Hello I was wondering if there was any way to disable the automatic run of safe files in safari using a configuration profile/policy, I can't find a setting for it and need to disable it for compliance reasons.

Disclaimer, while I work for Code42 software, these were built for internal use and are not part of the product. Hey, I wanted to share some extension attribute scripts I created for Code42 Incydr (Professional, Enterprise, Horizon, and Gov F2. - or more generically the Code42-AAT.app). A shoutout to @MLBZ521, as I used some logic from their scripts. A bit more specifically. there is logic built into these for local logging if you need that.  I hope others can find these useful.  First is a script to validate that the Configuration Profile that is required to run the app is in place. This is a great pre-deployment check to make sure the application will run properly after install.  #!/bin/bash # set -x ############################################################################################################## # Script Name: incydr_mdm_check.sh # By: Perrin Bishop-Wright / Created: 8/16/2022 # Version: 1.0.1 / Updated: 8/16/2022 / By: PBW

Hello All, One mac user reported that he is not able to sign into Nomad, how can I do the troubleshooting to find the cause?Others users are able to sign into Nomad, so it seems like related to mac device not related to deployment through JAMF. Any idea will be appreciated. Thanks!

Hey everyone, If you're like me you're probably having trouble tracking down how to get Jamf Remote Assist Session logs/details. I did a quick writeup on how to get some of the information when you want to audit the logs. It's a bit clunky but overall much better than nothing.

I want to know how SUPERMAN works and how I will deploy in Jamf.I built a policy and added the SUPERMAN script and added the script parameter in my policy, I executed on mac But I dont know how it works for Apple updates, how it will evaluate the pending updates and install it on end point.Should I create another policy to evaluate the pending Apple updates and deploy on end point? 

I am in early testing of the upgrade path we have been using for the last few years. Make a package with Composer and use that for the install. When I go and make the DMG with the Sonoma install, Composer errors out and cannot make the DMG. Anyone have another way to accomplish this or a different workflow?

Hi,We are experiencing slowness when copying files from a Mac in Ventura or Sonoma to an Azure file share with the smb protocol.We manage to improve performance by modifying the contents of the /etc/nsmb.conf file.Have you encountered this problem and do you have any recommendations to offer us?Thanks

Hi fellow Admins! I placed a feature request for an API function for Jamf Pro. If you like that idea please vote for it. It would help us a lot for monitoring reasons. Thank you in advance and i wish you a pleasant weekend!https://ideas.jamf.com/ideas/JN-I-28017Best regards David

Hi All, We are working on removing Docker desktop from Macs, tried few scripts for uninstalling through Jamf Pro however we are getting an error stating root access is needed. Wanted to check if anybody knows of a way to remove docker through jamf.The script user#!/bin/bash # Uninstall Script if [ "${USER}" != "root" ]; thenecho "$0 must be run as root!"exit 2fi while true; do  read -p "Remove all Docker Machine VMs? (Y/N): " yn  case $yn in    [Yy]* ) docker-machine rm -f $(docker-machine ls -q); break;;    [Nn]* ) break;;    * ) echo "Please answer yes or no."; exit 1;;  esacdone echo "Removing Applications..."rm -rf /Applications/Docker.app echo "Removing docker binaries..."rm -f /usr/local/bin/dockerrm -f /usr/local/bin/docker-machinerm -r /usr/local/bin/docker-machine-driver*rm -f /usr/local/bin/docker-compose echo "Removing boot2docker.iso"rm -rf /usr/local/share/boot2docker echo "Forget packages

Is it possible to use Payload Variables to create local accounts for say the assigned user of a device rather than having a policy for each individual user? For example something like this. 

Hi Folks, I want to unbind my AD Mobile macs. It's mandatory to ensure AD pssword sync with local pwd. I have to use Apple SSO Kerberos Extension for now.1- Can Apple Extension make pwd sync from both sides ?2- If AD pwd is locked or desabled, is this going to lock local mac pwd?3- The user can change local password and do not update the Apple Extension. Is there away to force sync pwd to avoid this case?4- In order to make the extension work, shall user authenticate before unbinding his mac?5- I do not find a guide to make the extension setup in jamf pro, any idea?

The last topic had a solution marked that wasn't a solution - I want to bump this back up to the top.  We are experiencing issues with our network sporadically when moving through APs in our building.  The fix is associated with a the Limit IP Address Tracking feature but I am not sold on that. How do we turn this feature off in mass? Its been said that this feature is only related to Mail and Safari - has anyone else experienced issues outside of those like mine? 

Hi all! Is anyone else experiencing problems with Jamf School and Classroom? Classes and lessons remain empty for teachers and I can't find anything wrong within JSS or Classroom. Jamf has updated the Education profiles, but no luck. Just wondering if anyone else has these issues and maybe a solution or workaround. Thx!

