So I am currently working on some API extension attribute based scripts, for use with extension attributes.I have a script working that will do the following:List the assigned number of Computers to a user and List it as a number, under a computer device as a extension attributeList the assigned number of mobile devices to a user and List it as a number, under a computer device as a extension attribute   # get the number of mobile devices assigned to the user UserXML=$( /usr/bin/curl \\ --header "accept: application/xml" \\ --request GET \\ --silent \\ --header "Authorization: Bearer $token" \\ --url "$jamfProURL/JSSResource/users/name/$strassigneduser") #echo "xml results $UserXML" mobileDevicesCount=$(echo $UserXML | grep -o "<mobile_devices>" | wc -l)# get the number of mobile devices assigned to the user UserXML=$( /usr/bin/curl \\ --header "accept: application/xml" \\ --request GET \\ --silent \\ --header "Authorization: Bearer $token" \\ --url "$jamfProURL/JS

Hello all,   I'm wondering if anyone has had any issues currently/in the past with random large amounts of Apple traffic. Yesterday our network got down to 2 MB/s (usually 200+). After some investigation with our ISP, we saw large amounts of traffic coming from Apple's 17.x.x.x IP range and our Firewall CPU usage reaching well over 80% at times and staying. Our ISP specifically said it was from update servers grabbing Apple Img. files. The weird part is we have an update deferral going to all iPads/Macbooks. We are currently going to be throttling our bandwidth to these ranges, but does anyone have any other suggestions? Thanks!

I found myself today offsite on a computer without my Jamf Pro tools (Composer/Jamf Admin/Jamf Imaging/Jamf Remote/Recon) and it occurred to me to wonder if these are available to download online at Jamf somewhere? I managed to ARD into another of my computers and grab them, but had to VPN and do some other contortions. Just wondering.

Hi Nation, I am receiving the following message when trying to upload a package to Jamf Cloud:Package failed to upload The package has only 64 KB, I was able to upload other packages before, not really sure about what is going on... Has anyone been through the same issue ? Thanks you

Below is a screenshot of the Jamf School Profile/Settings interface.I am confused about how to do this overall. Is the idea that you basically create holistic settings that are all encompassing for a type of device, and you put all of the things and stuff in one, and only apply "one per device" or is the idea to be granular and only for example configure the WiFi, Certificates, DNS Proxy if needed, and that's it.If the idea is to be more modular, is there any type of guide that covers which policies can conflict in which case it's a race condition to determine which profile is applied if there are conflicting settings that would prevent the other profile from applying?If I had to guess it should kinda look like this.Modular profile 1 - Connectivity related settings only. So WiFi, Certs, and anything needed to get your content filter to work on the device. Beyond that, I don't know. How should these things be chunked up, or should it be that beyond the connectivity profile, that it

It's been a while since working with VMs and enrolling them into Jamf Pro. I've been able to seemingly get the VM enrolled using ADE, but it's in a weird state. According to Jamf only 5 profiles are installed, yet quite a few more than that are present on the Mac. However, not all of them that should be there are there. When looking at the computer record in Jamf Pro, it appears as if it's stuck in a loop of installing/reinstalling a majority if not all the profiles again and again...I'm kind of at a loss as to what's going on and how to address.Jamf Pro 10.46.0 (Jamf Cloud)Host: Monterey 12.6.6 on 2019 Intel MBPGuest: Monterey 12.6.5 (using same serial and board-id as host)VMware Fusion 13.0.2

The Jamf Research & Insights team is hosting 4 feedback workshops: OS Updates, AI, Smart Groups, and Reporting. Sign up for a spot with Calendly and check out the Jamf Nation Events page for future workshops!

