Hi there,I wanted to try and avoid reinventing the wheel and thought best to ask here!What are peoples approach to testing the latest OS before releasing to their company?I know theres a short deployment limbo in that machines out of box dont immediately ship with the latest OS, so to my knowledge you cant test that immediate zero touch process, but what about existing machines that are upgraded in place and testing their suitablitilty for the general app estate you have?I know it will be somewhat bespoke to your company, but short of just upgrading, then opening as many apps and loading websites/tools as possible there was a more structured/automated way? Cheers! 

Hello Jamf Admins,We've recently found new enrolments not getting Jamf Notifications profile automatically anymore - both DEP enrolled and user-initiated. Tested in Monterey and Ventura - all other profiles are coming OK (Privacy policy control, MDM itself and JAMF Login items for Ventura), however Jamf Notifications is missing.Nothing was changed in Security settings - it's still ticked to install it automatically. Nothing else was changed. Kind of confused now.Of course I can just manually create similar profile and scope it against all devices, but I would prefer JAMF to work as intended.Has anyone seen this issue? Thanks.

I need to script the uninstall of CrowdStrike on Macs. While deploying CrowdStrike this past week, I realized that we may need to push out a policy or make one available in Self Service to uninstall the software. The uninstall command to do this is: sudo /Applications/Falcon.app/Contents/Resources/falconctl uninstall --MANAGMENT TOKENThis command would work perfectly in a script. The issue we have ran into is that using this command sometimes fails. We have not yet gotten a solution from CrowdStrike. The other command that will uninstall the software is:sudo /Applications/Falcon.app/Contents/Resources/falconctl uninstall -tUpon entering that command, we are prompted to enter the management token. The prompt is:Falcon Management Token:I remember several years ago working with some scripts that would respond to password prompts and enter the password needed. Unfortunate

Hello,i have troubles to reset the PW of a hidden Admin account we have on our local clients. I got the message that the password could not be reset because the old password is needed. In this case i delete the user and recreated it again, this now returns the same message."Local admin user exists. Resetting password... An error was encountered while attempting to change the password. /usr/bin/dscl exited Permission denied. Please enter user's old password:<dscl_cmd> DS Error: -14090 (eDSAuthFailed) passwd: DS error: eDSAuthFailed."Is it possible to do a "hard" delete of the user without knowing the password?

Hi Team, Operating system crashing post upgrade form Ventura to Sonoma, happening for multiple endpoints. is there any fix.

I was wanting to see if this is possible before I sign up for JAMF NOW for my home devices. Are you able to use JAMF NOW to turn off the Hotspot feature on a managed iPhone?  So, for example, I have a person that I have restricted access to certain sites, but they have gotten around that by using their Hotspot on a phone that I am providing.  If I put the phone on JAMF NOW, can I turn off their hotspot functionality? Thanks.

Just wondering if anyone has come up with an extension attribute for Intune integration. Looking to use a smart group to keep track of devices (or users) not yet enrolled in intune.

We are relatively new to the Jamf / MDM scene. I have a weird issue that I thought maybe someone could explain.I deployed a staff member into a Mac with Jamf Pro. We have his machine in a static group, and there is a configuration profile for a hidden wireless network that we push to our non-Windows devices that we scope for that group.This new staff person randomly was not getting that profile for the wireless network pushed all of a sudden. Other profiles we have set up for that group were still pushing, but not that one. It worked for a week or so, then yesterday it stopped.After inventory updates, etc it still wouldn't push. I was only able to fix it by specifically excluding that machine then "unexcluding" it. When I removed the exclusion for that machine, it immediately connected to that network again.Is this just a bug / quirk? A known issue? Something we are doing that isn't

I'm pretty new to Jamf, and I've never set up iPads for a school before. I'm wondering how I can set up Jamf to let students and staff use their Google credentials to log in to the iPads.My idea is to have students and staff log in using their Google info. And for the staff, I want to give them extra permissions to manage the iPads that students use in class, like locking the screen and sharing the screen with the Student iPads.Right now, I've already enrolled the iPads with Jamf and Apple School Manager. Any tips or advice on how to move forward would be greatly appreciated!

We're currently in the process of going away from using Umbrella with Anyconnect. We use the Choices Packager 1.0a1.scpt to create our pkg's. Everything works, but the only thing I notice is that throughout the day, the client does a reconnect. When I'm in the office I'll notice popups throughout the day saying it's reconnected. I'm plugged in to the LAN and not wifi. 

Hey all!Wondering if there is currently a way to disable Sensitive Content Warning in Privacy & Security specifically. The setting is turned off by default but we're looking into not allowing users to toggle it completely. Is this possible?

