We deploy the Jamf Connect app via Pre-enrollment.  Everything installs and works but the Jamf Connect app that runs in the tool bar does not get added to the login items\\Run in the background until a user manually launches the app, then it adds itself to the login items.I thought it would do that on it own, what steps should I take to enable that without user intervention.

Hello.In our environment we are moving away from binding devices to Onprem AD except for a few small use cases where it is still currently required for Onprem related services such as WIFI, Printing and a couple of Network drives that are slowly being phased out.One of the tasks I am trying to get working is to elevate the status from Standard to Admin of any AD based Security Group inhabiting Local Admin account created on a Mac.So my process is as follows;* User logs into Mac via Jamf Connect authenticating to Azure via their User account* User account is created locally as Standard (not dependent on onprem AD at all).* Device has an AD object, is already bound to AD during setup and device is connected to domain via ethernet, wifi or VPN having direct sight to the AD.* A script is run that unbinds and then rebinds the device but including the name of the security group that the elevated user account is also a member of

Hey looking for help on the below please. We are in the process of deploying jamf out to our users over the coming weeks.We are using a few jamf products including jamf webfiltering.We also you crowdstrike and use the ZTA to enable users to access Okta.I have been told by a jamf support agent that the 2 will not work together due to MacOS only allowing 1 network extension.Is this the case? Any help would be much appreciated.

I do have a question regarding patch management and a smb share. We are using Jamf on premise. and we do have a DP that is in the DMZ and is using a smb share and https.So if I configure a computer outside of the internal network all policies gets installed. But if for example a patch should be installed I often get in the logs an error. Trying to mount the smb share... tried for 3 times and always fails.Shouldn't that also work? I mean of course without a vpn connection he cannot mount the smb share but then he should be dl it from the https source. Or is the patch management still broken I have the latest 10.48.1 server version installed 

 We use school profiles for our students' iPads (BYOD) with a time filter. Works pretty well but every time the profile is deactivated, the iPads forget the previously saved wifi passwords so the students have to reenter their private networks' information every single day. Is there a way to avoid this?Thanks four your help :-)

I'm having issues with uploading to JAMF. Getting the error below. WARNING: com.github.autopkg.grahampugh-recipes.jamf.zoom.us-pkg-upload is missing trust info and FAIL_RECIPES_WITHOUT_TRUST_INFO is not set. Proceeding... Expecting value: line 2 column 1 (char 1)Failed.Any ideas on what could be causing this, and how to fix it? Thanks.

If I write a script using an if statement, and use "then exit 0", what would I enter after "else" to make the script continue running if the result of the if statement is a different value? I thought I knew how to do this but I can't think of it. 

a couple of our clients recently had some Macs stolen.  While we can lock them via Jamf MDM command I was management was curious about Activation Lock.  We currently do not let users enable Activation Lock, but we got to thinking this might be another line of device provided we have the bypass key stored.So...  Do you let uses enable activation lock on your Macs?  If yes...why?  If no...why?

Hi Jamfs,Using Inventory Pre-load for our AppleTV enrollment and it's working great. But hoping there is a way to re-name the AppleTV at enrollment time so when it enrolls in Carousel is has better descriptive name other than AppleTV. If I could name the device in the Preload it would resolve this issue for me. Issue is I don't see an option in the Pre-load template to name the device. Not being able to re-name the AppleTVs causes confusion not know who enrolled the devices.Thanks

- 2020 MBP 13" 4x Thunderbolt ports- Active Directory bound- Enterprise Connect for password sync- FileVault 2 configured (via mobileconfig profile)1. User was prompted to update AD password2. User set new password with Enterprise Connect, as instructed.3. FileVault unlock screen does not recognize new password, only the recovery key (escrowed in Jamf), and the user has immediately forgotten their old password, so I can't test if that would still have worked.4. Thinking this is some kind of AD/Keychain disconnect, I nuke the user's keychain.5. This doesn't resolve the issue, so I unbind & rebind to AD.6. This doesn't resolve the issue, so I create an exception and remove the FV mobileconfig profile, and manually turn off/decrypt FileVault, reboot, log in, remove the exception in Jamf Pro and re-enable FV. A new recovery key is escrowed.7. User's current password still doesn't unlock the volume on reboot. New r

Hi Team, How to check JAMF on-premises DP usage?  

Hello Jamf Nation! You will find details about Jamf Pro 10.48, including the Cloud Upgrade Schedule and Release Notes Video, as well as all future versions in the new Jamf Release Info space.

Hello everyone,  Hope all is well!  We recently purchased a 16" MacBook Pro 2023 running the M2 Pro chip. This is the first time we've ran a user-initiated enrollment on this model/ processor. I am able to enroll the machine but it never checks in automatically. Has anyone ran a user-initiated enrollment successfully on the 2023 MacBook Pro M2 Pro? I'm wondering if this is a known issue or just an issue on my end. Any feedback is appreciated. Thanks for the help in advance!  

I was wondering how do you guys upgrade the cisco anyconnect VPN Client ? as we are all working from home , we need upgrade them remotely and we need to upgrade user VPN Session is not active.if you are aware of any process or any script can you please let me knowThankssantosh 

We have installed several Mac studios at my University. We attached wired Satechi Keyboards and mice to them however for some inexplicable reason, the keyboards and mice intermittently stop responding and users have to disconnect and reconnect. It has become quite a nuisance and not sure why this is the case. Has anyone come across the issue?

