Hi All,Has anybody have reports of 13.4.1 upgrade fail when trying to upgrade via software upgrade?We have reports from users when it tries to begin the download and fails ...I have seen Apple Dev bug - Can't upgrade to Ventura 13.4.1 | Apple Developer Forums .. Rk

I use Apple Configurator and Imazing Profile Editor to create configuration profiles.If a configuration profile was pushed out with "Prevent users from removing this profile" as true, can JAMF still remove this profile?  Isn't this just so users can't remove it locally on the workstation but the MDM server still can ?Also If pushing out the same configuration profile with same Payload ID to a workstation that already has it, won't the profile just be overwritten with the newer one?   Or do I need to remove it first and then push it out again if I make changes.I know I can just push out another restrictive profile but I like to keep the profiles to a minimum.Just curious on what exactly would happen.  Appreciate any feedback.

Hello All,How preference domain in my config profile understand where the corrosponding plist is kept? I can keep under /Library/Preferences, or /library/Manage Preference etcBut question is how Jamf is able to understand where is the plist kept to write on it?

I am trying create a policy to uninstall Citrix Receiver on my macs. Unable to add uninstall.app into jamf admin due to error message "not being support in Jamf Admin". I little experience creating scripts. Trying to create script but unable get script to run. Wondering if anyone has script for uninstall citrix receiver

Hi All,Looking for some input .. I have been asked by leadership to add the CA enrolment to my DEP enrolment .. How anyone managed to do this successfully and how?Im currently using DEP Notify to install apps and setting but looking at it I either need to trigger the CA enrolment either before or after enrolment ... Please advise.. 

Hello All,Need an explanation, I did set home page and startup page by  config profile, I noticed that after mac boot up it takes time to connect internet, any resolution to make it perfect ?

Hi Jamf folks, is anyone doing change control across their jamf policies? We are looking to ensure that there's no unauthorized changes to our critical policies, and that they could be audited periodically.If anyone is doing this and could point me in the right direction I'd greatly appreciate it!

Hoping someone can help me out with this - I need to drop a file in ~/Downloads when deploying software during our automated enrollment. We use Slack for internal messaging, and there is a preconfigured Slack token that will populate our Workspace URL - in order for Slack to read this file, it has to be in the ~/Downloads folder. I've set up a config profile, and given Slack access to the folder, and created one as well for com.jamf.management.Jamf to have access to the folder. It doesnt look like I have the profile for Jamf set up correctly - I can watch the Console logs and see that the package is being deployed, however, its never written to the folder. If I manually place the file there, then open Slack, it reads the token and launches the app appropriately. Any ideas on where I went wrong?

So we have been running the same JAMF instance for 9 years and 51 weeks, and it turns out that the JAMF CA itself has to be renewed after 10 years, so I've got a week to sort out the problem I'm about to describe.My problem is, we are still using a self-signed certificate, so JAMF support has told me that if I renew the CA, all my clients will no longer trust it and will have to be reenrolled. But I already know, from experimenting on my test instance over the winter, that switching over to a publicly-signed certificate *also* drops all my clients.As far as I can tell, there is no way to migrate from a self-signed certificate to a publicly-signed certificate without dropping all your clients. I have googled and I cannot find any documentation anywhere discussing any such process. My JAMF support case seems to be languishing with people scratching their heads.Can anyone point me to steps for migrating to a public certificate without dropping all my clients?(Live JAMF instance is still 1

Have you encountered any challenges in achieving CIS level one compliance for Ventura on your MacBook devices, even after pushing all configuration profiles using the JAMF Compliance Editor for Mac Ventura OS and scoping all your MAC machines to these profiles? Specifically, some of the non-compliant points include* Install.Log Retained For 365 Or More Days* Reasonable Security Audit Log Retention* Sudo Timeout Reduced* Filename Extensions Turned On* Apple Provided Software Is Current * Wake For Network Access And Power Nap Disabledis there any way we can cover the above setting via script?Thanks

Hi All, One of my user is getting the below pop up and after clicking on Get App it is redirecting to a weird broken link. This user is already registered in Intune/Azure AD and it just randomly started to happen. I am mostly curious about the link. Any ideas where this is coming from?

Hi,All of our teachers have iPads and they use apple TV with normal Video-Beamers/Projectors. They use JAMF Teacher to manage the class and the Apple Classroom to look at the student screen.As we know the only way to observe students screen is the apple classroom app.Therefor teachers have to switch between the classroom app and f.ex. powerpoint.Is there a way to extend the ipad screen on the beamer so a teacher can simultaneous look at the student screen in the classroom app an and only share a presentation on the apple TV.Regards  

Does anyone know? I always assumed it meant "just another Mac fanboy", but I have heard several other... creative interpretations. Apparently there is some connection with a book called "Gravity's Rainbow"?

we're attempting to have users disconnect from an Active Directory server and are using a shell script to simultaneously disconnect from AD within Okta and assign a temp password; I'm wondering if there's a way to prompt the Jamf Connect Password Reset window through this script as well in order to construct a more seamless process for our users thank you in advance!

