Hi,I have noticed that when an app is deployed through Self Service and an end-user installs an app, there is a spinning circular "loading" animation that is displayed while the app is downloading and installing. For small apps, this isn't an issue because the animation is replaced with a "done" status quite quickly.For larger apps, like iMovie, Visual Studio, or Premiere, this can be an issue, because the end-user may believe that the app is stuck as the circular loading animation keeps repeating over and over again. This may lead the end user to belive that the app is stuck and may cancel the process. If the animation can be changed to include a % or a loading bar, then the end-user will understand that the app isn't completely done getting installed and will know to be patient until the "done" status is displayed. Can you change the status to include a % or a loading bar when an app is getting installed from Self-Service?

Hi all. I have searched for this specific issue on here and got conflicting results, so I thought I'd post. Two things that we are trying to achieve: 1) Change the prestage enrollment local admin password - this one is pretty self explanatory and can easily be done, however will only take effect for newly enrolled computers. Which brings me to 2) Creating a policy that changes the local admin password. I thought I was successful in this and sort of was. Scoping the policy to a couple of test machines resulted in successful change to admin password when authenticating for things such as software installs and preference changes. The new password even works when changing users in terminal (su administrator). However, the password does not work for initial login to the machine. In fact, it breaks the old password as well, so we are left with a machine that the user "administrator" is unable to log in. I realize this was long winded, so thanks in advance.

Does anyone know the process on a Mac that is run when you use Kerberos authentication/configuration through JAMF.  

Mac OS ventura:, Intel Mac mini, iMacs, and Mac Studios M1 - - so far I have 12 devices stuck in a boot loop. Had a few that started in June, and it's gradually increased. Some are at 13.3, some are at 13.5.Reset SMC, NVRAM, PRAM, first aid, can't get into safe mode. Held down option to ensure I was booting off the main disk - - Nothing is working. We've completely reset a few devices, seems to work for a few days then they go right back into a boot loop.Is it just my environment, or is this a thing from a recent update? If it is an update, is there a way to remove the offending files, or revert back without time machine? I can't even access terminal from the recovery assistant. No utilities option.

Below is our current configuration as we are trying to use our External CA to provide Computer and Mobile Device Enrollment. However when the certificate shows on the device, it shows as $COMPUTERNAME. I changed this to $DEVICENAME and get the same result. Additionally, when we remove the subject completely from the External CA configuration, it causes the enrollment to fail with the error "Your profile has expired".As shown we also have SCEP setup for our config profiles and the Subject config is working fine there. Any thoughts are greatly appreciated. This is on Ventura OS 

We have a configuration profile that's deployed to our laptops that was modified not too long ago containing various payloads and is now being removed and replaced with individual profiles containing only one payload each. I removed everything from the scope of the original profile and deployed the newly created ones in its place. I have been monitoring the removal of the old profile via a smart group and noticed that everything still has it listed as being installed in inventory even though the removal command succeeded. I just took a look at one of the computers in question and decided to redeploy the original configuration profile to it and remove it to see it it would clear up. What I noticed was upon deployment, there were now 2 profiles with the same name, one with the latest settings it had and one with the old settings. I double checked in Jamf and there is in fact only 1 configuration profile with that name. I'm now stuck with 369 computers that have this orphaned pr

For Mac OS ventura it seems like the old PLIST to edit wifi settings is no longer a thing. I keep getting prompted to input an admin password when I want to remove wifi profiles as a standard user.  

We have a group of students that travel to external school.  We have a Smart User group that shows all these students.  I have scooped this smart user group to a profile to create a wifi on their device to connect to the external school's WIFI.(turning off private MAC as well) I would like to send a list of the MAC addresses to the external school.  I can't figure out how to easily get a list of the devices and the WIFI MAC of those devicesInfoJAMF Pro 10.49All devices are mobile devices iPads with latest iOS 16.5+Total devices 2500+Total users 3000+Users in Smart users group to be targeted  30Any ideas or information on how to tackle this would be appreciated.-TechTroy

We are having an issue with one drive and being able to open xlsx files from it directly.  We made a Microsoft case and turns out, if you remove Jamf Management it works.   We get the error: Excel cannot open the file ___.xlsx' because the file format or file extension is not valid. Verify that the file has not been corrupted... But if you copy it locally it works.  Any ideas?

Hello,We are using Jamf Connect for account creation with Automatic Device Enrollment. Because of this, our user accounts are not managed users, per @rabbitt 's post https://community.jamf.com/t5/tech-thoughts/mdm-capable-mdm-enabled-or-mdm-managed-users-why-to-not-use-user/ba-p/276926 . We are trying to deploy user certificates but because they are not managed users, the certs go to the System Keychain. Exporting the cert and importing into Login Keychain is not an option for us. We know that we can re-enroll the devices to obtain MDM Enabled user accounts but it is inelegant. Are there other commonly used solutions out there of which we are unaware? How does your organization get around this problem? Thank you,Rafe Moody

According to the post below, (can be found at https://it-training.apple.com/tutorials/deployment/dm110 ) Setup Assistant should not let a user advance past the connection to a network screen. It should require a network connection to move on. This is not the case with our laptops. They are purchased through apple and enrolled in ABM. I verified serial numbers are in ABM. Any thought's on how to fix this? We have users not enrolling the latptop and they are never prompted to enroll the laptop later as the post says they should be.  "Prior to macOS 13, users could use Setup Assistant without an internet connection, and accidentally — or intentionally — bypass enrollment in MDM. With macOS 13, users need an internet connection to complete Setup Assistant on organization-owned Mac computers with Apple silicon or an Apple T2 Security Chip. After a Mac with macOS 13 is set up and connected to a network for the first time, it’s acknowledged as owned by an organization (in

Has anyone been able to push LogMeIn zero touch using PPPC files?

