Hi, We are managing 300 iphones using JamfPro in the cloud and the Self service portal wasn't running. We have added the configuration to get over a none functioning Portal (with the correct URL details):<dict><key>INVITATION_STRING</key><string>$MOBILEDEVICEAPPINVITE</string><key>JSS_ID</key><string>$JSSID</string><key>SERIAL_NUMBER</key><string>$SERIALNUMBER</string><key>DEVICE_NAME</key><string>$DEVICENAME</string><key>MAC_ADDRESS</key><string>$MACADDRESS</string><key>UDID</key><string>$UDID</string> <key>JSS_URL</key> <string>https://JAMFURL:8443/</string></dict>But now each app is showing Error loading content... Any ideas?CheersNick

I am writing a quick script to delete a file from our users computers. We have Jamf Connect on all computers currently.I'm using this script to get the logged in user:loggedInUser=$( scutil <<< "show State:/Users/ConsoleUser" | awk '/Name :/ && ! /loginwindow/ { print $3 }' )This used to work for us but now that we are on Jamf Connect it just shows the IDP user, not the local user. I need the local user in the variable because that is actually where Documents are stored for the user.Any way to extract the actual Local account that the user is logged into and avoid the IDP user?

We've replaced our lab computers with M2 MacMinis running Ventura and the package I set up to install the desktop background for the old computers is installing, but the config policy is not applying the image.  Do I need to replace the spaces with %20?  I didn't before.

Does anyone know if DEPNotify is still being worked on? I know someone opened an issue on this already on the git page, but was wondering if anyone here knew.

When you change a config profile in Jamf and tell it to distribute to all what is the process that happens on the MDM side? Does it send a command to remove the original profile and then download and install the changed profile? or does it download the changed profile first, remove the original profile and install the changed profile? I am asking because the MDM profile I am changing effects the network settings (VPN) and most likely the network connection will be disrupted. If the changed profile is not first downloaded before the original is removed then I cant see how it will get the changed profile.

I am experiencing installation errors when installing my Xcreds package with the following pre & post install scripts. The app installation does actually succeed, but the installer still throws the "Installer encountered an error that caused the installation to fail. Contact the software manufacturer for assistance." error. Any idea why these scripts would fail when added to the package? The preinstall script just terminates any running instances of XCreds and removes any existing installation of XCreds.app from the /Applications directory, and the postinstall script creates a backup of the system.login.console authorization right, installs a login plugin for Xcreds, and runs a login script for the application. #!/bin/sh killall XCreds if [ -d "/Applications/XCreds.app" ] ; then rm -rf "/Applications/XCreds.app" fi#!/bin/bash set -e set -x script_path="${0}" echo "script_path: ${script_path}" package_path="${1}" echo "package_path: ${package_path}" ta

Hello, I am having issues with the following script that worked great as a policy for Big Sur and older OS/Macs to rename Macs, but for some reason, Macs with M1/Monterey will not execute the rename commands as a Policy Script. #!/bin/sh /usr/sbin/scutil --set ComputerName "Test-Mac" /usr/sbin/scutil --set HostName "Test-Mac" /usr/sbin/scutil --set LocalHostName "Test-Mac" exit 0 

Hi all,We're encountering a random issue with the Jamf Connect login window hanging and preventing any interaction with the computer. The login window is gray, the spinning beachball spins, and we can't click on anything.To get around this we have to force shutdown the Macbook by holding the power button, then after starting up again, quickly click Local Login before the Jamf Connect login window can try to load.Any thoughts? I can't yet find anything in common between the users its happening to, other than that they've brought their Macbooks home, which should be fine and works for most users. Jamf Connect version 2.19 Build 4482 using Google LDAP2020 Macbok Air M1 on Monterey  

I have a customer who uses Jamf Protect and we just recently integrated it with Azure Sentinel for GCC High. The native connector isn't available in GCC High yet, so we had to use the manual Data Forwarding method to an Azure Log Analytics Workspace. Ingestion seems to be working as of now. Without the native connector, however, we don't get the out-of-the-box analytics rules to create Sentinel incidents. Does anyone know of some importable analytics rules that might help us get some use out of the raw data in the log workspace?

