The company was purchased by another company. The new company didn't have Okta so I've been deploying Okta for them, but we still have the old Okta. We've been using Jamf Pro, Connect, Private Access and Protect at the old company for a while now. The problem is that I need to migrate Jamf Connect from the old Okta to the new Okta. The new company uses a different string for username. Old was firstInitLastName and the new is firstname.lastname.Jamf Private Access seems pretty straight forward. Just reconnect it to the new Okta and they authenticate against the new Okta, same as the Jamf Pro for the admins and as I've been able to do with our other applications. What's the best way to migrate all the Mac users from one Okta to another without users needing to recreate a new local user?

Has anyone had any experience in deploying Fortinet's FortiClient to computers? I get a DMG from our on-prem controller but that doesn't install when I use Jamf Pro to install onto client machines

My Google-foo is failing me.  Although my script works to trigger the Jamf helper window - I get 'posix_spawn(): 2: No such file or directory' <-- And as far as I can tell it's because i'm trying to call launchctl -but - can't figure it out.  Is this an error I should be concerned about?JHELPER="/Library/Application Support/JAMF/bin/jamfHelper.app/Contents/MacOS/jamfHelper" LOGGED_IN_USER=$(stat -f%Su /dev/console) LOGGED_IN_UID=$(id -u "$LOGGED_IN_USER") echo $LOGGED_IN_USER WELCOME=$("$JHELPER" -windowType utility -windowPosition lr -heading "Urgent message from Mac Desktop Services." -alignDescription natural -description "An urgent OS update is needed on your system. Please run sofware update at the end of the day (Apple Menu --> System Settings --> General - Software Update) and install Ventura macOS 13 updates to bring your system to 13.6 if it is not already. Please do not click Upgrade to Sonoma, only updates for ma

Buen día, por favor alguien sabe cómo aplicar bloqueo de pantalla, al cerrar la tapa y abrir ya tenga el bloqueo para ingresar password, esto desde jamf pro. Saludos!!

Hi folksI know, its maybe more an Apple topic as a jamf topic. But hopefully is here someone who has experience with this.So I just started to configure in the Apple Business Manager and Entra the Federated Authentication and the Directory sync. I was able to configure everything. My idea was to test this with one testuser (created through me) which will be also have an private apple id.When I am in the last step to enable the federated Authentication, I see an info, that i have 155 username conflicts. So I just stopped with this and have not enabled it for nowDirectory Sync is already enabled.In the Azure App I have only me and my testuser which I would like to test first, before enabling it for all.So anyone an idea what I have missed or done wrong. I need to test this first, document it and then I need to inform also all of the

I normally run this script when trying to log into multiple computers via Apple Remote Desktop:osascript -e 'tell application "System Events"' -e 'keystroke "username"' -e 'keystroke tab' -e 'delay 0.5' -e 'keystroke "password"' -e 'delay 0.5' -e 'keystroke return' -e 'keystroke return' -e 'keystroke return' -e 'keystroke return' -e 'end tell'When I try to run this script on computers running Mojave I get the error:execution error: System Events got an error: osascript is not allowed to send keystrokes. (1002)

I am new to Jamf School. I would appreciate some assistance with some general questions. I successfully uploaded our asset tags into Jamf School to match serial numbers:Can I customize the search function so I can search using Asset Tag? Currently when I am in Users and trying to assign a device to a User I need to have the serial number and I would prefer to use the Asset Tag. When in Device Groups I am trying to add Members and the Asset Tag is not listed only the Serial number and again I would like to be able to add by asset tag. How do I change that?When I assign a device to a User it says Successfully Assigned, but the Devices assigned to the User still says 0. I am not having any luck finding solutions in the Jamf School Documentation or videos. Any help would be appreciated. 

Hi Everyone,Our users all have two teams clients a 'Microsoft Teams' and a 'Microsoft Teams Classic' which seems to have installed overnight (I suspect MS auto update). We use company portal to enroll the devices into Intune and enforce device compliancy, the Classic client works fine but the 'new' teams client doesn't show the device as compliant and thus fails to authenticate. for the moment it isn't causing an issue as users are using the classic client, I'm just curious if anyone else has seen this issue and has a fix? Many thanks!  

