I can't seem to figure out where the config profile payload for handling these lock screen options are. Also, is there a way to let standard users adjust these without admin credentials?

Hello,We have an in-house app that we want to push out to a specific group of employees. Apparently, that requires their phones to be in developer mode. Has anyone been able to force phones into developer mode via jamf rather than getting our hands on each phone?

This feature is listed as "experimental" in Google Chrome, but for some reason is enabled by default. We've seen this cause a disruption between Zendesk and a third-party integration here, and I saw another user on the Mac Admins Slack say it's causing an issue for Cloudflare Zero Trust in his environment, so I wanted to share the fix in case it's useful for anyone else. I resolved this by deploying a PLIST via configuration profile with the following key/value pair: <key>DefaultThirdPartyStoragePartitioningSetting</key> <integer>2</integer> When you do this, it'll look like nothing changed. The flag is still set to "Default" just as it was before. The difference is that what the default is has changed under the hood. You can verify that your profile deployed successfully by typing chrome://policy in the Chrome search bar. This will show you a list of all of the Chrome policies that you're managing. Make sure you quit Chrome and re-open it bef

What is your favorite way to add a login item to your Mac? I have an app (IP in Menubar) that I'd like to start when our Macs start up. I see there is a configuration profile for login items, but I don't see a way to add a custom application

We're running 11.0.1 on-prem. Since we have a pretty large instance, there are a number of in-flight updates:I did click that yesterday. It timed out. However, if I look at the front-end server that processed the request, it's still running one day later. In the log, I can see that it's still attempting to clean up commands. Is this normal? How long did it take you guys to enable it? And approx how many in-flight updates did you cancel?

Is there a way to send mass action commands in Jamf Pro to reset all settings on iPads while keeping the Wifi Profile? That way I don't have to manually re-enter the Wifi password on hundreds of iPads after wiping them to prepare for new students???

I hope this message reaches someone who has experience with Jamf Pro API and Compliance Editor. I find myself in a bit of a predicament and would sincerely appreciate any assistance or guidance.I'm currently working on uploading guidance from Compliance Editor to Jamf Pro, and I've reached a point where the system is asking for a client ID and secret. Admittedly, I haven't delved into the Jamf API before, and I'm feeling a bit lost.If any seasoned Jamf Pro users have successfully navigated this process, could you please share your insights? I understand the need to create an API role, but the specific steps and considerations are a bit unclear to me. If you've faced similar challenges or have successfully integrated Compliance Editor with Jamf Pro, I'm eager to hear about your journey and any lessons learned.

Hi all, I have seen by chance in our JAMF School instance that people from locations that should not be synced with Apple School Manager (turned off in the settings at JAMF) still show up in "People". How can this be? What am I doing wrong?

is anyone deploying here the the okta Verfiy App in Mac through Jamf to get the Push notification of authorization ?  and i have some queries related to enable touch id and fastpass remotely for okta Verify App in mac

I setup Macs for deployment, all are less than a year old and rerunning macOS 14.x+. Main profiles are pushed out by our main IT dept but the office I work in has its own instance and I need to then set profiles to push out Apps to further setup the default device... like FireFox, Chrome, Adobe Reader DC, Edge, Teams, etc. I attempted to add a package to use (Adobe Reader DC(.pkg)) and I am getting an error that is very general. "Upload failed: undefined" - I have limited access to JAMFPRO so I am not sure if it has to do with that or I am just missing something?

Hi all,When building/enrolling a new Macbook into Jamf, we are getting an error saying "Jamf Connect Login, Expires 27 October 2022".  We used to get these errors when we ran out of licenses.  But we currently have 65 license and only used 59 and this error is now coming up.I'm pretty new to JAMF, so I'm not sure where to look.  All Tokens an Certificates are in date.Can someone please assist me with this issue?  Or where can I raise a call with Jamf?P.S.  We use Single Sign On with AzureAD.  Thanks 

Hello,We are trying to figure out if there is a way to automatically set the "Location" of our iPads in Jamf School. We have a naming standard where the device has the name of the building as a part of the iPad name. Using that we have created some Smart Device Groups to know which iPads need to have the Location updated. However, that requires manual intervention to change the location before we can assign the Owner. So, is there some way to utilize Smart Groups and the device name to automatically assign the device to a Location?Thanks, Tim

HelloAlmost half of the apps won't be installed. Status is Failed and we get an error: "Bag Load Failed, The Internet connection appears to be offline.Error -1009 kCFErrorDomainCFNetwork." Sometimes the error is -1001.The installation process won't be retried automatically and we cannot find a way to retry the installation without checking all iPads one by one.  

Hi Guys,We was using the below to give access date & time for standard user but after macOS ventura upgrade this command is not working /usr/bin/security authorizationdb write system.preferences.datetime allow If anyone having any other script please pass on to me  Thanks !! 

