Hello!I have an iPad Pro that we have released from Apple Business Manager and removed from JAMF Pro. There is no longer a trace of it within our system. However, after the iPad was factory reset the MDM Profile was still there from Jamf.What would be the next step in this process? Thank You in advance! 

Hi All, Since Microsoft change to Entra, when we do PreStage with Jamf Connect (using Azure as Idp) it will ask the user to select an account to sync with your Microsoft Entra ID account.this is extra step in user enrollment (we want by default to just create account) how do we achieve this?    

HI we want to set the Controls for download of pictures in the reading panel. GUI Preference > Email > Reading > Security to 2 = In all messages.Ive followed the info from here https://docs.google.com/spreadsheets/d/1ESX5td0y0OP3jdzZ-C2SItm-TUi-iA_bcHCBvaoCumw/edit#gid=0 (defaults write com.microsoft.Outlook AutomaticallyDownloadExternalContent -int 2) it writes to the plist but can not get the value to change does anyone know if this is supported in 16.23 ? or if there is something I am missing ?Thanks for the help :)

Is anyone managing Safari using a Configuration Profile on macOS Mojave? I have official documentation for Firefox and Google Chrome from Mozilla and Google respectively, but I can't find anything from Apple (or on here) about managing Safari. There's no Safari Config Profile payload in JamfPro, so I assume we'd have to use Custom Settings payload just like Firefox or Google Chrome. I want Safari to match the same bookmarks and some of the settings I've set up for the other two browsers. I'm inspecting the com.apple.Safari.plist file, but it would be great to have documentation on all the keys that can be managed currently. The Managed Preferences manifest found on JamfNation is very old (2011), so I'm not sure if some of the keys shown there are have been deprecated. Any ideas?

Why can't Jamf Pro have an easy way to add Webclips like JamfNow. I have tried using iMazing Profile editor to make some, but they never sync down. I used to use JamfNow and it was just an option to choose from for a "blueprint". Can you add this to JamfPro? If its there maybe I just am not seeing it.

Hi there,We seem to be having issues trying to SSH into devices with SSH enabled on a backdoor local admin account. This issue is only apparent when trying to connect over the internet to a host with SSH enabled. When that device is on the same local network I'm able to SSH fine without issue.I've tested multiple machines in the environment and issue is exactly the same on all machines.This is the script used to enable SSH on the target device: #!/bin/sh ssh_user="THE_USERNAME_OF_THE_ADMIN_USER_ACCOUNT" # turn ssh on systemsetup -setremotelogin on # append user to ssh group dseditgroup -o edit -a $ssh_user -t user com.apple.access_ssh # restart ssh launchctl unload /System/Library/LaunchDaemons/ssh.plist sleep 5 launchctl load -w /System/Library/LaunchDaemons/ssh.plist exit 0 And connect in Terminal using 'ssh THE_NAME_OF_

Hi there,I am noticing a number of machines not being able to check in when running 'sudo jamf recon' We are running 10.33, on prem➜ ~ sudo jamf recon Retrieving inventory preferences from https://xxx.xxx.co.uk:8443/... Finding extension attributes... Locating hard drive information... Locating accounts... Locating applications... Locating package receipts... Searching path: /System/Applications Locating software updates... Locating printers... Gathering application usage information from the JamfDaemon... Searching path: /Applications Locating hardware information (macOS 11.6.0)... Is anyone else noticing this? 

Hello everyone,Now Sonoma is finally released. I guess we're not alone in having trouble rolling in Macs with Sonoma. In our case we unchecked the following under Setup Assistent Options in PreStage to get it to work with Ventura:Location Services, Transfer Information, Apple Pay, Registration, iCloud Diagnostics, All Your Files in iCloud, Choose your Look, True Tone Display, Terms of AddressIn Ventura all options wasn't shown but it worked. We haven't got this set up to work with Sonoma. When it comes to Transfer Information and you click Not yet the screen goes black. Even tried to uncheck all and check Setup Assistant above Options, then it skips Creating local user account like in the link bellow.https://community.jamf.com/t5/jamf-pro/enrollment-with-macos-14-x-sonoma-skips-creating-local-user/td-p

In our Jamf Pro instance, I have two smart computer groups, one for Intel devices and another for Apple Silicon. The criteria is pretty straight forward in each:Apple Silicon group == "Apple Silicon is 'yes'" [OR] "Architecture Type is 'arm64'"Intel group == "Apple Silicon is 'no'" [OR] "Architecture Type is 'x86_64'"However, I have 30 devices (of ~800) that are failing into both groups for some reason.  These devices were fresh enrollments as of earlier this year or late last year, and they are all properly checking in and performing inventory updates. The criteria is correct on each device too.I tried making two new test smart groups with different criteria, and the exact same thing happens!Apple Silicon group == "Apple Silicon is 'yes'" [OR] "Processor Type like 'Apple'"Intel group == "Apple Silicon is 'no'" [OR] "Processor Type like 'Intel'"Anyone else seeing this? Not sure what to make of this, beca

Hello.For backup purposes, I want to write out an individualized launch agent plist via a shell script to certain Macs.This script should at first gather two variables locally (currently logged in user and a user specific storage directory, I would technically know how to get both of them), but then successfully hand over these two variables to an individualized launch agent created by the same script, doing watch paths on certain directories for running a backup script as soon as there is a change to the root directories.How could I leverage this?Thank you and best regardsChristian

