Hi ev'ryone.We are using the import of placeholders regularly. We would like to use the API instead, because the import files are already generated by a selfwritten program, which could send the data direct to the API - instead of having the user switch to his browser and interact.Sadly, I was not able to find a solution which fully supports our needs as- it is only possible to update existing placeholders (POST for nonexisting serial responses "success: false,    message: PlaceholderNotFound")- no support for updating the "locationId:"-value (POST seems to ignore this param)-no support for "AssetTag" (which is also missing in GET ADE Device-call) If anyone encounteded that case before - hints and suggestions are welcome. Thanks.Marco 

Hi,I find the new design of Jamf Nation very confusing. Where has the support section gone. I need to log a support ticket and can't find where it is now done. I can't even find my old tickets. The last thing people with an issue need is not to be able to find out to report a problme. Anyone with help please? Updated: found the answer https://account.jamf.com/support   

Hi all,I am new JAMF admin and need some insight about the issue that we are facing in our environment. On few of the newly procured MacBook which are already MDM enabled, we are receiving the below mentioned casperadmin login screen instead of standard remote management screen. The only workaround that I can apply is to remove the enrollment server from ABM and then add the server back. However, this does not work everytime.Has anyone seen this issue and would really appreciate any kind of help. Thanks

Hi all, I am deploying zimperium and they have integration only with Jamf Pro.Will it work also for my Jamf School devices? Or is it totally different? Thanks!

Hello,I'm fairly new to jamf pro / protect and just took over partial responsibility for a tenant. I noticed, that lots of devices do not have the most recent Protect version, even with "automatic updates" enabled. (Most of them on os 12+)They check-in daily and I can see them as "connected" in Jamf Protect. Do I have to push the updates manually or is there something else at fault I haven't thought of?Thanks,Georg

I use a script that configures and activates remote management. It uses the kickstart command to configure it and calls an API to activate it. But I have 2 problems.The first one is that it should activate the remote management with all privileges for the admin account, not for everyone. But sometimes, despite the fact that I see the admin account in the "only for specific users" box with the right setup, the radio button for "All users" is active. I was thinking that it may be due to the fact that I never logged in into the admin account but it's not true as it works most of the time.The second one is that sometimes, I get the error "Connection failed. severUnableToReadScreenMessage". I don't know how it may happen in Monterey, but it seems that a "tccutil reset All" breaks it on Ventura. I sometimes need to use that command to be sure that my pppc profiles are good and not because I allowed access to the app. Of course, I use that command in my test lab. Wh

Here are the direct Apple CDN download links for the Safari 16.5 update released today (2023-05-18) for macOS Monterey and Big Sur:Monterey: https://swcdn.apple.com/content/downloads/46/42/032-63972-A_STXDTZU8QO/q8fdl64hobp69ahribtrieag6r3086hvy6/Safari16.5MontereyAuto.pkgBig Sur: http://swcdn.apple.com/content/downloads/27/11/032-63973-A_V5EERCMLQS/8uk80mv3nd7zt40dw3k8ok1vrynvytj2s0/Safari16.5BigSurAuto.pkgThe Safari 16.5 update for macOS Ventura is part of the macOS Ventura 13.4 update.Note that I have not personally tested these installers as macOS Ventura is now the minimum support version of macOS for my org.

I've been using DockMaster for quite awhile and it's great up until a new OS comes out and Apple changes the name or location of an app which I realize isn't a unique issue to DockMaster however if I could set static apps with dockutil then I'd only have to modify the parts of the script that need changing whereas currently with DockMaster I have to reconfigure the entire dock on the web interface since it doesn't save your config, then generate a new pkg, upload it to JAMF, modify my policy etc.So the question is, can Dockutil set static apps? Currently I set our self service and school / state assessment apps as static on the dock so I can guarantee every student has the app on the dock in the same place when its time for testing, everything else can be changed by the user.Here is a sample of the plist generated by DockMaster that places those static apps.<key&

we have tested Jamf Connect with Okta for password sync in Mac with network password. its goes well except password expires count. its not refresh immediately after changed password. it took some time(nearly 45 minutes) or we need to logout from Mac then login back (if in company network) or reconnect VPN (if outside of company network). any command to for update count after password change. we are using Kerberos here.

