我们的jamf pro是做的本地部署的，我们进行管控的mac是Macbook air（2017），系统：MacOS 11.6，机器正常enroll后，Parental Controls - Deny URLs是生效的，但是当我修改这条Profile后（增加deny url），重新下发后这条profile 就不生效了，只能通过重新enroll机器才能生效。请问如何解决。

Hello everyone,maybe you can help me, I'm loosing my mind here. When I try to deploy some Apps I got the error message "failed to save settings: AxiosError: Request failed with Status Code 500"Any ideas? :)Thanks in advance,Daen

Hello all,I have a JamfPro instance with about 40 Macbooks. Of those, I have 10 devices that are not accepting any management commands. To clarify, all of the management commands and configuration profiles are stuck in pending and nothing that I have done so far appears to have any effect. I have attempted the following in an attempt to fix:Canceling all pending commandsSending a blank pushRenew MDM profileIssuing the command sudo profiles renew -type enrollment via script and scoped into policy in Jamf. Results in  Script result: Error: Renewing DEP enrollment failed: (null) ((null):0)Has anyone else run into this where specific devices are not accepting management commands? Is there any way to fix this without having to physically visit all 10 devices? 

Issue: I have a shell script that when doing a "ditto" command seems to be taking an old version of a file even when the source file has a newer modified date. Is there anything that would cause 'ditto' or any copy command to get an old file? Does the drive cache copied files as the filename of the source and destination are the same each time (destination folder is different)?Explanation:I current have a script to do the following:Create a temp folder to work in - prefixed with current date/time to ensure it different every time the script is run.Copy the History file from a Google Chrome profile to a tmp folder (using "ditto") (script actually does this all present profiles, safari and Opera)Parse the files out to CSV using sqlDelete to DB's to save spaceZip the CSV files and upload to Jamf Inventory Record of the deviceRemove the temp folder using "rm -rf".This process was working great, until the past month or two. Whenever the script is run, it will upload a file that was modified

I made a new blog post on how to setup device compliance with Jamf and Intune.https://www.ericsontech.com/2023/04/setup-device-compliance-with-jamf-and.html 

Hi all. I am considering bringing up a way to better integrate Macs into our management system and wanted to check here to see if anybody had input. Currently we are using Automate and ScreenConnect for our clients as they primarily use Windows machines. However, there is a growing number of Macs entering the environment and it's not a shocker to say that Automate and SC are garbage with support and integration on macOS. I was wondering if having JAMF setup on the Mac side of things would work well in tandem with Automate. Or can it only be one or the other. Thanks.

Hey all, I've pieced together what I think are all the steps for using a Notify Screen along with our basic Jamf Connect setup, but it's been mostly a copy-paste from the JC documentation so I'm not confident it's as smart as it could be. We run a very general Jamf Connect login with Okta and are adding a Notify screen to newly enrolled computers to install basic apps on first setup. Some questions I am confused about:Is it smart to have two different Jamf Connect config profiles? One for the initial setup and one for ongoing use?The reason I ask is we have a single Jamf Connect config profile that contains all the login info in: "Jamf Applications" com.jamf.connect.login as well as "Upload" com.jamf.connect for the JC app properties but we ALSO have "Upload" com.jamf.connect.authchanger which contains the default strings of -reset, -jamfconnect, and -notifyWould it be smarter to have one 'enrollment only' config profile that has all 3, then an 'ongoi

Hi All,  1st Post been trying to get up to speed with our Jamf infrastructure. I have done allot of Googling and searching for information these past few months to get 0 touch working and things look great, now we are trying to get our AD bound mobile accounts demobilized and unbound with the impending Microsoft Vulnerability patch coming that is going to stop communication from our Bound Macs to our Domain controllers. I am automating as much as i can so that i dont have to baby sit this process. i have smart groups for this and they all seem to be in working order. The one function that is not happening how i would like is the actual Jamf Connect Demobilize funcition.  I have the Configuration Profile set with the Demobilize function (only setting). But the demobilize only happens on log off and log back on , NOT on reboot. I cant find any information on this specific criteria. It does say in the article "This involves having users log in to complete the demobiliz

When a Jamf Connect user reboots their Macbook, is unable to log into the system if not connected to wifi.  Model: MacBook Pro (14-inch, 2021)Model Identifier: MacBookPro18,3 

Hello Community, Hoping someone might be able to help me figure out how a user was able to upgrade their Mac to macOS Ventura when I have the installer being blocked using Restricted Software. Is there a log or something that will tell me what triggered the upgrade? I have seen two users do this now. Thoughts?

Hey folks..Management is wondering if / how we can prompt the user to enter Okta 2FA / Okta Verify app pursh or code every time the user logs into their Mac.is this possible?  I personally don't want it, but I'm just following orders.

For past one week, we have have issue with personal IOS devices losing compliant status after new IOS update 16.5. We have to do 'Send Blank Push', and 'Update Inventory' manually for each device in order to device come back to Compliant status every day. More over, the device will not stay compliant not more than a day. We have to repeat the same process everyday for all personal devices. 

We performed the Jamf 10.46 upgrade last week, ever since all of the ticked Sef-Service categories for mobile device apps have disappeared. the categories are still there but have become unticked. We are trying to manually go through all of our apps and re-add the assigned categories back under the Self-Service tab of the mobile device app configuration. However, we have noticed a bug now with categories, that sometimes, when creating a new category, it will either fail to add (spitting out a 404) a new category, or instead edit the last added category. I thought it might have been an issue w/ ampersands, spaces or colons, but even with 'plain' names, without spaces, it is still bugging. 

