Has anyone got the App Configuration working with Okta on the IOS app?  I would love to prefill some setup information just like I do with the Outlook app.   Thanks in advance for the guidance.

Using Jamf Cloud hosted JSS 10.37.2 we're seeing an odd problem with policies run from Self Service that contain only a Script payload where they don't actually run the script. There's no error reported, and the Policy log shows it as Completed, but looking at the Details window shows there's no output from the script:1  [STEP 1 of 3]2 Executing Policy Something Something Something...3 [STEP 2 of 3]4 [STEP 3 of 3]as opposed to a normal run which would look something like:1 [STEP 1 of 4]2 Executing Policy Something Something Policy Someting3 [STEP 2 of 4]4 Running script Something Something Script Something...5 Script exit code: 06 Script result: Retrieving inventory preferences from https://something.jamfcloud/.........Submitting data to https://something.jamfcloud/...<computer_id>1234</computer_id>7 [STEP 3 of 4]8 [STEP 4 of 4]The problem appears to be attached to the policy as when the problem appears the policy won't run on any computer. Editing the policy in the JS

Description: I have encountered a persistent issue with Jamf Pro version 10.49. When attempting to edit a 'Distribution Point', upon clicking the 'Edit' button, I am faced with a continuous loading spinner, preventing any further actions. The expected behavior would be for the edit options to appear without any delay or persistent spinning.Additional Information:Browser version: Chrome, Safari, Firefox in normal and private window.Operating System of Distribution Point : 13.5Network conditions: No conditionsQuestion: Do you have any idea what might be causing this issue or any suggestions for potential solutions?

Is there a way to force a computer to restart? I'm able to get OS updates to work where they download and then the restart prompt time starts. But if you click on the timer it stops the forced restart, and apparently delays it indefinitely, until the user restarts their computer, or I just resent the command over and over. I was hoping it was just for M1 computers, but it seems to be true for all. Is there a way to force a computer to restart from the Jamf platform?

With the advent of new JC versions coming out , what is the best and easiest way to clone a Jamf Connect Configuration Profile without having to manually cut and paste all of the variables from one to another? I tried cloning then changing the JC version and I get this message:  

I wanted to start a thread on best practices for dealing with lost and stolen devices (Macs / iOS).Some older threads exist, but with the new Apple Silicon Macs and newer OS security enhancements, I wanted to check back on this topic and see what people are doing.Past threads have suggested:Create a lost/stolen prestage enrollment - however this may possibly be bypassed by setting a Mac up with no wifi.Install Prey to get screen shots and geolocation sent back to you for recovery efforts - however it may require approval to access the camera and screen.Lock the device and wipe it remotely.Run a script that will lock the screen and play an audible notice to speak that this device is lost or stolen.Any other ideas/suggestions/updates?

We have shared ipads set up with jamf school. I can have classes appearing on them OR I can have them just use guest mode but I don't seem to be able to have the option for both. Basically a teacher wants to allow a couple of students to sign into a shared device but also allow others to use the ipad as a guest. Currently throughout the year the number of users logging in grows and grows which isn't ideal. Is it possible to have both? Our students are 5 year olds so the simpler it is for them the better. ThanksRichard

Hi,Does anyone have a script that will install Ruby / RVM.  Specifically looking to run this command, sudo \\curl -sSL https://get.rvm.io | bash -s stable –ruby,Specifically getting a Script exit code: 1 error.  Any ideas?  

tl;dr: student circumvented Jamf Pro to install App Store alternative... how? In the high-school I'm at, we have restricted the App Store for some students and predictably they seem to have found a way around it and are installing apps like Minecraft and so forth. Fairly harmless in general, but persistently we've noticed the presence of TutuApp. In the brief reading I've done, TutuApp is apparently an App Store alternative. I'm still trying to figure out how it was installed. We're concerned because iOS 11 apparently breaks many of TutuApp's features and while recent updates to TutuApp supposedly fixes this, it also installs a Nesstool profile. According to the forums, nobody is really sure what this is or where it came from or why it installs a VPN profile on their machine. We first observed this when a student came into the office citing Wifi issues. No VPN should be present but there was a VPN toggle in his Settings. It was automatically toggling on and the off again rapid

Can I ask the end user a question during iOS enrollment and recored that response in Jamf Pro? I would like to ask things such as: Are you a current Apple user? etc.