Vacancy Open & closing dates : 06/26/2023 to 07/10/2023SummaryThis position is in the National Marine Fisheries Service (NMFS), Northwest Fisheries Science Center (NWFSC), Operations, Management, and Information Division (OMI), with one vacancy in Seattle, WA.This position is also announced under vacancy number NMFS NWFSC-23-12007036-DE, which is open to all US Citizens or Nationals. You must apply to both announcements if you want to be considered for both.DutiesAs an IT Specialist (Sys Admin), you will perform the following duties:Responsible for managing and supporting enterprise Apple computers. This will involve leading the NOAA Fisheries Mac Desktop Working Group and providing guidance to other Mac system administrators within the organization.Documenting and communicating p

Hi y'all,We are facing a mayor issue when registrating our devices to Intune for compliancy.In the Self Service portal we initate the registration process,Company Portal show, we log in and Company Portal states: You're all set! Then JamfAAD opens with the message: To Complete the registration process, do the following. Safari starts up and shows the following question: "JamfAAD" want to use "microsoftonline.com" to sign in. When we sign in, the screen keeps loading and after a while Safari shows a error: This connection is not private. From there on, there nothing we could do and the process seems to break. When we close the browser and start the whole process again, everything works fine. Why does this not work directly? Please hulp us.Leo

We are having an issue with all new enrolled IOS devices. The device is being enrolled correctly, but when we attempt to open self service we get this error. I have verified that we have enough licenses from the VPP. Self service is running properly on our computers just not on IOS devices.

Hello, I'm hoping someone else can guide me towards a better workflow for wireless radius certificates and JAMF. Our current process is that once a year, we renew our radius certificate (publicly signed) and add it to a certificate payload configuration profile a week before the old one expires. We email all our employees and students to let them know that at some point, their phones and some Macs will prompt with a popup to trust the new certificate.But, with it being a near certainty that Google will soon require 90 day max certificates, followed by probably 10 day certificates, we'll need to find a way to full automate the process so that wireless continues to work. We should be able to ACME to renew the radius certificate itself, and then presumably use the JAMF API to move the certificate to JAMF and configure anything that needs it.Does anyone already have this running in a non-painful way? If so, will your process work for 90 day certs, and are you willing to sh

Hello! I'm moving a client from a macOS file repo to Synology NAS. I'm having trouble mounting the repo with Jamf Admin. Manually mounting in Finder or on Windows works no problem with these credentials. Is anyone doing this in 10.47.0? I saw a couple of threads where people were trying to put / in front of the username like a Windows SMB login but had no luck there. 

Hi,I have been asked to report the initial OS installation date and user profile creation dates for Macbooks. I couldn't find a way to do this with Jamf Pro. Is there a way to get this with a script to be run through Jamf Pro or Jamf Pro? 

We have SSO enabled which works great. However, I need to create a local account that will use the ?failover url. This is an account for an intern so I can't make it an admin account. I created a custom account with the desired privileges but every time we try to use the ?failover url, we get a access denied. Our backup admin account for the ?failover url works as expected. What am I missing?

Hello All,Need your help, i have Apple script which will update the macOS for both Intel and M1 and restart if it's M1 it will prompt for the user password to install macOS. now it's working fine when i run from Apple script editor.But i need to convert the Apple script to run as bash script so that we can push from JAMF.=========================================================================================# Launch software Update preference panedo shell script "open x-apple.systempreferences:com.apple.Software-Update-Settings.extension"tell application "System Events"repeat 60 timesif exists

Why is it that these emails DON'T contain any specific information? Thankfully, these dont come all that often, but when they do,, it would be nice if that contained some specifics. If I need to send out an alert to my users, and i send this crap out, my users are going to lose faith in me and what I am telling them.  Hey Jamf, how about defining these a little bit, they sound like a weather report.......you never know if they're reliable or not. 