Hello all,I'm trying to see if there is a way to automatically update user & location field based on the user's login. We currently have Jamf Connect setup and wanted to know if there is a way to get the logged in user to appear in the "email address" or "full name" of the user & location field. Our main goal is here to identify and tie a device to the user using it within the organization. Thanks in advance for any guidance here. 

I deployed some applications via pkg files instead of mac apps. These applications now prompt the user for an admin password when updating. We can permit them to do so but I want to know if there is a script or scripts that we can use to auto-update applications and software.I've read about Munky and AutoPKG but I wanted to check if there is a simple solution to what seems to be a common problem. Unless I need to write scripts for each app to check and install updates? 

Hi Everyone, Getting this error, if am using software update differ configuration profile via Jamf for Mac devices. Getting attached error. attached setting is configured for differ software update pane.  

I am in the middle of deploying a centralized Jamf Pro instance for a large disparate organization. We're talking 5 business units with multiple sub-organizations, ultimately leading to well over 150 different Active Directory forests with no trust between them. So, 150+ separate LDAP directories. We currently have an Okta integration that is being "fed" by these 150+ ADs, and while the Okta implementation is not the identity authority, it has every end user in it. We are standing up our infrastructure for the Jamf Pro instance in AWS. We have no connection back to our corporate networks (which do not necessarily have communication with each other), and there is no plan to do so or to implement a VPN of any sort in AWS. So basically, AWS is its own island. Rather than stand up 150+ instances of Jamf Integration Manager, I was hoping we could utilize our Okta integration to handle LDAP queries for the types of information we need in Jamf Pro. So Okta would become our LDAP source for

I'm trying to follow the documentation for deploying SwiftDefaultApps in order to make Outlook the Default Mail Reader and Excel the default app for CSV files for our production fleet of over 300 MacBook Air M1's.I'm using GitHub - Lord-Kamina/SwiftDefaultApps: Replacement for RCDefaultApps, written in Swift. for material.  I am also referencing this article for deploying a script via policy Configuring a Mac’s Default Apps for Different File Types | apizz (wordpress.com). Here's my dumbed down verison of the script from wordpress:#!/bin/bash# Set default apps for usersSWDA="/usr/local/bin/swda"MAIL="/Applications/Microsoft Outlook.app"SHEET="/Applications/Microsoft Excel.app"### MAIL #### Default mail client$SWDA setHandler --app "$MAIL" --mail# mailto: links$SWDA setHandler --app "$MAIL" --URL mailto# message$SWDA setHandler --app "$MAIL" --URL message# email$SWDA setHandler --app "$MAIL" --UTI com.apple.mail.email### FILE TYPES #### .csv$SWDA setHandler --ap

Hello All,I am looking into ways only to allow external media to be written to if encrypted. It seems to have been deprecated using Jamf Pro. Is there a PLIST file I can edit or a terminal command I can push to make this happen?

Hello,  Hope all is well. I was wondering if it's possible to get some assistance on this issue I came across. I am new to Jamf PRO. My Team Lead gave me an assignment to push Rapid7 automatically to MacOS devices in Jamf Pro. I've watched videos and read documentation but still a bit confused and was wondering if I could get some help.

