Good morning,After modifying profiles (to apply a defined wallpaper or install Web Clips) the update does not take place on the whole group ... The versions of the profiles are the same, but the "visual" version " which is on the Ipad is different ... (same version of IOS)Anyone had the same issue?Thanks to the communityThierry 

Hello community,we are using SSO via Microsoft Asher® AD.Now, we changed our Cisco Webex® to SSO, too. On our Windows Clients, SSO for Cisco Webex® is working, but not on our Mac® clients.I configured a configuration profile and a plist in Jamf Pro® for SSO with "Single Sing-On Extensions SSO for the Mircrosoft Office® applications is working well, but not for Cisco Webex® . The (Microsoft® ) logon screen is coming up, but the user credentials (the users email address and his password) are not automated filled. (When the user is starting an office application, like for example Excel®, the credentials will be filled in automatically).The application "Company Portal.app" is already installed on the Mac® client and the client is registered in MS Intune®.Is there anyone who can help me for setting up SSO for Cisco Webex® ?Thank you for your time and answer andkind regards,Michael

In one of the recent Defender version updates, Microsoft changed the syntax used for the mdatp command line tool. We script this to determine Mac AV data via Extension Attributes.This link has the release notes for Defender for Mac: https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/mac-whatsnewThis link is a good reference for the command line options: https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/mac-resources#configuring-from-the-command-lineBelow are some of the scripts we use to build these attributes in case anyone is looking for the updated syntax. The first one is interesting since the definitions date used to be exported in epoch time and is now in a human-readable format.#!/bin/sh # If Microsoft ATP is installed, then get ATP definitions date if [ -f "/usr/local/bin/mdatp" ]; then result=`sudo mdatp health --field definitions_updated` dateresult=`date -j -f "%b %d, %Y at %H:%M:%S %p"

I've gone through the guides and troubleshooting information for setting up Jamf SCCM plug-in version 3.6 and all seems to be going well until it reaches the send to SCCM part. I can see it pull from jss. I can also verify that the data in the XML file is correct. When using the helper tool, I receive a successful Sent to SCCM message. According to the logs, during the send to SCCM, there seems to be a check that fails everytime. The error on the log is as follows: 2018-03-15 13:48:52,678 [ 7] INFO Jamf.ProxyService.Plugins.SCCM.Utilities.Certificates - The registration status of the device 'Computername' SMSID: XXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX in XXXX.XXXX.XXX' is 'Error', 2018-03-15 13:48:52,678 [ 7] ERROR Jamf.ProxyService.Plugins.SCCM.Utilities.Certificates - There was an error looking up the device Computername' SMSID: XXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX in XXXX.XXXX.XXX' because either the client certificate is blocked or the registration message was inco

Hey y'all! I haven't been able to find a KB article on this so I'm unsure if it's possible.  Is it possible to uninstall remotely iOS apps that were installed via JAMF? If so, could the uninstall also be done in bulk?For example, I have a group of iPads that I don't necessarily want to wipe, but they have some currently unnecessary apps on. I would like to be able to uninstall the unnecessary apps remotely. These apps are not default apps from Apple. 

Hello, I'm fairly new to JAMF so sorry if my question seems redundant. We're currently prepping iPads to be surveyed out, since they have student data our procedure involves wiping the devices (either via Apple Configurator or JAMF Wipe). Is there a way to scan the serial numbers of the devices we plan to restore into a spreadsheet and have them uploaded to JAMF Pro to then be remotely wiped?  The process we have currently works but I was just looking to see if there were any tips to make it go by faster. Thanks! 

Hello Team,Good Day!Can anyone please advise if we have Compatibility testing tools for MacOS that meets the Industry standards , Especially it should be able to tell us if the application will be able to run successfully on a given Hardware configuration.Thanks,

Hello everyone,I've been scratching my head around how to get the Public Beta updates blocked for the macbooks that we have enrolled in Jamf in our office environment. What I have tried so far is going through the restricted software section and blocking the installation by blocking the following app from installing "Install macOS Ventura beta.app". Yet, despite this, the option to install the Public Beta updates on Ventura are still available and when selected to install, it still installs without issue. Has anyone else run into this and/or found a way to block this?

