Hello Everyone, Just wondering how you guys perform your Mac hardware refreshes currently? We have filevault enabled for all of our end users, but the difficulty we are facing right now is that when an offboarded employee returns their computer. We need to use the recovery key to get past the filevault screen, otherwise there is no way to wipe the computer. Another option we are exploring is to create a new local standard account that can be used to bypass the filevault screen, but enabling filevault for this account via JAMF Pro seems quite complicated to do. Any insights would be greatly appreciated. Thank you.

Hi there, How can I tune Web Protection for not being blocking our company resources? I understand that Web Protection deploy it custom macOS configuration profile and it replace our corporate DNS and users can't access internal company resources. How can I fix it? Where I can add our company DNS servers to Web Protection configuration profiles?

In the Restrictions section of Profiles, I see an option for "Allow creation of VPN configurations". I have disabled this as I don't want our users to be able to add VPNs.  Is there also an option to disable deletion of VPN configurations?  Likewise, is there any way to prevent a user from just toggling the VPN off. Or perhaps automatically re-enabling the VPN if they do turn it off?

I work for a university- they are requiring that we have rotating admin passwords throughout all devices, both mac and windows. We know that Jamf offers LAPS but it looks like from thats setting that it must be scoped to all computers, and we want to simply test it on a few to make sure it works the way we want to before deploying to the entire university. Is this possible? I have also read that FileVault will be affected once this is turned on, which is a requirement that it stays enabled. Is this accurate, and if so, how do I ensure that both LAPS & FV stay intact and working the way it should? Thanks!

Hello everyone! Has anyone configured the AD CS Connector Inbound? We are currently looking at the documentation for the configuration. Does it contain all the information or did you notice anything during the installation that might have been worth knowing? Thank you!

Hi All, I'm working on a solution where customer managing MacBooks using Jamf Pro and having Zendesk ticketing tool. Upon reviewing the environment, found that traditional way of software request or installation is happening. I would like to understand that is that possible that can we integrate Jamf self-service with Zendesk, so that whenever user need of an application then user can request from self-service, and an application requires an approval Zendesk will raise a request on behalf of user and forward to concern member. If approval is not required, then application gets installed automatically from Jamf self-service.

We took delivery of 8 mac mini servers a month ago now. Each of them is the 2x 1Tb configuration. I build them into casper distribution points and turned the drive pairs into a RAID 1 configuration. Really glad I did that. Two of the servers in production have within days of each other dropped a hard drive. In fact looks like one of the drives in each mac has died and disappeared. That ain't normal. What is everyone else's experience of mac mini servers? Am I just extremely unlucky before I go complain like hell to Apple?

We've been seeing a weird issue with some of our macbooks that have been sitting on our shelves for a while. These macbooks have been sitting for a couple months now, when we turn them on, go through the basic setup steps country region keyboard wifi. We get to the remote management screen just fine, enter our company creds, sometimes we get to our entraID signin page (jamf connect), or it'l go into a bootloop. Or sometimes we get to the desktop but the macbook becomes an unmanaged device and self service doesnt install and no ability to run any sudo jamf commands as jamf cant be found. (so the MDM doesnt fully install?)To resolve this we have remove our mdm and reinstall the mdm, but sometimes its easier to reimage the macbook as we have the MDM as nonremovable.Any else having this issue?

We are doing a POC for Linewize and running into some issues with access to the VPN System Preference Pane. Test user is a local administrator, as will the production users, no getting around that. I can restrict access to the network preference pane: but then VPN & Filters pane is still available I don't see anywhere that I can restrict the VPN & Filters pane, am I missing something?Ideally I would love to be able to leave access to Network open and restrict VPN & Filters in 2 locations: 

