Hi, We rolled out SentinelOne a couple of months ago, now we noticed users disabling SentinelOne underLoginItems>Allow in the Background in the system settings.  What is the best way to disable this? 

Hey there I am having the hardest time getting Autopkg set up to help Automate my teams workflow. I thought adding the Autopkgr gui would simplify how I set up and manage Autopkg, but it did not. I followed all default commands and even tried adding our SMB on prem server to Autopkg but Packages and groups are not able to be created and uploaded to my jamf pro. Any help will be greatly appreciated at this time.

Hello all,I have created a configuration profile with the values given below (https://learn.jamf.com/bundle/jamf-connect-documentation-current/page/authchanger.html) but unfortunately nothing happens. But when I distribute the command as policy the login window is reset. Policy Command (does work) :Configuration Profile (does not work) : I would be happy about some feedback 

Hi All!Prior to my current role, Bluetooth restrictions seemed to be all or nothing. Either users were free to connect to various Keyboards, Mice and Headsets or not at all.Now I have a mandate to allow specific, vendor approved Keyboards, Mice and Headsets...but nothing else via Bluetooth.What is your preferred method of managing BlueTooth devices in macOS/Jamf?  BlueTooth must be enabled but not discoverable and auto-pairing/file transfer type functionality needs to be disabled. 3rd Party Product? Config Profile? Script? Some combination of the 3?

Good morning all, We manage about 100 iPads spread out among campuses over a 100-mile distance. To my knowledge, no Teamviewer or equivalent would allow for screen sharing or control remotely from one location. I know that Apple has software that can do it when you call support, but I was curious to know if anyone has a workaround or anything I could have missed. Thank you!

I just upgraded to 10.2.1 and I'm drawing a blank for how I can brand our Self Service. I've sent the technical specifications of the icon and banner size to one of our graphic designers but without some samples of what is out there, we're kinda fumbling. I've had a couple ideas for just boring company logo over a photo of our building. Blah. I've had another idea for a banner image that I can change out with static alerts like holiday hours, company events, special software updates that need users' attention. But I don't know how they would look with the Self Service window at different sizes. Unfortunately JamfPro doesn't give us a sandbox to play around in to preview things. (I'm struggling to get a test server working at the moment) I know that the text overlay is white so our images have to have proper contrast for it to be seen, but I'd like to see some real-world examples. Let us see what you've got! :-)

I am running into an issue with a user that can't allow screen sharing, as I can RDP in due to accessibility's being disabled. I looked to the forms to see if I could find the PPPC for it.I did find something identifier "com.webex.meetingmanager" and anchor apple generic and certificate 1(field.1.2.840.113635.100.6.2.6]/" exists */ andcertificate leafield.1.2.840.113635.100.6.113]/" exists / and certificate leaf{subject.OU] = DE8Y96K9QPHowever after pushing it I came back with this error In the payload (UUID: 09DDCCB5-B571-4155-A60A-2229A4BD14DD), the key 'CodeRequirement' has an invalid value.Anyone able to assist me or point me to where I went wrong?

I have 10 iPads in front of me, all going to the same room at the same site. They are all identical, and in the same smart group receiving the same apps. All but 1 is accepting the push. The "black sheep" if you will, is the only one displaying this error "Sign into iTunes to allow "jamf..com" to manage and install apps. I have wiped the device, unmanaged it, deleted it, and re-enrolled it multiple times but I still get the same error. I have read other "fixes" about the app not having vpp checked but all of the other iPads are working (accepting all the apps) just fine.

Hello,I am finding that some apps are failing to install on iPads and the details listed are "Internal Error." Has anyone else encountered this? When I had apps fail to load in Jamf Pro I would wipe the iPad and re-enroll and they would all load. I was hoping to find a different solution in Jamf School. Thanks

Hello, I am working on a faster deployment for the end user but I am hitting a snag. We are manually creating the user account after the computer is set up. However, the problem is that Jamf is taking the admin Account and using that as the Fields for User and Location. Is there a good way that I can have the newest created account be imported and change these fields? (snapped a pic just to make it more clear).--This method is still in the testing stage so luckily zero headaches yet :D Just some extra info:No user account is created when we enroll the computer (Admin account is Added).I have chopped DEPNotify in Half. This way we can do the 30-40 minute install without the person needing to be here. Once the first half of DEP is installed, we create their account, i.e. appleguy13 and generic pw.Once they're here, we have them update the PW and run DEPNotify part two which grabs their name and computer name etc. However, I'm not getting this info imported in Jamf As alway

so before i delve into jamf and see if I can put some verbose logging on....I just caught a user upgrading to Monterey in place before we had our upgrade polices ready.  i did neglect to put a block on before hand as i have been swamped and forgot 😵 anyway, so i'm just testing a block now to stop any others launching the app if they download it, however it doesn't seem to be respecting it.  i have set it up like previous versions and the .jmf_settings got delivered and the new policy is in place:-    {      "jamfProID" : 30,      "shouldKill" : true,      "whitelistedUsers" : [       ],      "shouldDelete" : true,      "exactMatch" : true,      "message" : "Currently the upgrade to MacOS Mojave is not possible at this time, as it is still being tested against the managed build. Please contact the IT H

We are currently on a campaign to bring more visibility to Self-Service in our environment, since we have a lot of great solutions to common issues. My boss asked if I could get some usage statistics, which is easy for just about everything else in Jamf, but not for Self-Service. Odd, but it is what it is. I am aware there is a feature request open from 2012: https://www.jamf.com/jamf-nation/feature-requests/819/usage-statistic-reporting-for-selfservice. However, I am sure someone, somewhere has hacked a solution, so I am curious. How are you getting Self-Service usage reports to management? Assume that I have unlimited resources to implement your strategies.

