We are using dockutil to reset the dock. But it stop working on Sonoma 14.1 Is anyone else facing the issue ?Sharing the script we use   #!/bin/zshwhile ! pgrep -x Dock; dosleep 1done## currentUser=$(/bin/ls -l /dev/console | /usr/bin/awk '{print $3}')currentUserID=$(/usr/bin/id -u ${currentUser})currentUserPath="$(dscl . -read /Users/${currentUser} NFSHomeDirectory | awk -F ': ' '{print $2}')"currentUserDockPath="${currentUserPath}/Library/Preferences/com.apple.dock.plist" until [[ -e "${currentUserPath}/Library/Preferences/com.apple.dock.plist" ]]; do    echo "waiting for default dock.plist before making customizations"    sleep 1done /usr/local/bin/dockutil --remove all --restart "${currentUserDockPath}"/usr/local/bin/dockutil --add "/System/Applications/Launchpad.app" --position beginning --no-restart "${currentUserDockPath}"/usr/local/bin/dockutil --add "/System/Applications/App Store.app" --after "/System/Applicati

Hello, I set up the following four webhooks for testing within my JAMF server (Global Management -> Webhooks), they are as follows: Notify on MobileDeviceEnrolled (JSON)Notify on MobileDeviceUnEnrolled (JSON)Notify on JSSShutdown (JSON)Notify on JSSTartup (JSON)REQUEST.BIN TEST (JSON) These tie into our Microsoft Teams chat client, specifically using the 'Incoming Webhook' connector. The URLs provided are accurate and triple checked. Any of these events that occur generate a webhook, which was verified with REQUEST.BIN, however, I am not notified in Microsoft Teams. JAMF Support initially had me change the Webhook from XML to JSON, but there was no success. Any suggestions?

Does anyone have an idea of how to get FF to load policy logs correctly? If i load firefox on any computer I can view every category under history, but policy just shows a blank pane. This issue has persisted for months so I keep going back to Chrome/Safari, but I thought I'd here to see if there is a work around or if there's something I'm doing wrong. Issue persists w/: no plugins enabled (i.e. ad blocker)in private browsingfresh installwindows and macon several different networks (home, work, hotspot, vpn)

We have recently started getting M2 Macbooks into our company.I have smart group which should pick them up based on it been a laptop.the Machine in question is Macbook Pro 16-inch 2023 It doesn't seem to be, surely Macbook should cover all Macbooks right?I'm I missing something.

Hello, I need to set a Test server for Jamf Pro. We are using JamfPro as on-prem. Can i use my licence key for test server? How can you do this?

After the update was run on our cloud I can no longer view groups for computers or devices when logged in on an iPad.  The icons in the bottom left are not visible so there is nowhere to click to view the group members.  The groups are visible when viewing on a computer.

I have an open case with Jamf on this, but I wanted to see if anyone else has seen this issue. Over the past two weeks, we are seeing a huge increase in users receiving Jamf Connect notification that their Okta password is different from the password saved in Jamf Connect and that they need to sign-in to Jamf Connect again. Normally, this only happens if the user's password gets changed remotely. However, in all cases, the user's password has NOT changed. The bigger issue is that this will continue every time JC checks the password again. Sometimes is happens just a few times and go away, other times it will go on all day. Needless to say, my users are getting frustrated. Anyone seen this issue?

This is an odd one but I figured I'd share the fruits of my labors.  I was faced with a testing situation where I needed to fill up hard drives to reduce the amount of free space. I had to test pre-install conditions where there might not be enough free space on a hard drive - I can't test that unless a drive is almost full. I couldn't figure out how to quickly fill up a drive so I wrote a script to do it.  As written it can create files of 1GB, 5GB, 10GB, 50GB, and 100GB, but you can modify this to meet your specific needs. In the AppleScript selector window, I have added the approximate time it takes to create each size (CodeRunner is great for this). Obviously that will depend on the hardware it's run on. The script will create files on the desktop of the currently logged in user with the size in the filename and append a number to the end if there are duplicates. These generated files could also be used for the purpose of testing upload/download times to and from servers.

