We are seeing this account creation failed error message occur more often now in M1 and M2 macbooks running Ventura or Monterey OS. We have set up prestage in jamf to automatically create an admin account before the apple set up assistance steps. The workflow is, we turn on the macbook (already assigned to default prestage) and it gets enrolled through ADE and installs the remote management profile. Skips the admin account creation part, but allows us to create a local user manually. This is where it throws the error message. We have a tick with Jamf Support, but not so helpful as it doesn't sound like they have a solid fix for this.   

Hi everyone,Combing over articles, including this one: http://www.cainehorr.com/jamf-workflow-for-tenable-nessus-agent/.Is anyone using an extension attribute that tells you what host the Nessus Agent is currently linked to? This way we can see if it's incorrectly linked to the wrong host in the EA, then send a policy to re-link the Macs to the right host.Currently using the EAs below ok:• Nessus Agent Installation Status• Nessus Agent Service Status• Nessus Agent versionThank you!

Guys,We have a requirements that customer would like want to get the change time change automatically as soon as end user travelled to some other location or region. Kindly help me with the shell script it would be much appreciated. Thanks.

Noticed this message on one of my pilot machines today. I had to reinstall the framework via the API. Anyone seen this on version 10.44.1 or 10.45.0 of Jamf Cloud? User is running macOS Ventura 13.2.  

We have a faculty member who uses content from the Apple TV app on his Mac when teaching. He just came by and can't log in to his Apple ID (Personal account) where his content is even though he is signed in to iCloud. I tried on one of my test machines and got the same results.I did try with my managed Apple ID and it let me log in... Is there a way to enable personal Apple ID's to log in to the Apple TV application? We do have Activation Lock disabled 

How would I remove a user associated to a laptop? They just received a new laptop, and I'd like to remove them from the current laptop so It can be redeployed. Additionally, whenever I try to make changes to the laptop (like renaming it) I receive a prompt stating the user will be added to a group or other changes could be made to the user.  

Our cloud asset was recently upgraded to 10.27There are new Patch Policies available and a handful of "Legacy" and "Deprecated" Software Titles. I'm seeing EA errors for the Patch Management of Microsoft AutoUpdate and for Mozilla Firefox. I'm no EA wizard, but I don't see anything obvious in the EA provided by the Patch Management. Anyone else seeing this?

When migrating from jamf on-prem to cloud, devices are first unenrolled from on-prem.  Which means they loose every Configuration Profile for system extensions, PPPC, 802.1X etc.  Users get the notification prompt to enroll into jamf cloud and if they click through that it does migrate them successfully.  But is anyone aware of a process to make this smoother so users don't see dozens of other notifications/prompts while they're in the "limbo" state? I saw Rocketman Tech had a workflow using DEPNotify that made things a bit smoother.  It did look like it was able to hide all of those notifications (at least during the demo https://youtu.be/ZTbv5ZvI3pI).  But on current versions of macOS there isn't a way to stage profiles that remain after unenrollment as far as i know.  So the only option i see to help with all the prompts would be to use AppleScript to close out the undesired notifications.  I don't know how well that would work since that

Hi all,I’m having an issue trying to get a machine to register to my intune. This issue is only happening to one computer and all of the others are working fine which leads me to believe that the issue is within Intune. Please kindly share your thoughts on this issue on where to check in intune or Jamf. (See screenshot) Thanks. 

Hi, I'm looking for a way to setup an Extension Attribute to let us know when a local user account is locked out of their MacBook. I'm not seeing or know of a way to track in JAMF. The devices are not bound to AD. Currently in JAMF when I check the local user account and click on managed for that account, I only see the option to unlock it, but it doesn't say if the account is locked or not.  

Hi team,We have jamf integrated with Azure directly.We are trying to update jamf client from Intune on Macs, but although from Intune marks the application as updated, on the devices we find that the version installed on the previous one.Has anyone had this problem? Do you need more information?

Ex.A user brings their device (BYOD) -- They log into the MacBook that's under our JAMF control, and it automatically adjusts settings they may have set for things. Semi-new JAMF user here.

I just deployed jamf connect to a new fleet of imacs. They are using jamf connect with azure. I had a pervious policy that handled the "login window". This policy configed a welcome message, how the usernames are displayed, and it also configured a screen saver on the login window. This policy DOES not affect any jamf connect login imacs I have. How can i change the screen saver for the login screen on jamf connect?

