Chrome is removing itself from the dock after receiving today's Chrome update via App Installers.

Hello I am new to scripting and i found this script online and i showed it to my boss he said "the script is good and it will work" he then asked me "how would that script look if it were to be in jamf extension"  Here is the script i showed him i am assuming we are going to be using this script in jamf attributes extension but for it to be valid in jamf do i just need to add a results tag? how can this script be acceptable as a jamf extension?   

I've been attempting to deploy the latest creative cloud software installs and encounter the following error when running the policy. Installing the PKG outside of Jamf works without issue.Checking for policies triggered by "Acrobat2023" for user "username"...Executing Policy Acrobat 2023Mounting Casper_File_ShareInstalling AcrobatPro2023_SDL_Install.pkg.zip...Installation failed. The installer reported: installer: Error - the package path specified was invalid: '/Library/Application Support/JAMF/Downloads/AcrobatPro2023_SDL_Install.pkg.unzip/AcrobatPro2023_SDL_Install.pkg'.Submitting log to https://mdm.domain.edu:8443/  Any suggestions?

I've seen a bunch of posts on how to set Adobe Acrobat as the default PDF handler on Mac OS, but it seems as new versions of the OS comes out many of these may have broken. We are currently running Monterey, is that any methods that work on this OS? Thanks in advance.

Does anyone have any guides within the past 3 years for getting the dev environment setup for jamf pro? Everything i find online is from 2016-18 and rather outdated. I want to test the LAPS but dont want to enable it in prod incase pulling the password doesnt work. 

We have a Mac which installed the macOS 13.5.1 update in the afternoon at 14:48.This is confirmed by the user as the install.log (/var/log/install.log)In the afternoon at 14:36 a script was running which checks and reads the macOS version. The corresponding policy log says that he still had macOS 13.5 installed at this time (14:36).This is another confirmation that the user has made the macOS 13.5.1 update in the afternoon at 14:48.Now to the unclear:In the Jamf under "Hardware and Software history" it shows that he already installed the update in the morning at 09:54:From where did Jamf get this info?Has anyone else observed this?(We have not observed this phenomenon on any other device)

Hi, I have a few .apps that i need to deploy to users devices. I have created a script that copies the files from a temp location to users/applications however when the app is opened i get a warning saying the app is not trusted etc. My question is what is the easiest way to deploy the .apps and also prevent the warning message from appearing?TIA.

Details shows "Deferred enablement appears to be active for user"Disk Encryption is success.Kicked off 4 iMacs and they all show same Details.Any suggestions?   

Hi All, Our Macs all reboot when a new MacOS patch comes out. We've had JAMF pro for over a year and I don't think this started till 10.14.1. Our users get a pop up saying 'Updates were installed and the system needs to reboot in 5 minutes'. Oddly enough my machine got the pop up and it didn't install the update. After talking with JAMF support when this happened on 10.14.2 we added restart options to NOT reboot if a user was logged in. That apparently did nothing. Any other suggestions?

How does one request a Safe Internet category change for a site?Example: ducksters.comCategories: Video Games, EducationI block video games, but this IS an educational website. Shouldn't the category just be education, or at least be prioritized as educational? Because I block video games this educational site got blocked. How can we manually change a sites category and/or request that a site be re-evaluated and the category possibly changed? As it is I created a custom allow rule for the site.

Hi All,We have got the requirement where we need to push same day update to all MS Office apps and macOS update. We have pushed MS office apps using a complete package with teams.Thanks

Hi All,I need to deploy MS Defender using Jamf pro to all managed macOS. I am following the instruction mentioned by Microsoft on Set up the Microsoft Defender for Endpoint on macOS policies in Jamf Pro | Microsoft Learn. But I am not able to navigate to Settings > Endpoints > Onboarding. I don't see onboarding option. I do have Global Admin access in Azure. Do I need to get any other access to access the above mentioned path please?  Thanks. 

I'm trying to deploy some apps to a batch of macOS devices using Jamf Pro, but every time I initiate the deployment, I receive an error message with code 432. Has anyone else encountered this error before, specifically error code 432? Please give some guidance to solve my problem.

We recently upgraded our PaloAlto firewall and are having issues downloading files on Macs. Files start out fast and then suddenly decrease on the clock to "Days" instead of "Minutes". Our security team says that it has to do with TCP Window Scaling. They say that TCP Window Scaling, is off by default on a Windows system, but on by default on a Mac. Is there a way to disable TCP Window scaling on a Mac, via a terminal command that anyone knows of? Thank you all in advance!