I have been searching for an answer, but coming up empty. Our prestage enrollment creates a local admin account for our tech services department but under Big Sur that account is created with no permissions to access anything on the disk. We can log into the account, and even use it to create other user accounts, but it has no permission to access the desktop, downloads, trash, or even to open Self Service. Is there a change that I may need to make to how prestage enrollment performs under Big Sur that I may have missed? Thanks in advance for pointing me in the right direction. I appreciate your help.

Hi all,I got a question from a customer, that they're trying to delete management on iPads that are in JSS. The problem is that their APNs is expired and the iPads don't have WiFi currently. I think it's possible to get WiFi on the devices, fortunately, but I'm wondering what the best way is to get the management off the devices. Does anyone have experienced this or has any suggestions?Thanks!!

Morning Everyone!we updated a collection of iPads yesterday night. These iPads were running version 15.6.1.  So I sent a remote command from Jamf to update to the latest version.  when I checked this morning none of the iPads have updated and few of them are stuck on apple logo (loop).  These iPads power on and then the apple logo appears as normal and then after few minutes it restarts and this keeps happening over and over again. Any advice/help will be very much appreciated. Thank you    

Hey Jamf Nation, I want to give the app a configuration that our server URL is mapped there. Unfortunately I can't reach my goal with the App Configurator from Jamf. The URL is not provided. Does anyone have a pList/configuration file that includes the server URL? Or does anyone have any idea what I'm doing wrong? Thx :D

hello,We migrated our JSS from an LDAP connection to Azure AD (Cloud Identity Providers).But we are unable to map certain AzureAD attributes such as 'businessPhone' or extensions such as 'extension_3bf6422528194f1aae559105e4bace82_division'.Have you ever had this type of problem?Thanks for your help

Even though MacOS Ventura 13.6.2 was released over 20 days ago, Patch Management in Jamf Pro says that 13.6.1 is the "latest version" of Apple MacOS Ventura. This is a little annoying as we have different Smart Computer Groups and reports that depend on this "latest version" status to notify users (and us) that their OS is missing security updates. As a workaround, we can change the Criteria of the Smart Computer Group and the reports, but this will be annoying to do every time an update is released.I submitted a ticket with Jamf, and they said they are seeing the same thing on their side. Is everyone else seeing this too? Anyone find a fix for this? We have a managed instance of Jamf Pro, so not much we can do on the back-end side of things.Pardon my naivety--this is my first post--if this question isn't useful to the community in any way, please let me know nicely:)

Using Mut to update somethings in our JSS cloud instance, all templates except the user template uploads to MUT, when going to update the user template to MUT it crashes/quits. is the user template corrupted? would a fresh template suffice, any thoughts?

Hi Hive mind,I hope someone out there can help me or confirm next steps on this issue.  We have a fleet of 40 MBAs in our 5th grade.  I updated all of these devices to Sonoma 14.1.1.  Now, the teachers are saying that the computers are freezing. This seems to be a problem with the Sonoma update from what I am finding online.  I did find documentation that I may need to disable the mediaanalysisd.  Before attempting to do this on 40 computers (no, they are not in Connect), is there anything any of you have found that works?  The one thing different about these laptops from any of the Faculty devices is that the teachers use Classroom to over see the students desktops.  Classroom is at 2.7 which seems to be the newest level.I appreciate any insight.

Hi, We have more or less 50s Apple TV 2nd and 3gen deployed in our school used as link to our Interactive White Boards. All the ATVs are configured the same displaying pictures of our school and the name of the display to connec to, all with the App Exhibition.For some very strange reason some of our Apple are working fine but the Inventory Update is not working at all. The management command stays in pending. Anyone got the issue ?  

Hey all. We currently are using Jamf Pro for our school district managing iPad's and Macs. I am finding that even without a restriction to software updates or a deferral. I have tried the beta software update feature with no luck. Currently, Jamf Pro will see the command to OSUpdate Status, hang on it pending for a few, then say it completed. On the iPad however, it does not change and when you check for an update it states it is on the latest software allowed by administrator. Please help! 

Hello Everyone, I am looking for a script out there that i can use in a jamf policy to have a user login and have the computer name auto update in jamf so when the user logs in i can locate the computer in jamf and her name will appear for her computer name 

I'm trying to use the *.jce file I created on my main machine to a test machine so I can run the audit there. I've copied the app, the *.jce file, and the macOS_security-sonoma folder created when I chose my baseline to the same location on my test machine. I've also copied the Jamf Compliance Editor folder from Application Support and even the com.jamf.complience.plist file from ~/Preferences.When I run the audit on my test machine however I don't get a usable result just a result with practically nothing in it and NaN% for the score (which makes sense since there's no number).My custom baseline looks to have been loaded correctly. The modified and disabled rules are all correct. The audit just doesn't work as expected.