I already posted a somehow working, but solving it only in a quick and dirty way, script for this.But over the course of the last few weeks i finally had some time to create something that worked a bit better and allows some troubleshooting.Before using this keep in mind that it needs some Prerequisites fulfilled to work (all of them are also listed in the script) and you need to change line 34 to have your JamfServeradress in it. Beside this if you already switched to Bearertoken Authentication you need to do some changes to the setextensionattribute function to get a BearerToken and constructing the API-Call including it.Prerequisites are:1. Known Adminaccount from PreStage2. API-Account with enough Privileges to write Extension Attributes3. 2 Policies, first one to delete the Adminaccount (Customtrigger: accountdeletion) and a Second one to recreate it (Customtrigger accountcreation).4. EA named autobootstrap (if you use a different name you need to change it in Line 36)This script

Hi Nation, I hope everyone is well today. I am wondering what you guys do with Dev environments? I need to look at a way to control a dev environment, separating daily work like emails and chats against a development environment. I need to introduce the latter in a way that is still controlled but allows the developer to run code and install tools. I was thinking if introducing a Parallels VM with macOS and forcing isolation. Then giving the developer access to tools through Self Service and allow them to make themselves an admin for a limited time, following a helpdesk request. I know this will not go down well, but its what is needed. I am wondering what strategies you guys have implemented around this bearing in mind it needs to pass external security audits and certifications.ThanksBob from Reno

Currently have an issue when trying to add new deployments of apps within Jamf App catalog.When trying to deploy any app does not show me the status of the deployed app. App prior to last week Friday deployed, and I do see the status. Any app added since Saturday does not show me the status.For example, I tried deploying Outlook. Once deployed, I received the message. I have tried removing and re-adding the app a few times this weekend with no luck. 

In today's world of Mac's we have a hodgepodge of Intel, M1 and M2 MacBook Pro's. I have several policies that install different software with PKG files that have run fine without any issues because, until we started to buy M2 Mac's.All of the policies/packages that fail to install all have errors relating to Rosetta 2 not being installed, despite it actually being installed on the machines. I even went as far as putting a script to run prior to the package install that installs Rosetta 2 that returns a successful install log. When I manually install the exact same package files on the M2 Macs they install fine without error or mention of Rosetta 2, which confirms that it is actually installed. It is only when Jamf installs the PKG file on the M2 that it fails because of Rosetta 2.All of these same scripts and package policies run fine on M1 Macs. All of our Macs are running MacOS 12.5. The only difference in the Pass vs Fail is processor type.  Executing Policy Xerox 5.

I'm willing to try this on my own, but after the struggles we encountered getting our JIM working in the DMZ I wondered if anyone had attempted this successfully before I go down the rabbit hole. Do you have your JIM and your ADCS on the same server/system? In the DMZ? Working reliably? Any caveats I should look out for? Thanks!

Hey all, we have the SCEP running with a configuration profile and the challenge type is static. That's working for us.But we want to change the challenge type to Dynamic-Microsoft CA When changing it to Dynamic-Microsoft CA, we run into the known PI-005716 and the config file stays on pending. Does anyone has an idea, what needs to be done to make the setup running with the dynamic setting? The configuration on Jamf is easy going forward for me. But do we need to change also a setting on the CA? I can't find any documentation on that.

HelloI would like to ask if there is a way to "scope" the Jamf Pro admin interface? To give some context, we have Support teams in several countries and we will have them do basic Mac management soon. However, I would like them to be able to see only the Macs from their specific countries, and not the others. Thanks 

Hi AllWhy is itn't possible to mark iPads and change/rename directly the AssetTag over the Jamf Portal?Nice RegardsPeter

(Please pardon the piecemeal post; I'm presuming partial information is better than nothing.) scheduleOSUpdate via the Jamf Pro API Thanks to AppleCare pointing out that: When running the softwareupdate command in a root shell on Apple Silicon users are being prompted for a password. This is expected behavior and the recommendation is to use the Schedule an OS Update command via MDM. This is the method to use if you want to update Apple Silicon Macs without requiring user credentials. In other words: if [[ "$arch" == "arm64" ]]; then scheduleOSUpdateViaAPI else /usr/sbin/softwareupdate --install --all --include-config-data --restart --force fi In my limited testing, users are still prompted: Pending Feature Requests @psliequ's Support the entire range ScheduleOSUpdate MDM commands for macOS Snippets #################################################################################################### # # Variables # #############################################