I'm aware that JAMF has the "Wipe Computer" MDM command, but for security reasons, this doesn't go far enough. After the MDM wipe is complete, the device is still usable since it just deletes all the data and does a reinstall of the OS. I'd like to know if there's a method to remotely wipe the entire drive of a machine like what you can do in Disk Utility. That way if a device is stolen I can render it completely nonfunctional. 

Hi,We sent a lock command to a Mac (it was showing vulnerabilities in our antivirus system)It picked it up but the user put in the wrong 6 digit code multiple times and now shows the below times before she can even type in a pin.Apple Silicon Mac on Monterey 12.4.How do we get the Mac unlocked?Thanks.  

Does anyone have recommendations for installing Jamf Infrastructure Manager? I am receiving the attached rollback error after initiating the installation and entering the verified parameters. I used the following as resources: https://hcsonline.com/support/white-papers/installing-jamf-infrastructure-manager-on-a-windows-server https://docs.jamf.com/infrastructure-manager/2.1.0/Installing_a_Jamf_Infrastructure_Manager_Instance.html The system settings are as follows: Windows Server 2016 x64 VM (patched, latest build).4 GB RAM80 GB HD w/ plenty of disk space availableJava 11 w/ path configured I currently have a ticket open with Jamf but so far the troubleshooting suggestions have been fairly basic steps that I had already taken like ensuring the FQDN is used for hostname and installing from an elevated command prompt session. The login credentials for the API user are also valid. The installation log is extremely verbose but I parsed every single line. There is a single 1603 error

Students often use a hotspot on campus to get around our firewall and filtering.  I'm trying to find an effective way to reconnect them to our school ssid if it's detected.  I created a smart group to detect if they're off campus based on their ip address (this works) and then set up a configuration profile with a network payload that connect to our school ssid and scoped it to the off campus smart group (this works intermittently).  Has anyone come up with an effective solution for doing this?

Job Title - Citrix AdminLocation - Bloomington, ILType- Contract Job Description: Desired candidate will serve as L3 admin, who will help us support the remote enterprise DC from offshore.•              Provide technical support, monitoring, maintenance and trouble-shooting as necessary to keep DC infrastructure up and running.•              Manage Infrastructure from build to decommission•              Build/patch/upgrade/install /migrate/decommission Servers / applications on need bases.•              Handle alerts/incidents/work orders/change request/problem records/ticket analysis/RCA as a part of support team•              Work in synergy with other su

Hi Jamf team,Currently macOS 14 Sonoma Beta version is released, and we are actively testing the compatibility on same. Please do share any challenges faced with this version and when is the actual version release expected ?Moreover, when will be CIS benchmark for Sonoma will be released ?Thanks,Siddhi Desai

Please find the job description below: Job: MAC Engineer Location: Richardson,TX or Frisco,TX or Bloomington,ILType: Long Term Contract Job Description: Responsibilities of Macintosh Workstation Steward:Review and Approve/Deny forms for supported workstation type. Examples include Workstation orders / Workstation enhancement requests, security access requests, and any new software that is in consideration of being brought in.Manage workstation types and workstation profile(s)Represent Macintosh customers regarding enterprise workstation decisionsKnowledge source – providing information about available productsFacilitate creation of workstation training / Job-aidsCommunicate client environment changes to business partnersParticipate with the Client Integration TeamProvide and maintain a test environment for areas to test products (ex: jamfcloud.com)Load and test workstations as needed – Physical workstations in GC LabWork any incidents or requests assigned to 3rd level wo

We are seeing a chronic issue where new and re-enrolling DEP devices, right after MDM enrollment screen, screen goes black or reboots, completely skipping account creation, etc. Boots to login window and blank username and password .This has been a HUGE issue as we drop ship laptops to users to set up their local accounts, then receive their software for their first day, or when they have had their previous computer replaced.One of two things happen in the JAMF device recpord1. Partial record showing DEP - serialnumber. Device is not managed2. Full device record with what looks like all the info, but device is not communicatingWe end up, in most situations, walk user through Recovery. Basically wiping and reinstalling macOS. Sometimes, the proceeding setup is successful, but have had times where it happens again.JAMF support has not been hugely helpful.The saw our activation could was expired, we updated but are still seeing the issue, even after the 10.48.1 update (JAMF Pro). We are h

As the subject says. Working on redirecting the logs for a user account generating event to SIEM.

Hello, I'm tasked with rotating the firmware password on our fleet. Clearing and setting is fine, either using a policy or a simple script. My issue is that the old password could potentially be one of two values. Both are known so I was thinking of future-proofing with a script containing an array that would attempt to clear it using any values in that array and set the new password once it succeeds. I'm not a bash expert so before I go down that rabbit hole I was wondering if anyone has had to do this, and if someone has already gone to the effort of writing such a script that they would be willing to share. I am aware of solutions that will store a temporary file containing a password in an obscure folder, but that's not an option for me since my users are admins on their machines. Here's what I have so far, the script sets an array with the possible current values and verifies that a password is set. From there it verifies the passwords in the array and uses

Hi,We are implementing Jamf Pro and want to implement a operating system patching policy can I please get some guidance or help on how you guys have done this? Just after a weekly checkin to see if any os/safari updates are required Thanks in advance  

I thought I would share a guide I made on how to add Macs to ABM.https://github.com/kylejericson/JAMF/blob/master/Guides/Adding%20Macs%20to%20ABM.pdf 

Version of Loom that I'm currently running on the machine that I use to create packages is on Version 0.171.0 while the most recent version listed in Patch Management is 0.170.4.  Not sure where JAMF is pulling the version numbers for Loom from but recently the information has been off with the versions that we're receiving.