I've updated a few test machines to 2.28.1.  Since doing so, I'm getting this error.  We are using a conditional access policy with Intune Integration.   Worked fine before upgrading from 2.26 to 2.28.1.   Any ideas?  If I exclude my userid from the CA policy, it works fine.  My initial thought was to exclude the Jamf Connect app from the policy, but wanted to post this first.  Thanks in advance for any help.   Here is the Entra sign in log.  Here is the policy.  Only require 1 of the 2 checked.  It targets all cloud apps.  Here is my test machine in Entra.      

(seriously amateur scripter) looking to upgrade how we manage device naming.Our naming policy is not complicated, Department-Building-Tag#, and our current script requires us to maintain a separate list of data to populate a dialog box that lets the user select from the available options:set Department to (choose from list {"AAA", "BBB", "CCC", "DDD", etc.But that means anytime there is a change in department structures, we need to update the Jamf>Network>Departments information, as well as the script. I am hoping to use API commands to grab the current list of departments when the Naming Policy is triggered something like:departmentList=$(curl -su username:password\\"https://url/JSSResource/departments" \\-H "accept: xml/text" \\| xmllint -format - \\| awk '/name/ {print}' \\| awk -F '[><]' '{print $3}')This gets me the data in a list, but I can't figure out how to (or if it is possible to) prompt the user to select from a list just by calling the variable:...set Depa

Following a twit by Richard Trouton, I thought it would be good to implement sudo in Touch ID authentication for our developers as one of the benefits to Sonoma, since Sonoma makes the change persistent even when updates are made.If you are interested follow the link to Richard Trouton's Wordpress site (https://derflounder.wordpress.com/2023/10/14/enabling-touch-id-authentication-for-sudo-on-macos-sonoma/)However, upon implementation I needed an EA to check if the authentication had been enabled or not since I implemented two self service policies; one to enable and the other to disable.Since the policies are ongoing, I needed smart computer groups to exclude enabled computers when the policy was enabled and only present the disable policy and vice versa.this is the EA that I used which reports if Touch ID has been enabled or not-------------------#!/bin/bash# Check if the file existsif [ -e /etc/pam.d/sudo_local ]; then# Check if the specific line exists and is uncommentedif grep -qE

How can we disable auto update on Xcode build application from jamf pro

Link:https://swdist.apple.com/content/downloads/09/40/042-74906-A_ZJ5SVXD513/6yfe7yuiin4fwvc9ku04hq2fb7jqxjxv85/Safari17.1VenturaAuto.pkg

Hi everyone,I'm working on setting up an Apple Configurator 2 laptop, from which we can bulk restore and enrol Macs (over DEP). I take it others are already doing this, so I'm wondering if so, which Thunderbolt/USB-C hub have you been using, and what your overall experience with AC2 and Apple Silicon Macs has been? Thanks!

Ever since edge switched to the new 113 updater I have run into a few macs that edge refuses to update.I am already using the plist to update<dict> <key>updatePolicies</key> <dict> <key>global</key> <dict> <key>UpdateDefault</key> <integer>0</integer> </dict> </dict> </dict>And it works fine. The macs that have the issue I noticed the EdgeUpdater folder is locked out and therefore blocking edge itself from updating.Macs that are updating ok,  this folder does not have a permission block.I even manually updated to version 117 and it does not fix the folder permission and edge is still not updating.Not sure if anyone has run into this or if they have a way to fix the folder permissions using Jamf. 

Hi, are there anyway for me to disable all other apps except Google Chrome for macOS Device.By default we have Apple Pages, Numbers, Safari etc. During exam, I only want students to login and only able to use only Google Chrome.Thank you

Consider this: A user has been using their personal iPad at a school and is now given a new, managed, iPad provided by the school. The user would like to use the new iPad as if it was the user's original one.The challenge is: How does the user get the new iPad set up so that it contains everything the personal iPad had, including all apps and their data? Because, when we try, it doesn't work.If the new iPad were not managed, this could be easily performed by Apple's Migration process (hold both near each other, or choose to restore from a backup). However, with this managed iPad, even though it starts the migration (nearby iPads) from the old to the new as usual, the iPad then recognizes that it's managed, downloads the profile and then sets it up as a default device, i.e. hardly anything is taken over from the personal iPad (no iCloud settings, no apps, no restoring of data from the cloud backup or from the other iPad).I am NOT an admin, but rather a friend who's trying to figure out

I have a mac book that freezes as soon as it connects to Wi-Fi. It works fine when connected via Ethernet.I don't see any alarming logs inside of console (however I'm normally a windows admin, so maybe I missed something).If anyone knows about this issue, please give me some tips. I'm only have this issue with one Mac, however I just re imaged the mac.

 Hello all,we had a break-in at one of our schools.Among other things, iPads were stolen. The police is already investigating.A few iPads have network access again and report to the Jamfschool server. The thief has stored his own Apple ID and installed apps. The IP address with which the iPad reports to the Jamfschool servers belongs to a hotspot.Is it possible to get access to the email address of the Apple ID via Jamfschool? Is it possible to access the files on the iPad in order to catch the thief in cooperation with the police?

Hi,The students sees a blue icon at the top of iPad if a teacher use the screen view in classroom-app to watch his screen. Is this possible to get rid of this icon? 

What might be the problem if only Apple apps like garageband and imovie are being sent to devices, but not anything else?They all seem to be throwing errors on the first attempt to install and stopping the whole queue. Then sometimes they will randomly work.