Hi,I currently have problems with the login to the Jamf Page (not my Jamf Pro instrance, the regular jamf.com website). When I try to log in I just get set back to the main page and nothing happened. Already tried the standard solutions. Deleted cookies, incognito mode, different browser, different account, different computer, nothing worked. Has someone similar issues? Is there a problem on Jamfs side?Unfortunately I cannot ask their support directly, because I cant log in. :DKind regards

Hi all!In our new environment that we are setting up with Jamf Connect we are unable to create MDM Capable Users. This takes the option away to deploy certificates, in this case a user certificate, in our Login Keychain.The known workarounds for making users created with Jamf Connect MDM Capable Users are not something we can use in our environment. Because of this I was looking for different solutions and I found out that you are able to perform actions on the Keychain with AppleScriptExample:tell application "Keychain Scripting" to tell keychain "login.keychain" ... end tellNow I'm wondering if it would be possible to move our User certificate from the System Keychain to the Login Keychain with AppleScript. Or maybe someone knows a different solution for getting our User certificate in the Login Keychain without user interaction? 

Hello, I would like to update some devices from Jamf. I create a script but it doesnt work. Where is the problem?The script is,#!/bin/bashsudo softwareupdate -i macOS\\ Monterey\\ 12.6.3-21G419 -Rexit 0Thank you.

Hi all, I don’t suppose someone could share a snippet of their config with Jamf Connect shares including their custom menu item for shares and possibly a passworditem to update secure air printers?If I manually connect to the shares, all fine no issues with auto, it just won’t do it automatically. Also the Shares menu won’t appear in the app. Same with keychain items, I just can’t get it to work!! Thanks!

Hi,Our company recently onboarded Jamf. I'm looking at best practices, or what others in the community, has done with Patch Management.It seems we must manually search for and download or create .pkgs of applications > upload the package > select Patch Management Application > Definitions > Add > Create Patch Policy or edit existing patch policy. I currently have applications all from the Jamf internal source. But the list of applications are getting longer as I onboard more Mac users. Having to download/create pkgs every month seems quite cumbersome. What do you do? Thanks.  

So I open the network prefs, select the wifi interface go to the little cog wheel at the bottom and select "Make Service Inactive". Can somebody please tell me how to do this via the Terminal, or at least a script that I can push out via jamf or something? Oh, it needs to work on Mojave and higher macOS...

Hi, we've been copying the bookmarks.plist file located in ~/Library/Safari/ along with FEU FUT in order to set up Safari Bookmarks and had success until macOS Mojave. When we run this policy in Safari, not only does it not copy over the bookmarks, but when you create a new local user account, we get the message "macOS needs to repair your Library." I've asked Jamf support about this and their solution is to move away from setting up Safari bookmarks and instead use Self Service bookmarks. Have you guys had any luck with setting up bookmarks in Safari?

Hello, Has anyone been able to run Microsoft Intune Integration on Macbooks with Intel chips and Ventura OS?We tried to run the policy on Macbooks with Intel chips and Ventura OS but the integration doesn't work and the device will never get registered in AAD.We also tried with M1 chips, but there is no issue, on macbook with Monterey OS and Intel chip, the integration will work. The integration will stop at this step on intel devices with Ventura: We already tried with different browsers, deleting the profiles, using webview and reenrolling the device and everything else that could be found on the internet. Has anyone been able to make this integration between Jamf and Intune with this scenario? Thanks,Traian   

Hi Team,Wondering, Jamf Pro API returns all the device-Id(s) associated with the User, by passing user email/id as input? If yes, can you point to the API end-points? Thank You,Kalai 

