Hi All,I'm trying to create the Silent KFM option with OneDrive using Mac Configuration Profiles (this is my first Jamf instance, so I may just be missing something simple here).When I deploy the configuration profile there doesn't seem to be any changes made to the App itself.Using separate profiles, I was able to give full disk access and put OneDrive into the Insider Ring successfully.Only when trying to do any kind of KFM option (silent or otherwise) I can't see anything change (for example, if I open the OneDrive app to configure backup manually, nothing is selected). It also won't block people syncing their personal OneDrives (which when I added my own personal one, it broke my Company Portal Registration, easily fixed, but it's an issue that repeats at least on the device I'm testing with).There are some differences that I've noticed myself with people who have been successful. Most people reference a company specific plist file but mine is

Hello Everyone, i have a Problem with 2 Devices, one of them ist with the new M2 Chip and the other One is an Intel Mac. Both of them show me that in jamf:  Personal Recovery Key Validation:UnknownBut FileVault 2 Partition Encryption State:Encrypted.I am able to see the Personal Recovery Key in terminal but there is a Problem with the transfer to Jamf. Ihad tried with jamf recon but nothink happens. Can anyone help please.

I have been trying and failing over and over today to get Graham Pugh's erase-install to work.https://github.com/grahampugh/erase-installSometimes it works but too often it doesn't. It often fails during the preparing stage before macOS Ventura installs. Other times, it finishes the preparation of the install and then does nothing. The Mac reboots. No install happens. I have literally spent my entire day today working with it. I thought maybe one of our security agents could have been interfering. I read about this possibility in the FAQ for erase-install. I have been running my tests from a Mac with no security agents installed. If someone has worked with this solution and been successful with it, I would love to know how you did it. The scenario is that we have several Macs that need to get upgraded to Ventura. The users are mostly standard user accounts on both Apple Silicon and Intel. When th

Hi everyonei'm trying to understand the best way to configure Jamf Protect with our jamf instance. I set up a smart group in jamf to alert users about security issues and that works fine.Unfortunately the jamf protect documentation is a bit incomplete imho. What are the next steps i need to follow? Any suggestion or guide to suggest?Do i need to manually remove the mac from the smart group?Jamf Protect has some removing capabilities or i need to clean the mac manually?

Hi,We are in the process of starting out with Jamf School for our 50 iOS devices. Due some internal policys, I might be in need of integrating AzureAD into Jamf School.How does it work? Is it only authentication (enrollment with AzureAD credentials) or does Jamf School "copy" username and store it somewhere (like syncing users from On-prem AD to AzureAD)?

Our config profile for blocking sharing works fine on macOS 12, but 13 you can edit the computer name in General / About just by clicking on name, Restricting the General prefs is not blocking About, but all other General settings.What have I missed?

I am trying to integrate jamf APIs to deploy in house app (.dmg or .pkg), I gone though the APIs but confused which one to use. I found https://developer.jamf.com/jamf-pro/reference/post_v1-deploy-package and https://developer.jamf.com/jamf-pro/reference/createpolicybyid relevant.I only know mac address or hostname of the device to deploy app on. How can we achieve it?Thanks.

Hi there So this "Seems" to be most recognized LAPS for MacOS - https://github.com/joshua-d-miller/macOSLAPS  Has anyone actually got this up and running? We had spends a few days so far messing with this but were not able to get it working properly, I think we are missing something small but important.  Thanks in advance! 

Local password sync issue with Azure/Entra and Jamf Connect. I have a user with 3 Macs.He changed his password on Mac1 with Jamf Connect. Cloud and local account passwords were successfully changed.Signed into Mac2 at Jamf Connect login window with new password, it prompted for his old/local password, accepted it, and everything is good.Signed into Mac3 at Jamf Connect login window with new password, it prompted for his old/local password and will NOT accept it. Using the local login with that same password does work, gets him to the desktop. He can then sign into JamfConnect using the MenuBar, it again prompts him for this local password, and fails to accept the same password he just used to log in locally.Jamf Connect logs show: Jamf Connect[1757:35a6] [com.jamf.connect:OpenDirectory] Password change failed! Error: One of the parameters provided was invalid.All three Macs are the same build/config. Not enforcing any other pass

I have a connection to WiFi, however when opening the Self Service app, there is a grey bar along the top of the iPad app that says “unable to connect to server”. I have restarted the iPad several times, connected to a different WiFi network, and nothing has worked. I am unable to download apps that I need. Please help!!

I'm trying to script a direct download of Citrix Workspace so I don't have to manual update the pkg for each patch. Unfortunately, the download link is a redirect, and the URL changes regularly. Does anyone know the URL for a direct download? My current script does this: #!/bin/sh curl -L -O "https://downloads.citrix.com/16002/CitrixWorkspaceApp.dmg?__gda__=1559853370_f26ea92eb50e024708c1e0cb9dc29474" mv CitrixWorkspaceApp.dmg?__gda__=1559853370_f26ea92eb50e024708c1e0cb9dc29474 /tmp/CitrixWorkspaceApp.dmg hdiutil attach /tmp/CitrixWorkspaceApp.dmg -nobrowse installer -pkg "/Volumes/Citrix Workspace/Install Citrix Workspace.pkg" -target / citrixmnt="$(hdiutil info | grep "/Volumes/Citrix Workspace" | awk '{ print $1 }')" hdiutil detach $citrixmnt rm -f /tmp/CitrixWorkspaceApp.dmg

Hi, everybody.One parent has being using Jamf Parent for a while with one of their kids. A few months ago they sent me an email saying it didn't work anymore. I asked for clarification, but I don't know if they never replied or if I lost the info. Anyway, nothing was done. A week ago a second child received their school issued iPad. The parent was able to scan the QR code and everything works. They have since sent me an screenshot of what happens when they try to scan the code for their first kid."The device is already added to your dashboard."However, they can't see it and, if they go to Settings, they can only see the newest iPad.Any ideas?PS: I tried adding the problem iPad to Jamf Parent from one of our devices and it worked with no issue.