Hi all, I have several users how are getting a pop up wanting them to register with jamf aad. It gives a pop wanting them to sign in and then grant key chain access, but the users have done this at first log in, and I have managed it clear cache's etc to get the mac back to to this fresh state and sign back into the SSO and register it in keychain. Nothing works and the pop up's still happen. User's can force quit the pop up, but it will re-appear within an hour. I have added their machines to the exception list of the policy to notify them to register, but this didn't stop it, and they are showing as configured in the intune portal and compliant, so I cannot find any reason for this pop up to keep appearing. It's not stopping the users doing their jobs, but it is very annoying. Double so for me as it's not even happening to everyone! Has anyone seen this issue and if so do you have a fix? users are running latest ventura, but we aren't using the most up to date jamf pro

I've recently got Jamf Connect up and running in our educational institution's lab machines, and while it's working smoothly logging in with Google IDP for the most part I've had a few encounters now with a mysterious error when students are logging into machines they already have a pre-existing local account on.The users' network password authenticates fine, but then instead of logging in it puts up a password box which just says "Verify", and while I'm aware that this is meant to be because the users' network and local accounts are out of sync and it needs the old local account password to verify the users' identity, the verify password box rejects everything ... old passwords and new. It leaves the user completely unable to login to the device.I've experienced this today with a student who logged into that device completely fine on Friday, and has come back on Monday morning to find this happening on the device. Neither the network or local password have changed over the weekend, so

An under-the-hood look at Setup Your Mac for Jamf Pro Admins prior to production implementationIntroductionApple’s Automated Device Enrollment helps streamline Mobile Device Management (MDM) enrollment and device Supervision during activation, enabling IT to manage enterprise devices with “zero touch.”Setup Your Mac aims to simplify initial device configuration by leveraging swiftDialog and Jamf Pro Policy Custom Events to allow end-users to self-complete Mac setup post-enrollment.Continue reading …

Hi there,we are experiencing more and more problems with our students changing settings on our iPads in order to mess them up for the following classes.Examples of this include:- changing operating language and keyboard settings (e.g. into Mandarin or Russian, so that the students may not even find the way back to dissolving the language settings)- activating guided access so that the iPad is basically in lockdown for future classmates- changing background graphics or sound settings- ... I have tried to restrict as many options in the payload settings in the respective profiles, but I cannot seem to restrict more of the access to the settings portion.Is there any workaround here?Thanks already in advance for any helpful tips!Max PS: ideally, the students could still be able to access the Wi-Fi networks to switch between two different Wi-Fis that we have installed.

Awhile ago I created a local JSS user that was solely for the purpose of using its credentials in scripts to perform actions via the API, namely updating the value for specific extension attributes within a computer record. I want this user to be as limited as possible since its credentials may be exposed in clear text in scripts. In 9.62 this was working fine with the user only having create, read, and update privileges for computer objects. This broke when updating to 9.81. Is anyone doing something similar and can verify what privileges are needed? I tried adding delete for computer objects, as well as CRUD for computer extension attributes, but still no luck. Here is the command I'm running and the associated output, which you can see states "Not authorized for a user PUT": curl -k -v -u username:password https://jss.url:8443/JSSResource/computers/name/TaggartJ-M0L5A /subset/extensionattributes -T /tmp/ea.xml -X PUT * Hostname was NOT found in DNS cache % Total % Rece

I'd love to be able to have a script to update the password for our local admin account on all devices. I know some people here were able to get this working, but that thread is a few OSes old and I assume based on the age that it's no longer applicable.

One picture says it all: 

Today Slack released version 4.0 (https://slack.com/release-notes/mac]) that finally allows Mac admins to easily control the auto-update functionality via plist and Configuration Profile in Jamf. (Woo!) After chatting with support briefly you can disable auto-updates by running: defaults write com.tinyspeck.slackmacgap SlackNoAutoUpdates -bool YES

Is the Jamf Protect Dashboard inaccessible for anyone else right now? I cannot login, getting unexpected error. When logged in, getting slow loading times & "unexpected error" pop-up at the bottom of the window.This is occurring across 3 separate environments for me, Jamf support has claimed nothing but I'm interested if anyone else has experienced this today.