Hi All,looking for some advise when it comes to patching MS Office and quickly - Currently I have a config profile deployed to the org to help manage this but it seems to be slow..Im also looking at "Installometer" and currently going through testing but ... Im just looking to see if there is anything else out there that can help me update MS office quickly and easily on the mac.. ThanksRob

Is anyone else seeing an increase in clearing teams cache to get it to open? it started a month or so ago, and has only gotten worse. clearing the cache takes a few seconds, and ive even added an app in self service for my users. 

When I upload connect login config profiles from the configurator app the profiles are blank.They still see to work but I was wondering if there is any advantage to uploading plist in application settings.  

Hello,Is there download URL for Safari 17 for Ventura? Thanks!

Does anyone know how to disable the macOS Sonoma Large Clock via Jamf Configuration Profile or Script?

During our deployment we utilize jamf connect for account creation and for password sync thereafter. We don't use connect for login AFTER deployment (we have a policy in DEPnotify that resets authchanger). All is well and good until a macOS update comes along and machines revert authchanger to jamf connect. We have contacted jamf and were told it's a product issue. Now, to fix the issue so it doesn't keep happening. The idea is to place a dummy file on machines DURING enrollment with an extension attribute to verify the file's existence (report a value of true or false) and pull the configuration profile for jamf connect login (excluding a smart group with membership based on extension attribute data). The file/policy is done. The extension attribute is done and reporting correctly.  The issue is I can't figure out how to scope a smart group based on the given data. Has anyone done this? Is it possible? Is there a better way to do it?

Hi,I'm using Jamf School and ran into the following problem:Upon installing macOs (Macbook Pro M1), I am receiving an error:Enrolling with management server failedUnexpected errorMDMResponseStatus: 401I have tried to move device to trash or unmanage it, but nothing works. If I wipe macbook and try again - problem happens again.This is how the macbook shows in Jamf School: Anyone can help?

Has anyone figured out how to configure the Camera and Microphone options programmatically? The configuration for "When visiting other websites" under "Camera" and "Microphone" do not appear to be stored in ~ com.apple.Safari. I'm guessing they have been tucked in some sqllite3 db somewhere. I disabled SIP so I could run opensnoop ,hoping to witness the file modification while changing the preferences but came up with nothing. Has anyone come up with a way to set "When visiting other websites" other than manually?

Just curious if anybody has ran in to this before. We switched our office update pkg to include Teams and we didn't remove the autoupdate portion. Now that we switched to it, we're getting quite a bunch of users where teams doesn't open or when they open it, there is a message at the top(screen shot below). For some of the devices, it's auto-updating to the latest version. I'm doing some testing on my mac that removes all the office/teams files and plists. For some reason, my device is still trying to update Teams. I'm testing with the screenshot below. It looks like it's removing all the files, but not sure why it keeps trying to run the update.   

Hi Team We are getting this Error for all the users after upgrading the Jamf connect. 

Hello, I use the Erase-Install to update/upgrade our Macbooks. But i have a problem. Task is works, macbooks download and install the package then reboot the device. But after reboot erase-install task start again then it dowload the same package again. And when i check the logs from jamf pro, it is "Pending" stiuation. Can you tell me what is wrong?Thank you. 

HiWe have a customer with managed Apple MacBook Pro 16" (M2 Pro, 32GB, 512GB).As a backup solution they use the Synology Active Backup for Business solution with the Mac agent.I face problems with the creation of the hidden user, which is need for backup tasks, etc.URL: https://kb.synology.com/en-me/DSM/tutorial/Backup_failed_because_of_hidden_user_issuesThe creation of this hidden user fails, when the password of a filevault enabled user is needed. Steps I tried already are:- Changing the user password to a simple one (No special characters only letters and numbers)- Used administrator account with filevault transfered token.- Tried the root account with filevault transfered token. I didn't disable Filevault, as this would be my last option. 

OK hopefully somebody can help or explain. Let's say we have the following setupA Jamf Server on premise with 2 Distribution Points also on premise only.Distribution Points setup:Public DP = FailoverUS DP = PrincipalNetwork Segment192.168.1.1 - 192.168.255.255 = use Public DP10.0.0.0 - 10.255.255.255 = use US DPok so now we have devices that work outside the LAN at home office. In Jamf I can see for example last reported ip 192.168.1.10. Meaning since he in the range of Public DP the computer should use the public DP. But if I start to install an app from self service I can see in the log file that the device tries to mount the US DP first then fails and then switches over to the failover DP which is the Public DP.My question now why is the device not taking the Public DP as the 1st try since the device is in the range of ip addresses from that network segment Public DP.

HI , I've been trying to get new recovery key and store them in JSS with no luck .I set it as it says on manuals :it get it fails but no errors and no key : anyone made it work? there is a bug I'm not aware of ? Regards ,Meir