Hi All,I'm trying to create the Silent KFM option with OneDrive using Mac Configuration Profiles (this is my first Jamf instance, so I may just be missing something simple here).When I deploy the configuration profile there doesn't seem to be any changes made to the App itself.Using separate profiles, I was able to give full disk access and put OneDrive into the Insider Ring successfully.Only when trying to do any kind of KFM option (silent or otherwise) I can't see anything change (for example, if I open the OneDrive app to configure backup manually, nothing is selected). It also won't block people syncing their personal OneDrives (which when I added my own personal one, it broke my Company Portal Registration, easily fixed, but it's an issue that repeats at least on the device I'm testing with).There are some differences that I've noticed myself with people who have been successful. Most people reference a company specific plist file but mine is generic com.microsoft.onedrive and I'm

Hello Everyone, i have a Problem with 2 Devices, one of them ist with the new M2 Chip and the other One is an Intel Mac. Both of them show me that in jamf:  Personal Recovery Key Validation:UnknownBut FileVault 2 Partition Encryption State:Encrypted.I am able to see the Personal Recovery Key in terminal but there is a Problem with the transfer to Jamf. Ihad tried with jamf recon but nothink happens. Can anyone help please.

I have been trying and failing over and over today to get Graham Pugh's erase-install to work.https://github.com/grahampugh/erase-installSometimes it works but too often it doesn't. It often fails during the preparing stage before macOS Ventura installs. Other times, it finishes the preparation of the install and then does nothing. The Mac reboots. No install happens. I have literally spent my entire day today working with it. I thought maybe one of our security agents could have been interfering. I read about this possibility in the FAQ for erase-install. I have been running my tests from a Mac with no security agents installed. If someone has worked with this solution and been successful with it, I would love to know how you did it. The scenario is that we have several Macs that need to get upgraded to Ventura. The users are mostly standard user accounts on both Apple Silicon and Intel. When this has worked, I haven't had to do anything special to get non-admin users to be able to in

Hi everyonei'm trying to understand the best way to configure Jamf Protect with our jamf instance. I set up a smart group in jamf to alert users about security issues and that works fine.Unfortunately the jamf protect documentation is a bit incomplete imho. What are the next steps i need to follow? Any suggestion or guide to suggest?Do i need to manually remove the mac from the smart group?Jamf Protect has some removing capabilities or i need to clean the mac manually?

Hi,We are in the process of starting out with Jamf School for our 50 iOS devices. Due some internal policys, I might be in need of integrating AzureAD into Jamf School.How does it work? Is it only authentication (enrollment with AzureAD credentials) or does Jamf School "copy" username and store it somewhere (like syncing users from On-prem AD to AzureAD)?

Our config profile for blocking sharing works fine on macOS 12, but 13 you can edit the computer name in General / About just by clicking on name, Restricting the General prefs is not blocking About, but all other General settings.What have I missed?

I am trying to integrate jamf APIs to deploy in house app (.dmg or .pkg), I gone though the APIs but confused which one to use. I found https://developer.jamf.com/jamf-pro/reference/post_v1-deploy-package and https://developer.jamf.com/jamf-pro/reference/createpolicybyid relevant.I only know mac address or hostname of the device to deploy app on. How can we achieve it?Thanks.

Hi there So this "Seems" to be most recognized LAPS for MacOS - https://github.com/joshua-d-miller/macOSLAPS  Has anyone actually got this up and running? We had spends a few days so far messing with this but were not able to get it working properly, I think we are missing something small but important.  Thanks in advance! 

