Hello. Is there a way to enable the automatic backup in OneNote app for MacOS and set the interval using plist?

Hi all,We are trying to upload .csv files into Apple School Manager, and we keep getting this error:[OK] unzipped file: classes.csv.[OK] unzipped file: courses.csv.[OK] unzipped file: locations.csv.[OK] unzipped file: rosters.csv.[OK] unzipped file: staff.csv.[OK] unzipped file: students.csv.[ERROR] rosters.csv: CSV file is missing some headers, or the headers are not correctly formatted.Does anyone have an example of what a correct rosters.CSV file should look like so I can compare with mine?  My headers are in all caps ... would this make a difference?Thanks for your help.

Hello,We've recently noticed that user-initiated computer enrollment is now using a Quick Add package when previously users who initiated enrollment would have to download a CA certificate and MDM profile. This has been causing issues as the Quick Add package has not installed any of our Profiles and while those computers appear in Jamf, we are not able to push any management commands. This has happened with DEP enrolled machines too.Our team hasn't made any changes to the enrollment as far as I know.Any assistance would be greatly appreciated. Thank you.

I'm trying out the new PCM Device Compliance feature for macOS and am running into a problem. When running the "Microsoft Device Compliance" policy, it launches Company Portal, I login and it seems to complete the registration without issues. When I lookup the device in InTune, it's not there at all. In Azure I see the following:Join Type: Azure AD registeredMDM: NoneCompliant: N/AI configured the feature according to this technical paper: https://learn.jamf.com/bundle/technical-paper-microsoft-intune-mobile-devices-current/page/Integrating_with_Microsoft_Endpoint_Manager_Introduction.htmlAny help would be appreciated.

We have used Jamf now for about 6 years and think it has been stable and good (earlier on-prem, now Jamf Cloud). We currently have around 1,000 Mac computers and 3,000 mobile devices. We are in the middle of changing platforms, we are leaving Novell in favor of AD with Office 365.Those who are changing platforms, networks, etc. are thinking about whether they should have Mac, iOS devices, Android and PC under the same management tool. In this case it would be about Intune. Of course, this is not a good option for us in the Apple world, not something we would look forward to in any way. Jamf works well for us and we are satisfied.I would need some help with what is best to lift to convince my other colleagues to keep Jamf and not move everything to Intune. Which points/functions are important to highlight in order to convince the colleagues?In the long term, we had also intended to implement Jamf Connect or something similar to authenticate against Azure. How does it actually work? Can

Hello everyone,some of our users use a software called openLCA. As we had some issues with new versions in the past we distribute updates the way the last version stays. So in general they have two versions of this App on their systems.But my EA only finds (and reports) the wirst version. Can someone tell what is wrong with my code?Thanks.  #!/bin/sh ########################################################################## # A script to collect the Bundle Version of openLCA. # ########################################################################## PATH_EXPR="/Applications/*/Contents/MacOS/eclipse" BUNDLE_ID="openLCA" KEY="CFBundleShortVersionString" RESULTS=() IFS=$'\\n' for BINARY in ${PATH_EXPR}; do PLIST="$(/usr/bin/dirname "${BINARY}")/../Info.plist" if [ "$(/usr/bin/defaults read "${PLIST}" CFBundleName 2>/dev/null)" == "${BUNDLE_ID}" ]; then RESULTS+=($(/usr/bin/defaults read "${PLIST}" "${KEY}" 2>/dev/null)) fi done unset IFS if [

https://support.google.com/chrome/a/answer/9301891I've tried the "CloudManagementEnrollmentToken" file placed in the directory through JAMF as described above with no luck. Reinstalled chrome, signed existing users out and back in, but nothing seems to trigger enrollment or show as enrolled within google admin's "managed browsers" The token itself is a simple text string and nothing more. Example value:"37185d02-e055-11e7-80c1-9a214cf093ae" Below is the limited instruction on setting up this feature of chrome/g-suite **Option 1: Use a policyPush the token to your browser as a policy named CloudManagementEnrollmentToken. Setting policies on Mac devices requires the Apple Profile Manager. Option 2: Use a text filePush the token in a text file called CloudManagementEnrollmentToken, under /Library/Google/Chrome/. This file must only contain the token and be encoded as a .txt file, but should not have the .txt filename extension.** Just curious if anyone has had success remotely pushi