We used to sync classes down to Jamf from Apple School Manager, but during the summer transitioned away from that and also transitioned from AD to Jamf Connect. About a 1/3 of our staff Macs still have the EDU profile on them which is preventing rosters from Apple School Manager from populating via the teacher's Managed Apple ID. On Jamf Pro, the user currently assigned to the Mac does not have any roster data associated with them nor are they in any classes. The EDU profile left behind on the machine shows as being assigned to the current local Mac account. The handful of Macs I checked do not appear to be running the command to remove the profile. Any ideas on how to resolve this?

So we know that JAMF recommends to enable HSTS on Jamf Pro on-prem instances. However, I find the article lacking in several aspects.If we start with what I'm most curious about - Why? For instance, these specific questions come to mind:* If HSTS isn't enabled, can the MDM connection be downgraded to HTTP when the device is already enrolled, and thus can the device be tricked into executing MDM commands on either a HTTP session or a HTTPS session with an invalid certificate? Is the user prompted in this case and can the user choose to continue?* Is the HSTS recommendation meant or administrative access only instead?* Is the HSTS recommendation there to prevent MITM attacks for initial enrollment only? Or a combination of that and administrative access? In essence, describe the risks if it isn't enabled in a JAMF pro specific scenario.* Are there any downsides or pitfalls when enabling HSTS? A far-fetched thing would be that it automatically also enables certificate pinning so that an u

I've got a device that shows not having checked in since 8/21 but the end user has been using it daily. She went to use her phone this morning and it said iPhone Unavailable, check back in 15 minutes. No love after 15. Remote commands are not getting to the device and she cannot use her pin to unlock it bc of said message. Hard shutdown and restart did not help. Any thoughts?DeclarativeManagementPending

Hello, we are looking at implementing SCEP Proxy with SecureW2, when you setup the external CA with the SCEP Proxy settings and upload the Change Signing and CA Certificates, does this affect the Jamf Pro built-in CA?  We use the built-in Jamf Pro CA for enrollment and don't want to change that.  Does this external CA cause you to have to re-enroll all your devices?

Hi Everyone,  I have set the Mac up to accept Yubikey account creation. It queries AD then creates an account if it finds the user's certificates from the Yubikey.  However, when signing in, it repeatedly prompts for a keychain password saying  "macOS wants to use the "login" keychain." Any ideas on how to stop this from popping up, or why it does? I would also prefer it asks for a PIN over password if that prompt is required to get full use of the mac. Also, other items keep prompting for the Keychain instead of the pin as well. Such as Spotlight, Transparent Network Proxy for Apple system services, security, and ScopedBookmarkAgent. But once I cancel those enough times, they do not prompt me again. But the macOS does. Any and all help is appreciated. Thank you.

Hi Nation, I hope you are all well.I am trying to set up Intune Integration for Compliance, however every article I seem to find is around Conditional Access which is legacy, I can not find anything that details guidance for Device Compliance and the Intune config. Does anyone have a good link ? ThanksBob - Reno

We have some computers where the screen will default to "Extend Display" rather than "Duplicate" for the built in screen. This works for returning accounts but not new ones and in our university setting we wipe the accounts at the end of each day so each account that gets made is seen as a new one and defaults back to "Extend Display". Anyone found any scripts or settings in or outside of Jamf that can solve this issue?

Hi All. I'm trying to change this value from NO to YES.This is located here: /Users/username/Library/Containers/com.microsoft.Outlook/Data/Library/Preferences/com.microsoft.Outlook.plistIt essentially ensures that MS Teams is auto-defaulted to the preferred Meeting type when creating a new Calendar invite. I'm not sure what command/script I need to use for this.

While doing some filevault key refreshing via script, i got a few (less than 10%) of these errors, and i cant seem to find any info on error 45 for filevault. DOes anyone have any kinf of info about this?"fdesetup exited with return code: 45."

Can anyone shed some light on what I need to do when it comes to the 'Certificate Download' and 'Upload Additional Certificate' options? I've went thorough all the docs I can find and the most helpful line is this:"save the certificate in the appropriate location dictated by your web server vendor." That just doesn't help me much. I have our images on an apache2 web server and they working correctly using SSL. They are accessible inside our network and out. When I attempt to add our wildcard certificate as the 'Additional Certificate', I get a message that it has not been uploaded. You can see the process in the pics. Does anyone had more detailed information on what to do with the certificate I get from the Download button and what certificate to upload as an Additional Certificate? When I use the test button and use a valid url to a user image, I get this:

Is it possible to allow an app to add proxy configurations with a configuration profile, similar to something like full disk access?We're not currently using Forcepoint Neo as a proxy, but this prompt appears during the installation of Forcepoint DLP. If it's not allowed here, the installation will not complete until it's allowed through System Settings/Preferences. I've added configurations for this app to allow network monitoring, disk access, system events, etc., so I assume it's possible here and I'm overlooking it.