Hello, my company decided to use Jamf Pro as MDM solution for Macs administration. Our current setup is Jamf Pro + Jamf Connect with Azure AD as IdP, and all purchased Macs are already in Apple Business Manager with Jamf as assigned MDM server.We're on last phase of polishing all apps deployment, policies configuration, scripts deployment, but found a bug (or misconfiguration) that is preventing usage of Jamf as company-wide solution yet.In perfect scenario, when new employee has been hired, brand new Mac is being purchased and delivered directly to user. Mac is already enrolled to ABM, and automatically assigned Jamf as MDM server. This user also receiving AAD credentials with temporary password to change during first account use.Please find below issue description:1. User first time power on new Mac, and connect to the Internet.2. Jamf pre-stage enrollment has been started and all config profiles deployment happens.3. When a

Hello Jamf Nation! If you haven’t heard the news, Jamf Pro 11 is here! Featuring a new interface, ADDE, DDM software updates for iOS, and more! How to join the beta: Enroll in the Beta Program under Product Feedback at account.jamf.com. Once enrolled, you’ll see a link to the Jamf Nation Beta Forum. Note: There will be a short delay between enrollment and Beta Forum access; you will receive a notification in Jamf Nation to join. When you receive the invitation, click "Join this group Hub". Email beta@jamf.com with questions.The beta program is covered by the Jamf non-disclosure agreement; please do not share any information regarding your testing on any public forum, including the non-beta areas of Jamf Nation. Use the Jamf Nation Beta Forum or contact Jamf via beta@jamf.com with any questions. Thank you to all who participate in this program!

Hello community, I am stuck trying to figure out a way to reset password of forgotten computer password that is used to log in to the computer. I have read here that you could do reset a computer's password with local account policy and I have tried that and it is not working. i am not sure which triggers i should enable for this to work or any other option i should include. Also, the reset option in local accounts policy says: This does not update the account's login keychain password or FileVault 2 password.  can i update the those credentials later with the filevault recovery key that i hold?I also have tried the filevault approach, but i can only see the reset password with apple id option and not the using filevault recovery key. Thanks for the help in advance  

Need to know how to generate report for Mac users who left organisation?

Hello,As I have done previously, I am simply trying to upload a wallpaper image to use. However, I keep getting the following error:  Any thoughts on the issue? It is a .png file that is 5.47 KB (I am just using it to test, and it still fails). Thanks!

Is there a way of passing the "Latest Version" variable from Patch Reporting of an application into a script in a policy? Thanks

Hey all,I’ve downloaded a installer for macOS 14 from apple and I’ve tested it by packaging it via composer and building it as a .pkg and .dmg and deploying it via a policy in self service. But it doesn’t work it just spins and states this item failed. What am I doing wrong here? Or is their a better way cia this similar method.

Hello, I have enrolled an user in JAMF pro before enrolling the device in Apple Business Manager. I have removed the MDM profile and reset the Mac. so should I delete the user from JAMF pro before starting the device enrollment in Apple business manager? or I can enroll the device in apple business manager then delete the user from JAMF Pro? 

App Installers are new to Jamf School.  I have been experimenting with Chrome on a test device.  Since I installed Chrome using the App Installer there has been an update to Chrome.  How and when will this update be loaded into Jamf School and pushed out to any devices the app is scoped to? 

We normally block URL's via our firewall but wanted to test blocking a specific URL for just one lab and figured I'd just use the Parental Controls in the JSS to do it. I've added both the www.domain.com and domain.com to the deny list and pushed it to my test iMac and MacBook but they can still visit the URL's. I've even rebooted the systems and flushed the cache but the URL is still not blocked. What am I missing?

With the new firmware being released tonight, I wanted to make sure I could see what versions (of the very limited number) are in our fleet. I threw this EA together, hopefully it can help someone else out! #!/bin/bash result="<result>NOT Found</result>" if [[ $(system_profiler SPDisplaysDataType | grep -i "Studio Display") != "" ]] then dispFW1=$(system_profiler SPDisplaysDataType | grep -i "Display Firmware Version:") dispFW2=${dispFW#*: Version } dispFW3=${dispFW2%)*} result="<result>$dispFW3)</result>" fi echo "$result" 

Hello everyone!Just want to know if dockutil is compatible with Monterey, Ventura and Sonoma?

Hello,I am looking to create a custom analytic that will alert when a software installation occurs.  I found this:  custom_analytic_detections/app_bundle_installedIt does work and creates alerts, however it alerts on everything installed and there are multiple alerts for each item.Is there a way to filter out System or Root level installs?  That way Jamf patches/pushes don't trigger alerts?Thanks,Don

Hi everyone I want to use FULL NAME as the Computer Name because there are too many devices and making changes one by one is painful. Do you have any good scripts to recommend.Thank you. Thanks

We would like to track leases through JAMF and will set up a report to notify us of dates. The issue is that when a device gets wiped, all information is removed. I have two questions regarding this? Is there a way I can have certain information automatically added to the device after a wipe? As it is right now, most information like who it is assigned to is removed and replaced with a serial numberIs there a way to notify me that there has been a wipe that includes the information before the wipe? As in user and location information.Thanks!