Hi Team,I am trying to create a Jamf Pro Classic API Connection in OKTA Workflows. I created a service account in JAMF Pro granted Administrator, Standard user and Full privileges. When I try to test the connection. I am getting HTTP 401 Authorized Error. I am not finding settings to grant access to  "Make sure that your Jamf Pro Classic API account has access to the /JSSResource/activation code endpoint"Appreciate any help or pointer!Thanks,Kalai

Hi. This is kind of a weird one. We want to create a configuration profile that forces VPN to always stayed toggled on, so that any internet activity is monitored. Obviously we would want this setting to be locked/grayed out. Is this possible to do for iPads/iPhones?Note: We already have a separate configuration profile in place that has the actual VPN connection configured. We just want to make sure that the general VPN setting within the mobile device is locked to ON at all times.Thanks.

Best way to setup auto-restart on a nightly or certain day basis. I want to do it without installing a package to force the restart

Very much a newbie here and not good at writing my own code (I'm very much a copy paste guy when it comes to creating plists etc) - I find that there is no easy way in the JAMF Pro UI to reboot machines in a static group - can anyone give me an easy guide for a policy or config profile that just performs a simple reboot on a machine that I can apply to a static group?

Hi All, I'm wondering if anyone else here force installs chrome apps and how you do it?Right now, I am trying to use the com.google.chrome.plist in /Library/Preferences.That method works great for all other chrome settings that I want (for example I have developer tools turned off, populated the blacklist for extensions, etc), and it's easy to deploy and update with jamf. BUT I cant get it to actually force install any extensions.chrome://policy lists everything right and even says the status for that policy is "OK"any ideas? or a better method? thanks!

Any suggestions welcomed. How can I force sync the Desktop to OneDrive with Jamf Pro? 

After a LOT of head banging, I finally am able to deploy Malwarebytes Endpoint Agent to computers via JAMF. I wanted to share to help others who may be looking for assistance. Please feel free to tweak any of this as there may be better ways, but this worked for me. FYI … this is the deployment method that worked for me in JAMF 1) Log in to the Malwarebytes Nebula platform.2) Go to Downloads.3) In the Mac section, click Download to download the Mac Endpoint Installer to your local device.4) For JAMF the brackets [ ] are incompatible, replace the PKG filename brackets to an underscore enclosing the account token. File name downloaded Setup.MBEndpointAgent[xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx]_.pkg New file name Setup.MBEndpointAgent__xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx__.pkg* 5) Upload the renamed package to JAMF6) Upload & Scope “Malwarebytes KEXT Whitelist”7) Upload & Scope “Privacy Settings Whitelist - Malwarebytes Protection”8) Create scrip

Hi all, This may be a stupid question but I am relatively new to managing computers with Jamf (only 5 managed so far). I have been testing enrolling my test MacBook Pro and unenrolling a few times to make sure everything comes down as we want it. Instead of unenrolling the device I decided to test out the "Remote Wipe" command in Jamf, which worked perfectly. However since reimaging (and reimaging a few times through the normal process, as well as unenrolling and re-enrolling) the Mac and when doing self enrollment or email enrollment I'm being asked to install the QuickAdd package instead of enrolling by installing the CA certificate and Mobile device profile. This only seems to happen on this one computer, if I go to any other Mac it enrolls with the cert and profile. What is causing this one Mac to enroll with the QuickAdd package and is there anyway to configure which way a device enrolls? We did have a an image set up under Settings -> Computer Management ->

