For reasons too long to mention here, I need to acquire the MAC address from a large quantity of new iPads to allow them on a very specific network.Apple School Manager only shows serial, not a MAC.The box/labpack only shows a serial, not a MAC.The “i” information button in the lower right corner of an out of the box iPad now only shows the serial (I believe older models used to show serial, MAC, and some other bit of identification).Reseller/Apple can only provide a list of serial numbers for all items with no corresponding MACs.So far the most simple way I have found is to either:-- Unbox iPad, connect to a temporary wifi network to achieve activation, jump through setup, then pull up MAC in settings.or-- Unbox iPad, connect to a Mac using Apple Configurator, copy and paste MAC.Simple does not always equal efficient and that is very true here!Does anyone have other suggestions for acquiring MAC addresses from a quantity of iPads? 

Hello, I have some automated folder action workflows that I want push out to our lab environment. Problem is we have AD based user accounts and the work flow file only ties to individual accounts. Is there anyway for this to apply to anyone who logs in with their own account?

I'm new to Jamf.  We have 1 computer that went through the prestage enrollement.  I can see the MDM profiles on the device and it states that this mac is supervised and managed but in Jamf it shows as unmanaged, enrolled via automated enrollment =yes, it  has not checked in since the device was wiped. Can someone point me in the right direction.  

I've seen a lot of posts on this but none quite like I am experiencing. We have a laptop and a desktop prestage. Both create local admin account before setup assistant the laptop creates and admin during enrollment. The desktop skips it. However what we are seeing is the account that gets the SecureToken is a standard account thats pushed via policies. On desktops the prestage localadmin is the first account to login always but yet it doesnt get the securetoken.. The laptop an admin is created during the setup process and that seems to not get it either. This causes a problem when running OS updates or changing a forgotten pw from the localadmin account. Typically, I promote the standard account to admin, login and use a terminal command to give the localadmin a SecureToken.Is there a way to ensure that the Prestage LocalAdmin gets a securetoken everytime?  

Hi, I've built a configuration profile with the above preference set on one of our Macs, then uploaded the launcservices plist from it into the profile payload (omitting anything unrelated to Adobe) and deployed that to another test Mac to confirm it works - but PDFs still open in Preview. I've checked and re-checked the plist, and it matches the Mac that does open them in Acrobat Reader DC where relevant. Is there a way to achieve this, besides using Duti (the current build of which I believe doesn't even work under Mojave)?

I am working through migrating computers using the tools provided by Jamf. I've been encountering this issue.When doing the actual enrollment everything appears completely normal and finishes as expected. The first sign something is wrong is that when logging out and going to log back in, our SSO page is not present. It's the normal Mac login page.Then when I check it in Jamf it says "unknown enrollment type" though everything else appears normal.How can I correct this?

Teachers (with managed Apple IDs) can go to the App Store and Share a request for an app for the students. BUT, I would like teachers to have the capability of requesting an app for themselves as well. Currently, I do NOT see that option available.

According to this article the device_aad_information is written to the Jamf database, how can I use this to create a smart group or at least show in Jamf if it is registered with  Azure AD https://learn.jamf.com/bundle/technical-paper-microsoft-intune-current/page/Computer_Regisration_for_End_Users.html 

hi All, Looking for some advise , We are stating to release macOS Ventura to the org and we have noticed that you can disable certain apps from the Login Items on Ventura - specifically a security agent that we have running...Is there a way to block this? or disable the user from doing it... ThanksRob

This is what I have now, just looking for guidance on making this work #!/bin/sh username=`ls -l /dev/console | cut -d " " -f 4` scutil --set ComputerName "$4""$username" scutil --set HostName "$4""$username".domain scutil --set LocalHostName "$4""$username" jamf recon If I execute this script from terminal following results: SCPreferencesSetLocalHostName() failed: Invalid argument I can run following lines, line by line fine all is good. scutil --set ComputerName whateverUsername scutil --set HostName whateverUsername.domain scutil --set LocalHostName whateverUsername Any suggestions?

Hello All, Just wanted to know if I can enable Jamf app catalog for Google Chrome patching as Google Chrome deployment policy is configured in such a way that after deployment it will enable the Google chrome auto update. Now I am worried if it can cause any issue to patch Google Chrome through Jamf app catalog. Need your suggestion, if it is possible to enable Jamf app catalog then can I do for other apps those are enabled with auto update?

Hello!  We have Jamf Safe Internet at our school, and I am trying to locate some information on best practices as far as settings go.  Where can I find this?

Not my organization, used a photo from Google.How can I stop the Jamf Connect login window from coming up every time someone uses a computer? We have a lot of shared users and they sign in with an SSO. We want to prevent people from accidentally syncing their account to existing local users, which are usually shared classrooms.Is there a way to do this?

So, i'm trying to use https://github.com/grahampugh/erase-install and I'm having a VERY hard time understanding the steps to make it work.I added the package to Jamf Cloud, and pushed it out to my test computers by policy.How doi I get the various switches into the install? I thought i could make separate polices that included scripts that talk to the installed package. Is this the correct usage?