Hi All  Hoping someone can help.Have found a script for collecting log files using jamf pro API thanks @Travid  @david_maestre for updating the script to work with Jamf pro API I belive its based on this https://github.com/kc9wwh/logCollection which no longer seems to work. I belive due to changes in the API.Im getting the below errror is there anyway to make it work without needing Xcode, seems to be using some tools which are part of Xcode. My coding skills arent up to much so struggling to find whats bits of Xcode its using as dont appear to be reference in the script. no developer tools were found at '/Applications/Xcode.app', and no install could be requested (perhaps no UI is present), please install manually from 'developer.apple.com'. Failed to retrieve Jamf Pro Computer ID. #!/bin/bash ## User Variables jamfProURL="$4" jamfProUser="$5" jamfProPass="$6" logFiles="$7" ## System Variables mySerial=$(system_profiler SPHardwareDataType | a

All our ipads are added to Apple School manager and are enrolled in Jamf School.Activation lock is enabled on all ipads: some with a personal icloud account from a user, some with settings in the deployment profile.Now we want to add our M1, M2... macs and macbooks.But, i dont see an option to let macbooks enable the activation lock when setting up with a deployment profile.Also if a user enables activation lock with a personal icloud account, i don't see a bypass code in the details of my device in jamf school.Are macs not officially supported in 'Jamf School'? Are this Jamf pro features?   Thanks for the information

we’ve been experiencing several persistent issues in our Jamf Cloud instance since mid-March, and unfortunately, they still haven’t been resolved — even after the recent Jamf Pro Cloud upgrade. 1. Missing Log Details in All Policies Across all policies, we are currently unable to access detailed logs — the log entries are visible, but the “Details” links are greyed out or unclickable.This is a major issue for us, as we rely heavily on these logs for remote troubleshooting and support.The issue occurs consistently in Edge and Firefox, and Safari is not an option in our environment. 2. Configuration Profile Scope Cannot Be Modified We’re also facing a separate issue with one specific configuration profile: we are unable to change its scope.We’re aware that the profile might be corrupted — but even if that’s the case, it doesn’t explain why log details are inaccessible across all policies. This is especially

Does anyone know what plist controls Zoom to auto-boot at login?  It seems like it may be more of an Apple plist than Zoom.    

Hi everyone, the first renewal of the radius cert is due in a month and I am not confident on how to do this without disconnecting all of our 250+ clients. I believe I have perhaps made mistakes regarding best practices. However, I had no other choice since all certs and network payloads needed to be in one profile. The Jamf Profile used to deploy the 802.1x auth contains: the RADIUS cert the CA cert the info about which cert template to use to issue a cert for any given machine the wired and wireless network configuration settings with the certificates used to connect. All certs are issued via the ADCS server to be able to renew automatically since MacOS and IOS would not be able to do this if done without it. As far as I understood it, it had to be done this way, (all in one approach) to be able to select the cert to use for any given network connection that the conf-profile is controlling. However, once I would re-redeploy this conf-profile, the clients would lose the connection

Hello All, I want to deploy updates to Ipads in non business hours probably between 1-4 AM, how can i achieve that. I am new to JAMF Thanks in advance  

Hello Everybody, Our company has been using an Automatic Proxy Configuration with a proxy.pac URL on all Mac devices for about a year. Previously, we deployed this setting once via a script. Last week, we distributed the same configuration via a configuration profile to all devices. However, after this change, users started experiencing connection drop issues in Teams and Outlook. Has anyone encountered a similar issue? Also, is deploying a proxy.pac URL via a configuration profile a recommended approach?