Xcode 14 on Ventura seems to have a different setup than in the past.  When it’s first opened it presents this  and if I click the Install button it promos for admin credentials.  Does anyone know how to preinstall the platform items?       

I've been ordering new 16" MBPs direct from Apple for some of my team members. When they receive them, the auto-enroll is not showing the new user account creation screen, completing the setup, and then just displaying the login screen (we have it set to username/password, instead of the list of users). Checking the local users on the systems, the only account that shows up is the 'jamf' user. Right now, it's been a small number of users affected by this as the rest of the company is getting either 13" MBPs, or an MBA (both M1s). The M1 systems enroll just fine, prompting the user to create an account. Has anyone else experienced this? Did I miss a step somewhere when I configured everything? I haven't changed any settings since our initial Jumpstart a couple of months ago.

Dear Support,find that the Jamf Pro is unable to send out updates All of the APPs, in the All of iPad.can you assist let me know how to fix ASAp, Thanks. 

UPDATE: I have added this script to my gitHub repo. You can find the freshest of the fresh here... Hey everyone! It's been awhile since I've contributed anything to Jamf Nation. I have a script / workflow that I've been sitting on since 2019 that I am finally ready to share... I'm certain many of you use jamfHelper and for the most part, the jamfHelperGUI app is all but a dinosaur sitting on a couple of forked gitHubs out on the interwebs. That being said, I got tired of writing jamfHelper pop-up windows for every workflow that needed one. I wanted something a bit more cookie-cutter... something I could drop into my Jamf Pro Scripts repository and call from within a policy by leveraging Jamf Pro's Scripts "Options" features. So I set out to write a one-size fits all script to assist with the daily grind of pop-up communications. So without further ado, I give you my latest iteration of jamfMessenger... version 3.x... oooh! shiny!    &nb

Hello Jamf Nation!We are pleased to announce the availability of Jamf Pro 10.48.0 Beta.This version includes some exciting new features, including Delete all Classes from Jamf Pro Button, an Updated Jamf Pro Dashboard, and Managed Software Updates - Mass Action Consolidation. We're also rolling out our second round of Jamf Pro Beta Engage Guides. You'll see the guide displayed in your Jamf Pro Beta Instance with helpful links and information.How to join the beta: We’ve made some changes to the Beta enrollment process. Enroll in the Beta Program under Product Feedback at account.jamf.com. Once enrolled, you’ll see a link to the Jamf Nation Beta Forum. Note: There will be a short delay between enrollment and Beta Forum access; you will receive a notification in Jamf Nation to join. When you receive the invitation, click "Join this group Hub". Email beta@jamf.com with questions.The beta program is covered by the Jamf non-disclosure agreement; please do not share any information regarding

What are the latest steps for locating a missing computer that's still calling back to the JSS? It would be helpful to see the current WiFi network name, public IP, and geolocation would be great. 

Hello Team,Can anyone help me with a Script Or Command to get BootUp time duration and Startup duration .I tried using the below command ,but it just gives me the up time but I need calculate the duration time of the boot and startup.sysctl -n kern.boottimeThanks,

Hello Nation, I'm having the issue where SCEP configuration works fine for Monterey but it doesn't for Ventura, the error only says Unable to obtain certificate from SCEP server at “ADDRESSXXX”. <MDM-SCEP:15002> No sure what to do here and if anyone has make this work with Ventura?

I was curious to know that when I drag and drop the source of Firefox, I can see group permission is set for "wheel" and for Google Chrome group permission is set for "staff", now I dont understand one thing, if I install both apps I am able to open the apps from /applications from a user who is not the member of wheel, why?Same thing was not working for LogMeIn Rescue app, so I changed the permission to "staff" from "wheel" and it started working. So I am confused, can anyone explain me? I am really very curious to know it.

Has anyone successfully deployed the following script to add a computer to a static group. Goal: Have buttons in Self Service to add a computer to a static group. $4 is the group ID. #!/bin/sh #API login info apiuser="apiaccount" apipass='apiaccountpassword' jamfProURL="https://myjamfinstance.jamfcloud.com" ComputerName=$(hostname) #Group to update GroupID="$4" apiURL="JSSResource/computergroups/id/${GroupID}" #XML header stuff xmlHeader="<?xml version="1.0" encoding="UTF-8" standalone="no"?>" apiData="<computer_group><id>${GroupID}</id><name>Whatever the GroupName Is</name><computer_additions><computer><name>$ComputerName</name></computer></computer_additions></computer_group>" curl -sSkiu ${apiuser}:${apipass} "${jamfProURL}/${apiURL}" -H "Content-Type: text/xml" -d &#034

Hello All, I am just curious to know about all type of Apple ID we use either in enterprise or for personal use.1. One is to sync contacts and to use iCloud for iPhone/iPad and Mac device2. Developer ID for inhouse app to upload in AppStore3. ABM ID for DEP and VPP app management, same can be use to download certificate to sign a package Any other type is there and its purpose please?