Is it possible to disable iMessage or FaceTime on an iOS or iPadOS device? My company is heavily regulated and since iMessage cannot be audited, we need to have this functionality disabled. In turn, is possible, we would like to disable the option to log into iCloud completely if possible. From what I've read and seen online, it is absolutely possible on MacOS but the mobile versions not so much... Ideally if we can retain SMS and just disable the iMessage that would be for best.

Hello everyone, Just a little background: I work in an AD environment that utilizes Xerox MFDs among several others types of printers. I've had success capturing the device with Casper Admin and deploying the printer either through Self Service or some other trigger. The question I have is that our Xerox MFDs by default print in color and historically we've had to go into localhost to set this default option to black and white. Has anyone had experience adding a script to the process so as to set the default option? Thanks!

One of our users have not use her MacBook in little over three months, and the computer has there for been marked as inactive in Jamf.The user has forgotten the password she gave the local administrator account that she created when she first set the machine up, and not the computer is stuck at the login screen, with no network access.I have tried booting into recovery and connecting it to our network, but it is still marked as inactive in Jamf.Is there any way I can get the computer to talk to Jamf again?And is there any way we can recover the users account and data?

Im not sure if this has been covered or not, but this is a handy little thing that I found a few weeks back. If you have a user who isnt very technologically savvy, you can open up the self service Web Clip on your computers browser and deploy apps to the mobile device for the user. The url schema is https://yourjamf.server.com:8443/mdss/?udid=UDIDofDevice The UDID of the device can be found on the hardware tab. Just copy and paste it into the url and you'll see the self service webclip interface for that device. Hit install and it'll send the push notification from Jamf to the device to install any apps or profiles that are in Self Service. Again, not sure if this was something that has been covered but a quick search didnt show anything. I find it really handy with our older users or users who dont really have the time to be troubleshooting issues.

Loom is only showing up to version 0.168.1 in the Patch Management definitions, however Loom on the machine that I use to create packages has updated to 0.169.3.  Since 0.169.3 isn't an option in Patch Management I'm unable to associate a new package to update the rest of the machines.  Can someone update the definitions that are available for Loom? Thanks In Advance

1

It's been a while so here is something that you may never need, or, you have something clever that you already use for this & I am too dumb to know about it, or, maybe, someone will find it useful.2 things actually:1) I have arrived I what I feel is the bare minimum "boilerplate" code for a shell script intended to do something with a Jamf API token so, that's 1st. It's as short as I can make it, it has error checking, it does not store a password in the script (it's interactive) & it has a function that can be called at any point to ensure the key is valid or invalid. Feel free to copy, it's been working well for me. 2) Remember that time you wanted to input new Network Segments & your fancy network guy gave you a single column of CIDR ranges? This converts them to integer ranges with bitwise arithmetic. #!/bin/bash # data datafile='/Users/Shared/building.subnet.data.csv' # jamf API jamfurl='https://some.company.com:8443' jamfapi="$jamfurl/api/v1" jamfchk="$

We are using Jamf Pro and are setup as shared devices using Setup and Reset. and microsoft authenticator.What is involved in switching over to user assigned still using reset for a device format and logging into a device with Azure creds?Is Jamf connect required for this?I am trying to achieve a shared device that users make their own for their shift and reset and wipe at the end, during their shift they can use outlook/teams/word/onedrive etc with app protection policies and conditional access.

Good eveningI have recently become the new ICT manager at our school. I replaced the push certificate with one with my Apple ID. And pushed a new profile on all iPads with Apple configurator. In Jamf, the iPads are paired with the students again. So far it went well. Now I can no longer manage almost all iPads in Jamf. What am I doing wrong?Greetings from ArubaJohan

I currently have about 40 iphone devices managed by JamfPRO and the users are complaining because they connect them to their windows PC, are asked if they trust the computer and still can not get into the internal storage. I have tried installing iTunes on the PC's to retrieve by that just gives the "This device is managed by another computer" error. Any advice on how to easily access the photos folder without having to upload to the cloud or email to themselves?

Does anyone know how to pull the version of the actual Adobe RemoteUpdateManager? the binary is installed under \\usr\\local\\bin    apparently Adobe released a new version in July 2023 ... and the version shows as 3.1.0.3  I notice that our Creative Cloud Desktop installations are updating but the installed version of RUM doesn't seem to be updating ( currently at 2.6.0.9 ) the actual executable file is a Mach-0 universal executable.  using the otool -P command,  I can see that there is a plist embedded in that file but I do not know how to access if from a command to pull that info and return it from an extension attribute. For the Adobe gurus out there, would replacing the older RUM with the newer one be a recommended activity, or do I NEED to build\\Deploy an entirely new Creative Cloud Desktop   application installer package ?? Thanks in advance for any assitance  