Hi there, We have a Jamf Mac devices seems to be getting a lot of Jamf Connect notification along with IdP password does not match local account password and jamf connect login sign in window is greyed out. Any suggestions? I think we have pushed connect version to the newest at first but then rolled back. 

this is mostly for third party as JAMF VPP apps will update but it’s the other apps like browsers and standard third party apps they’re not in the App Store. JAMF Self Service is great but having to keep on top of uploading the latest packages can be a pain. I’ve tested Brew in the past and it worked but I know installing XCode via. JAMF has been a pain.Is there another ideal solution for assisting JAMF to deploy the latest versions of software?TY

Pharos Notify & Popup issue on Monterey 12.5.1This software has worked darn near flawlessly until now(hasn't been updated since 2018?).  Even though the Firewall is set correctly, neither of the Pharos components(Popup & Notify) can communicate with the server for whatever reason.Screenshot attached(Well, I don't have 'permission' to add graphics?). :-p ~Patrick 

We have just started using Jamf Pro.  We were using Meraki and some of our iPads are in there.  What is the best (or proper) sequence for getting these into Jamf Pro?  My thought was to do this in the following order but was hoping someone could confirm this will successfully move this from Meraki to Jamf Pro.1.  In Meraki under DEP, select the device and click Remove Device2. In ABM, go to the device and choose edit Device Management and change it to our Jamf Pro MDM from the list.3. Wait for Jamf Pro to sync with ABM and the device should now be in my list in Jamf Pro to assign to a prestage enrollment.

Hi After updating to iOS 17 the wallpaper we use suddenly started zooming in after it's added to the phone.It looks correct for around 1 second and then it zooms in on the image.Anyone else had that issue and found a solution? Worked perfect using the same image on iOS 16.I have not changed anything to the smart group we used for iOS 16, since it's just set up to add it to all enrolled devices.//Kenneth

Hello all,I am looking to lock down printing as a security compliance measure for all of our supported browsers.I got Chrome going already but can't seem to find an easy way to put a config profile together for Firefox and Safari.Any ideas or has any one been able to accomplish this before? 

What, exactly, is the Jamf Management acount defined in UIE used for at this point? What would the ramifications be if I were to uncheck the "Create Management Account" checkbox in UIE?Further explanation: our machines are all using Xcreds (which is largely interchangeable for the purposes of this discussion with Jamf Connect). We were previously following the workflow demonstrated in the "One Account to p0wn them all" session from JNUC 2022. However, we are now experiencing issues resulting from PI111014. Because we're on Xcreds, at the minimum, we need to create a Managed Administrator account in prestage, so that's what we're doing. What would happen if, rather than specifying a separate Jamf Management Account in UIE, we just tell UIE not to create the management account?I've read that, as of Catalina, the management account is largely unncessary... but is "largely" the same as "entirely"? What, exactly, would I be d

I have looked at the forums for a solution to this issue without much luck. If there has already been a solution posted could you please direct me to it?My organization if moving from Cylance to Crowdstrike. Installing Crowdstrike with Jamf has been super easy. Uninstalling Cylance has been a bit of a different issue. I cannot click the checkbox to uninstall in the package details. I have read that the way to resolve this issue is to reconfigure the package with the Jamf Pro app. My question on this front is if I reconfigure this package will it have to be redeployed before it can be uninstalled? Essentially do I need to reinstall it in order to uninstall?Another option seems to be that when Cylance installs it creates an uninstaller app. Is it possible for me to silently run this app on all of the Macs from Jamf Pro?

We use Jamf School to manage iPads and will be using Jamf Pro to manage Mac Minis for a high school computer lab. Can these two use the same VPP token and the same Apple ID? In my research, I'm finding that we can use the same Apple ID but need to create a different location with a seperate VPP token. Is this correct? 

