Hey folks...  Does anyone have an EA that can pull Azure group membership?I have on in our JamfPro server from the previous admin, but it's not returning any results.  Does someone have a new one or know what might be wrong with this? #!/bin/zsh #API Username and Password username="xxxxxx" password="Scheisseb@lls1" url="https://xxx.jamfcloud.com" loggedInUser=$( scutil <<< "show State:/Users/ConsoleUser" | awk '/Name :/ && ! /loginwindow/ { print $3 }' ) echo $loggedInUser #Variable declarations bearerToken="" tokenExpirationEpoch="0" aduser="$loggedInUser@xxx.com" #AD group you are checking membership against adgroup="Grp_Engineering_ALL" getBearerToken() { response=$(curl -s -u "$username":"$password" "$url"/api/v1/auth/token -X POST) #checks if OS is below 12 if [[ $(/usr/bin/sw_vers -productVersion | awk -F . '{print $1}') -lt 12 ]]; then bearerToken=$(echo "$response" | /usr/bin/awk -F \\" 'NR==2{print $4}' <<< "$bearerToken" | /us

I've been using the require credentials during prestage enrollment to capture which users are assigned to my ipads but i need to disable this feature. I still would like the users assigned to the device but I need it done after the device is put back into jamf. One of the reasons I'm turning off requiring credentials is because if a device is lost or stolen it never goes back into the jss without valid credentials. I'm hoping to eliminate this problem by disabling this feature, but what is the best way to still get the user credentials added to the device? Has anyone locked their device to a single app mode app that required credentials to exit and then used smart device groups to move them out of single app mode?

Hello,I'm trying to install a few Apple apps (iWork suite) from the App Store via Self Service.However, on some devices it takes ages, but it will install at some pointon some devices, it will install even though self service is saying "element failed"and some devices it fails more or less immediately after pressing install.Any ideas?

I know there's a way to report on computer usage within JAMF Pro. I'm wondering if the same can be done for iOS devices?

I'm a little confused that on my actual machine, it says that macOS Sonoma is version 14.0 yet in Patch Management it's looking for version 19.0.2.What is the difference? We have had other machines on the network update and they not showing under Patch Management either.

We're using App Installers to install Google Drive. When it is installed, it also puts Google Sheet, Doc and Slides in Applications. Does anyone know how to prevent these from showing up? In Windows, we have a initial_preferences or master_preferences file that we could edit.

hi guysI hope someone can help. I am planning to push an SSL certificate to all of our iPad devices as part of safeguarding rules. We need to generate a report on this, but I am struggling to find a way to push our SSL certificate to iPads using Jamf School, which does not seem to have an option to install a certificate.thank you in advance

I need to install Jamf Protect on some Macs owned by staff and not on our MDM. When we evaluated Jamf Protect I had instructions for installing Jamf Protect without a MDM but I do not see them any more. Does anyone have a link to the instructions?

I need help looking for a way to limit Jamf users' access to information under the Inventory tab when viewing a device. Specifically is there a way to hide things like hardware and purchasing? I have extension attributes set up as pop-ups and I want to limit certain groups' access to specific ones in my organization.

We deployed a Configuration Profile with a VPN payload ever since we started using Jamf Pro to M1 Macbook Airs running MacOS 12.5 at the time the CP was deployed.  Everything worked fine. Recently, we needed to add a new M2 Macbook Pro running MacOS 13.6 and suddenly the VPN profile would not work and only display "An unexpected error occurred". What's weird is that if we create a new Configuration Profile with the EXACT same payload settings and deploy it AFTER the entire provisioning process is complete, then that new Configuration Profile allows the user to connect to the VPN. Thinking it may just be a fluke, we re-provisioned the Macbook and assigned the new CP to it and it still breaks with the same error message. And once again, if I create either a new CP in Jamf Pro or manually create the VPN under Settings, it works just fine. I've been trying to locate the log file for the VPN but there is no /var/log/ppp and I've also tried to use Console to look at logs but can't

Yesterday a CVE was released indicating a high-risk vulnerability within most browsers - CVE-2023-4863. During my creating a report to check to make sure my Edge versions were getting patched (needed to filter out active workstations which Patch Management can't do) I discovered that Jamf inventory reporting is reporting the wrong version string.  In tracking the Microsoft Edge version, Jamf inventory is pulling the edge version from CFBundleVersion while Patch Management and the app itself displays from CFBundleShortVersionString, affecting the ability to make effective smart groups to track patching. I've submitted a ticket to Jamf and it's been sent as a FR or a PI, but if you needed to follow along on your own compliance, be aware that your smart group won't ever populate correctly until it's corrected.  Also here's a quick EA to create correct smart groups if you needed it.#!/bin/sh # Edge version - CFBundleShortVersionString.sh # # Created by Ed C on 9/28/2