Hello Team,When we install LogMeIn on mac manually by clicking on it it opens without any issue, but when we install using by installer command downloading it from DP it is not opening. What might be the reason and what is the resolution here? How can I find the cause of this issue, which log can tell me this?

Hi Everyone,I'm new to bash scripting and the JAMF API and need some help. I'm trying to export a csv file with the Serial Number (Column A) and Computer Name (Column B) so I can then import it nightly into our inventory system. I use the computer name to assign each computer and iOS device to that user so this will help confirm who has the device in the inventory. I have figured out how to export the file, but it all seems to be in 1 cell. I'm looking for help on what I should do to break it apart. Thank you in advance. !/bin/bash server information jamfUser="apiread"jamfPass="apireadpassword"jamfURL="https://jss.url:8443/JSSResource" search computers and GET SerialNumbers and ComputerNames exported to csv file apiData=$(/usr/bin/curl --user "$jamfUser":"$jamfPass" --header "Accept: text/xml" --request GET $jamfURL/comput

Hello All,I'm trying to generate the Bearer token using C# via /api/v1/auth/token API and I'm getting 401 Unauthorized error. But, when I call the same API and with the same credentials in POSTMAN I'm getting 200 with a token in the response. Can someone help me with how to generate tokens using C#?. Thanks. Code:string response = string.Empty;try{Uri tokenUrl = new Uri(ConnectionProproperties.url);WebRequest webRequest = HttpWebRequest.Create(tokenUrl);HttpWebRequest httpWebRequest = (HttpWebRequest) webRequest;NetworkCredential networkCredential = new NetworkCredential("xyzzzz", "xyzzzz");CredentialCache credentialCache = new CredentialCache();credentialCache.Add(tokenUrl, "Basic", networkCredential);httpWebRequest.Method = "POST";httpWebRequest.PreAuthenticate = true;httpWebRequest.Credentials = credentialCache;WebResponse webResponse = webRequest.GetResp

We installed Slack using the Mac Apps with the 'Install supporting configuration profiles' option selected. This led to the Alert configuration issue reported here https://community.jamf.com/t5/jamf-pro/jamf-app-installers-user-notifications/m-p/287342Recently, I noticed we now had two Profiles on our devices with the same name "App Installers - Slack". One profile had 2 settings (no update and Alert config) and the other had 1 setting (no update). I tried updating our Mac App configuration by unchecking 'Install supporting configuration profiles' option and this successfully removed the "App Installers - Slack" with the single setting, but the 2 setting Profile is still there. I have tried disabling the deploy and that did not remove the legacy profile.I have looked at other options to try and remove this

Hello Community and Jamf Team,why are there so many other options in the scope to select as Rule but no "LostMode" offered?I would like to create a group with the rule that only iPad set in Lost Mode will be displayed.Is there a reason for this?Cheers,Peter

HiSo, i have a package file i want to install, but i want to check to see if a file exists before installing this package.If the file doesn't exist, then continue and install the package.If the file DOES exist, then don't install the package. Ideally i want to run a Before script in the Policy, and if Before script exit code is 0 (File doesn't exist) then it installs the package in the Policy too.But if the before script exit code is 1, then just stop the policy there, and don't install the package. Is this possible?Can you stop a package installing, if the exit code matches a certain value from a before script. Thanks

Based on the downloadable .plist for Full Disk Access from https://help.eset.com/eea_mac/7/en-US/install_remote_pre-installation.htmlThe issue that I can't upload them to jamf as it has 4 different Preference Domain inside. So I'd like to split it between 4 preferences domains:com.eset.app.Uninstaller; com.eset.devices; com.eset.eea.g2; com.eset.endpointBut looks like I'm making syntax mistakes and can find them.Tried with the example from https://developer.apple.com/documentation/devicemanagement/privacypreferencespolicycontrolSo my plists are almost the same, the difference if only in Identifier value and CodeRequirement value took from the shared plist:  <?x