I am testing out using iMazing Profile Editor and the app works great, and I can save the new profile and upload into Jamf and scope to my test machine and it applies and makes the changes needed which is great. The instructions I'm following say to sign the profile and when I choose to sign the profile within iMazing I have 2 options, the first one says DEP-my serial number and the other option is a long string of letters/numbers, so I'm not sure which to choose and I'm not even sure if this is needed since it worked the first time without signing, so I guess my question is do I need to sign the profile since it already worked without being signed, or will I see issues down the road if I don't sign it and if so, how do I know which cert to use to sign the profile? When I look at the certs in Keychain DEP-my serial number shows Jamf SCEP Intermediate CA as "issued by" and for the other cert with long letters and numbers within Keychain the "issued by" shows JSS Built-in Certificate Aut

We have been having this issue for months and have opened multiple support tickets. Just wanted to see if anyone from the community has resolved this issue.Things we have tried:- upgrading to version 2.27.0- re-pushing the License configuration profile- adding the updated launchagent to our PreStageIt seems this issue is caused by an invalid license, according to the Jamf Documentation: https://learn.jamf.com/bundle/jamf-connect-documentation-current/page/Installation_and_Licensing.html"If a license expires or if Jamf Connect detects that an invalid license key has been applied to the configuration, the following functionality will cease: The Sign In window, accessed from the menu bar app under Connect..., will no longer function. Username and Password fields will be grayed out and users will not be able to click the Sign In button."And for the deployment method for the License, there is one of two ways to deploy it. The one we use is Copy and paste encoded license string int

Hello,I am currently cleaning up our printers on our Macs.  I have created a script to remove printers using lpadmin -x command.  I created a script for six printers and noticed two of them do not get deleted.  I am using the CUPs name in the script to delete unwanted printers.  I believe these two printers that are not getting removed are very old and the CUPs name is not accurate so its just skipping the step to delete the printer.  These two printers are no longer in Jamf and all our employees are remote so trying to get the actual CUPs name is a bit difficult.  Is there a script I can run to either delete the printers based on the Device URI ie: lpd://10.1.1.1 or another way where I can run a script to collect the CUPs name of the printers that won't delete using my current script?  If I can somehow get the actual CUPs name of the printers then I can revise my current script to delete those two printers that are still hanging around.  

We are restricting the ability to add non-corporate email accounts to the native Apple mail client (which is easy to lock down in jamf by locking the Settings) but we would like to offer Outlook for iOS app as an alternative to the native client.  So...couple of questions:1. Is it possible to push a config to the Outlook app so that is sets up the users Exchange email box?2. Is it possible to lock down the Outlook for iOS app so that users can't add additional email accounts?

Hello all, I'm trying to create a policy to remove printers with a script. The script I found on here that I'm trying to use is: #!/bin/sh # remove all printers rm -rf /etc/cups/printers.conf # restart cups killall cupsd exit 0 When I put it in a policy in Self Service and run it I get the following back in the log: Executing Policy Remove Printers Script... [STEP 1 of 2] Mounting casdjamf.chambersburg.k12.pa.us to /Volumes/CasperShare... [STEP 2 of 3] Mounting casdmac to /Volumes/CasperShare 1... Error: Could not mount distribution point "casdmac". [STEP 3 of 3] Running script removeprinters.sh... Script exit code: 126 Script result: sh: /Library/Application Support/JAMF/tmp/removeprinters.sh: /bin/sh #: bad interpreter: No such file or directory I tried running the script using the sh command in terminal I don't get any error messages, but I still have my printers as well. I tried doing some research here and through Google but I'm still kind of

Does anyone else here use ConnectWise Automate (ie - not the standalone Screenconnect product)? I'm having trouble doing a clean and silent install for both the Remote Agent and the ConnectWiseControl piece. Looking for advice on how to roll forward with a silent installation of both of these pieces of ConnectWise Automate (CWA), so that they appear and work with our console correctly. What I currently have and what I'm currently seeing:When logged into the CWA Console, I am able to download the MacOS Agent installer that is setup to put the device into our instance of CWA. I have the following related PPPC Config Policies (Created used the latest PPPC Utility) in place:PPPC for bash:identifier: /bin/bashidentifier type: Pathcode requirement: identifier "com.apple.bash" and anchor appleAccessibility- ALLOWAppleEvents- ALLOWcom.apple.systemeventsBundleID / identifier "com.apple.systemevents" and anchor apple PPPC for LTechAgent:identifier: /usr/local/ltechagent/ltechagentidentifi

Starfall now supports MDM config, but they do not have a template and thier directions are very sparse.Here is what it says, and my question is how to put this into JAMF:MDM, or Mobile Device Management, allows an administrator to deploy and authenticate the Starfall app on multiple mobile devices. Starfall now supports MDM key authentication in the Starfall app, versions 3.1.68 and higher from Google Play and the Apple App Store.To configure the Starfall app with MDM, you will need your Starfall administrator email address and an MDM key.Your MDM application may prompt you for the following: Key (case sensitive) Type Value ExampleEmailStringStarfall administrator email addressmyemail@school.eduMDMKEYString(Find in your Account Settings per instructions above)SEF123456

Hi,starting this morning I received quite a lot of tickets of users saying that they get messages about the MDM Profile on their machine expiring in 10 days. Shouldnt that renew automatically? What can I do about this? I already tried the "Renew MDM Profile" Management Command, but the MDM Profile Expiration Date of the Macs I tried it on did not change.Do you have any suggestions?Kind regards

Any update about this issue that not prevent shared iPad to get without space?Thank you