I work in an education environment and some of the new features in Ventura have prevented our students from using the programs in the way they used to.For example, they have limited access to Garage Band and aren't able to make their own changes or add their own files. Is there some way to give "full access" to applications through Jamf?

I created a script that will tell you what the latest available macOS is that you can install on your hardware but will not run as an extension attribute, it shows blank but if I run it manually it will show the macOS version.Does anyone know how I can fix the script to make it work for an extension attribute?Thanks in advance,#!/bin/bash # All models, model indentifiers, and macOS compatibility provided by Apple. # List will need to be updated when new model come out. # MacBook Pro - https://support.apple.com/en-us/HT201300 # MacBook Air - https://support.apple.com/en-us/HT201862 # iMac - https://support.apple.com/en-us/HT201634 # Mac Mini - https://support.apple.com/en-us/HT201894 # Mac Pro - https://support.apple.com/en-us/HT202888 # Mac Studio - https://support.apple.com/en-us/HT213073 # Read system profile and extract the model identifier system_profile=$(system_profiler SPHardwareDataType) model_identifier=$(echo "$system_profile" | awk -F': ' '/Model Identifier/ {print $2}'

I have an issue of a new batch of devices that were ordered through our company's vendor like normal. The macs are prompted for "remote management" screen and then "username and password" with a tuxedo logo on the left of it. Usually it is supposed to prompt for Email on the Microsoft sign in page, but these arent. Any idea why? 

We're trying to setup a few loaner devices at our schools in the event a kid forgets their iPad.I setup two iPad 9th gens for testing, setup the ADEP profile for a shared device, all users are setup in ASM.I logged in as a user and was prompted to create a passcode, great. Then I logged out and logged in with another user and it worked the same.The problem is now when you go to the other iPad to sign in it takes the shared iPad passcode, logs in for about 10-15 seconds, the automatically logs the user out stating "Login failed please try again"I've been messing with them for about a day and just can't find any reason for this to be happening. Has anyone else ever seen this issue? 

After update from 13.6 (working) to v14 this option is not working anymore  also when I put the clock back in de original position (right corner) this option isnt working (anymore) idea? thanks 

Good morning, everyone!  Does anyone have a new JAMF project planning template I could use? Rolling out a deployment from scratch at my new job and want to make sure I cover everything the higher ups might want to request.  I have experience in JAMF Pro, but haven't ever planned a deployment. Thanks!

Hello everyone,Last year (Monterey) and the year before (Big Sure) we encountered problems now and then when enrolling Mac.Depending on what version om macOS that was installed the Macs crashed/shutdown with black screen in the end of the prestage installation. If macOS hade certain version they past through and everything was good. The others needed to be reinstalled and reenrolled, sometimes two or three times.This year I found out what was causing the problem. It was the prestage setup, the assistent options - what to show or not to show when starting upp the Mac after installation.The setup for last year and the year before looked as follows that:This setup did't work very well, not better with Ventura. I experimented with the setup a bit and finally got a good one for Monterey (not all older versions) and Ventura. It looks like this:Now it's soon time for Sonoma. So I've installed the latest beta on a machine (beta 6). The prestage goes through but when you click later or not

I’m looking to switch our organization from Jamf Now to Jamf Pro, we have about 200 devices (iPads). From my understanding we’ll need to erase every device and setup as new on Pro. Is this information correct, or are there other options? I’ll be the main point of contact in assisting transitioning devices over. These devices are in the field using AT&T cellular, as you can assume, the transition will take a while. Any help would greatly be appreciated.

Hi, We're looking to push out Wifi settings via Configuration Profiles to 10.7 and above machines. In testing and pilot this is working well. When we go live to the rest of the campus we'd like to be able to search/report on devices which do and don't have the profile installed. We've hunted high and low to find this, but don't seem to have any luck - is this possible? TIA Andy

Hello all! This is my first post on Jamf Nation - I'm a newcomer to Jamf and Apple in general, having taken over for my organization's previous Jamf admin.Some backstory:Currently, we install macOS updates by downloading the OS .app, packaging it in Composer as a .dmg, staging the update package on our endpoints via policy, and then using a second policy to initiate the installation with the following command:  echo '<localAdminPassword>' | '/Applications/Install macOS Ventura.app/Contents/Resources/startosinstall' --agreetolicense --forcequitapps --nointeraction --user <localAdminUsername> --stdinpass  This works great for initiating after-hours installs. However, my leadership has indicated they'd like an option for users to kick off updates from Self Service. While I can make this available in Self Service as-is, the problem is that this doesn't allow the user to control when the endpoint reboots; it doesn't even notify them a reboot is incoming.

From time to time I encounter policies that get stuck in pending and I don't know how to resolve the issue.Example, today a new system was setup for a user and enrollment complete fine. I have an enrollment trigger set for a provisioning package that installs all of our basic applications. This is the first time it didn't function - I can see the trigger is active and the logs show pending, but nothing happened after 20 minutes and a restart.In order to get the policy to run I had to scope it to self service to be run manually, which worked, but now the original enrollment provision is still sitting in pending with no failure or option to cancel.How do you resolve this? Both to get a pending to run and to cancel a no longer needed policy sitting in pending.