Hello all, My boss wants me to setup device auto enrollment in JAMF and i have never done anything like this before if anyone can please guide me that would be amazing, he told me that we will need to upload jamf connect as a pkg file but when i tried doing that it says "upload failed, package undefined" 

Hello there,I would like to recover locally if a Mac has or hasn't escrowed its FV key through an extension Attribute to build a counter Security checks for further actions. Is there any file status that I could specifically target or any script out there that would allow to do this please ?Thanks all!   

Hi All,Anyone who got a solution for this problem? We have units who do not check in anymore and we get an error "Device Signature Failed" when we run commands like sudo jamf policy.Devices were bought from Apple and we have Apple Business Manager set up so that all the new equipment are already onboarded to JAMF.Profile removal is disabled so that users cannot remove the MDM profile, but this backfired on a troubleshooting perspective since we can't remove the faulty profile and re-enroll the device. Re-enrolling via self enrollment (email with a link) fails as wellCommand sudo profiles renew -type enrollment does nothing is reformat and re-enrollment the only route now?

Hi there,Last year we introduced Google Workspace Federated Managed Apple IDs into our environment to negate the use of personal Apple IDs. Dealing with activation locks were particularly tedious on those personal Apple ID linked devices so we opted for making use of Managed Apple IDs since they do not have Find My functionality associated with them. Logically this should resolve the activation lock issue and also allow users to make use of some iCloud related functions.The behaviour we saw as a result was a 70% uptick of devices triggering activation lock that when formatted both through Jamf Pro or directly in-OS using the erase or format functions. The difference with these activation locks is that they ask for the last iCloud signin used but do not have the hint i.e "s*****z@icloud.com" and since Managed Apple IDs don't support Find My the devices cannot be unlocked even if we use the Managed Apple ID credentials.Most logical response then would be to use the activation lock bypass

Hi Team, I am trying to get the JAMF Connect information through Google App Script there is an issue is there to get the information into the Google Sheet.I want the same into the Power Automate to get only the JAMF connect -Display Name. Appscript for your reference function fetchJamfComputersData() { var sheetName = "JamfComputers"; var sheet = getOrCreateSheet(sheetName); if (!sheet) { Logger.log("Failed to access or create the sheet."); return; } var jamfProUrl = "https://URL/JSSResource/computers/subset/basic"; var jamfConnectUrl = "https://URL/JSSResource/jamfConnectDirectoryBindings"; var headers = { "Authorization": "Bearer Token_Information", "Accept": "application/json" }; try { var jamfProData = fetchData(jamfProUrl, headers); var jamfConnectData = fetchData(jamfConnectUrl, headers); var computers = jamfProData.computers; if (computers && computers.length > 0) { var output = [];

Hi All,I have noticed a strange issue after upgrading to 12.4. Post upgrade, automatically the device's registration status has been changed to "Unregistered". I tried registering the device from self-service portal and it got registered. However, compliance information is not getting updated in AAD and due to that unable to access office resources. I did force update of sending Intune integration logs from Jamf Pro --> Device's history --> "macOS Intune Integration Logs" and it's sending the update to Intune. Somehow the compliance is not getting changed.As part of troubleshooting deleted both the entries from AAD and re-registered the device but still the compliance is not getting updated. Any help is much appreciated.

Hello. Our Sonoma testing has been good, for the most part, but I was curious if there's a Jamf config profile that can help resolve this Print Center pop-up. It occurs every single time I try to print.

I thought I had the password syncing working in Jamf Connect with Google but it seems I don't.When I log in to the Mac via Jamf Connect Google I click the Connect button on Jamf Connect Menubar and I get this error.Yes, the cert deployed via Jamf Pro is set to Allow all app access. I have also tested running this command in terminal via @rabbitt LDAPTLS_IDENTITY="LDAP Client" ldapsearch -uLLL -w USERPASSWORDGOESHERE -D 'USERNAME@GOOGLEDOMAIN.EXT' -H ldaps://ldap.google.com -b 'dc=USERNAME@GOOGLEDOMAIN.EXT'I get this error when running this with my username and password replaced above.I have re-created the LDAP cert in Google over 4 times and Yes it's turned on. Is there anything else I'm missing to make this work?