Since Jamf Remote is deprecated, we are now disabling SSH in our environment. I've been able to do that with  "systemsetup -f -setremotelogin off", but is there any way to uncheck or hide the checkbox for "Allow full disk acess for remote users"?

Hey everyone,Google Meet has a PWA app (progressive web app) that can be downloaded to the Mac, here is the guide by Google:On your computer, go to meet.google.com.At the top right of your browser, in the URL bar, click Install The Meet app appears in your app dock.I wanted to deploy this app to my org in some way, but when I tried to create a package from my Mac, users got this error message:"Google Chrome cannot read and write to its data directory:/Users/***/Library/Application Support/Google/Chrome"which means it took my personal directory and deployed it to all org which created an invalid package.Any suggestions on how I can fix it / deploy the Google Meet app to my org by taking into consideration that's a PWA app? Thanks!

Hi there,What solutions are you guys using to elevate permissions for users temporarily. For now I've found https://github.com/SAP/macOS-enterprise-privileges/wiki/Using-Privileges but not sure if there are better solutions more tied to Jamf Connect itself?

Hey guys, I connected several macbooks via email invitation enrollment. Now on these computers on the login screen at the "normal " account also appeared a guest account. How to turn this off guest account? Regards

Greetings Everyone, Has anyone come across any tools or processes for automatically migrating Outlook 2011 PST(On My Computer) folders to an Office 365 Online Archive? Our Windows environment is using a tool from Barracuda that is handling the process automatically, we would like to find something similar.

Is there any way to customize the Google login window with JAMF Connect? Is it possible to brand the login window in any way with a district/company logo OR pre-fill the login domain based on smart groups in JAMF?

So I have enrolled into the feedback program for Jamf Connect and I keep getting this error stating: It looks like you have never logged into the Jamf Nation community with this account. Please click here to log in to the community. After logging in to Jamf Nation once, please log out of Jamf Account and back in, then return here. But I have logged into Jamf Community and use the exact same account. So I don't know what to do to fix it.

Hello guysI'm struggling with the OneDrive configuration without any luck, some settings are not being applied and I cannot understand why.I'm deploying OneDrive from Jamf's app catalog and with a configuration profile using .plist file I've created according to our organization's needs following Microsoft's documentation.The goal is:1. Allow sync using accounts within our organization only.2. Personal OneDrive account sync is not allowed.3. Disable the tutorial (this one works).4. Redirect known folders (Desktop, Documents) to OneDrive5. Redirect silently without notifications and prompts.6. The user cannot disable folder backup.7. Show notification that folders were redirected to OneDrive.8. Open at login (this one works). This is my .plist:What am I missin

@rderewianko helped me figure out how to check what account someone is signed in with in Google Chrome. We're a Google for Work shop so want to make sure people are signed in like we recommend so their bookmarks and settings are saved to their account for ease of use. Could also be useful for troubleshooting I suppose. If someone is signed into Chrome with multiple accounts it will display all of them. Next step I'd like to do is detect when the yellow warning icon appears in Chrome, where an account's password needs to be re-entered and Chrome currently is not saving anything to the account. I have it on GitHub too. #!/bin/sh # # check-chrome-users.sh # # Extension attribute to report which acc

A stand-alone macOS app to help MacAdmins more easily deploy Setup Your MacIntroductionAs announced during JNUC 2023, @leslie_h does it yet again by providing the MacAdmins community SYM-Helper, a stand-alone macOS app to help MacAdmins more easily deploy Setup Your Mac.Continue reading …

Hello,  I am having this issue where our student macbooks are not showing all the users in the login screen. Each macbook has around 3 student accounts (standard). When I turn on the laptop only two of the accounts show up along with the admin account. I have to sign in to either of the accounts shown and then log out to get the other student account to show. Any idea why this is happening? We have firevault enabled and I have been researching and Firevault comes up as a potential cause. Any suggestions or solutions to this?  Thanks

I am working on getting a lot of systems upgraded to macOS Ventura. Some of the systems are not compatible with macOS Sonoma, and we won't be making Sonoma available for a while. I had previously written a script to download the macOS Ventura installer. That script works very well. No issues. For this new script, I wanted to make sure that any older versions of the Ventura installer got deleted first. I want everyone on macOS 13.5.2. I don't want anyone to have to run a software update after upgrading to Ventura. Working from the previous script, I wrote this one. The "downloadURL" variable uses Parameter 4 in the Jamf policy. I fill in the download URL that I get from the Download Full Installer app. I use Parameter 5 to specify the macOS version that the script is downloading. This will be the name of the Install Assistant package when it is downloaded. I added a variable "installerVersion" to check the version of the currently installed macOS installer app if it's present. My int

Is there a way to configure a profile to keep the wifi password encrypted in ios 16 and higher?   As of now, if you press and hold the "encrypted" wifi password in settings, the actual password shows up.