Hello All,Reaching out to the community to see if anyone has resolved the issue on M1 Macs with Snagit 2022 and the Audio component (Boot into recovery to allow system extension).I have a successful package for Snagit 2022 (Application and license file)I am looking for solutions for these problemsPPPC for some of the approvals. I could probably wing this with PPPC and try out a few settings.System Extensions for M1 - right now the user has to boot into recovery, lower the security settings, boot into macOS, accept the System Extension. You can then boot back into macOS recovery and elevate the security settings.  We cannot expect a C Level user to do this (or even any user to do this). What if a firmware password is on the device.Thanks all.

Hi Jamfs,Wondering if anyone else has seen this when opening Outlook on iPadOS. Current version is 16.7.2, running Jamf Pro on Perm. 

1. When a user is part of the admins' group, it will affect all MBs? meaning, an admin user will be able to log in and do anything he likes on all other MBs? 2. Is it possible to limit an admin user even though he is an admin?

Hello all you friendly Jamf admins! I've got a problem that's stumping me and my colleague, hoping somebody here can shed some light.Recently (starting last week), I have begun encountering an issue where running sudo jamf policy produces unexpected results. When run locally, policies will fail. They attempt to run, and produce the following output, using Firefox as an example:Installing Firefox ESR 115.4.0...Installation failed. The installer reported: installer: Package name is Firefoxinstaller: Upgrading at base path /installer: The upgrade failed. (The Installer encountered an error that caused the installation of fail. Contact the software manufacturer for assistance. An unexpected error occurred while moving files to the final destination.)This occurs with both Chrome and Firefox, both of which I recently packaged. This occurs with both Patch Management Policies and regular Policies. I created the packages in Composer from my Applications folder, with 755 root:wheel permissions,

Hi all,Long time lurker first time poster, I'm fairly new here, did my 200 a few months back! We use WhatsApp Desktop App on Mac fairly extensively, I was using Installomator to deploy it but had problems with the Helper Tool pop-up so I switched to deploying it via MAS. Now, WhatsApp released a new version which differs from the old one so I need to remove the old one and replace it with the new without too much fuss. I have both available to install on SS but new wont install over old, it just fails. Is there someway Standard users can remove MAS apps?Is there an way to script it to remove old and install new?Any other solutions?Thanks.

Hello everybody,i'm trying to configure Outlook for Mobile Devices. I used an Extension Attribute "userPrincipalName" to pull UPN from LDAP "Active Directory". Extension works fine in Jamf but when i put it in Outlook-App as:<key>com.microsoft.outlook.EmailProfile.EmailUPN</key><string>$EXTENSIONATTRIBUTE</stringI get everything fine except for username, "@" Symobl in Username, which comes from UPN, is wirtten in Hex codefor example:Username should be: somebody@somedomain.combut i get in Outlook: somebody@somedomain.com (    @ replaced by @    )How to get it without replacing? what i'm doing wrong?  

hey there, I was wondering how can we make our office 365 apps like Word, Excel, Powerpoint etc to be able to switch other Microsoft account? right now in our jamf Mac environment, I don't see the switch account option. Not sure where to look. 

Hello, I found some duplication in the inventory which looks like ghost record. It shows up in the list but never opens; and I am not able to delete it in JSS web interface. Is there any easy way to delete computer inventory record via Terminal by ID #? Some command like: sudo jamf delete_computer ID=XXX Or should I deep down to MySQL? Any suggestions are highly appreciated!

Hey everyone, we are using Displaylink in our Jamf environment and set it up via the guide from synpatics. (https://support.displaylink.com/knowledgebase/articles/1965404-how-to-deploy-displaylink-macos-software-with-jamf)Now to the problem: Around 80% of the time when a new mac is setup and runs the displaylink policy, the policy "seems" to fail (the policy log claims it has "failed" and we even get the concurring mail "an error occured while running the policy "Install DisplayLink Manager".") However... DisplayLink Manager is installed successfully every time. The error message is the following: (The installation failed due to an error. Contact the manufacturer of the software. An error occurred while executing the scripts from the "DisplayLink Manager Graphics Connectivity1.9-EXE.pkg" package). Maybe someone heres has had a similar problem and can help :)

Hi all,I want to deploy a Mimecast Outlook Plugin and wanted to get some insights on how we can deploy a .msi file on Jamf to enrolled Macbooks. I don't have much experience with Jamf, and wanted to test out what is the best possible way to do this. Thanks in advance!