Fortinet's recent FortiOS 5.4.1 release for their FortiGate security appliances prevents any version of FortiClient prior to 5.4.1 from registering to the appliance. Users may even get a "FortiClient is being actively blocked from registration" which can cause panic and confusion. The problem is that, as of this writing, FortiClient 5.4.1 has yet to be released. Talk about putting the cart before the horse. So let's say that you don't want to have a few hundred upset users and would rather uninstall FortiClient discretely, en masse. Fortinet's documentation tells you to run the FortiClientUninstaller GUI app to uninstall FortiClient. But here's a more streamlined and scriptable method: /Applications/FortiClientUninstaller.app/Contents/Resources/uninstall_helperrm -rf /Library/Application Support/Fortinet/ Optionally, check for the existence of the following file and delete if it exists/private/var/root/Library/Preferences/com.fortinet.FortiClientAg

Recently we have purchased the software. we wanted to do the training . so wanted to know if JAMF Provide training in India. if Yes please let me know the location. ThanksSantosh

Hi I am looking for a script to replace the Username in the inventory section with the Extension Attribute of "Last User Logged In".  In addition to add "@companyX.com" as a suffix to the user name.  This would help me greatly in getting Asset inventory for my company via Azure.  I am getting the Last User Logged In by Extension Attribute.  So if the "Last User Logged In" is john.doe , take john.doe and add @companyX.com and fill the Username in the inventory section as john.doe@companyX.com.  This would then poll Azure and I would get all the data I need.  Still looking for a way to not manually update the username field when deploying a Mac to another user.  My scripting skills are limited, apologies. Thanks,JT

Script to download the latest Citrix Receiver for Mac: #!/bin/bash ##################################################################################################### # # ABOUT THIS PROGRAM # # NAME # CitrixReceiverUpdate.sh -- Updates Citrix Receiver # # SYNOPSIS # sudo CitrixReceiverUpdate.sh # # LICENSE # Distributed under the MIT License # # EXIT CODES # 0 - Citrix Receiver is current # 1 - Citrix Receiver installed successfully # 2 - Citrix Receiver NOT installed # 3 - Citrix Receiver update unsuccessful # 4 - Citrix Receiver is running or was attempted to be installed manually and user deferred install # 5 - Not an Intel-based Mac # 6 - ERROR: Wireless connected to a known bad WiFi network that won't allow downloading of the installer # #################################################################################################### # # HISTORY # # Version: 1.0 # # - v.1.0 Luis Lugo, 09.05.2016 : Updates Citrix Receiver # ######################

Just making my views public on the decision to deprecate Jamf  Remote app in Jamf Prop 10.40 as I personally feel its the wrong decision.10.40.0Jamf RemoteJamf Remote has been removed from Jamf Pro.This includes the screen sharing workflow using Jamf Remote. Jamfrecommends to use TeamViewer for remote administration. For instructions on how to integrate TeamViewer with Jamf Pro, see TeamViewer Integration in the Jamf Pro Documentation.Having just completed a large deployment of the TeamViewer Tensor and its integration to Jamf Pro and Microsoft Intune, its really a poor substitute to the usability of Jamf Remote.While Jamf Remote lacked support for NAT and accessing devices off local LAN is made up for it for ease of use and its integration to Jamf Pro (it had a very similar ease of use like Apple Remote Desktop) and its ability to ad-hoc install a package or perform certain fu

After initial setup, when a users password is detected as a mismatch Jamf connect just pops up a little notification in the corner with vague (to a user) wording about IDP and local passwords mismatching.Is it possible to make the actual Jamf Connect window pop up and not be closed until the user re-links their passwords? I went through all the options on https://docs.jamf.com/jamf-connect/2.1.0/administrator-guide/Menu_Bar_App_Preferences.html and RequireSignIn is enabled but it seems that is just for first run.Alternatively can I specify the language in the notification so the user understands what is happening?

I am in need to integrate the Jamf Assets information to be available in the Zoho SDP Asset Module with all the informations like HDD Size,OS Version,Owner of the Device,RAM Size,Hostname, all other information in one place.Zoho SDP have one Scan_script.sh which creates the .xml file and upload it to the SDP Asset module where the logged in user information is coming as Empty for me.Do we have any other method to integrate Jam Pro Inventory with Zoho SDP Asset 

I see that we can select enroll autenticate method from local users from Jamf School or select Azure, LDAP or Google. At the moment we use local users from Jamf and that option let us to install some apps, someone that use Google option can tell us if we can personalize MacBook before enroll with Google account from Teacher? And another question, on iPads that we do shared for these new course, can login with Google accounts or only with Apple School accounts? Thank you for all

In the default profile we have pushed to our iPads in Jamf School, we have the restriction set to allow us to rename the iPad on the device itself.  However, it always get overridden from the name in Jamf School.  Is there a way to be able to rename the iPad and have Jamf School replicate that change???