Local password sync issue with Azure/Entra and Jamf Connect. I have a user with 3 Macs.He changed his password on Mac1 with Jamf Connect. Cloud and local account passwords were successfully changed.Signed into Mac2 at Jamf Connect login window with new password, it prompted for his old/local password, accepted it, and everything is good.Signed into Mac3 at Jamf Connect login window with new password, it prompted for his old/local password and will NOT accept it. Using the local login with that same password does work, gets him to the desktop. He can then sign into JamfConnect using the MenuBar, it again prompts him for this local password, and fails to accept the same password he just used to log in locally.Jamf Connect logs show: Jamf Connect[1757:35a6] [com.jamf.connect:OpenDirectory] Password change failed! Error: One of the parameters provided was invalid.All three Macs are the same build/config. Not enforcing any other password policies.Tried sudo jamf changePassword with his user

I have a connection to WiFi, however when opening the Self Service app, there is a grey bar along the top of the iPad app that says “unable to connect to server”. I have restarted the iPad several times, connected to a different WiFi network, and nothing has worked. I am unable to download apps that I need. Please help!!

I'm trying to script a direct download of Citrix Workspace so I don't have to manual update the pkg for each patch. Unfortunately, the download link is a redirect, and the URL changes regularly. Does anyone know the URL for a direct download? My current script does this: #!/bin/sh curl -L -O "https://downloads.citrix.com/16002/CitrixWorkspaceApp.dmg?__gda__=1559853370_f26ea92eb50e024708c1e0cb9dc29474" mv CitrixWorkspaceApp.dmg?__gda__=1559853370_f26ea92eb50e024708c1e0cb9dc29474 /tmp/CitrixWorkspaceApp.dmg hdiutil attach /tmp/CitrixWorkspaceApp.dmg -nobrowse installer -pkg "/Volumes/Citrix Workspace/Install Citrix Workspace.pkg" -target / citrixmnt="$(hdiutil info | grep "/Volumes/Citrix Workspace" | awk '{ print $1 }')" hdiutil detach $citrixmnt rm -f /tmp/CitrixWorkspaceApp.dmg

Hi, everybody.One parent has being using Jamf Parent for a while with one of their kids. A few months ago they sent me an email saying it didn't work anymore. I asked for clarification, but I don't know if they never replied or if I lost the info. Anyway, nothing was done. A week ago a second child received their school issued iPad. The parent was able to scan the QR code and everything works. They have since sent me an screenshot of what happens when they try to scan the code for their first kid."The device is already added to your dashboard."However, they can't see it and, if they go to Settings, they can only see the newest iPad.Any ideas?PS: I tried adding the problem iPad to Jamf Parent from one of our devices and it worked with no issue.

Since Jamf Remote is deprecated, we are now disabling SSH in our environment. I've been able to do that with  "systemsetup -f -setremotelogin off", but is there any way to uncheck or hide the checkbox for "Allow full disk acess for remote users"?

Hey everyone,Google Meet has a PWA app (progressive web app) that can be downloaded to the Mac, here is the guide by Google:On your computer, go to meet.google.com.At the top right of your browser, in the URL bar, click Install The Meet app appears in your app dock.I wanted to deploy this app to my org in some way, but when I tried to create a package from my Mac, users got this error message:"Google Chrome cannot read and write to its data directory:/Users/***/Library/Application Support/Google/Chrome"which means it took my personal directory and deployed it to all org which created an invalid package.Any suggestions on how I can fix it / deploy the Google Meet app to my org by taking into consideration that's a PWA app? Thanks! 

Hi there,What solutions are you guys using to elevate permissions for users temporarily. For now I've found https://github.com/SAP/macOS-enterprise-privileges/wiki/Using-Privileges but not sure if there are better solutions more tied to Jamf Connect itself?