Hi engineers,  I am configuring "Cloud Services Conection" but, when i enter my credentials and clic on "Save" message "No assets found for this account" appears. How do I solve it ?? Thanks. 

Hi all,We use Apple Remote Desktop (ARD) to send restart commands to a fleet of Macs in our classrooms. These computers are set to auto-login to a user account (these are computers behind locked doors and monitored). That user account is configured to not have windows reopen upon restart. com.apple.loginwindow <TALLogoutSaveState</key> <false/>  That works great on a restart initiated manually from one of the client computers. No open windows reopen upon restart and auto login. Unfortunately, it does not seem to work when initiating a restart from ARD. I haven't determined why this is.At first I thought maybe it's because it's sending as the root user and that might be changing/ignoring something. So I tried sending the restart with a Unix Command from an admin account:  echo "localAdminPass" | sudo -S shutdown -r now   Well, that command worked fine, but the windows still reopened.Does anyone have any idea of why this is

Hello everybody,is there a way to give users the permission to edit the network-settings (example dns-settings).Do i need a MDM-Payload for it (com.apple.dnsSettings.managed)?And what is the easiest way to create a payload for things like that (Settings, permissions...).Thanks

Hello, I have found many old threads about this topic, but nothing new.  I have tried and I don't think it's possible still (I see threads going back to 2017!), but I would like confirmation.  Webclips can or cannot be added to a folder in a Home Screen Layout? Thank you!Dan 

1. How do you set the homepage for iPads for Safari using Jamf Pro?2. Is it possible to set the homepage for iPads for Chrome using Jamf Pro?

I am trying to figure out (in detail) how to connect the two. Fortunately all of our computers are listed in ABM but I am not sure how to connect the two systems.In ABM all computers and devices say No MDM Server and Edit MDM Server is grayed out. I can select All Devices and Edit MDM Server but the only option available is to Unassign from the current MDM.Based on what I am seeing is the only option to unassign all computers and devices and then re-enroll them? If so what enrollment option is correct?It is obvious I have not been down this path before so I would appreciate any guidance in connecting Jamf Pro and ABM and getting all existing computers properly configured.

(Source - https://appleshare.it/posts/jamf-nation-life-2023/)This year Jamf Nation Live is coming to London (9th June), RheinMain (13th June), Paris (15th June) and last location will be Amsterdam (20th June).If you haven’t registered yet, make sure you register below!London @ Tobacco DockRheinMain @ RheinMain CongressCenter, WiesbadenParis @ 3 MazariumAmsterdam @ Taets Art and Event ParkCan't wait to see you in person at one of the locations! Therefore, I want to provide some useful information that can help you if you are coming to one of the events!Useful informationBesides seeing the great opening keynote, there will be many other great presentations, interactive sessions, and panels where you’ll hear from Jamf and other members of Jamf Nation community on the latest regarding managing and securing your devices.App to help you organise the dayTo help you organize your agenda and see where you want to go, Jamf has created an exciting app this year (more details will be inc

Hi everyone,  I wonder if someone could help or, if I am missing something here.We are setting up Jamf Radar, and when we try to do the UEM connection with MS Endpoint manager, the permissions get granted. However, the tenant ID does not populate. Would this need to be done by a GA on both sides?

Hi Community/Hi Jamf AdminsWhen you lock apps in the Teacher app, they visually disappear from the iPad. However, they are brought back to the iPad in an arbitrary order when you unlock the apps again. So the order created by the kids is always goneand created folders etc. disappear.Is there any way to change this? Jamf Feature Request ?Thanks for feedback and suggestions.Peter

Hi All, I just wanted to know if I want to customize the nudge agent in every after 3 Hrs then in my composer can I open the launchagent package(downloading it from github) and put the value accordingly in the plist and save it or still I need to create a new launch agent and build the package to deploy it? Second question, if I get the Nudge popup and set it for tomorrow after selecting Defer button then where this settings gets stored to popup tomorrow? If I want to reset this settings what should I do now?

Hi all,I inherited a messy JAMF situation.   We are current on Jamf Now with a IT advisory firm, they no longer want us as customers since 1) the previous bills didn't get paid on time 2) we simply wasn't using their service, so they can't bill us for anything.  I looked into it and think JAMF Now is actually what we need since we have less than < 10 ppl.  But, our push certificate has long expired, I tried to follow the documentation, but I keep running into issue saying signing certificate has expired.  I do have admin access to the JAMF Pro instance, but I am not sure what's missing on my end. I did try create JAMF ID, but I can't associate it with my JAMF Pro instance...All I want is to unenroll the few laptops we have and start from fresh, but the IT firms want to charge $400 dollar to renew the push notification, which seems high. I also don't like the fact that my laptops are essentially being held hostage...Open to any ideas. 

Hello,We are trying to enroll an iPhone 7 Plus on Software 9,2 that was factory reset. It goes through the ABM Pre-Enrollment, then hangs at Configuring iPhoneWaiting final configuratyion from <company name>In JAMF the device shows as"Enrollment Method: PreStage enrollment: Initial Enrollment"Where should I start looking to solve this issue? Thank you.