Anyone got a script for Dockutill on Monterey. Our old Python script doesn't work anymore. We are looking to keep the Self Service app permanently in the dock.  This is the current script. #!/bin/shDOCKUTIL=/usr/local/bin/dockutilsleep 10$DOCKUTIL --add '/Applications/Self Service.app' --replacing 'Self Service' --no-restart /Users/$3killall cfprefsdkillall Dockexit 0

Is anyone else having trouble updating Shared iPads to iOS 15? I'm quite new to device management in general and am looking any help. Our devices are 32GB and the updates are 2-3 GB, almost too large for the allotment per device. I tried to get around this by creating a single device class and updating that single device, but am only seeing that the update is schedule  The update is so large that is is almost too big for I'm pretty new at this, so I created a single device class and tried to update that way. I am still only seeing that the update is scheduled, but the update goes no further. Any advice would be most welcome!

Is there any way to turn on YouTube strict or moderate filtering within Jamf Pro without using Jamf Safe internet. I simply want to enable the native YouTube app feature to enforce strict filtering.For example on the app - I want to enforce this setting on all iPads with the YouTube App.Open YouTube, select YouTube user, top right hand corner / select settings / general / restrict mode.

I'm testing Jamf Connect on a known working and previously domain joined Mac on 10.14.6. The mobile account was successfully demobilized and Jamf Connect works fine. However, I'm getting a prompt from Applications to have access to the "login" keychain. I've tried entering my current password as well as all possible previous passwords and nothing works. What am I missing? This is going to be a pain for users and IT. I'll submit a case this to support in parallel.It turns out the login keychain password is now blank.

I have a Prestage set up that creates a local admin user.It works correctly in Monterey or before.Ventura it stopped working.My work around right now is to not add the machine to pre-enrollment until after I manually setup the local admin user then add the machine to Pre-Enrollment and run [profiles renew -type enrollment] from CMD.I would like to get my pre-enroll working again.Any suggestions?

Hi there,My company is using JAMF to have control over the Macbook I work. Recently, I did bough a Ipad which I did connected with the company managed icloud, only to use a few application I don't want to use in the work laptop(such as personal e-mail).I am trying to use Universal control for use the same keyboard(magic keyboard) and magic trackpad only by "trespassing the mac screen barrier". I did changed all UI controls in apple's guide to make it work, but it doesn't, I can use the ipad as a extension monitor but I would like to use the Unviersal control.I imagine it is due to any restriction in Airdrop(since I try to send file to macbook through airdrop but it doesn't appear in the other device, even the control saying I can receive files from enyone) , to avoid leak of files between devices, my question is: Is there any way the security team can configure the profiles to allow airdrop only for keyboard/trackpad but not allowing file  transference?Thank you in advance!!

Hi, This may be a stupid question but I am new to Jamf and not much of a Mac user. I downloaded Jamf Composer from my Jamf Product page. Version 10.46.0.I get a .dmg file. I run the file on a test Mac and it pops up saying to drag Composer to your hard drive to start building packages. It didn't install anything. So I drag the .dmg file to my Applications folder and run it again. Same message. I plug in an external storage device same thing. USB drive, same thing.I was planning to use Composer to build a .pkg file for Figma as so Figma can be deployed using Jamf.Let me know if maybe I am dragging the Composer .dmg file to the wrong place or maybe it is a bug with Composer.Thanks.

I'm seeing a CodeSignSummary-xxxxxxxxx-xxxx-xxxx-xxxxxxxxx.md appearing in Applications on my computers. File content shows something about wdav-upgrade.zip, which has to do with Defender. Any idea why this file is getting generated?

I need someone help I noticed today that my CA Certificate on the certificate Details section is giving me the description but also gives me an error saying Not found in keychain

Curious if anyone has setup an automated removal of IOS devices that haven't reported after a period of time? We have enough devices that a few get destroyed, lost or stolen every month and I'd like to automate the removal after 6 months just to free up the JAMF licenses for re-use. Thanks!

