Having a little trouble finding the correct operations to pull the Warranty info from the API. Im not even sure if it is possible. The reason to do this is to have a popup on a computer, which is coming up to warranty end, to inform the end user to prepare their machine for replacement. If there is a better way to do this please let me know.

Hello,Has anyone been able to configure the Payload needed for Crowstrike to run with Ventura? (Screenshot attached it all Crowstrike's support continues to give me)I have configured the system extensions as well as the content filter, but can't seem to figure this one out as they don't give much information. I've attempted to use PPPC-Utility as well as Apple Configurator, but they don't seem to work. As we have to go in and manually approve access. This is not ideal as it's our antivirus software and we'd like to have it up and running as soon as the device is enrolled. I am also confused about how to enter the XML script into Jamf, that they provide to allow full disk access to Crowstrike. (Code below) Any assistance is much appreciated. Thank you!<dict> <key>SystemPolicyAllFiles</key> <array> <dict> <key>Allowed</key> <true/> <key>CodeRequirement</key> <string>identifier "com.crowdstrik

So i just update my mac to ventura, and the things is that i changed my AD password 1 day before. Now after updating to ventura, i can only login to my mac using my old password.is there a way to force nomad to check ad and sync the latest password?

Hello, we are attempting to deploy the Zscaler connector using a zero-touch deployment method. However, after completing SSO, users are prompted with a message in Safari asking if they want to allow the page to open "Zscaler". Is there any way to bypass this and pre-allow/permit access?

Hello all,In our institution, all staff users have managed computers using standard accounts. Computers have filevault enabled and PRK's are escrowed into JAMFcloud under the disk encryption pane.I've seen it happen a couple of times - occasionally we have users that go to boot their device up and log in, but after entering their password, they are fed into device recovery with a request for a password. Entering their password can't unlock the disk/proceed and only a PRK can allow you to go further.With the PRK entered, users can attempt to change their password, but it doesn't make a difference. On restarting device, they still can't log into the computer and are again fed back into device recovery.The quickest routine is to flatten the device and re-install macOS as troubleshooting with staff present often leads nowhere. As we're not using 'Erase all contents and settings', reinstallation takes over an hour, and then have to re-enroll and resetup the computer.Has anyone seen occasion

Do I understand correctly that there seems to be no method currently for Jamf School to deploy apps to iOS devices for "On-Demand Installation"? This is not spelled out in any of the Jamf School marketing materials or documentation. And because Jamf School blends its UI for both OSes, it seems to allow me to select "On-Demand Installation," when scoping apps to iOS devices or groups. But Self Service for iOS appears to only support Jamf PRO, and is only documented in the Jamf PRO manual, not the Jamf School manual. I am frustrated, not so much by the absence of this feature, but by the absence of any communication from Jamf or elsewhere on this subject. I have searched and searched. Can someone please spell this out? Is On-Demand install of apps on iOS supported in Jamf School or not?

 Hi All, I completed my Jamf 200 on July 2020, I didn't take a copy of it. Now I am unable to find it. Can anyone help me where to find it.

 Afternoon!We run our inventory through FileMaker, and want to use the API in Jamf School to do some basic GETs.Having a hard time figuring out how to make it work.Know my Network ID. Have the API Token built in Jamf School.    Turned those into the UN:PW respectively and then turned those into Base64.In FileMaker I am "Inserting from URL".Set the URL to https://{ourDomain}.jamfcloud.com/api/devicesSet cURL options to "Authorization: Basic Base64Output"Keep getting same output in FileMaker: Did this for Jamf Pro (using a hand built user and not an API token), and worked like a champ.What am I missing? Thanks- Kevin

 Looking to get some backers.I submitted a feature request to apple enterprise support to see if this can be controlled as pppc just like screen sharing is done now.This way apple stays happy about user controlling there privacy and we as admins get to enable it for them to choose. please submit requests to apple to get this done.my apple ticket is 101522962955 for referencethanks  

As I have been deploying an update script (erase-install) for users to upgrade to Ventura, I have begun to notice that some users are not Volume Owners and therefore unable to perform the upgrade themselves.Some background:This does not occur on all machines, approximately 5% of them.All of the machines in question were initially set up with a local admin user, then added to Jamf via the user-initiated enrollment process.The machines are all AD bindedThe non-volume owner users in question are mobile accounts that are created after all of the above takes place.One interesting thing I noticed all of the affected machines have in common is that they all list the non-volume owners as not having FileVault 2 enabled. However, the local admin account as well as every other account on every Jamf enrolled machine in our inventory, lists FileVault 2 as being enabled  - even though FileVault is not turned on an any of those machines. I'm not sure if FileVault Enabled: Yes (Admin Center) = Fi

We are migrating our organization devices for users to sign into their macs with SSO.We use Jamf Cloud and therefore do not have access to the Apache Tomcat settings.We have a few users receiving this issue:  Any help would be much appreciated.Thank you!

Seriously why is this still simply showing "failed" without any details/log/data???Suddenly one of the most important config profiles started failing on every mac for no reason and I can't figure out why as nothing was changed.