I'm testing this MS plug-in for SSO It works fine with Safari, but I'm not able to use it with Desktop-Apps like Office 365 ones. Anyone have experience in SSO in Office 365 apps?

I was wondering if there's a way to install the adobe creative suite into the ~/Applications folders to help our non-admin creative users update / install fonts.  I know a lot of efforts can be handled via the creative cloud apps, but they are still finding issues with fonts and 3rd party plugins. 

I guess I am not the only one that is tired of adobe bad update options.I know adobe remote update manager exist - but that is only working for patches.What about new versions - what is the best practice to push them out - and even more, how do you remove the old version, that is not auto removed during update to a new version

We have a machine in JAMF randomly start to get this “different server URL” error. We have unenrolled and completely deleted it from JAMF. Re-enrolled, works briefly, then back to this error. Any thoughts?I have seen others state this is a JAMF "issue" and the only way to resolve is to erase the machine and restore from backup. This is a rough and time consuming solution, curious if there's anything else we can try. 

This is our first JAMF Pro instance being hosted in the cloud by JAMF and we've been hitting roadblocks while getting it set up for the first time using our on-prem Microsoft AD LDAP server. The first block was a firewall issue where it wouldn't proceed past the "Enter Server Info" step using the LDAP Server Assistant. We've got that sorted and it proceeds to the next step of "Enter Credentials," but that is where we are currently stuck and support emails haven't provided much insight and it seems this step isn't a big enough trouble point to be online on forums. We're using SSL with a cert generated from Digicert(also attempted a self signed cert from the server, but can try again if better instructions are found). I've created an AD Service Account just for this connection and have confirmed it exists. I've also tried my personal AD account and it still states "Could not find user." What are we missing here and how can we determine the point of failure?

Hi EveryoneDoes anyone face this issue? My policy is working (app install) with Recurring check-in but not working when i am trying to install same app (no matter what I creat package in composer or download from 3rd party website) on endpoint. So, any help is appriciable.

The Jamf cloud team is working on an effort to improve the infrastructure of the Jamf Pro cloud environment. This is part of a continued effort to always provide you with the latest features that are available from our Amazon Web Service (AWS) environment, most notably to improve reliability and scalability to reduce environment downtime and better serve you as a Jamf customer. As an incremental step in this process, we are planning to migrate all Client Not-for-Resale (NFR) Jamf Pro cloud instances on Saturday, July 8, 2023 (starting at 12:01am) which will require a small outage of any NFR instances. Note: this will NOT affect any Production instances. Thank you, Jamf Cloud Team

Hello,I'm currently configuring all things Jamf for my company and am having some trouble with DisplayLink. Currently I have configuration profiles set up to allow standard users to permit screen recording on Teams, Splashtop, and Zoom. So, when users are prompted to allow screen recording, they don't need to be an admin to do this. I tried the same method on DisplayLink, but it remains greyed out. Is there an extra step like allowing a Kernel or PPPC for this to work? See the screenshot and if you need more information, please let me know!Edit: Resolved. The profile I uploaded was corrupted. New profile with the same configuration was used and it worked fine. Thanks in advance!

I've noticed there isn't an option to force the enablement of Location Services on a Mac. I've opened a ticket with Apple and they said this is by design for privacy. I can completely understand that on a personally owned Mac, but for a corporate owned asset, we should have full access to the device in case it's lost or stolen and we can tell the last place it was, which means enabling location and not letting someone turn it off. People don't have any expectations of privacy with work computers and things like email or what applications are installed, I don't understand why Apple is drawing a line in the sand with location. Am I crazy for thinking this should be an MDM option?