In our environment we use user certs for Cisco AnyConnect. I'd like to have a policy that runs on recurring check-in that alerts the user if the cert is about to expire so that they don't lose VPN access. I thought I had this working but I think I'm running into issues accessing the user's keychain. I can understand why that's a touchy thing. However, what's curious is that I can access the user's login keychain when running the script via Self Service or if I run the policy via the command line. However, when the script is triggered via check-in, it seems to have issues accessing the user's keychain. Even doing a simple "security default-keychain" is struggling. Here's some example code: #!/bin/sh # Let's set a log file to write to logFilePath=/tmp/test.log # Get date/time stamp and kick off log file dateTimeStamp=$( date ) printf "!! Script Execution Date/Time Stamp = $dateTimeStamp !! " >> $logFilePath

Hello All, I am looking for a solution to display end user's account after restarting the mac, we have total three local accounts including user's account, I want to make the end user's account at display login screen so when user will restart the mac user will put his password only to login. Others two accounts will be hidden in login screen, any way is there in JAMF? User's account is having 503 UID others two are UID 501 and 502

Hi, I would like to confirm if my settings are correct?I have choose the defer to 90days and I uncheck App Updates and Software updates.My assumption was my devices will still be able to update to 13.6.2 but not Sonoma but it seems most of them detect Sonoma.Am I doing something wrong?

The TItle says almost all of it.Hello people,After I converted the Slack application, which does not offer native PKG format, using composer, I get the following error:installer: The installation failed. (The Installer encountered an error that caused the installation to fail. Contact the software manufacturer for assistance. The package is attempting to install content to the system volume.This Policy works fine on my PC but does not work on colleague's. I will take a look at more details tomorrow from /var/log/install.log, and will post them here. We both use M1 chip, but mine is MacBook Pro, and she has MacBook Air. Not sure if this makes any difference. The latest OS and updates are applied.Anyway, if anyone has any idea in the meanwhile why this does not work, I would appreciate the help, because I have lost 2 days trying to make this work. :)Thanks in advance!  

I'm using Jamf Pro, and from what I've read online, the Jamf Management Account is optional, i.e. we only need it if we want to enable FileVault using policy (we don't). But then again, the documents say that the management account is needed for Macs to considered managed by Jamf Pro. I want to manage Macs via Jamf Pro, but I don't need to enable FileVault using policy (we do it via configuration profiles) - so do I still need to create management accounts, or not? Additionally, some of my managed Macs seem to have the management account password gone out of sync with the Jamf server. Running the Jamf Management Account password rotation policy fails.Does it have any actual impact, if I don't need to use the management account (i.e. enable FileVault via policy), and I can just leave it be?If not, what's the right way to get the management account password in-sync with the Jamf server again?

Hi everyone, I am stuck at this step: https://www.youtube.com/watch?v=4vCzG_Zdelkuntill 04:19 everything is allright. (Server token is uploaded and in: (Settings/global) Automated device enrollment I see the MDM server and also 2 computers assigned.But when I go to: Devices -> PreStage Enrollments (See 06.48 of the video) I dont see the same. I see: I am new to JAMF Pro and am stuck at this point.I hope someone can explain why I am unable to do the steps shown in the video.kind regards

