Hi Guys. I have a MacBook Air (new) and I manually registered in ABM with Apple Configurator. Then, I registered this device in Jamf (I see it in Prestage), but when I restore and reinstall MacOs (ventura), I select Language, region and wi-fi, the "Remote management" appear and I clic to "Continue" but not advanced. It shows "configuring profiles" but it never continues.I have restored and erased Macintosh HD in various occasions and tried personal hostpot and other networks, but these problems continue.

Hello all, I was wondering if anyone has had success getting the service desk asset scan to work properly for Macs. I am having a little success with network scanning and running the provided scan script on a single machine. Looking for any advice. Thanks! 

To give some context here is what I'm trying to accomplish.I want to create a config profile to push to my mac user's for the Checkpoint Endpoint VPN client without having it install the Checkpoint firewall app. Whatever package I download from checkpoint (the pkg, the dmg, the zipp) it seems the checkpoint firewall app is bundled into the installer. I've tried going to composer route to run the installation of the endpoint vpn client, then deleting the firewall app but it looks like starting with version 84.30 the plist, configuration files don't push out so I can't replicate that install from the created pkg from composer to other machines. Checkpoint provides information on how to create a config file to push to users but it still bundles that firewall app in there. https://dl3.checkpoint.com/paid/68/6899355a6a3c45aee11e6fbb4633ce27/Endpoint_Security_for_Mac-MDM_Deployment_Guide.pdf?HashKey=1625763756_e9cb2b2f4a4fb4288fdd80cbce03c7b3&xtn=.pdf Has anyone figured out a way to r

I see an error quite often when looking at the command history of our IOS devices that reads:"Settings - Time ZoneThe setting being applied is restricted."Any thoughts on what might cause that?Thanks in advance,Rob   

Hi,i create an In-House eBook which is a pdf file (using hosting location is web server) and i distributed to our organization ipads devices, but the eBook did not deploy to any device its give me an error (The MDM request is invalid) .i read some articals that i shoud not use space in ebook display name and i have to use a version but nothing worksi hope that someone can help me on this !!

I'm looking to sit the Jamf 100 Exam but when I click the purchase button it takes me to a logon screen and after validating my account it then presents the message: UnauthorizedIt looks like you don't have access to this service. Is there something special I need to do so that I can book this exam? I can't see that I'm doing anything wrong but if anybody knows why this isn't working I'd be glad to hear it!

Hello, has anyone had any experience with using the Hidden app in collaboration with Jamf? If so, what are some positives/negatives you have encountered? Thanks!

Hi Wondering if anyone has fixed this solution. We are getting a growing number of machines getting the following error while using 4.9 / 4.10 AnyConnect on Big Sur. Settings for the Config Profile are below, its scoped only to M1 ComputersCould anyone suggest any problems that i might have? Thanks! 

Hello Team,I never used AWS S3 CDP before, I used standard Jamf cloud CDP, I was just curious to know if the AWS S3 bucket is already integrated with Jamf Pro cloud, then there will be any change in the way to upload a package in S3 CDP for deployment through JAMF policy? Or it is just same like Jamf cloud CDP, I can manually upload the package or use Jamf admin app to upload the package?

Does anyone have a method for having Self Service auto login on Monterey/Ventura? All the methods I found via search have been depreciated. Thanks!

Hi Guysare we able to add another authenticator app to jamf if the user does not have access to the internet to login okta to be able to use local to login 

This is the default .sh script for ManageEngine Asset Scan. I modified the variables #!/bin/sh ############ Server details ############ hostName="MSD69" portNo="443" protocol="https" ############ Server details ############ SUPPORT="assetexplorer-support@manageengine.com" PRODUCT="AssetExplorer" COMPUTERNAME=`hostname` OUTPUTFILE="$COMPUTERNAME.xml" main() { echo "##### Scanning Started #####" echo "<?xml version="1.0" encoding="UTF-8" ?><DocRoot>" >$OUTPUTFILE constructXML "ComputerName" "hostname" constructXML "OS_Category" "uname -s" echo "<Hardware_Info>" >>$OUTPUTFILE constructXML "OS_Category" "sw_vers" constructXML "Memory_Information" "sysctl hw.physmem" constructXML "Memory_Information" "sysctl hw.usermem" constructXML "Memory_Informationw" "sysctl hw.memsize" constructXML "Memory_Information" "sysctl vm.swapusage" constructXML "Computer_Information" "hostname" constructXML "Computer_Inform

I'm currently working on a workflow to resolve some missing Secure Tokens for users at a client site. Because I don't want to test on production machines, I've got a machine here that I've enrolled in my own Jamf tenant to test against. My issue? I can't REMOVE Secure Token from one of the test users on this machine so I can test the script.FV is not enabled, the admin user has Secure Token. I run the following command in CLI and get an error:sudo sysadminctl -adminUser <username> -adminPassword <password> -secureTokenOff <username> -password <user-password>    Result: "Operation is not permitted without secure token unlock"(I also played around with the order of things in the command, no difference)My GoogleFu is failing me because everything I'm finding relates to ADDING Secure Token to a user who does not already have it.  Can anyone shed some light on this for me? Thanks 

Was not sure how to title this one. I recently noticed a policy that was pushing a package failing on most devices. They all had the failed package download error. On inspection I found that the devices were actually NOT in use, the users said the device was left switched on but was asleep. Yet Jamf reports them as checking in and as such tries to deploy the policy, which then endlessly fails.I have never seen this behavior in the past, seems to be new. Anyone else seen this?Jamf Pro sees up to date check-in for device.Application usage log shows no activity.User claims device was not in active use.Policy pushing a pkg will fail.If at number 2 I see application usage, aka device is in use, the policy will complete. So it looks like Jamf is trying to push things to devices that are in sleep mode? Im confused.