As our staff are returning to school, we have had a few laptops come back with no profiles installed.  Oddly the devices are still checking in and reporting inventory.  They have these failed commands At this point the only good option appears to be to set up a new device. Running the command sudo profiles renew -type enrollmentdoes reinstall some of the profiles - but then the user must accept - and that is different than the install from a prestage. Not really sure why this is happening or if there is a better solution.

Is anyone else seeing strange spacing with the columns in Jamf policies now? When I go to scope a computer to a policy, each column is not very wide, making the display for one computer be on multiple lines. Am I missing something that would allow for sorting this or extending the column size?This is what my machine looks like in that view... the MAC address takes up three lines... the username (only 8 characters max at our site) takes up two lines... the Serial Number takes up two lines... the OS Build takes up two lines. For folks with longer full names, it can take up to 8 lines (highest I've seen but possibly more).We did not have this same display in 10.47 and we skipped 10.48. I can adjust the column sizes here, but they reset to this as soon as I open the screen in another policy.

Hello All,I have two patch management sources, one for Apple Silicon/Universal applications and one for Intel applications.  When I attempt to populate them both, I receive a popup that the software title cannot be configured because the extension attribute already exists, rename the existing extension attribute to continue.  The JAMF Pro documentation says the same thing, to rename the extension attribute.  I cannot determine how to do this.  When I go to extension attributes, the patch management attributes provided by Jamf are not accessible to change.  Is it possible modify these or am I going in the wrong direction?  I appreciate any guidance.   

Hi guys We have 30 ipads at our school managed using JAMF.one user wants to be able to use voice to text but the microphone on the keyboard is greyed out.i have enabled dictation on the ipad side and also in the configuration profile in JAMF but the microphone is still greyed out.Do i need to also enable Siri in the configuration profile?Any help would be much appreciated.

Doing some testing as we are making a policy to remove computer records from jamf if they have not checked in after 160 days.I noticed if I delete a computer record from Jamf and run sudo jamf recon from that computer I get:Device Signature Error - A valid device signature is required to perform the action.The computer still has its MDM profiles and Jamf binary installed. Is this expected behavior? I believe in the past that Jamf would just create new computer record?  

My organization is new to Jamf. We are looking to see if Jamf has published documentation for when they will be ready to release updates for iOS 17/ iPadOS 17.Most importantly, are there any changes we need to be aware of so it doesn't break anything in our organization.Secondly, we need to know when Jamf will roll out the changes so we can be prepared. We are already asking our user base to postpone updating so we encounter as few issues as possible on day one.Thanks!

Hello, I create simple launch deamon file to start sh script and all works fine , but I have problems to block this script from disabling in login items. Try few config profiles but every time it didn't work for my script , but works for other apps like Microsoft apps.I see that all signed application have attribute "Embedded Item Identifiers:". My application wasn't sign , it is a problem?  If application isn't signed I can block it ?

I've got a new M1 MBPro 13" running Big Sur 11.0.1. We use ESET Antivirus on our Macs, and I've built a config profile for Privacy and System Extensions. I'm using ESET 6.10, which is compatible with Big Sur, and the instructions provided by ESET for building the Config Profile in Big Sur, which contain the necessary Team Identifier, Code Requirements, etc.The profile is scoped only to ARM64 Macs. I can build the profile without issue. Once thats done, it should get deployed. Here is the weird part... Watching System Prefs/ Profile window on the MacBook, I can see the profile appear. It's verified and has all the expected settings and information.About 15 or 20 seconds later, it disappears.In Jamf, I'm also watching the logs for the Config profile, clicking refresh every so often. While I'm viewing the profile on the MacBook, the deployment status shows pending.After the profile disappears from the MacBook the status updates to "Failed&#0

Hello,I've recently provided a remote employee with a Macbook. There's an admin account only I know the password to, and a secondary account the employee uses. The Macbook has been set up with my Jamf Now account.It turns out we forgot to enable Screen Recording for Microsoft Teams, which is located under System Preferences -> Security and Privacy -> Screen Recording, and the remote employee is not able to change this setting themselves without the admin password.If I can not do this, is it possible for me to change the admin profile password temporarily for my employee to log in to it, change the preference, log out, and then remotely change the admin profile password again?What are my options? I do not want to provide the admin password to the employee.

Does anyone have a script to delete saved passwords in the Chrome browser to deploy through a Jamf Pro config profile or policy?

Hi, I am trying to enroll our AppleTVs to JAMF School.All our MacBooks and iPads will have a Google login page like attached image. Can anyone share the procedures to enroll AppleTV into JAMF School? I have a DEP which skip everything except terms and conditions. Created a smart group which detects tvOS which pushes a Wifi Profile.Thank you

I'm in the process of deploying several software applications to a lab with new mac minis.  The policy with the application file .dmg is failing.  Do I need to check the FUT or FEU options?   I just started using jamf this summer so I apologize ...Thank you

Hi,We have deployed 802.1x successfully using EAP-TLS (device Certificate) without any issues. We've tried to replicate the same configuration on ethernet and have been unable to get the device to automatically authenticate using 802.1x. We've set the interface to "first ethernet" and "any ethernet" however this doesn't seem to make a difference. The only way we can get the device to connect is to go into the ethernet connection, select 802.1x and then click the connect button. We then need to select the device certificate and enter admin credentials to allow eapolclient access to system keychain. Does anybody know how we can do this automatically in Jamf Pro?  TIA.