Hey folks...  Does anyone have an EA that can pull Azure group membership?I have on in our JamfPro server from the previous admin, but it's not returning any results.  Does someone have a new one or know what might be wrong with this? #!/bin/zsh #API Username and Password username="xxxxxx" password="Scheisseb@lls1" url="https://xxx.jamfcloud.com" loggedInUser=$( scutil <<< "show State:/Users/ConsoleUser" | awk '/Name :/ && ! /loginwindow/ { print $3 }' ) echo $loggedInUser #Variable declarations bearerToken="" tokenExpirationEpoch="0" aduser="$loggedInUser@xxx.com" #AD group you are checking membership against adgroup="Grp_Engineering_ALL" getBearerToken() { response=$(curl -s -u "$username":"$password" "$url"/api/v1/auth/token -X POST) #checks if OS is below 12 if [[ $(/usr/bin/sw_vers -productVersion | awk -F . '{print $1}') -lt 12 ]]; then bearerToken=$(echo "$response" | /usr/bin/awk -F \\" 'NR==2{print $4}' <<< "$bearerToken" | /us

I've been using the require credentials during prestage enrollment to capture which users are assigned to my ipads but i need to disable this feature. I still would like the users assigned to the device but I need it done after the device is put back into jamf. One of the reasons I'm turning off requiring credentials is because if a device is lost or stolen it never goes back into the jss without valid credentials. I'm hoping to eliminate this problem by disabling this feature, but what is the best way to still get the user credentials added to the device? Has anyone locked their device to a single app mode app that required credentials to exit and then used smart device groups to move them out of single app mode?

Hello,I'm trying to install a few Apple apps (iWork suite) from the App Store via Self Service.However, on some devices it takes ages, but it will install at some pointon some devices, it will install even though self service is saying "element failed"and some devices it fails more or less immediately after pressing install.Any ideas?

I know there's a way to report on computer usage within JAMF Pro. I'm wondering if the same can be done for iOS devices?

I'm a little confused that on my actual machine, it says that macOS Sonoma is version 14.0 yet in Patch Management it's looking for version 19.0.2.What is the difference? We have had other machines on the network update and they not showing under Patch Management either.

We're using App Installers to install Google Drive. When it is installed, it also puts Google Sheet, Doc and Slides in Applications. Does anyone know how to prevent these from showing up? In Windows, we have a initial_preferences or master_preferences file that we could edit.

hi guysI hope someone can help. I am planning to push an SSL certificate to all of our iPad devices as part of safeguarding rules. We need to generate a report on this, but I am struggling to find a way to push our SSL certificate to iPads using Jamf School, which does not seem to have an option to install a certificate.thank you in advance

I need to install Jamf Protect on some Macs owned by staff and not on our MDM. When we evaluated Jamf Protect I had instructions for installing Jamf Protect without a MDM but I do not see them any more. Does anyone have a link to the instructions?

I need help looking for a way to limit Jamf users' access to information under the Inventory tab when viewing a device. Specifically is there a way to hide things like hardware and purchasing? I have extension attributes set up as pop-ups and I want to limit certain groups' access to specific ones in my organization.

We deployed a Configuration Profile with a VPN payload ever since we started using Jamf Pro to M1 Macbook Airs running MacOS 12.5 at the time the CP was deployed.  Everything worked fine. Recently, we needed to add a new M2 Macbook Pro running MacOS 13.6 and suddenly the VPN profile would not work and only display "An unexpected error occurred". What's weird is that if we create a new Configuration Profile with the EXACT same payload settings and deploy it AFTER the entire provisioning process is complete, then that new Configuration Profile allows the user to connect to the VPN. Thinking it may just be a fluke, we re-provisioned the Macbook and assigned the new CP to it and it still breaks with the same error message. And once again, if I create either a new CP in Jamf Pro or manually create the VPN under Settings, it works just fine. I've been trying to locate the log file for the VPN but there is no /var/log/ppp and I've also tried to use Console to look at logs but can't

Yesterday a CVE was released indicating a high-risk vulnerability within most browsers - CVE-2023-4863. During my creating a report to check to make sure my Edge versions were getting patched (needed to filter out active workstations which Patch Management can't do) I discovered that Jamf inventory reporting is reporting the wrong version string.  In tracking the Microsoft Edge version, Jamf inventory is pulling the edge version from CFBundleVersion while Patch Management and the app itself displays from CFBundleShortVersionString, affecting the ability to make effective smart groups to track patching. I've submitted a ticket to Jamf and it's been sent as a FR or a PI, but if you needed to follow along on your own compliance, be aware that your smart group won't ever populate correctly until it's corrected.  Also here's a quick EA to create correct smart groups if you needed it.#!/bin/sh # Edge version - CFBundleShortVersionString.sh # # Created by Ed C on 9/28/2

I am new to Jamf and enrolling iPads for all of our students. Right now I am going in and entering the wifi password on each iPad to get it connected to Jamf. Is there a better way to do this? Can I somehow push the wifi password to the iPads in automated device enrollment? Any tips on best practices for device roll out would be greatly apprectiated!

I have installed rapid7 using jamf cloud. But the application is not showing up under each user's app installed. I know on windows, you can see it from intune and also you can see the app in control panel of any windows machine.On macs, you have to look at a specific directory to see if the agent is installed. Do you guys have any idea why that is happening?

Anyone have experience using the Web Content Filter in JAMF School to block URLs? We have some websites they want blocked while Mac's are outside our network and the profile is very different from the iOS one. 

My users are having an issue where when they attempt to install an app through the self-service portal, they get an error stating that the associated apple ID is not allowed to make purchases.It also states in the logs that No license was found for app which is false as there is more than enough licenses available. I'm new to this so I'm not 100% sure if I'm missing something here.

Hi everyone, we are currently working on enabling a Safari extension. However, we've encountered issues creating the Plist. Do you have any suggestions on enabling extensions for Safari? Are there any recommended Config Profiles?