I have a problem hopefully someone has come accross.We pushed out a custom screensaver using a script, I will post below. It worked on Monterey no problem, but when we pushed it to Ventura it broke something.Now any device using Ventura is locked to the "Ventura" screensaver. No matter which screensaver you try to use, it defaults back to Ventura. When selecting a screensaver it looks like it is going to work, even showing the preview in the small display. But then hit preview and its the Ventura screensaver.Anyone got any advice? # Get user logged into console and put into variable "user" user=`ls -l /dev/console | cut -d " " -f 4` osMajor=$(sw_vers -productVersion | awk -F"." '{print $2}') osMinor=$(sw_vers -productVersion | awk -F"." '{print $3}') sudo -u $user defaults -currentHost write com.apple.screensaver CleanExit -string "YES" sudo -u $user defaults -currentHost write com.apple.screensaver PrefsVersion -int 100 sudo -u $user defaults -currentHost write com.apple.screens

What is the theoretical maximum limit of a Jamf Pro Cloud instance? Could the system support say, 50,000 devices across 12 locations? Combination of laptops and iPads. Edit: This is to settle a debate and not for practical application. 

I am currently working on a process to upgrade all of our fleet (50% Intel, 50% M1 roughly) to Ventura.  As with every upgrade, I am losing my mind finding a good process that works.  All of our users are standard accounts on their devices and Filevault is mandatory.  I have a policy that temporarily elevates user to Admin (script), installs nudge suite (pkg), nudge branding (pkg), mist-cli (pkg) and then runs the Mist command (script) to download the Ventura installer and it places it in /Users/Shared/Mist with the normal “Install macOS Ventura.app” format.I would like to use front end this process with Nudge to make users aware of the upgrade and allow deferrals until they click Upgrade.  I have Nudge configured and working and it invokes a policy from Self Service that kicks off the upgrade script.Here is where I am losing it, when it comes time to issue the upgrade command, it doesn’t work, at least on M1 macs.  I have tried using the Erase-Install app to d

We have a mac where the user is admin and has a secure token but still can't install updates to the OSThe user account is an Active Directory Mobile Account and is the second user to log in. Any thoughts on what else to check or enable?

I am working on creating a "make me an admin" script. I know there are already some out there I can use, but I wanted to create this one myself. What I have working now is a script that will first check if the user is already an admin user. If they are, a Jamf Helper window will appear informing them that they are already an admin user. They can then dismiss the window by clicking "OK". The policy stops running after they click "OK". If they are a standard user, the script will elevate them to admin, and a Jamf Helper window will appear with a countdown to what ever time we define in parameter 4. Once the timer runs out, the script runs the command to remove admin rights. I have this working really well. Now I'm trying to add some extra features. What I want to do is detect any new admin users that the user who is elevated to admin creates. They may do this to circumvent our policy of keeping users setup as standard. I had one idea to output the current admin users to a text file befor

Hello everyone,I'm just trying to scope a Self Service policy to Azure AD group, after scoping the policy to the desired AD group under limitation the policy itself is not available in Self Service after a logging with AD id. We have Cloud Identity Provider enabled for this and the connection appears to be successful; is there anything I'm missing here?

Seeing an issue on newly imaged macs and new out of the box. They are Jamf enrolled manually, MDM profile installed, certs installed, forticlient installed, wifi cert installed, AD joined… throughout several reboots after each of these steps the MDM profile and other profiles go unverified and the ca certs disappear. The only work around so far has been removal of the device from Jamf then manually re-enroll which brings back the jamf cert but not the other ca certs needed.