This script will completely remove Trend Micro security from the MacWe saw that the official uninstaller didn't completely remove all components.Newer versions might work but this script works for us anyway. #!/bin/sh # Copyright: EVRY # Filename: UninstallTrend.sh # Requires: - # Purpose: Removes Trend Micro Security # Contact: Anders Holmdahl <anders.holmdahl@evry.com> # Mod history: 2018-01-31 launchctl unload /Library/LaunchDaemons/com.trendmicro.icore.av.plist rm /Library/LaunchDaemons/com.trendmicro.* rm -r "/Library/Application Support/TrendMicro" rm -r /Library/Frameworks/TMAppCommon.framework rm -r /Library/Frameworks/TMAppCore.framework rm -r /Library/Frameworks/TMGUIUtil.framework rm -r /Library/Frameworks/iCoreClient.framework rm -r /Applications/TrendMicroSecurity.app killall -kill TmLoginMgr killall -kill UIMgmt exit 0

I've been working on setting up MDM profiles and implementing Secure Token for our devices using Jamf Software, and I've run into a bit of a roadblock. I'm trying to establish MDM profiles on a list of devices using Jamf Software. These profiles are supposed to work in conjunction with Apple's Device Enrollment Program (ADE).I've double-checked my configurations, ensured that the devices are registered correctly with ADE, and waited for an adequate amount of time to allow for profile propagation. Still, the issue persists. Has anyone else faced a similar problem when integrating MDM profiles, ADE, and Secure Token using Jamf Software?

I was wondering if there is a way to manually force a device to check if it has any apps it needs to install from the App Installers. Similar to running "sudo jamf policy" to see if there are any new policies updates, I was wondering if there is something similar.I had an application that I set to auto install, but it was stuck in "processing" for a whole day. It didn't install the app, until I flipped the deploy to "off" then back "on"Thanks for any help!

We use a mac mini as our print server.  Initially we had our printers set to default to black and white but administration wanted that changed to default to color.  I made the appropriate changes in CUPS but our user devices are still defaulting to b&w.  Is there a way to push out these changes to our users?

Hi allIs it possible to deactivate a profile on multiple iPads via Jamf? Maybe over the Group or mark all Devices in on of the group.Best regardsPeter

Hi There, Any help documentation on how to Deploy Windows Defender 365 via iMazing for JAMF NOW?

HiWe use Jamf Pro. I have lots of items displayed in the dashboard of my account. That seems to make the dashboard very slow. It usually takes more than five seconds to load and display everything. I would like to clear the dashboard and only add a few items to speed it up and make it easier to find relevant information.Is there a way to clear the dashboard without having to go through all the items one by one and uncheck the "Show in Jamf Pro Dashboard" checkbox?Thanks in advance!Manuel Brotz

Greetings,  I am trying to support teachers using the classroom app on 2020 model MacBook airs with M1 chips running macOS 13.2 or macOS 13.2.0 Student computers are identical. Both groups are on the same wifi network. Both groups are not signed in with manage apple ids and join the classroom with a join code following the 1st pathway below. ####### There are three (3) ways to do Apple Classroom and they are all currently MUTUALLY EXCLUSIVE. 1. No Apple ID or personal Apple IDS - This is the scenario in which teachers can create the class and give students 4 digit code. No management in the scenario but very easy to implement and flexible for after school programs etc. There are also some MDM restrictions that can be set to make sure students can’t opt out in settings. 2. MDM managed - this means MDM must have all the roster data for all classes, teachers and students. MDM pushes what is called an EDU or Education Profile onto the device and it automa

I need to push updates to my macs and it seems like the Jamf Software Update tool (yes, I know it's unreliable) from the side bar seem to disappear.Can anyone here explain what might have happened?

Hi everyone,I use JAMF School to administrate the iPads from our school. Most of them don't belong to a specific user, but are borrowed by the students for only one lesson and then given back. That's why the devices "collect" lots of stuff like photos or documents.Is there a way to delete only this user saved data from the devices without losing apps, group affiliation etc. ? I have found "wipe device", which seems to do this (?), but it's not very feasible to do it manually for every single device.What I'd like to have is a command that deletes only the user stored data, preferably automatically like every monday or such - not only for one device, but for every device in a group. I don't want to have to re-enroll the devices or lose their profiles, device group etc. Thank you in advance!(Sorry for mistakes, I'm not a native speaker ;-) )