Hello,I have followed all the steps in this manual. https://learn.jamf.com/bundle/jamf-pro-documentation-current/page/Device_Compliance.html.I install portal company from jamf self service.Then I enroll device to intune.In intune I see device with compliance state.Every think look ok, but when I start use browser chrome or safari in aad logs I didn't see complinace state or device ID.Do you have a same issue?How to force browser to use intune certificate? 

Hello Folks,We have an interesting request that came through recently and are looking for some guidance.There are a handful of employees using Apple Notes and they would like to backup this content to iCloud. We have Apple Business but are not actively provisioning accounts for employees. As a matter of fact, we are just blocking iCloud across our environment. We are governed by HITRUST and have to be mindful about what content is stored, especially on personal accounts.  We are just trying to find a way to protect against data loss for these individuals. Is is possible to force iCloud logins only to company-owned accounts? We really don't want to deal with activation locks, etc. in addition to the aforementioned DLP concerns. Thanks!

We have Microsoft Intune configuration configured for device compliance. There is an app in SelfService for them to Register with the Company portal.What I would like is a prompt or notification to the user that they need to register and if they don't it nags them again.

# This is a script I found for Chrome, it runs successfully in CodeRunner, but I can't move the file where I want:Any help would be appreciated !/bin/bash CHROME_BOOKMARK="$HOME/AppData/Local/Google/Chrome/User Data/Default/Bookmarks"alias bmcsync='cp "$CHROME_BOOKMARK" "/d/someRepo/b-1 backup/5-1 bookmark/"' I added the path to the end, but get an errorif I use "man bmcsync" I get command not found

Hi,We're a school running Ricoh Savin C3500 printers on Macbook Pro laptop (Ventura).I want to deploy a full printer installment to our staff laptops. Currently, I can only deploy a printer driver. It's a pain that we have to match the laptop operating system to a specific Ricoh Savin driver. So everyone time Apple updates, we have to redeploy printers to all laptops.Our vendor has set up our printers using ip addresses. Ex. in VenturaNote we  using the Line Printer Daemon - LPD and choosing Select Software to browse to the Ventura driver for the printer. Does anyone know how to build this into a script or package to deploy to laptops via Jamf School?Thank you,Trenia   

Hi everyone, I'm sure that this subject has been talked about, but I haven't been able to find it. My question is: Can you run two MDM solutions at the same time? I have both MS Intune and JamF available to me and I was wondering if it was possible? I don't think it is, but I want to make sure. - Thanks

Reset local account password keeps failing. Apparently this is due to the local account being secure token enabled. So what's the best option? We deployed a generic local account (standard user) to a lab. For some reason the account works fine, then the next day, no one can login. Like the password changed. To avoid having our techs constantly resetting the local account password, I wanted to deploy an ongoing policy that resets the password, but that's not working.

Hi All,We are setting up the JAMF Pro - ServiceNow integration and it seems that on the Jamf side I only needed to provide an API account that has Read access to Computers and Mobile Devices.  I set this up and I get the below error on the SNOW side of things. I am not finding any details on the error.   What am I missing here?   I do use  SSO in Jamf, but in this case I am using a non-sso local account created in Jamf.  I have confirmed we are adding our JAMF URL to the SNOW connection config.  I should just be providing the https:/orghere.jamfcloud.com URL without any extras I assume? This is the error we see in SNOW when trying to test the connection we setup.Error: Unable to make a connection to JAMF API call. Please check your credential configuration. Check system log for more details. HTTP return status code was -1 (sys_script_include.3fa7da3673b210104ae4b41afaf6a727.script; line 57) I appreciate any help you may have!-Dan 

Not sure what's going on but I've setup the JAMF DEP automated enrollment.I've been able to successfully enroll 20+ macs in the last week, but all of the sudden today, my device is not enrolling correctly. All devices that are being enrolled are showing "Unmanaged" and the JAMF binary is missing from the /usr/local/JAMF folder is missing. Oddly enough though, the base MDM profiles are coming down as well as JAMF Connect package.  

Hi AllI am having difficulties with HIP testing from Global protect to detect for Jamf Pro on Macintosh devices. We use the Cloud based Jamf Pro and the only options for HIP Objects for this is either for a plist or Process. Plist is out of the question (Unless someone can hopefully prove me wrong) and the issue with the process that the binary that is on the Macs is under /usr/local/bin/jamfAgent.     This does not actually appear as a running process but as a file path (in a hidden directory) so GP HIP can not identify it. Has anyone had any experiences with this please who can advise me how they overcame it.  If anyone also knows the actual physical running active process that is running when Jamf is installed, I could use that although I can't see anything in Activity Monitor as believe it may use the MDM process or something similar.Many thanksStuart

Hello Jamf Nation! As many of you may have noticed, Jamf Pro version 10.49 introduced a new authentication mechanism for interacting with the Jamf Pro and Classic APIs. We're excited to provide a more modern and secure solution for API interactions! Documentation on the API Roles and Clients feature can be found here with sample code and additional details on the Jamf Developer Portal. In January of 2022, coinciding with the 10.35 release of Jamf Pro, we announced the deprecation of basic authentication for the Classic API. We originally planned to remove support for basic authentication by the end of 2022, but community feedback indicated that bearer token authentication was not a sufficient replacement for all consumers of the API. With two authentication mechanisms now available for both the Classic and Jamf Pro APIs, it's finally time for us to say farewell to basic auth. Removal of support for basic authentication with the Classic API is planned for March 31st of 2024.&n

Hi All,Does anyone know how to curl the policy logs? I know it can be found in computer history but I want to pull the actual policy logs from the policy itself.Currently there is no published API end point for this but has anyone managed to find out how to get this page?Thanks!