I need to run an activation script as administrator after my pkg installs. I've successfully created the install pkg, in the self service center, it runs, executes, then fails. I've been able to run the pkg and the script manually on the mac, it prompts for the su administrator pwd. Not sure how to script the pwd prompt. Any help would be greatly appreciated. script:su administrator sudo bash -c " if [[ -f /usr/local/qualys/cloud-agent/bin/qualys-cloud-agent.sh ]]; then /usr/local/qualys/cloud-agent/bin/qualys-cloud-agent.sh ActivationId=##### CustomerId=########; else /Applications/QualysCloudAgent.app/Contents/MacOS/qualys-cloud-agent.sh ActivationId=##### CustomerId=#####; fi"

Hi All,I am just thinking if there is a way to manage macOS Virtual Machines hosted on AWS by Jamf Pro?Also, what all the possible way to have macOS VMs and its management by Jamf pro?Thanks,Piyush Verma

Good Morning jamf Nation, We are rolling out SentinelOne agent to Macs. I have the policy set, but I need some assistance with "pre-approving" the SentinelOne Agent kernel extension. The S1 setup guide gives a parameter to enter in the policy: Kext Bundle ID: com.sentinelone.sentinel-kext Developer ID: 4AYE5J54KN I just don't know where to put the parameter. I tried copying and pasting it into Execute Command under Files and Processes, but that change doesn't 'approve' the agent. Based on the log file, it looks like it's trying to run the parameter, but then fails? Any ideas?

I've been tasked with setting up AD Certificates for Macs and after working a bit on it I now have it working where the computer gets a config profile installed that then requests from AD a certificate. Everything is working fine, but now I am at the point where I am not sure what needs to be done when the certificate expires 1-year from now. I need some type of workflow for renewing these as it will be impossible to keep track of all the expiration dates. After doing some searching on JN, there are some posts a few years old where users recommend scripting this, but there was no one that could get it working. There is also a feature request to have the JSS auto renew, but that is from 2013 and I don't think that will happen. If anyone is out there who has put together a workflow for getting this to work I would love to hear about it.

I find the progress... circle(?) doesn't give users much feedback as to where a self service policy is at in terms of completion, other than just waiting for it to stop and a quick done over the button. It would be great if the policies could have an actual progress bar, even if it's not super precise. Would anyone else find this useful?

We've been noticing a good amount of students downloading and launching .app files from their Desktop and Downloads folders. Is there a good way to prevent .app files from launching from these folders? I have been using Restricted Software, but it is a large amount of work to up keep. I am now messing with Configuration Profiles with Application Restrictions, but it doesn't seem to be working as I hoped. Right now I have ~/Users/Desktop and ~/Users/Downloads in the Disallow Folder. Nothing is currently set in Allow Apps or Allowed Folder. With these settings it seems as if every app no matter the location is being blocked. Are the Allow Apps or Allowed Folder options required when messing with these settings? My main goal is to prevent applications from running in a users Desktop or Downloads folder. This seems to be the typical location that students have been saving/running from. We are running 9.6.1 of the JSS. Thank you in advance!

Hi Everyone, I'm reaching out in the need of assistance. I'm currently working on the migration of 300 AD bound macs. The scenario is the following: -All 300 Macs are joined to old domain with network accounts and need to be migrated to the new domain without deleting their user data and making sure it has the correct permissions. -Currently their is no FileVault enabled. -I've been looking into scripts or some sort of automation that could help me un-join from the old domain, re-join to the new domain and move the user's profile with the same naming convention over to the new domain. Any help on this would be greatly appreciate it, as I would like to publish this script on self service to do this on all the Macs that need to be migrated. I'm no expert in JAMF, but I understand the concepts and have been using it for a while now. So detailed explanation would be greatly appreciate it. Thanks for everyone's time on this threat, thanks in advanced. Please feel free to have any

Hi,Is there a way to make OSX auto-trust Microsoft Remote Desktop Connection (to specific addresses) regardless of certificate in JAMF? I know the client can hit view certificate and click always trust but is there a way to automate this or have a policy that always allows this?Thanks

Hi Everyone,I want to be able to block USB Storage devices via JAMF does anyone know if this is possible with JAMF?I can see there's a restriction setting when creating a config profile but this is now depreciated... Thanks in advance for any advice!