While I welcome updates that make things better, I'm not sure the new font choice / bold type in 10.48 is an improvement on the dash board. All uppers worked well, now its upper and lower.. which im not sure is more readable.Bold.. this does not work for me, maybe it works for others?  some smart groups that were once fully readable are now cut at the end, meaning you can't see the ending, making some groups look identical. Renaming these is not an option due to how JAMF uses names for reference. Display preferences are somewhat lacking (dark mode) but an option to toggle this back to Uppers / No bold would be welcome.   

Hi folks,is it possible to set up the very common Make Me Admin Skript for my Macs as a local executable file? It would be no problem to hardcode the local admin credentials into the skript.Thanks for your replies.Th.

hey guys,  I was trying to make computers compliant with cis level 1 hardening standards. Although i have solved some of the standards with configuration profiles, but many remained and i thought automating the process with a script would be easier.i found this great project https://github.com/usnistgov/macos_security.git  and i have tried it on my computer, though it did not fix everything, but it improved my compliance. I created the below bash script and tested it. but when i created the script in jamf and went on and made it a policy on one computer, it failed.any one please have an idea to solve this? or maybe i could change my approach. the script is :#!/bin/bashcd /Users/$USER/Applicationsmkdir cis_compliancecd cis_compliance/macos_securitygit clone

I've got a webclip on 84 devices that are set as not removable. Unfortunately, the configuration for the webclip was deleted which did not affect the devices. The webclip is still on, still as unremovable put we want to remove it from the devices. Does anyone know a way to do it? I've added the configuration for the webclip again but this time as removable in the hope that it will be changed to removable on the devices which does not seem to affect them. Any ideas, script or anything?

Hi,we would like to have the apps compass and calculator on the desktop for students.In the layout of the configuration these are also displayed but not on the ipads of the students.How can I install the software?RegardsStefan

I have been using Composer with no issues ever since we started with JAMF back in Jan 2022.I did have version 10.48 installed and updated a few days ago to 10.50 version of the apps (Composer & Admin), and they have both been working fine all week.This morning after continuing to work on a project and using Composer all morning, shortly before lunch it crashed.I got the usual Apple popup for a crash, but then tried to open Composer again. It prompted for my password, saying it was going to install a helper application, started to open but then crashed again. I tried rebooting. I tried throwing the apps to Trash and installing version 10.48, still crashes. I tried following this article (https://community.jamf.com/t5/jamf-pro/composer-will-not-open/m-p/217853) but it didn't help. I will add I didn't have the folder mentioned (

We noticed almost immediately that WebClip payloads caused errors on Shared iPads. We made sure to separate those into their own profiles, but that still leaves us with a dilemma...is there any way at all to get WebClips onto a Shared iPad? I've tried assigning to the user instead of the device, and even using the "Home Screen Layout" payload (both in Config Profiles and in Classes), and I can't get anything to stick On a similar note...I have no idea how that WebClip setting for the Home Screen Layout is supposed to even work, so maybe if I get that figured out, the rest will come...

Hello everyone,  We use an extension attribute that will identify the Max supported macOS by going through OS regexs. For Sonoma, we are using the regex below SonomaRegEx="(^Mac1[3-9]|MacBook\\d{2}|MacBookAir([8-9]|\\d{2})|Macmini([8-9]|\\d{2})|MacPro([7-9]|1\\d)|iMacPro[1-9]|iMac(1[8-9]|2[0-9]),\\d|MacBookPro(1[4-9]|2[0-9]),\\d)" And it will identify it's maxOS with: # Compare Model Identifier against Sonoma Regex compatible Macsif [[ $myModel =~ $SonomaRegEx ]]; thenmaxOS="14"fi So far, it's working partially. As devices are updating inventory I am seeing them update, but on my Macbook Air (m1, 2020) it will not show up as Max OS 14. It does, however show up in a smart group where it searches for Model Identifier matching the regex.  Is there anything obvious that I am missing?