Hi All,We didn't have this issue deploying to Big Sur or earlier.Since installing Monterey and testing policys against it were are hit with "Jamf wants access to control finder" and "Terminal wants access to control finder". The existing PPPC seem to not work but are deployed. Nothing shows up in automation.We have 2 other issues as well and thats with Symantec Antivirus and Wacom, both of which worked prior.Can anyone point me in the right direction.Thanks

Greetings,  Hoping that someone has seen this issue out there.   I am having a weird issue with Jamf Connect where I cannot sync password unless I toggle Wifi On/Off.  This happens very consistently and about 10 of us in a test lab are experiencing same exact behavior.  has anyone seen this? 

Hello,I wanted to share my experience with the "Mac apps" feature within our organization, which has proven to be quite efficient in deploying applications like Zoom and Slack. The functionality is impressive; however, I've noticed that many of these apps release updates every three days. As a result, our employees are becoming somewhat overwhelmed with the frequency of these updates.I'm reaching out for guidance on how best to manage this situation. I'm interested in controlling the deployment of app versions to mitigate the constant update notifications. Ideally, I'd like to transition to a bi-weekly update schedule to reduce the impact on our employees.Your assistance in addressing this matter would be greatly appreciated. I acknowledge that the "Mac apps" feature offers distinct advantages over the alternative of manually uploading PKG files and creating individual policies for each app. This method ensures compatibility with both Intel and Apple processors.Thank you for your suppo

Has anyone made this migration yet? we are looking to get some feedback and maybe how your migration went. any help would be appreciated. 

Hi folks,we have to change the resolution for a lot (100+) AppleTVs in our schools. This is caused by issues with the projectors which do not work properly with the 4K signal.Is there a way to get this done without touching every device?

Hi All,Have anyone tried to install ChatGPT on  MDM manage devices(I'm using JAMF pro )?When I tap on the installed app I get an error  as below with two options VIew in store or OKUnable to Install "ChatGPT"you must purchase this app to install it.      View in App Store               OKI have pushed the app to selected devices it is available in the Self-service and shows as "Reinstall"This is urgent have to configure this before WednesdayHelp will be much appreciate Thanks

I am seeing an issue with Password expiration on macOS. Some of the details are the following:-DEP Enrolled M1 MacBook running Monterey with FV2 and PRK hidden from user while escrowed in Jamf. This is done with Security & Privacy payloads and some policy glue, but end result is FV2 on and users can cold-start the mac with l/p for local account.-First setup user is break glass account with unique random password per system stored in enterprise password manager.-End user gets two local accounts, one with admin and one standard. Usual login is to standard, while admin is more for satisfying prompts and occasional logins to install/update software tools. This has worked okay for a long time, but one thing is we don't expire the local account passwords. I started testing out the Passcode payload in a configuration profile to see what it is like. The first thing was lock/unlock, as it is our most likely scenario. This worked reasonably well and a new password set. There is no promp

After starting with my company in June, I went through our Jamf Pro server to look things over. I noticed several Macs that have either failed MDM commands such as profiles that attempted to install, or a long list of pending commands. They are still checking in with Jamf Pro. I need to create a list of these systems but I haven't figured out how to do that. I don't know what criteria to use to track them all down. Has anyone ever had to do this? If so, what was your solution?

I'm in the process of enrolling new mac minis and imacs for 3 different labs.  The imac enrolled and the policies that create the local user account ran correctly.  The mini's seem to be having a problem.  The policy log shows that the policy completed.  There are icons for the users on the screen.  When I enter the password I just get the spinning wheel.  When I look at the computer in jamf, it shows 0 local user accounts.  

We are tearing our hair out with this problem. Some of our Macs (random, not always the same) are not checking in with the JSS on the 15 minute Check-in Frequency set under Computer Management. This means that when a policy is available it takes sometimes hours and even days for the policy to apply to all the Macs (currently around 40 as we're still in early stages of rollout). Our network admins say that all the ports are open to APNS. What are some of the reasons why some Macs might not be checking in? We have verified that they are turned on, plugged in (wired not wireless) and not sleeping.

I am working on new groups of Macs, and in order to get Apple Remote Desktop to work, I have to select the Smart group and the View the members, then I hit the Action Button, in there I send a remote command and tell them all to allow ARD access. However when I hit the Action button all I get is a twirling blue icon, and nothing happens.Makes no difference if I switch to a different browser, or a different computer on a different network. Any Suggestions as to what is broken? or something I can fix? 

Hi, I am trying to update 60 MacBook Air.  I pushed JAMF School to update 13.5 from 13.3 skipping 13.4.1 etc.It keeps failing. I tried updating to 13.4.1 and it stops at 10/15%.I tried restarting and redo but still failed. Any advise pls.🙏  

On our student iPads we are having messages pop-up in IOS Safari saying "You cannot browse this page at 'fill in the blank' because it is restricted." So far they have been blocked by a Google form and a link inside Google doc to a BuzzFeed article. Works fine on another devices that students use. I have a "fake student" account and iPad for testing that shows the same behavior. I removed the config profile on my testing iPad with all the restrictions.No difference. I switched to a wifi hotspot with no filtering to see if there might have a filter in between, no difference. So, what or who is causing the restriction? Any thoughts?