Hi there,Hoping I can entreat the Hive Mind to help me nail down why I'm getting an error in the last part of this script. I'm putting together a self service policy that will run two scripts. One grabs the current computer name as a variable, deletes all the relevant networking plist files in /Library/Preferences/SystemConfiguration, and then renames the computer to its original name. That one is working great.The second script is where I am having trouble (I split them into two because for no discernible reason, the first part would throw weird errors when they were combined in one script but now it seems to work fine with them separate despite there being no differences in the command statements).This script creates a new network location, switches to it, and deletes the old one. But I'm having trouble with the last part. I'll include the script below, and the jamf policy log output from a test machine.#Created by John Geck, 7/21/2023 #Create a new network location and substitute t

For this MacBook Air (that is managed via Jamf Pro), when you change the background image, you can see it change in the menu bar but the rest of the desktop image is black. Almost like the black screen is layering over the image (but the desktop icons are still fully visible). When you go to Mission Control to see all the open tabs, then you can see the desktop image, but only then. I made sure the configuration profile in Jamf allows changing of the desktop image in the restrictions payload and we also tried deleting the .db file in ~/library/application support/dock and restarting but it just generated again. We are trying to avoid resetting NVRAM if possible, so if there are other suggestions, it is much appreciated! The device is also running on Ventura.Thanks!~Gabby

Hey, I am searching for a method how to use patch management with Cisco Anyconnect VPN. Since it is not available in the standard jamf catalogue. I know you can create your own patches with the Title editor.But therefore I would either need an external source or a json file with the settings since I never created this before.If someone maybe has some information or hints I would really appreciate that

We are experimenting with using Managed Apple IDs as the primary Apple ID for our end users for all the reasons. We hoped the user could then use their personal Apple ID with Messages, but the option to "Enable Messages in iCloud" is disabled in this configuration. So Messages can work with their personal Apple ID, but all the syncing goes away. Any work around here? 

We deploy the Jamf Connect app via Pre-enrollment.  Everything installs and works but the Jamf Connect app that runs in the tool bar does not get added to the login items\\Run in the background until a user manually launches the app, then it adds itself to the login items.I thought it would do that on it own, what steps should I take to enable that without user intervention.

Hello.In our environment we are moving away from binding devices to Onprem AD except for a few small use cases where it is still currently required for Onprem related services such as WIFI, Printing and a couple of Network drives that are slowly being phased out.One of the tasks I am trying to get working is to elevate the status from Standard to Admin of any AD based Security Group inhabiting Local Admin account created on a Mac.So my process is as follows;* User logs into Mac via Jamf Connect authenticating to Azure via their User account* User account is created locally as Standard (not dependent on onprem AD at all).* Device has an AD object, is already bound to AD during setup and device is connected to domain via ethernet, wifi or VPN having direct sight to the AD.* A script is run that unbinds and then rebinds the device but including the name of the security group that the elevated user account is also a member of that utilises the device hostname in the security group naming c

Hey looking for help on the below please. We are in the process of deploying jamf out to our users over the coming weeks.We are using a few jamf products including jamf webfiltering.We also you crowdstrike and use the ZTA to enable users to access Okta.I have been told by a jamf support agent that the 2 will not work together due to MacOS only allowing 1 network extension.Is this the case? Any help would be much appreciated.

I do have a question regarding patch management and a smb share. We are using Jamf on premise. and we do have a DP that is in the DMZ and is using a smb share and https.So if I configure a computer outside of the internal network all policies gets installed. But if for example a patch should be installed I often get in the logs an error. Trying to mount the smb share... tried for 3 times and always fails.Shouldn't that also work? I mean of course without a vpn connection he cannot mount the smb share but then he should be dl it from the https source. Or is the patch management still broken I have the latest 10.48.1 server version installed 

 We use school profiles for our students' iPads (BYOD) with a time filter. Works pretty well but every time the profile is deactivated, the iPads forget the previously saved wifi passwords so the students have to reenter their private networks' information every single day. Is there a way to avoid this?Thanks four your help :-)

I'm having issues with uploading to JAMF. Getting the error below. WARNING: com.github.autopkg.grahampugh-recipes.jamf.zoom.us-pkg-upload is missing trust info and FAIL_RECIPES_WITHOUT_TRUST_INFO is not set. Proceeding... Expecting value: line 2 column 1 (char 1)Failed.Any ideas on what could be causing this, and how to fix it? Thanks.

If I write a script using an if statement, and use "then exit 0", what would I enter after "else" to make the script continue running if the result of the if statement is a different value? I thought I knew how to do this but I can't think of it. 

a couple of our clients recently had some Macs stolen.  While we can lock them via Jamf MDM command I was management was curious about Activation Lock.  We currently do not let users enable Activation Lock, but we got to thinking this might be another line of device provided we have the bypass key stored.So...  Do you let uses enable activation lock on your Macs?  If yes...why?  If no...why?