Currently in Jamf School when you look at a user record you can see the devices that they own or have been assigned.In an environment where Shared iPad is deployed, the user record has no information about Shared devices. So a scenario that I experience often is a support request from a teacher saying that peter.student is having a problem with his iPad. Which iPad is that? If I look up Peter Student in Users, there's no device associated.But the student is signed into a Shared iPad. There is no history searchable anywhere in Jamf School.Ideally, I should be able to search for that student name and see which Shared iPads they are currently signed into and possibly a secondary list of iPads that they have recently signed into.So the feature request is to add the state of shared iPad login under the Users section in Jamf School.What devices is this user signed into (but does not own, since nobody owns a Shared device).Many times I

I noticed Adobe CC no longer being readily available in Launchpad for our end users after re-imaging to Ventura. Adobe says it's an Apple issue, which makes sense since that is the only thing that has changed, and was my original guess. I can manually create a new shortcut based off the actual application deep in the Utilities folder, but that's not a feasible solution for several hundreds of devices. I've triple checked to confirm Adobe installs correctly and with the most updated version, but Launchpad doesn't see the Adobe CC shortcut that is made in the "Adobe Creative Cloud" folder (also contains the uninstaller shortcut) at time of installation. Instead simply using the Launchpad, it has to be Launched from inside the Applications folder. Our users will give us some blow back at us for not having it exactly the same as last year and for it being "more difficult" for the students.Anyone else experience this and come up with a solution, or have a script

No text available

I am working on an extension attribute to check if Aternity is installed, running, and its version. I have to write it this way to take into account the two possible install paths for the agent while we roll out the newer version. I keep running into an error "CFBundleShortVersionString", Does Not Exist". This is being generated from the version check in my script. I have visually confirmed that "CFBundleShortVersionString" DOES EXIST!!! I can run the command in Terminal: version=$(/usr/libexec/PlistBuddy -c 'Print :CFBundleShortVersionString' /Applications/AternityAgent.app/Contents/Info.plist)When I type echo $version, I get the correct result.Only when I run the whole script in either Terminal or CodeRunner does it give me that error. Here's my EA. What am I doing wrong? #!/bin/zsh # Is Aternity installed? Is it the older version or the newer version? agentOld=(/Library/Aternity/

We have 2 on-premises JAMF instances, running different versions of JAMF, on different servers.The day before yesterday, I was suddenly unable to log into the JSS on one of them; I enter my username and password, it sits there for a second, and returns me to the username/password dialogue with no comment or error. Restarting tomcat didn't help. Rebooting the server did. Meanwhile, the other server was still fine. (So it's not my browser.)Today, both of them have the same problem. As far as I'm aware, beyond Windows updates, nothing has changed.Is anyone else seeing this? Or is it just our environment?Thanks,Lisa.

Is there a way to remove or trigger the 'forget this network' command on a certain SSID with a policy? I deleted and recreated one of my configuration profiles for a wireless network thinking it wouldn't be removed from the current devices, but it was. Until the profile is installed again on the iPads I have been connecting them to a different SSID so I am hoping to be able to remove this via JSS after the profile is installed.

Hello,on Friday we update our Jamf to the 10.47 version and this morning we got an issue that any newly assigned computer during PreStage with Enrolment customization will be pushed to Site: None.So, in PreStage enrollments settings, Enrollment Site is defined and the Automatically assign new device option is enabled. This is all working fine.But as soon as we enable Enrollment Customization Configuration, which is a simple text with a button "Next", the computer will always be pushed to Site: None in Jamf.We tried to select the Site in the Enrollment customization profile, but whatever you select result is the same, Site: None.What I noticed, if is Prestage Enrollment Customization enabled, the computer will be assigned to the proper site at the beginning, but as soon as the Remote Management window is done (all config profiles installed) will be removed from that site. This happens only if is Enrollment Customization Configuration enabled in PreSta

Hello All,hpefully anyone has an Idea for me. We using a long time now Jamf to enroll our Mac's by DEP and UI always working fine.Since a short while now, the enrollment process starts normally, load the MDM Profile all looks good, then it stops by load a few of the Profiles after the MDM Profile.The communciation give the standard error: Device Signature Error. If i try sudo jamf profles renew -type enrollment, nothing happen here, no changes.I need to remove the MDM Profile by Jamf, and enroll it new over the url, then it went over the stop point and enroll normal.This is by booth way to enrollment Automatic and Manually on first time.Anyone an Idea what this can happen, i search all but yet cannot find anyhting related to it.BestAJ

Someone showed me at a conference how their staff created what they said is a webclip, but looked like a widget with an icon for Google Docs, Sheets, Slides, and Drive. When you clicked any of the icons within the webclip it opened a new Doc, Sheet, etc. I've been trying to search for how to do this and haven't found a way to replicate it. Any thoughts?

Iam not sure if anyone else here is intrested, but i raised the following Feature request to allow a policy to be created in JAMF which would update all devices scroped to it to a particular OS version: Minimum and maximum patch level | Jamf Nation Feature RequestsI raised one of these before when remote commnads were first introduced but there wasnt much dammand for it. Now its been a few years on it looks like we are still resorting to sending push commnads natively within JAMF Pro. Other vendors do allow you to set patch levels so jamf should be able to implement this, and we shouldnt have to resort to third party scripts or applications just to get updates. If other agree it would help if others upvote the feature request