I am trying to figure out how to deploy a script to our users that deregisters the O365 suite. On the Microsoft site I have found the following Terminal command:defaults write com.microsoft.Word ResetOneAuthCreds -bool YESThis works like a charm when I run it locally, but when I try to run it through Jamf (selfService) it gives no result. I think this might be because the script through Jamf does not run as the logged in user.This is what I have sofar:#!/bin/bash#Remove all Microsoft usersdefaults write com.microsoft.Word ResetOneAuthCreds -bool YEShoping there is someone that can point me in the right direction here.

am trying to deploy in the laptops with M1 chip, but its getting failed at the end while installing with an Error: Push workflow for macOS update/upgrade via MDM timed out after 300 seconds, trying again in 3600 seconds Does anyone found a solution

Hi,We've a 401 Unauthorized error en trying to connect to our Jamf Pro this morning.Is there a know issue or it's just us ?Tks.

With a jamf configuration profile, is it possible for web content filtering to only allow urls starting with for example www.youtube.com but blacklist all other sites?

I'm working on an extension attribute script, that utilises API, which uses the assigned user and the MacBook serial number, to populate information of assigned devices managed and total based on the assigned user. it took a while, but I am near complete, the problem I appear to be having now is generating a clickable linkThe below will generate all the HTML code but it will just appear as text instead of insert into the web page to be clickedecho "<result><p><a href=\\"$jamfProURL/mobileDevices.html?id=${managedidmobiledevicearraydata}\\">$managedidmobiledevicename</a></p></result>"and this will just list a URL as textecho "<result>$jamfProURL/mobileDevices.html?id=${managedidmobiledevicearraydata}</result>"does any one know how this could be achieved so it would list the URL as a clickable URL? I suspect it would likely be a limitation of how the java script is treating anything between <result></result> as only text?

We recently changed a configuration profile for our iOS devices and now devices compliance issueNow many of our iOS devices are going in and out of compliance, showing that the passcode on the phone is not compliant, when it was. Is there someway to stop this from occuring?

We recently changed a configuration profile for our iOS devices and now devices compliance issueNow many of our iOS devices are going in and out of compliance, showing that the passcode on the phone is not compliant, when it was. Is there someway to stop this from occurring?

It was my understanding that when bootstrap token is escrowed to jamf, users will get a secureToken upon first login. Is this wrong to begin with? I created a new admin user via Jamf policy, and then used it to log on to the machine (physically, note remote so to speak). It is not getting a secureToken. Jamf says the bootstrap token is escrowed. Computer as well:sudo profiles status -type bootstraptokenprofiles: Bootstrap Token supported on server: YES profiles: Bootstrap Token escrowed to server: YESAm i missing something? Tried creating a new user from system settings (although with the user created by policy). Same result.The mac is an MBP M2 with 13.4. We're running Jamf cloud 10.46.1-t1683911857 

Hi. A few users within our organization are having a daily pop-up that will not go away. Any idea on how to get rid of this?

Good Afternoon, Has there been any updates to PI110959 ?  Thanks

Hello All,We are new in our setup of Jamf Pro and had to remove the Prestage Enrollments config so we could get a computer to our current config to test enrolls. After removing the Prestage Enrollment config and readding the computers we are testing with will not re-enroll using this https://learn.jamf.com/bundle/jamf-now-documentation/page/Re-enrolling_a_Computer_Using_Automated_Device_Enrollment.html as well as a newly wiped machine that is being activated is not going through the pre-enroll process that is configured. Also we are seeing a pop-up now which was not seen before the removing and readding of the Prestage enroll config which states "Confirm Prestage Account Settings Creastion, Prestage account settings creation may take extended time to save. Do not refresh." Click save and it goes through just fineWe ran through a user driven enroll on the computer in hopes it would fix the pre-stage and re-enroll issues we are seeing, it did not. After user enroll initiated a wipe throu

I'm hoping someone has gone through this process and has some ideas. We are an on-prem Jamf Pro shop. We are looking at implementing some things with out macOS devices as part of our new security process. I've tried doing the LAPS scripts that have been put out by Josh Miller, and PezzaD84 on Github. I've also tried setup up and configuring the new built in LAPS in 10.46. I've run into various issues with those options and figured I need some help. We have our setup as mostly set and forget, so I'm not well versed in Jamf as others might be.The built in API LAPS option might work, but we don't have any computers that are currently enrolled with prestage. The test machine I'm using was manually enrolled. The scripts from Perry seemed the most robust choice with password encryption etc. but seem to not be fully configured right on my end. I'm wondering if some of the issue is since we are running on a Windows server, since that's or core infrastructure, and not a macOS bas

We have had the following problem or bug for the past two days. Certain iPads are receiving the (automatic) command to "update profiles." Afterwards, they become members of all dynamic device groups and load apps, restrictions, etc. Nothing has been changed either on the iPads or in the groups. What's really strange is that the group memberships should actually exclude each other. For example, students and teachers, location X and location Y (60km apart, dynamic group based on IP), school A and school B, etc.Has anyone ever encountered a similar case or have any idea what might be causing this?Thanks in advance :)

 Hello, my script continously asking for user password id blank is left empty ! any idea to fix it:  # Password validation loop.TRY=1until /usr/bin/dscl /Search -authonly "$user" "$USER_PASS" &>/dev/null; do(( TRY++ ))echo "Prompting $user for their Mac password (attempt $TRY)..."USER_PASS=$(osascript -e 'tell application "System Events" to display dialog "Please, type your Password to start the operation:" default answer "" with title "test" with hidden answer buttons {"OK"} default button 1' -e 'text returned of result' 2>/dev/null)if (( TRY >= 5 )); thenecho "[ERROR] Password prompt unsuccessful after 5 attempts. Exiting script..."exit 1fidone

Does anyone know if the 8x8 Work app can be deployed via Jamf? I tried converting the dmg to a pkg in composer, but that didn't seem to work. I'm also open to using a script to install it. Any thoughts are appreciated. Thank you!