I saw an old post tried to resolve the issue, but unfortunately no solution was provided.My organization is based on Google Workspace, and we have to use Gmail, Google Calendar and Chat for work, so I have to manually set up the app shortcut for each user on dock, which is time-consuming, is there anyway we can deploy the app and then add them to dock like other apps via PPPC or Dock Master?Any suggestion will be appreciated!😊

This is the second time i've had this issue occur where an employee's machine rebooted for updates and failed to come back on. I managed to use the apple configuration app to fix the booting for the mac, but when try to pull up the recovery options or even turn it back on i get MacOs recovery key needed. Im using the key that jamf has in the encryption and its failing to unlock the drive. I've tried using the key for the mac that was used to revive the broken one incase it copied that encryption but no luck either.  Not sure if anyones run into this issue or found a solution, but id really hate to have to wipe and reimage another employees machine as that sets them back a few days.   

I ran into a weird issue with the erase-install.sh script. I got the script to run successfully a few times with other users in my department. On one laptop, I logged in and I got a keychain error. It wouldn't take any of my previous password and I created a new keychain. I launched the script via a Self Service policy and entered my password, and it took my credentials, downloaded the Ventura update and stalled on the Preparing Update screen for a very long time.. I broke out of the GUI for erase-install.sh and noticed in the log that the startosinstall said "startosinstall could not get authorization"  I ran the script again with another local account that has a token and everything worked as it should. Did something happen with my account, did I lose the token after my keychain reset? 

Hi, I am attempting to use the self-service app only for updating apps on iPadOS. However, because the apps we use are configured specifically for the end user we want to prevent them from being able to reinstall the app through self-service.Can reinstall be turned off? I was hoping it's in the app configuration settings but I can't find documentation for that either.

Hello All,Reaching out to the community to see if anyone has resolved the issue on M1 Macs with Snagit 2022 and the Audio component (Boot into recovery to allow system extension).I have a successful package for Snagit 2022 (Application and license file)I am looking for solutions for these problemsPPPC for some of the approvals. I could probably wing this with PPPC and try out a few settings.System Extensions for M1 - right now the user has to boot into recovery, lower the security settings, boot into macOS, accept the System Extension. You can then boot back into macOS recovery and elevate the security settings.  We cannot expect a C Level user to do this (or even any user to do this). What if a firmware password is on the device.Thanks all.

Hi Jamfs,Wondering if anyone else has seen this when opening Outlook on iPadOS. Current version is 16.7.2, running Jamf Pro on Perm. 

1. When a user is part of the admins' group, it will affect all MBs? meaning, an admin user will be able to log in and do anything he likes on all other MBs? 2. Is it possible to limit an admin user even though he is an admin?

Hello all you friendly Jamf admins! I've got a problem that's stumping me and my colleague, hoping somebody here can shed some light.Recently (starting last week), I have begun encountering an issue where running sudo jamf policy produces unexpected results. When run locally, policies will fail. They attempt to run, and produce the following output, using Firefox as an example:Installing Firefox ESR 115.4.0...Installation failed. The installer reported: installer: Package name is Firefoxinstaller: Upgrading at base path /installer: The upgrade failed. (The Installer encountered an error that caused the installation of fail. Contact the software manufacturer for assistance. An unexpected error occurred while moving files to the final destination.)This occurs with both Chrome and Firefox, both of which I recently packaged. This occurs with both Patch Management Policies and regular Policies. I created the packages in Composer from my Applications folder, with 755 root:wheel permissions,

Hi all,Long time lurker first time poster, I'm fairly new here, did my 200 a few months back! We use WhatsApp Desktop App on Mac fairly extensively, I was using Installomator to deploy it but had problems with the Helper Tool pop-up so I switched to deploying it via MAS. Now, WhatsApp released a new version which differs from the old one so I need to remove the old one and replace it with the new without too much fuss. I have both available to install on SS but new wont install over old, it just fails. Is there someway Standard users can remove MAS apps?Is there an way to script it to remove old and install new?Any other solutions?Thanks.

Hello everybody,i'm trying to configure Outlook for Mobile Devices. I used an Extension Attribute "userPrincipalName" to pull UPN from LDAP "Active Directory". Extension works fine in Jamf but when i put it in Outlook-App as:<key>com.microsoft.outlook.EmailProfile.EmailUPN</key><string>$EXTENSIONATTRIBUTE</stringI get everything fine except for username, "@" Symobl in Username, which comes from UPN, is wirtten in Hex codefor example:Username should be: somebody@somedomain.combut i get in Outlook: somebody@somedomain.com (    @ replaced by @    )How to get it without replacing? what i'm doing wrong?  

hey there, I was wondering how can we make our office 365 apps like Word, Excel, Powerpoint etc to be able to switch other Microsoft account? right now in our jamf Mac environment, I don't see the switch account option. Not sure where to look.