We've just started running into an issue where the system apps that are removable on iPads such as Notes, Maps etc will not install on their own after setting up an iPad. We have been able to successfully navigate around it by excluding the student from the config profile we use to restrict App Store usage, but in the past they've just been there and it hasn't been an issue. Is this a recent iOS update issue where they are no longer installed by default? If so, it seems odd that they would be trying to install at all if the app store restriction is whats stopping them at 'installing'.

I know it is 60 multiple choice question/ 60 mins, but what is the platform type you take it on? Example: Web Browser-Based and login or download program to bring you into a portal like Comptia to begin? ect.Will plan on taking it tomorrowHope this is right flairthanks!

I'm attempting to set up Onedrive KFM for my company.  I've read over the other posts regarding this topic and by all accounts appear to be mirroring what others are doing.Created and pushed a config to allow full disk access to Onedrive.appCreated a plist in Jamf Pro with requisite settings as outlined in the example belowI'm running into two main issues.The Privacy & Security tab doesn't update to show access granted, but it seems like it has been.The plist is not applied, or at least not applied entirely.  I was assuming it would appear in the library/preferences folder, but it is not.  Are plists created in this manner supposed to appear in a folder on the computer?  Has anyone run into these issues?  I'm able to set up KFM manually on the laptops, but automatic optin is not functioning as expected.<?xml version="1.0" encoding="UTF-8"?><!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

I have been working on my own "make me an admin" script. I recently got a version of this script working. It displays a Jamf Helper window with a countdown timer. When the timer runs out, the user is demoted back to standard. If the user is already an admin user, they will see a Jamf Helper window telling them that they are already an admin. These functions of the script are working exactly as they should. This morning, I added a new function. This one checks if the user created any additional admin accounts while they were an admin. The script is supposed to start out writing a list of the current admin users to a text file. After the user is demoted back to standard, the same command to write the current admin users to a text file is ran again, but with a different file name. I use a "diff" command to check the difference between the two text files with the list of admin users. When I test this new function separate from the rest of the script, my text files get created and the "diff

HiI've been using this function to decrypt api account password in one of my scripts, and i can see it failing to decrypt in some machines. Different versions of macOS, i really can't see a pattern. Anyone seen something similar?function decrypt_string() {apipass=$(echo "$encrypted_string" | openssl enc -aes-256-cbc -d -salt -base64 -A -S "$salt" -k "$passphrase" )} 

Trying to block our public SSID so students on school mac's cant join it and take it off our systems. Any thoughts?

Hi,When I issued a sudo pmset repeat wakeorpoweron MTWRFSU 08:00:00when I check it will show the correct.Repeating power events:  wakepoweron at 8:00AM weekdays onlyWhen I issue command sudo pmset repeat shutdown MTWRFSU 18:00:00 it shows only but missing the wakepoweron. Am I missing anything?Repeating power events:  wakepoweron at 8:00AM weekdays only

HI, I had a question regarding removing our current JAMF mdm profile and replacing it with a new one from new company taking us over. I'm trying to do this with as little user input as possible. I've tried creating a policy to drop off the new mdm profile then running the "remove framework" command to remove the current profile. I also had a script in the policy to run afterwards to install the new mdm profile. So far the only thing working with this process is the delivery of new package(mdm profile) and removal of current one. New profile isn't getting installed. Anyone try something like this before successfully? 

<Disclaimer> New to Jamf here. I am finding after I enroll the devices into my inventory that I need to go into the profile that it is assigned in the scope tab, I have to click the save button for it to install. Save thing with pushing Apps to devices. I have the Apps in the device group but until I go into the App and save it, it just says pending.. Any ideas?

Hi,This is more of a preventive post and a sort of a horror story on how Jamf Connect was accidentally pushed in our environment while it is still in testing phases with nobody from STAFF even expecting it... With new Jamf Pro JSS server - Jamf Connect can be updated/DEPLOYED directly from JSS global settings area, which we have learned the hard way. In my initial opinion this was only a maintenance/update feature, not an actual push to every mac and while afterwards I saw "for an initial deployment" in little grey letters - it should be in BIG RED LETTERS!  If anybody runs into a similar problem:1) Immediately switch Jamf Connect Version/Update Type to "None"2) Create a smart group which will check for Application Title: "Jamf Connect.app"3) Flush/Trigger Inventory Update policy on JSS to register all the macs which already received Jamf Connect ASAP4) Create a policy with every available trigger so it gets to every mac ASAP scoped to the Jamf Connect app present smart group

Does anyone have an example of pushing device specific configuration to a machine?Scenario: I'd like to populate a file on every laptop device that contains the content of certain extension attributes that are centrally defined and keep that regularly up to date when I make changes in the admin portal.Is there any means to do this? Everything I am seeing all seems to be geared around "shared" or "common" policies that are associated to machines/groups. I'm not looking to create 100 different policies each associated to one machine. I'm looking to populate based on actual attributes set on the device itself in the portal. Another way of looking at this - is it possible to have a policy that has "templated content" in it where the template values come from EA's set on the device?

There was an issue with 10.48.1 so there was no Windows installer.Curious if anyone updated to 10.48.2 yet.Jamf Pro 10.48.2 Now Available

What's the official statement from JAMF about Software Updates? With 12.2, our Mac mini M1s are refusing to update when performed by:-+ command line softwareupdate with or without sudo+ not working with running the full installer with sudo and piping password to stdin (not cool Apple)+ using JAMF to send Remote Commands to updates fails. When I checked the logs, it says:-SoftwareUpdate: request for status for unknown product MSU_UPDATE_21D62_patch_12.2.1SUOSUServiceDaemon: Connection invalidated!Removing client SUUpdateServiceClient pid=32208, uid=0, installAuth=NO rights=(), transactions=0 (/usr/libexec/mdmclient)The only successful way to install is to sit at the machine and open System Preferences > Software Updates and put in an admin password when requested.