We are using Jamf School to manage our fleet of iPads. Is there a restriction that will prevent the user from clearing their browser history in both Safari and Chrome? Also, I'd like to disable Incognito mode in Chrome.

Hi all,I want to write a scripts to auto select Monterey or Ventura installer.The scripts is here:#!/bin/bash### CHECK AVAILABLE DOWNLOADS GET_OS_UPDATE=$(softwareupdate --list-full-installer | sed -n 3p)sleep 1TRIM_OS_VERSION=${GET_OS_UPDATE#*Version: }echo "$TRIM_OS_VERSION"OS_BUILD=${TRIM_OS_VERSION%%, Size*} ### GET THE MAJOR AND MINOR VERSIONS: majorVersion=$(echo "$OS_BUILD" | cut -d "." -f 1)minorVersion=$(echo "$OS_BUILD" | cut -d "." -f 2) ### GET THE NAME: TRIM_OS_NAME=${GET_OS_UPDATE#*Title: }echo "$TRIM_OS_NAME"OS_NAME=${TRIM_OS_NAME%%, Version:*}InstallerPath="/Applications/Install\\ "$OS_NAME".app/Contents/Resources/startosinstall" osascript -e 'tell app "System Events" to display alert "Downloading '$OS_NAME $OS_BUILD' update"'softwareupdate --fetch-full-installer --full-installer-version $OS_BUILD####Variables # Determine the current usercurrentUser=$( scutil <<< "show State:/Users/ConsoleUser" | awk '/Name :/ && ! /lo

Hello,For time to time we might ask user to prompt his password if no workaround is available depending on scenarios.When deploying below script, user is not forced to type his password. He can just drag the prompt windows aside and continue working. Is there a way to:1) display the prompt windows on full screenor/&2) if not answered, user cannot continue working as per mac software installer "when admin pwd must be put"#!/bin/bash user=$(ls -l /dev/console | awk '{ print $3 }')PROMPT_TITLE="Authentication Needed"Logo="/Users/Shared/loreal.jpeg" echo "Prompting $user for their Mac password..."USER_PASS=$(sudo -u $user /usr/bin/osascript -e 'display dialog "Please, type your Password to start the xxxx operation:" default answer "" with hidden answer buttons {"OK"} default button 1' -e 'text returned of result')exit 0

Hi,Using Jamf cloud - very new to JamfCurrently trying to setup MS defender and deploy the App to my test Mac Devices - followed this guidehttps://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/mac-jamfpro-policies?view=o365-worldwideThe defender app (.pkg) has been downloaded from our 365 defender Portal by our Admin)I can deploy the MS Defender App manually.In Self Service When clicking on install - after a moment - it reports 'item failed'The Jamf Log on the device  it states 'The message could not be parsed'Can anyone give some further advice as to where to investigate this issue - how would I check the content status on the jamf cloud ? - thinking this is the only difference between successfu;/unsuccessful install ? Many Thanks

In Jamf Pro, we disabled the Airdrop feature for one of our systems to comply with CIS benchmarks. However, in Jamf Protect insight, it still states that the system is non-compliant. Could you please assist us in resolving this issue.

DNS ProxyOur DNS settings in Jamf are set to "Restricted" to not allow users to disable it. This is overwritten in macOS Ventura as the user can disable it.Firewall settingsThis field is "greyed out" on macOS Ventura. (Both disable option and "Options..." option. Looks like you need to unlock the setting with the "Lock" icon, which isn't present in Ventura.

I'm following the Jamf Pro Installation and Configuration Guide for Mac and it sounds like the Jamf Pro Server Tools CLI should be included with the Jamf Pro installer for Mac. However, I can't locate the jamf-pro binary after running the installer found in JamfProApps10.46.1.dmg -- am I missing something?

Hey, guys! I am testing our company's FileVault 2 workflow and I haven't been able to use the Institutional Recovery Key, simulating the scenario in which we don't have access to the enabled user's password nor his/her personal recovery key. We have an encryption configuration with both recovery keys. To test it out, I downloaded from the JSS a RecoveryKey.p12 file and put it into a USB drive. Then, booted the "affected" machine into recovery mode, obtained the logical volume's UUID and then ran the following: diskutil cs unlockVolume UUID-OFTHE-VOLUME -recoveryKeychain /Volumes/USBDrive/RecoveryKey.p12 And the response I get is: Error: -69749: Unable to unlock the Core Storage volume It's worth mentioning that this is a Sierra machine, so the drive is HFS. Is this procedure correct or am I missing something? Thanks for your support!

Hi,Does anyone here have any experience in the distribution of Avid NEXIS Client Manager using Jamf Pro? Distributing the package is no problem but after the application launches it immediately closes again. Probably because of some PPPC settings but i can't seem to find which one. 

We have several general use computers with automatic login, and the fact that Screen Lock (aka: "Require Password after screen saver begins") is killing us. Every reference I have found to disabling Screen Lock either refers to the plist from when it was still a part of the Screen Saver Preference Pane (which doesn't work now that it's part of the Security & Privacy Pane), or simply refers to Lock Screen on the Apple Menu. The best we have been able to do is to track the setting down to the following file: ~/Library/Keychains/[UUID]/user.kb We have confirmed that file is where the setting is held, but the file is encoded and we have been unable to decode the file. Does anyone know how to change this setting with JAMF, or a script, or any kind of remote management?