For any who wants to keep Kelvin/Hue apps update to date, Creative force didn't seem to have a way of updating that the app without admin rights and the app updates a few times a month. So instead of always going updating the latest package into Jamf, here is a script to download/update the latest version. Can have it run once a week to check the versions or run when needed. For the "Hue" app just replace and "Kelvins" with it. #!/bin/bash# Download latest yaml file for latest version numbercurl -o /tmp/kelvinversion.yml https://download.creativeforce.io/released-files.3x/prod/hue/mac/latest-mac.yml# Now check yaml file version# Path to yaml fileyaml_file="/tmp/kelvinversion.yml"# Get yaml versionversion_yaml=$(awk '/^version:/ {print $2}' "$yaml_file")# If the output of the command is empty, then the version key is not present in the YAML fileif [ -z "$version_yaml" ]; thenecho "Version information not found in the YAML file"else# If the output of the command is not empty, print

Hi allIs it possible to use and login with Jamf School Account at MUT App? Or is it only for Jamf Pro Admins/Accounts?Thanks for feedbacks and best regardsPeter

Hellllooooo! I've recently finished the Jamf Connect onboarding and am in the process of setting up our environment. Can anyone recommend some configurations and policies that make for a good, secure baseline? I am in higher ed and some of our computers will be with faculty and staff, other with classes and labs. If you have any scripts, know of sites, or anything else helpful I would super appreciate it! Thank you

Hey, I noticed that due to profile configuration I don't have ikev2 vpn profile.. is it normal that I don't see it?

Hey tell me is it normal that I don't configure GMAIL mail in mail.app via JAMF PRO?I enter the normal control data along with the mail server and it creates an account for me but does not create a google type. 

With more accurate Dynamic Download Estimates, additional user-input fields and multiple speed improvements, Setup Your Mac (1.12.1) helps MacAdmins provide their users a seamless onboarding experience.IntroductionApple’s Automated Device Enrollment helps streamline Mobile Device Management (MDM) enrollment and device Supervision during activation, enabling IT to manage enterprise devices with “zero touch.”Setup Your Mac aims to simplify initial device configuration by leveraging swiftDialog and Jamf Pro Policy Custom Events to allow end-users to self-complete Mac setup post-enrollment.Continue reading …JNUC 2023Setup Your Mac: Racing Stripes, Gotchas and "One More Thing" [1024]

Hi all,  Apologies if this has been covered before but i'm looking for some advice on masOS updates. Is it possible to control updates (i.e. deferrals) via computer groups? For example our Windows Updates are controlled via update rings but i cannot find any information on the equivalent for macs in Jamf.  TIA.   

We used to use JAMF Remote at our place and been avoiding an update as JAMF Remote was deprecated. One of the reason we used this was for reiamging the Mac's but can no longer do this so what other ways do people achieve this?

Hi JAMF'ers... JAMF'ees.... JAMFS I am trying to deploy an iOS app (through VPP) and keep it from showing up on the home screen. I need the app to still be able to launch, but ideally icon would be hidden. Basically, we have our SSO app that we deploy to all iPads that our students need to login to first and then they launch the app that I want to hide through that SSO app. I tried setting up the Restrictions configuration profile to not allow the app, but in this configuration the SSO app won't launch the second app. Is there a way to just hide the app from the home screen through configuration profile, but it still live and be usable on the iPad?

I’m having a strange issue that started within the last week or so. Some laptops are not receiving some configuration profiles. Two profiles in particular, and not every laptop is affected. One is for Jamf Connect. It’s an uploaded profile straight from the Jamf Connect Configuration app. The other is for the Root3 support app.I have tried different versions of each profile, one using the built in Jamf Connect schemas one with the upload. I have tried the same with the Root3 app, one using their json schema and one with the plist.Neither will push down to some devices. Hardware doesn’t make a difference, and neither does os. It’s happening on Monterey and Big Sur, and intel or Apple processors.I am at a loss. Logs for both say failed on the device inventory page and pending on the profile pages.We’re on Jamf Pro Cloud.Anyone else having issues?

Hey everyone,  has anyone worked on securing their Mac fleet based on the CIS benchmarks for Monterey? If you can share scripts or config profile that would be great.Thanks

Trying to force the install of an extension in Microsoft Edge, the issue is that the extension is from the Chrome store and not the Microsoft Store. Allow extensions from other stores is already enabled.   I am able to force any extension install from the MS store so I know that is working but i don't see how I tell it to go to the Chrome store.

Hello, Can someone please answer, which I'm sure is an elementary question?Some of out Macs will need to be unenrolled and enrolled in Intune (don't ask!)What happens when you unenroll the Mac?What happens when you unmmage the Mac?What happens when you remove the MDM profile and framework?Self Service was removed, our VPN client does not work but all of the Office apps and Teams still work and have access to company data, including our company homepage? Is there a way to remove everything? Once we unmanaged or remove the mdm profile we can't access it.I'm confused. I thought doing all of the above would cut the ties. I don't know. 

Hello All,Happy Friday!   I am looking for a way to view the log file(s) of when a user used their local admin account to give permission for system changes. Such as installing an application or using the sudo command in the terminal. Does anyone know if or where a log file like that lives on the machine? Thanks for the help.