Hi Jamf Community,  Has anyone ever been asked to report on the number of systems that have Touch ID fingerprints setup? I've been attempting to write an EA as I have not found anything online. There are no Jamf Template EAs for TouchID, maybe this is a feature request. I know we can restrict the use (allow touch ID unlock, etc.) but we are unable to restrict our users ability to add a fingerprint into touch ID.  If anyone has some suggestions on how to accomplish this, I would be grateful. Thanks,JR

For those unaware LAPS is based on an approach originally created for Windows environments whereby Windows devices are configured with local admin level accounts for which the password is randomised and stored in Active Directory per device record. (This relies on devices being enrolled in to AD.)This was and is a highly useful approach so that each device can have a unique admin password rather than all of them having identical passwords.As such this technique would equally benefit a Mac environment and a number of equivalent solutions have been developed over the years. Some even store the password in AD also but many store the password in Jamf hence this discussion here. Again many techniques have been previously discussed here before.However Apple being Apple 😦 this is more complex than it used to be or likely is for Windows.The big issue these days is the use of Secure Tokens for FileVault2 access.Firstly I will state that previously at a number of organisations over

Hello,We have a compiled AppleScript that users can click to access their account and bring up the password change window locally on their computer. It has worked great up to Monterey. But since Ventura it doesn't work at all! It opens System Preferences and Users and Groups but then it stops.Anyone who is sharp on AppleScript and has a solution or some good advice?

I have worked through paloalto's official support document which explains how to create a jamf policy to uninstall Global Protect. It say that the script will run with "superuser authority". However, it still prompts the user to authenticate for the removal of the extension. Is there any way to get around this prompt on the user side?

Hi Jamf Community, i have been trying to setup a search for all devices that dont have a personal recovery key set . Unfortunately there is no such option. Then i thought i could just check if the Filevault Encryption is "Valid". This would be great but, some of the devices in my jamf network dont have a recovery key set, but are encrytped. I was trying to figure out how to search for all of these devices so i could issue a new key for them. Is there any way to do this ? Thanks ahead,Raffael

Has anyone been successfully able to update Splashtop Streamer via Jamf policy? I see that they have a guide for creating a package on their website (Splashtop), but I am unsure of what the "deployment code" is referring to. 

Hey folks, I have a weird one. We use dockutil to manage Dock. Dockutil installation + sorting out the Dock is set as a policy after enrollment. Policy deploys fine, installs Dockutil, adds the required icons but doesn't remove any of them with error 'Remove failed for xxx in /User/Username/Library/Preferences/com.apple.dock.plist'. Although, same script is added to our SelfService and when its run from there, it works as a charm.  #!/bin/bash echo "running dockutil" DOCKUTIL=/usr/local/bin/dockutil $DOCKUTIL --remove 'Safari' --allhomes $DOCKUTIL --remove 'Mail' --allhomes $DOCKUTIL --remove 'Contacts' --allhomes $DOCKUTIL --remove 'Calendar' --allhomes $DOCKUTIL --remove 'Photos' --allhomes $DOCKUTIL --remove 'Messages' --allhomes $DOCKUTIL --remove 'FaceTime' --allhomes $DOCKUTIL --remove 'iTunes' --allhomes $DOCKUTIL --remove 'iBooks' --allhomes $DOCKUTIL --remove 'Maps' --allhomes $DOCKUTIL --remove 'TV' --allhomes $DOCKUTIL --remove 'Music' --allhomes $

Our company is expanding our Jamf enrollments to company owned Macs in Japan. I know that for the users, the OS and Jamf products are multilingual and will display according to the system language. Obviously, anything I type into Self Service descriptions will be in English since that's the only language with which I am proficient. Today I was looking at the computer records of some Japanese Macs that recently enrolled and I saw most information was in English, but I saw the following under Software Updates:macOSセキュリティ対応 13.3.1 (a) 13.3.1 (a)macOSセキュリティ対応 13.3.1 (a) 13.3.1 (a)-13.3.113.3.1 (a)I don't speak or read Japanese, but from the context and version number I can tell this is for the Rapid Security Response 13.3.1(a) update. But it got me thinking...  How would I run searches or Extensions Attributes on Macs in a foreign language.  For Self Service descriptions, those of you in this situation, do you use a translator to put multilingual translations in the descriptions