Hello everyone,What I need to do is, as I said, only allow users to change wallpaper (lock & home screen) but only giving them a few choices (branding purposes). Is there a way of doing this either with policies or configuration profiles?If possible, I'd like to leave out the default Apple wallpapers.Thanks!

Hello Jamf Nation, Have a question about the printtool in macOS. Currently all our users are standard, non-admin accounts. As such, whenever printtool tries to modify printer settings, users are prompted for an administrator username/password and are unable to authenticate. Was wondering if anyone has any methods to get the printtool notifications suppressed or potentially just add all users to have the functionality to be able to authenticate through the prompt?

Hi!we are facing an issue with ARD that started some months ago, in details:- No issue with ARD MDM command to enable it- Admin login authentication go through- Observe and Control doesn't work, it loads a while and the following error appears: " Make sure the remote computer is available and the firewall is not blocking screen sharing"- In ARD app on "current application" I can see that it shows the APP in use- TCP/UDP ports are all opened. From networks logs we can see that target device is not responding- ARD app release is the latest one 3.9.6- ARD agent is 3.9.8 - Tested on Ventura 13.2.1 / 13.3 / 13.3.1 Does anyone facing the same issue? Any workaround? Thanks! Daniele 

We are an MSP that specializes in macOS and iOS, with macOS devices making up about 50% of total computers we support. Many are in Jamf Pro (separate cloud instances), and of those, the majority are ADE (vs. manually enrolled). All computers have an RMM agent installed, and we are looking to move to a different RMM platform. It would be helpful to know which computers have Jamf via ADE and which do not so we can anticipate which users will have permissions issues due to lack of profile-based PPPC control. Does anyone know of an option within the Profiles command that can identify the presence of the non-removable Jamf "MDM Profile" on a Mac? When I run the "sudo profiles -P" command, I can see all installed profiles. Some have human readable names, while others are just named with GUIDs. Nothing jumps out as the profile I need to verify. If one of the GUID entries is indeed the "MDM Profile" profile, then I'm going to assume the GUID is unique to each Jamf instance.I'm trying to a

I just finished configuring and testing JAMF Pro and Teamviewer integration. Policy and config profile both work like they should. However, one issue I am running into, is the notification that JAMF pushes to the user to go to bookmarks and open the remote secession does open in JAMF but does not open the bookmarks section of JAMF. 

I have a Mac Lab of 30 Mac Minis all using the same config profile and policies. I have 6 Macs that will not run Jamf Connect. I get a black window and a spinning wheel so I can't even click on Local Login to have students use that. Any suggestions? I tried updating to the latest Jamf Connect, restarts, removing the policy etc. I just haven't wiped the devices as I didn't want the students to lose their local profile. Thoughts?

The Jamf Research & Insights team is hosting a feedback workshop on the Jamf Pro mobile experience Wednesday at noon Eastern Time. Sign up for a spot with Calendly and check out the Jamf Nation Events page for future workshops! 

For some reason, our teachers could creat subgroups in Zuludesk teacher, but not in JAMF teacher.Both apps has been installed through JAMF.Is there any hidden preference-option i could not see. 

Hi fellas, can’t easily seem to find info on this. For classroom environments were macs are shared devices, what type of deployment is recommended. In a 1-1 scenario office 365 business pro is recommended, is it the same for shares devices? For office 2019 along with the serializer seemed to work best for classrooms, is that work flow deprecated and everything should get the same deployment? Thanks in advance for the reply’s

This is from the release about JAMF Pro 10.37, but leaves a lot to the imagination:App InstallersApp Installers allow you to deploy apps from the Jamf App Catalog to a smart computer group and automatically updates and deploys those apps. This streamlines the app lifecycle management process by removing the need to manually monitor, package, and update apps. The documentation page isn't much more help:Patch ManagementYou can manage the software updates in your environment using the built-in functionality in Jamf Pro. Managing software updates allows you to ensure that the software in your environment is up to date on target computers, and allows you to update the software if it is out of date.You can manage both third-party macOS software updates and Apple Updates using the following methods available in Jamf Pro:Patch ManagementYou can use the Patch Management workflow and other technologies available with Jamf Pro to manage the third-party macOS software upda

History - We currently have all of our Computer Level Profiles install as the device is enrolled, apps/system settings/etc.    Followed the same workflow for the Managed Login Items (mix of Team ID and label, depending on need) for Ventura.Issue - If the Profile is present (enrollment) before the base application stack is installed, post-app install the Login Item slider is NOT grayed out. No matter if rebooted, etc. Always able to slide it off/on.   Unexpected behavior as we see it.If no Profile present, install our application stack, and THEN apply the Profile, the sliders are grayed out and cannot be altered. I suppose the question is...is this expected? Should the Login Items Profile not be applied until after the targeted applications are installed? This would run contrary to our normal workflow for Profiles that has been in use for some time (Profile first, then apps, etc). 

Anyone had issues deploying the Jamf School Apps? Assigned a teacher to an iPad but it does not auto login or login at all. I assume its because we are on manage.zuludesk.com url? Thanks!

We have a number of fonts installed on the Macs that we used a configuration profile to get them on the laptops. What is the proper way of getting those fonts off of the laptops now using Jamf?