Hi Team,Hope everyone had a great weekend.Question: I just purchased a new M2 Mac for my organization and I was able to enroll it into JAMF pro and all of the policies came down as it should. My issue is, I'm getting this error (See screenshot below) when trying to connect it to VPN.We had this issue in the past where we needed to remove the old computer name of an older machine in intune in order to get it processed as well as create a second local admin profile to connect it.So far, this is the only Mac with this issue and it happens to be an M2 machine.I was wondering if anyone has seen this or resolved it?Just to add, when we click "copy to clipboard", it takes me to the JAMF console and nothing happens. Thanks.  

I'm trying to apply the same wallpaper image to multiple monitorsI set up the CP / Restriction / Functionality / Lock desktop picture to /Users/Shared/Wallpaper/Wallpaper.jpg It sets the wallpaper on the primary monitor but does not set on the secondary one.I've tried with a script also to test  #!/bin/zsh wallpaper_path=/Users/Share/Wallpaper/Wallpaper.jpg osascript -e "tell application \\"Finder\\" to set desktop picture to POSIX file \\"$wallpaper_path\\""  Am I missing something or is this an Apple "feature"?

Here is what I'm trying to do. When we do 3rd party patching, we have to do them in phases, alpha, beta and uat. We currently have 10 applications that we update monthly. For each application smart group, we have to add the group manually to each one. For example, this is what it would look like. On day one we add Alpha group and the next we add Beta group. I've messing with different scripts, but keep getting 404 error. It would be nice to run a script that would add the groups instead of going in to each one. Not sure if this even possible.Here is what our update groups look like.This is one of the scripts I was trying.#!/bin/sh# API login infoapiuser="xxx"apipass="xxx"jamfProURL="xxx"# Smart group IDSmartGroupID="120"SmartGroupAPIURL="JSSResource/computergroups/id/${SmartGroupID}"# XML header stuffxmlHeader="<?xml version=\\"1.0\\" encoding=\\"UTF-8\\" standalone=\\"no\\"?>"# Get the current smart group criteriacurrentCriteria=$(curl -sSkiu ${apiuser}:${apipass} "${jamfProURL}

Happy Friday All,  So, I am testing a Smart Card configuration profile to Enforce Smart Card use; more specifically, I am currently testing the Use Case scenario of, what happens if someone loses their Smart Card. So I attempt to remove the profile so that they could use their username and password to log in however, the removal of the profile is not occurring, it is stuck in pending. Any tips or tricks that could help me solve this? Our environment consists of:On-Prem Jamf ServerRequired VPN / Hardwired connection to the network to communicate with Jamf ServerForced FileVault EncryptionFrom my test computer, which is locked out, I am hardwired and can ping the Jamf Server from recovery mode. I am wondering if because FileVault is enabled it cannot remove the profile because the disk is in an encrypted state. Not sure though. Any advice is appreciated. Thanks 

Hello experts. I'm new to jamf and this community so apologies if this has been answered already as I haven't been able to find a recent solution response. I have a policy that enables users to run a script and management wants to know who has run it via self-service.  So far, I've been able to get this computer-by-computer, but is there a better way?   My solution uses: Finds a subset of computer history data by ID (jamf.com) with the subset set to PolicyLogs.  With thousands of computers scoped for the policy, that's a large number of API calls to make.   Ideally I would use Finds a subset of data for a policy (jamf.com); however, there is no subset for PolicyLogs.   Any advice or solutions you can offer? 

So I'm using a policy with a trigger of Login so it's basically a LaunchAgent ... does the command get stored somewhere on the client so I can verify that it made it there? Where do the output and errors go ... jamf.log or do I need the script to redirect everything?

I'm not able to get FUS working on Mojave, wondering if others have a working script/config to get it running. I've tried all previous documentations and nothing has worked. Thanks in advance.

I would like to understand the difference between device and user level in configuration profile. Thanks in advance

Hello everyone, I am try to create a smart group that would allow me to identify computers that have company portal on them. It seems like in Ventura, Jamf Pro is not reading installed Mac Apps from the server.My Situation:I have deployed company portal as well as MS Remote Desktop from Jamf Pro via Mac Apps. This is going to 2 machines, Ventura and Monterey. On my mac with Monterey, I can see the apps showing as Company Portal.app and Microsoft Remote Desktop.app. However on the Ventura mac neither of these are showing in the Inventory. I can see them on the mac though. I have added the ~/Applications/ folder to the inventory search to no avail. Anyone have any thoughts?

Hello Jamf Nation!We are pleased to announce the availability of Jamf Pro 10.49.0 Beta.This version includes some exciting new features, including updates to LAPS, a new restriction for iOS Widgets on Mac, and a new UI to manage client credentials. We also have exciting new in-app feedback submission, documentation, and a video covering the Beta's new features we'd love your feedback on as we iterate on making it easier to participate in our Beta Programs.How to join the beta: Enroll in the Beta Program under Product Feedback at account.jamf.com. Once enrolled, you’ll see a link to the Jamf Nation Beta Forum. Note: There will be a short delay between enrollment and Beta Forum access; you will receive a notification in Jamf Nation to join. When you receive the invitation, click "Join this group Hub". Email beta@jamf.com with questions.The beta program is covered by the Jamf non-disclosure agreement; please do not share any information regarding your testing on any public forum, includin

The networking team for our district is trying to move all of our mobile devices onto a MAC Address whitelisted Wifi network. Is there a way I can export in bulk specific information (like the MAC address) from the Hardware page of each iPad?

Hello everyone,We're on Jamf Cloud with version 10.48.1. We've enrolled some computers now during the summer with no problems. But the latest three we have enrolled doesn't get any date in the Enrollment field (latest enrollment). Last was at 2023/08/02. Am I alone with this problem?The thing is that without the date some policies doesn't work.