I'm trying to run a VERY simple script that mounts a folder based on user login - open "smb://server/staffhome$/$(whoami)"This works perfectly in terminal but when putting it as a process to execute on login it keeps on being unable to find the location?

Im getting ready to go-live with FV2 and PRKs this fall. Doing final testing and documentation now.I had a FV2 Mac ‘on-ice’ for a few weeks for testing. It was shut down and left alone on purpose to test a few things. When I booted it up, I noticed the PRK escrowed in Jamf did NOT match the PRK on the laptop (I am testing a Smart Group to report this, which was accurate). Questions about this observation:-Did the act of leaving the Mac dormant for a long time cause the PRKS to get out-of-sync?-Do escrowed PRKs automatically rotate over time?-Does the act of viewing the PRK in Jamf Pro cause the PRK to rotate?-If I would have let the Mac sit a while to run a recon, check for policies etc, would the escrowed PRK get set on the Mac eventually?

Heya folks. I had a previous post about Adobe CC with a lot of helpful feedback. I've gotten to a point where I was able to succesfully deploy and download applications via Mac Apps (Hooray!) but for individual Adobe products such as Photoshop and Illustrator, this was not working in that once installed the credentials I used to sign in was not recognized as being an Education account and I was granted only a trial.Whereas when I create a package via Adobe CC Admin portal, pick my apps and install, when I log into after an install this way, Adobe recognizes my credential. So, after setting up my distribution point with Jamf Cloud and creating a package with the .pkg from the latest package build in Adobe Admin, I pushed it down to Self-Service with a policy.I see Adobe CC in self-service and i go to install it and it takes about 8 to 10 minutes before it ultimately fails. When I go to the details in Jamf, all I get is...Installation failed. The instal

Does anybody have a script that can be run on a network account, to automatically add it to the sudoers file? We have several developers that will need to work with some code and use some sudo commands, that we do not want to have Admin access I'm aware this is splitting hairs somewhat

How to enable App Store app installation for users using managed Apple IDs via ABM? I have federation set up with Azure AD in ABM

Any way to disable or block all notifications from safari and only allow notifications for certain sites? Thank you!

Jump-start your users’ on-boarding experience with SYM-Helper, a stand-alone macOS app to help MacAdmins more easily deploy Setup Your MacContinue reading …

Hello,I would like to know how to unenroll broken mobile devices in a clean way?I have no way to turn the devices on, or others have broken screens.I'd like to reset them and unenroll them to give them to the scrapyard.Do you have a procedure for this?Thanks in advance for any answers!

Hi - Simple question here, I'm just wondering if I can enable the self-service desktop app for just a subset of our users. We just recently deployed JAMF and I didn't have this turned on at the time. I'd like to flip it on now, but I'd like to do some testing and get things in there, and communicate what the new icon is before it shows up on everyones computer. Can I deploy it via policy or profile? Because it looks like a global setting.. Thanks!

How do you all keep an inventory on your devices? What do you use as an asset tag in Jamf? I am looking for a better way to track our devices.

Is there a way to create an extension attribute in JAMF under the 'Users' section that can also be displayed in the 'Computer' section? Currently, if I create an extension attribute in the 'Computers' section to mark a machine as 'Remote,' it applies only to that specific Mac and not to the user. Is it possible to make this user-specific information visible in the 'Computer' section as well?

Hey, I have one Mac's Recovery is locked with a very long password. I never configured this thing and I'm not sure how it happened. How can I fix it?

I successfully created and tested the autofill for office logins located here. However, Teams does not seem to play by the same rules. Has anyone had any luck uploading a plist for teams to autofill the user email?

Anyone else noticing strange formatting in Jamf email alerts? Seems they redesigned them during the update this past Friday.Getting strange characters and really poor formatting. Hard to read.

Hey,I would like to use Jamf to deploy security & privacy settings for the org.For example:turn the Camera on for Google Chrome & Zoomor turn screen recording on for Google Chrome & Zoomhow can I configure it? thanks!

Hi All,I have created a new enrolment process using Jamf Connect and SYM.This is now via a VM so I need a solution to capture the enrolment process for documentation and training purposes.What is the best creative method to accomplish this. This is a physical machine which I am working on. ThanksSimon

I recently received an alert that I had reached the "Valued Contributor II" rank in Jamf Nation. That's nice, but what are all of the ranks and how does one reach them? I don't think I've ever seen anything introducing us to these ranks. I'm always happy to contribute to the discussion and help others as much as I can.

We just had a round of passwords expire and now some of our users use their old AD password to get past the FV2 login screen, then use their newly reset AD password to get into the OS. How do we get the passwords to sync back up? I saw the apple solution to use a sudo touch command to delete the cache and let it rebuild, but that has not worked for us yet. Any other tips or trick on getting them back in sync?

We have several macbooks (Monterey and Ventura) that cannot boot anymore and are asking for a recovery key. After filling in the key an reinstallation doesn't work (error), only a complete format and reinstall solves the issue. Some users are able to get to the login screen after entering the recovery key at boot but then the macbook reboots back into the recovery mode. We tried safemode, logging mode etc. All the options that we could find couldn't prevent a complete wipe of the disk and reinstallation. We suspect this has something to do with a patch policy with an Safari 17 update but we are not sure. 

Hello Everyone, I like to ask if anyone uses the USB hub to restore multiple Apple Silicon Macs (like 5-7) using AC2. If you do which brand hub and specific cable? We already using Cambro Nix Thunder Sync 16 for iPad.Also, I can use the DFU blaster to put the Apple silicon Mac in DFU mode instantly one by one. just wondering if there is a faster way to do this. Thank you in advance for all the responses

Hi, We rolled out SentinelOne a couple of months ago, now we noticed users disabling SentinelOne underLoginItems>Allow in the Background in the system settings.  What is the best way to disable this? 

Hey there I am having the hardest time getting Autopkg set up to help Automate my teams workflow. I thought adding the Autopkgr gui would simplify how I set up and manage Autopkg, but it did not. I followed all default commands and even tried adding our SMB on prem server to Autopkg but Packages and groups are not able to be created and uploaded to my jamf pro. Any help will be greatly appreciated at this time.

Hello all,I have created a configuration profile with the values given below (https://learn.jamf.com/bundle/jamf-connect-documentation-current/page/authchanger.html) but unfortunately nothing happens. But when I distribute the command as policy the login window is reset. Policy Command (does work) :Configuration Profile (does not work) : I would be happy about some feedback 

Hi All!Prior to my current role, Bluetooth restrictions seemed to be all or nothing. Either users were free to connect to various Keyboards, Mice and Headsets or not at all.Now I have a mandate to allow specific, vendor approved Keyboards, Mice and Headsets...but nothing else via Bluetooth.What is your preferred method of managing BlueTooth devices in macOS/Jamf?  BlueTooth must be enabled but not discoverable and auto-pairing/file transfer type functionality needs to be disabled. 3rd Party Product? Config Profile? Script? Some combination of the 3?

Good morning all, We manage about 100 iPads spread out among campuses over a 100-mile distance. To my knowledge, no Teamviewer or equivalent would allow for screen sharing or control remotely from one location. I know that Apple has software that can do it when you call support, but I was curious to know if anyone has a workaround or anything I could have missed. Thank you!