Just checking to see if anybody has tried the new Software Update. I tested it on my Monterey Mac and set it to do 3 deferrals and update to the 12.6.8. I had my device locked at the time and it just restarted and updated automatically after 15min. 

IT Specialist, 25 years - I have taken a keen interest in the Apple side of this since I’ve taken this role. We have a fleet of iOS devices we manage through jamf pro - anyway I am looking for a career in MAC/jamf/iOS management/administration. Is their any path recommendations, I’ll be taking jamf 100 this year and later jamf 200.

We're currently progressing on a fresh implementation of JAMF Connect. Our configuration's validation for obtaining tokens from our IDP through the JAMF Connect Configurator is confirmed. We've initiated the deployment of JAMF Connect via Automated Device Enrollment, in conjunction with the configuration profiles for the app. We seemingly have achieved successful authentication into our IDP through JAMF Connect. However, upon reaching the "Re-Enter your Organization password to synchronize with your new local account" screen, and re-entering the password:Upon licking on 'create account', we're faced with an error message that isn't particularly informative:Has anyone seen this before or know how to troubleshoot this moving forward? 

I have a few questions: 1. With Jamf connect, can you still have local admin accounts? 2. Is there a way to force network connections during pre-stage enrollemnt (where users cannot bypass)?

Up front, this is a hypothetical:If there was an Apple TV in single app mode that cannot, for whatever reason, communicate with Jamf, what options exist for wiping or resetting said device?These are 3rd gen 4Ks, and since there's no longer a USB port on them you can't wipe it by hooking it up to a Mac anymore.How do you guys handle scenarios like this? We're working on a project to deploy almost 100 of these across a fairly wide geographical area and this is a question that's come up that I don't really have a good answer to. Thanks!

Apple released OS 13.5 today. We have noticed that the Connect Identity Authentication window disappears after the OS update. We are authenticating through Google.  Has anyone else experienced this? Do you have a fix?

I am a new user to MUT, and Im trying to update an Extension Attribute as a test. I'm in our sandbox environment. When I run MUT, nothing updates.I've pulled the logs, and every device I'm trying to update says, "PUT failed. 401." I've figured out through my own research that 401 = unauthorized. I've double-checked I have full admin rights with the account I'm using. I'm now wondering if it's how I'm connecting to the server.Has anyone else seen this issue? How can I resolve this?

Hello,I've been changing our live JAMF system over from using a self-signed certificate to a proper public certificate. I finally got it all working Thursday afternoon. (Definition of "working": I was able to get a new Apple push certificate using it; communication between my JAMF server and Apple School Manager is working; I was able to reinstall a client and it picked up NDM and carried on happily.)On Friday, I was off, which means that nobody was doing anything with the JAMF system or that client.Today, I found that that client can't communicate with the JAMF server. And it lost the ability to communicate between 10:09 and 10:28 *Friday* morning. When I wasn't even there.Log entries go from this:Fri Jul 21 09:50:34 LISA-065 jamf[38385]: Checking for policies triggered by "recurring check-in"...Fri Jul 21 09:50:38 LISA-065 jamf[38385]: Checking for patches...Fri Jul 21 09:50:38 LISA-065 jamf[38385]: No patch policies were found.Fri Jul 21 10:08:57 LISA-065 jamf[39031]: Checking for p

So what is the best solution? The current word-of-mouth and tech releases appeal to the importance of Managed Apple ID. Even in Jamf's recent Blog, "Jamf After Dark: WWDC recap," @Haddayr Copley-Woods, and @AWebb speak of getting on the Manage Apple ID bandwagon. However, you cannot save stored credentials without LDAP Authentication. Jumping through SSO is difficult, from my experience, too, without stored credentials.Secondly, there's another instance of LDAP under Synchronization. One or the other? Both?Will moving from my Organization > Settings > using Apple School Manager's sync settings and Microsoft Azure Authentication to Microsoft AD (On-prem) LDAP break something?Should I also link LDAP within the Synchronization settings? Benefits? Pitfalls? Another sticking point, which may be these will fix, is I cannot filter Users based on the ASM role. All imported users are labeled as "Staff." Not sure if this is a bug or limitation of Azure Authent

I know there was a PI issue for not being able to scope policies to Azure AD groups at check-in. If you signed into Self Service and had the policy set for Self Service it would work, but setting the policy to check-in with scope to All Computers and a limitation of the Azure AD group didn't work. Has anyone heard if this is fixed Jamf didn't give me a PI issue for this?

I just ran in a changed behaviour with the defaults command.I have a script that adds a folder to the list of background pictures. It worked fine until macOS 13.2 I think. Never checked after that. Just saw the new behaviour while looking for ways to have a different lockscreen picture than the desktop picture. (Spoiler: It's not possible.) Normally the script simply runs this command in the user context: defaults write com.apple.systempreferences DSKDesktopPrefPane -dict "UserFolderPaths" "( 'path_to_my_wallpapers' )"  This updated the plist file below and the user saw the folder with additional company wallpapers. ~/Library/Preferences/com.apple.systempreferences.plist  Now the command writes to the sandbox container. And whats more worse, the user does not see the folder in System Preferences ~/Library/Containers/com.apple.systempreferences/Data/Library/Preferences/com.apple.systempreferences.plist  So, currently I don't see a w

"Enrolling with management server failed" Unexpected error(MDMResponseStatus:401)