Today we are releasing Jamf Pro 10.47. Highlights of this release include: Enrollment SSO with Okta VerifyEnvironments using Okta as an identity provider can now configure an Enrollment single sign-on (SSO) workflow to augment the Account-Driven User Enrollment experience. App Installers Enhancement: Availability in Self ServiceWhen distributing software titles from the Jamf App Catalog to a smart group using App Installers, you can now make the app available in Self Service for end users to install when they are ready. After installation, the app is automatically updated when a new version is available in the Jamf App Catalog. Customizable Self Service Buttons for Mobile Device AppsYou can now use the Button Name Before Initiation and Button Name After Initiation fields in Jamf Pro to customize app action buttons in Self Service for iOS to better suit your users.   For additional information on what's included in this release, review the release notes via the Jamf Learning Hub. T

Hi ev'ryone.We are using the import of placeholders regularly. We would like to use the API instead, because the import files are already generated by a selfwritten program, which could send the data direct to the API - instead of having the user switch to his browser and interact.Sadly, I was not able to find a solution which fully supports our needs as- it is only possible to update existing placeholders (POST for nonexisting serial responses "success: false,    message: PlaceholderNotFound")- no support for updating the "locationId:"-value (POST seems to ignore this param)-no support for "AssetTag" (which is also missing in GET ADE Device-call) If anyone encounteded that case before - hints and suggestions are welcome. Thanks.Marco 

Hi,I find the new design of Jamf Nation very confusing. Where has the support section gone. I need to log a support ticket and can't find where it is now done. I can't even find my old tickets. The last thing people with an issue need is not to be able to find out to report a problme. Anyone with help please? Updated: found the answer https://account.jamf.com/support   

Hi all,I am new JAMF admin and need some insight about the issue that we are facing in our environment. On few of the newly procured MacBook which are already MDM enabled, we are receiving the below mentioned casperadmin login screen instead of standard remote management screen. The only workaround that I can apply is to remove the enrollment server from ABM and then add the server back. However, this does not work everytime.Has anyone seen this issue and would really appreciate any kind of help. Thanks

Hi all, I am deploying zimperium and they have integration only with Jamf Pro.Will it work also for my Jamf School devices? Or is it totally different? Thanks!

Hello,I'm fairly new to jamf pro / protect and just took over partial responsibility for a tenant. I noticed, that lots of devices do not have the most recent Protect version, even with "automatic updates" enabled. (Most of them on os 12+)They check-in daily and I can see them as "connected" in Jamf Protect. Do I have to push the updates manually or is there something else at fault I haven't thought of?Thanks,Georg

I use a script that configures and activates remote management. It uses the kickstart command to configure it and calls an API to activate it. But I have 2 problems.The first one is that it should activate the remote management with all privileges for the admin account, not for everyone. But sometimes, despite the fact that I see the admin account in the "only for specific users" box with the right setup, the radio button for "All users" is active. I was thinking that it may be due to the fact that I never logged in into the admin account but it's not true as it works most of the time.The second one is that sometimes, I get the error "Connection failed. severUnableToReadScreenMessage". I don't know how it may happen in Monterey, but it seems that a "tccutil reset All" breaks it on Ventura. I sometimes need to use that command to be sure that my pppc profiles are good and not because I allowed access to the app. Of course, I use that command in my test lab. What I need to do is to use t

Here are the direct Apple CDN download links for the Safari 16.5 update released today (2023-05-18) for macOS Monterey and Big Sur:Monterey: https://swcdn.apple.com/content/downloads/46/42/032-63972-A_STXDTZU8QO/q8fdl64hobp69ahribtrieag6r3086hvy6/Safari16.5MontereyAuto.pkgBig Sur: http://swcdn.apple.com/content/downloads/27/11/032-63973-A_V5EERCMLQS/8uk80mv3nd7zt40dw3k8ok1vrynvytj2s0/Safari16.5BigSurAuto.pkgThe Safari 16.5 update for macOS Ventura is part of the macOS Ventura 13.4 update.Note that I have not personally tested these installers as macOS Ventura is now the minimum support version of macOS for my org.