Hello All Playing around with the Jamf App Catalog feature.  Wondering when an app updates if the users is booted out of the App or does the install cache install or ?I have auto updates installed on many of the listed apps, so trying to test can be challenging.P.

A new function for your ~/.zshrc to retrieve the managed Apple admin account password from Jamf ProBackgroundWith the enhancements included in the recently released Jamf Pro 10.49.0, we decided to take a more serious look at Jamf Pro LAPS.In doing so, we wanted an easy way for authorized administrators to view the managed Apple admin account password via Terminal.Continue reading …

This post is mostly to document something I ran into, but please feel free to contribute anything that might help.In the process of running CIS L1 audits on Ventura the following was brought to my attention:--------ls -alh /System/Volumes/Data/System/Library/AssetsV2/downloadDirtotal 0drwxrwxrwx@ 2 root wheel 64B Aug 10 15:35 .drwxr-xr-x@ 43 root wheel 1.3K Aug 8 21:32 ..--------The directory is empty and I haven't seen a case where there is anything in it. There is a CIS control "5.1.6" that has a very strongly-worded description of how they think this should not be, so that particular audit fails. I guessed this was legit and got a little more info to corroborate that:--------xattr -l /System/Volumes/Data/System/Library/AssetsV2/downloadDircom.apple.rootless: MobileAssetDownload--------So the file is SIP-protected and in an area where that service is expected to do things. I found other occurrences of the same directory on Monterrey and Ventura systems, but I am not entirely sure of

  Does anyone have any experience With troubleshooting the Office 365 online yellow banner on Jamf Pro Managed devices? I have 3 laptops being marked non-compliant. 

Good morning,I am reaching out to you people since I got ghosted by Customer Success team.Yesterday I bought Jamf 100 exam, Payment when through I got booted out of that login page, money was taken out of my account, I got no confirmation on my e-mail. Anyone encountered this issue before?

Is there a way to remove multiple computers at once from Jamf Protect?I cannot find a way to delete multiple at once and it seems pretty unreasonable to delete hundreds of old computers 1 by 1...

Hi after installing app through JAMF when I am trying to create a shortcut by running this set of code.-------------------------------------------macShortcut.py-----------------------------------------------------------------from re import subfrom pyshortcuts import make_shortcutimport subprocessimport TPLogger as lguser = subprocess.getoutput('ls -l /dev/console | cut -d " " -f4')ruta_user = f'/Users/{user}/Desktop'ruta_app = f'/Applications'try:    make_shortcut('/opt/ex_app.py', name='ex_app', icon='/opt/ex_app/Resources/Images/ex_app.icns',terminal=False, folder=ruta_user)    make_shortcut('/opt/ex_app/ex_appscreen.py', name='ex_app', icon='/opt/ex_app/Resources/Images/ex_app.icns',terminal=False, folder=ruta_app)except Exception as e:    lg.log_info(e)-----------------------------------------------------------------------------------------------------------------sudo python3 /opt/ex_app/macShortcut.py-----------------------------------------When I cre

Hey everyone,We currently have an issue with a number of our intel and M1 Macs where we click the restart or shutdown option and the Mac just hangs on the wallpaper. If they do eventually shutdown or restart the Mac then gets stuck on the apple loading bar. The only thing that works is a Forced shutdown. Login and logoff aren't effected either.At first we thought it could be software not closing properly (we blamed Epic at first) but we have stopped this and others from launching but the issue still persists, I have gone through both launch folders in Library but none of those seems to be causing the issue.We then thought it might be stuck installing updates as we recently updated the Macs to 11.6, but that doesn't seem to be the cause, I have checked the updates cache folder and manually checked for updates just incase it had failed the first time.I have gone through the logs but nothing is standing out that I can see. I have tried a PRAM reset on one of the Macs but that doesn't fix

I'm new to Jamf, but I've been working on configuring the Okta side of things. I've managed to get Jamf Connect integrated with Okta, but I'm encountering an issue during testing. The system prompts for login twice - first for Disk Encryption, then for Okta. Is there a way to streamline the process so that only the Okta login is required to access the Mac, without involving the local account that Jamf Connect set up? Your guidance would be much appreciated.

Our current Jamf Pro instance is a mess with unpatched apps missing packages and policies no one has tended to in years. I recently learned about Jamf App catalog and have 8 "Jamf App catalog" apps deploying on my dev server. Besides the known limitations of Jamf App catalog (less control over versions, lack of verbose install feedback, etc) are there any other downsides to using Jamf App Catalog for basic apps like Chrome 1Password etc? Will I regret not doing it the old way?Jamf App catalog seems much easier to maintain. Am I missing an obvious downside to Jamf App catalog?  Would love to hear about others views on this.  

Hey Everyone,I'm having some trouble with authentication of Cisco ISE & Jamf Pro over Ethernet. My Macs are not domain bound and are using Jamf Connect and Intune registered via Jamf and ADCS. If anyone has some leads enabling User Auth without domain bound macs this would be awesome, after I get the wired working right.My ADCS CertCertificate Subject= CN=$COMPUTERNAMESAN Type= URISAN Name= ID:JAMF:GUID:$MANAGEMENTIDAllow All Apps Access= UncheckedAllow Export= UncheckedMy Ethernet Config ProfileMy Ethernet profile may once randomly auth properly then just fails time after time and I'm thinking I have the wired setup all wrong. When authenticating ISE reaches out to Jamf with the MAC address of the USB Hub connected to the Mac and it fails device compliance stating the device is not found in Jamf and to register.The failures, return a MDM.MDM-GUID:MacAddress of the USB Hub VS a successful auth has this value MDM.MDM-GUID: empty. Instead the mac address of the USB Hub is i