options available to users via 2 policies in the Self Service app. 1 policy should allow the user to set a static IP address to the interface - I've written a script that inserts dummy values for now - this script runs successfully and alters the network settings as expected: #!/bin/bash # sets test IP settings for Ethernet networksetup -setmanual Ethernet 10.10.10.10 255.0.0.0 127.0.0.0  The other policy should set the network settings back to DHCP for that interface - I wrote a script for this, which does not work: #!/bin/bash # Set network settings back to DHCP networksetup -setdhcp Ethernet  This DHCP script reports as having run successfully (exit code 0) but the network settings on the device haven't changed. If I run the single line with the networksetup command locally, in Terminal, it completes and changes the network settings as expected.If I push the script out with a policy (as opposed to making it availab

Anyone gotta script that will automatically download the latest version of Dropbox? As the app is constantly updated, I'd like to have self service and enrollment policy that will always grab the latest version, but their download link does not lead to a specific DMG or package. With other apps I do this via CURL, but that doesn't seem to be an option here. https://www.dropbox.com/download?os=mac

Hello Everyone, Not sure why these config profiles I am using with Jamf connect are failing. Does anyone have a way to remove the failed commands? How can I run JAMF Connect and have no failed commands as the outcome   

I work for a small organisation with a dozen or so Macs and a couple of Windows machines. I think it's likely we could go all Mac soon as I hate having the mix.I need the facility to remote lock/wipe if a device is lost or stolen. I know that there is functionality in the AppleID but use of the AppleID is not universal. Most devices we own but some are BYOD.Our MSP is pushing us hard to adopt Intune which means a licensing uplift and a 'project cost' to set up the policies. We already have patch management through NinjaRMM.I'm thinking we could just use Jamf Now, licensed at $4 per device per month. Even if the MSP doesn't want to manage it, I could manage it myself.Does that sound like a sensible suggestion?

Hi JAMF Nation!I just wanted to start a discussion to see what others might be using. We are considering possibly deploying some Mac Apps (Full and Menu Bar) that would be useful for our end users or us as an IT Dept. One example we have deployed is the Support app in the JAMF Marketplace. This app gives our users and IT a quick overview of the machine, and it's all run from the menu bar. Just wanted to see if there are others out there that could be of use. Thanks!!

Hello all we are running into an issue where users cannot log in to their machines after upgrading to Sonoma. Its just a grey screen that shows a username and login prompts at the bottom of the window. Other times a black screen and we cant get past that. Anyone also seeing this when using JC and Sonoma?

Hello, have a problem with the performance on several MacBookPro with Apple Silicon. Simple actions like taking screenshots or opening some tabs in settings take up to 10 seconds after Jamf installation. The problem appears on Macs with high uptime like 23 days and everything works fine after reboot (everything works fine for about a week). I am not sure if anyone have such problem, but I am struggling to find the reason for this to happen. 

Good Morning, I know I will catch some flack for still binding to Local Active Directory (working on getting ready for JAMF Connect) but any of our macOS devices running Sonoma are not receiving password expiry notices on login or prompting for password changes on initial login with temporary passwords. I know there was a bug with macOS at release, but that is supposedly patched? The bind itself seems to function as normal for initial local account creation.  We're not doing anything fancy with the binds either. No UNC path, home drives, or drive mappings.  What could I be missing?     

Safeguarding personal information is a fundamental commitment to which we adhere at Jamf. Safeguarding isn’t just securing the data entrusted to us, but also maintaining compliance with various privacy laws and regulations. In our efforts to demonstrate our commitment, we are providing you all with the following important updates:   Jamf is certified to the EU-U.S. Data Privacy Framework, the UK Extension to the EU-U.S. Data Privacy Framework, and the Swiss-U.S. Data Privacy Framework. As part of these initiatives, we recently updated our Privacy Policy. Our current Privacy Policy is publicly accessible on the Jamf Trust Center Privacy Page or by clicking here. We’ve successfully communicated these updated changes to our valued customers, ensuring their awareness of the modifications.   If you have any questions or concerns, don’t hesitate to contact our Privacy team at privacy@jamf.com. For more information about our Privacy practices and to access a detailed overv

This is my script I run for new installs:#!/bin/shsudo echo $4 > "/Library/Application Support/JAMF/Waiting Room/com.sentinelone.registration-token"sudo /usr/sbin/installer -pkg "/Library/Application Support/JAMF/Waiting Room/Sentinel-Release-23-1-3-6816_macos_v23_1_3_6816.pkg" -target /This is my script I run for upgrades:#!/bin/bashsudo echo $4 > "/Library/Application Support/JAMF/Waiting Room/com.sentinelone.registration-token"sudo sentinelctl upgrade-pkg "/Library/Application Support/JAMF/Waiting Room/Sentinel-Release-23-1-3-6816_macos_v23_1_3_6816.pkg"I have two policies.  One that is Cache.  One that is installed Cached.  That is for both scenarios above.  I am getting nothing but failure.Is that something wrong with the scripts?  I don't have my error messages because I keep flushing them, but the cache one fails but I see where the file fully downloads.  That's all it's supposed to do.  The second script is supposed to install that file.

Hi, We've recently moved from an on-premises server to the cloud.  We are using on-premises Active Directory for LDAP services and were hoping to move To Azure AD at some point.  We brought this up during the migration to the cloud and the JAMF tech who was assisting with the migration said that there was no path to upgrade from where we were with on-premises AD to where we wanted to be with Azure at that time. Since then, I've been looking around the forums trying to get more information.  In the older documentation (up to v10.29), I can see a blurb that says "To ensure your existing LDAP workflows (e.g., scoping or user accounts and groups) continue to work correctly, you will need to migrate your configuration when the migration assistant is available in a future release of Jamf Pro. Adding the Azure AD integration prior to migration may break your environment." This warning doesn't appear in the documentation after v10.30.  We're in the cloud on v

Hi guys,im new to jamf and actually having a problem with a device which i am using for testing.Actually its not able to get this phone into jamf....it worked once (27.11). For documentation purposes i startet the process again. It shows up in Apple Business Manager with the latest timestamp (today 4.12). I switch MDM server to our server but nothing happens in jamf. It still keeps entry in pre-stage from 27.11. Thats probably the reason why the process cannot be completed again. I cannot find any option to delete a single device from pre-stage. The only option i get is to delete our pre-stage profile.Any idea what i can do?Greetings Frank

Computers will not enroll today, when we enter any username and its password (Active Directory) it gets stuck 'retrieving enrollment profile' then returns to the login screen as if the username and password are incorrect, no errors. We verified usernames and passwords (including reseting passwords in Active Directory) and used multiple accounts with the same results. We do not recall any notifications for service interruption or have seen any outage reports as of today 11/29/23.The last time we were successfully able to enroll a laptop was 11/20/23