I have 3 devices in my org that when they hit the JAMF Connect Login screen to MFA into the device it auto-reboots.  I do not have a chance to choose local login since it is instant. I'm not sure if it's a pending policy or JAMF connect causing the issue since it has not checked in since the reboot has started. I do not see any pending policies in the logs. I can't apply any current policies or check-ins since it reboots too quickly to check in to JAMF and or post a boot up trigger. 2021 M1 Macbook ProJamf Connect 2.45.0

Hi everyone! 👋 We’re eager to hear your thoughts on the App insights security report in Jamf Security Cloud. Your feedback is incredibly important to us as we work to improve the product! Below, we’ve outlined a few questions. Feel free to answer as many or as few as you like in the comments below. 1. How satisfied are you with the current App insights report?(Scale: 1 – Not satisfied to 5 – Very satisfied)2. What information in the App insights report do you find most valuable or important?(Open-ended)3. Are there any issues or pain points you’ve encountered with the App insights report?(Open-ended)4. Is there any feature or functionality you would like to see in the App insights report?(Open-ended)5. Do you have any other comments or suggestions for improving the App insights report?(Open-ended) Thank you so much for taking the time to share your thoughts. Your feedback helps us improve! Best,MichalUX Designer at Jamf

Hi all, We have a bunch of iPads in our organisation that users have logged on to iCloud using their personal Apple ID. some of these users have since left the organisation. is there a way to force log them out from iCloud on Jamf Cloud? No data backup needed as long as we can log them out.   Thanks

hello, I have removed applications manually from the computer, in this case it is oracle, but in the jamf console for some reason it still appears in Package Receipts, what can I do so that these records no longer appear, what should I delete?at the moment I have these records, but I have deleted everything but I still have these records, in the MAC where can I go to delete so that they no longer appear to me.com.oracle.jdk-11.0.14com.oracle.jdk-17.0.5com.oracle.jdk8u321com.oracle.jre

I have read that iPads wont do automatic updates as long as they are in Single App mode. Can someone confirm this? We will hold test at university with those and it would be really bad, if an iPad started an OS Update during the test by some mistake. But if that is true it would not be an issue, as they are all in SAM.

Hello all,   I am struggling getting OneDrive to silently sign in and redirect folders.  I have researched previous posts, and am using Microsoft's guide here: https://learn.microsoft.com/en-us/sharepoint/deploy-and-configure-on-macos to no avail. Here is my configuration policy below -- can anyone take a look and see what I'm missing?  I swapped out my real tenant ID with (Tenant ID) for the sake of sharing.  Thanks for your help.   <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1"> <dict> <key>KFMBlockOptOut</key> <True/> <key>KFMSilentOptIn</key> <string>(Tenant ID)</string> <key>KFMSilentOptInWithNotification</key> <True/> <key>KFMOptInWithWizard</key> <string>(Tenant ID)</string> <key>EnableSyncAdminR

Hi there, I’m wondering if it’s possible to configure Jamf Protect to alert on all activities related to Jamf Connect Privilege Elevation. If not directly supported, how do you typically monitor these events using Jamf Protect? Thanks in advance!

Web Clips were configured in profiles, but no IPads were getting the Webclips. when I went into the webclips profile, it shows that the iPad has this installed. After going through a thread, I found that the App layout was configured without webclips, which prevented them from appearing.  Ok, I configured the webclips part of the App Layout and moved the apps to the home screen. Checked the Ipad and they shown up but without Icon Images even though they was added.  I went back into the Profile Web clips and removed the clips from there. Web back to the App Layout profile > Web clips and remove them. Readded them. i now have the clips but no icon images. Has anyone else had this.         

Hello all, after some testing and profile creation I have started deploying Apple TVs (4K 3rd Gen - no USB-C) in my school district [28 in testing phase]. As we deployed to our schools we ran into a problem where an Apple TV decided to stop communicating with our onPrem appliance (out of 12 deployed). The device seems to work properly regarding AirPlay use, code is issued and staff can cast to it. We setup ALL apple tvs to "Conference mode" which doesnt allow access to anything, including settings [no way to reset that way] Interwebs just mentions that we are out of luck and need to call Apple support in order to reset the device. So, now we we have a door stopper that can't be reset unless Apple support gets involved. Does anyone have tips or tricks on how the apple tvs can be reset without Apple support? Maybe someone had this issue and has some information. All other school sites will follow deployment and I will hate for this issue to happen to our apple tvs at some point and the o