I am new to Jamf and enrolling iPads for all of our students. Right now I am going in and entering the wifi password on each iPad to get it connected to Jamf. Is there a better way to do this? Can I somehow push the wifi password to the iPads in automated device enrollment? Any tips on best practices for device roll out would be greatly apprectiated!

I have installed rapid7 using jamf cloud. But the application is not showing up under each user's app installed. I know on windows, you can see it from intune and also you can see the app in control panel of any windows machine.On macs, you have to look at a specific directory to see if the agent is installed. Do you guys have any idea why that is happening?

Anyone have experience using the Web Content Filter in JAMF School to block URLs? We have some websites they want blocked while Mac's are outside our network and the profile is very different from the iOS one. 

My users are having an issue where when they attempt to install an app through the self-service portal, they get an error stating that the associated apple ID is not allowed to make purchases.It also states in the logs that No license was found for app which is false as there is more than enough licenses available. I'm new to this so I'm not 100% sure if I'm missing something here.

Hi everyone, we are currently working on enabling a Safari extension. However, we've encountered issues creating the Plist. Do you have any suggestions on enabling extensions for Safari? Are there any recommended Config Profiles? 

As described in the subject.I'm looking at forcing installation of certain apps for certain Smart Mobile Device/Network Segments/.... groups whilst making them available for other groups in the Self Service Store. Do I best work with each network segment and assign apps through that or do it otherwise?The setup I have is currently used for 2 schools (segments) and others get added afterwards. Also how do I use 1 VPP account for multiple segments? Kind regards.

Hi, I've had one user machine and one test machine failing to reinstall after an erase and reinstall in Sonoma 14.0 and I fully expected coming in here and realizing everyone was having it, but apparently not. We're on Jamf Pro, using Jamf Connect to create user accounts and twice now, erased and reinstalled computers have become stuck on a black screen during first time setup. It may be relevant that I had only pushed Jamf Connect 2.20 and only now updated to 2.27. Has anyone else had this? 

I am wanting to Configure Office 365 Outlook, PowerPoint, OneDrive, SharePoint etc. All to auto login to the Assigned Devices User Email. From O365 Instance. Can Someone help me please? The App Configurations I am finding are not doing anything.  

Hi We have upgraded our on prem Jamf from 10.42.1 to 10.47.0 On testing policies all download as they should to devices but when using self service suddenly the machines cannot mount the smb distribution point.  We have also enabled HSTS as per the upgrade docs and incrementally upgraded to 10.46.1 first before 10.46.0This was all working fine in 10.42.1 and now not working on 10.47.0Has anyone else had this issue?Nik

hello is there a script out there already or how can i create a script that can  determine the Slack app architecture whether the user is using a  - (intel, silicon, universal)? version of slack

Hi all,We've recently upgraded our test JAMF on-premises instance from 10.48 to 10.50 - which means management account password became randomised (it wasn't before).Previously, we were using same account as management one with the same password in PreStage enrolment settings (where it's created before Setup Assistant), then we were logging in with that account first to grant volume ownership and bootstrap token privileges, and all MDM commands for software updates worked perfectly (almost).Now, however, we had to switch to another account with another password for all pre-stages, as we obviously cannot keep same name as management one. We've also logged in with that account first to grant all privileges, checked bootstrap token successfully escrowed and tried mass action software update to find nothing is happening.Is it expected behaviour or are we missing something? Thanks!

Unfortunately, the user setting mentioned above does not work. This user's devices are placed in audit mode when restrictions are placed (e.g. Single-App-Mode).  

Are there any gotchas to look out for when switching an app (e.g. Chrome or Office365) from a package install via Policies to using App Installers? We're thinking of doing it so that we can enjoy the ease of updating that App Installers provide.

Hello Everyone,I am looking for a product that controls external storage devices when plugged into a Mac. For example, when a user plugs in a flash drive, if the flash drive is encrypted, then allow read-write permissions, if it is unencrypted allow read-only. This product also needs to be hosted on-premises. Any recommendations are appreciated, thank you.