I am not sure if it is a coincidence or not, but we have seen the following problem happen on devices after updating to iOS 16.4 +.We have web clips on our devices that point to MS forms pages on our SharePoint environment. They will load once, but any other reloads bring up a blank page. All other web clips (non-Microsoft) work fine. These devices do have a Content Filter Configuration Profile installed on them. When we remove it, the SharePoint web clips work as expected. So the problem is with the filtering. I am hoping someone has had a similar issue and was able to determine the additional site that need to be added for Forms in SharePoint to load properly. I really do not want to enter in the long list of servers that Microsoft has, in the link below. We did test it on Edge, thinking it might be Microsoft being Microsoft, but unfortunately with the same resultsMicrosofts Listing of Servers Did try diagnosing with Charles Proxy and WireShark, but the sites we got th

Hey all,We found that some of the parental controls from screen time on our MacBooks cause issues with test loading in TestNav and we have to disable them.  Im now trying to create an extension attribute to show if the user has screen time enabled so we can send a message to these specific students and parents.During covid we provided instructions for parents to enable screen time on their kids devices, but now have to send messaging out to have them disable it for the tests.Anyone have any suggestions?

Anyone deployed RedSky MyE911 with JAMF? RedSky E911 is a cloud-based emergency call routing service that helps organizations comply with E911 regulations Kari's Law and RAY BAUM'S Act. Both are separate pieces of legislation that were passed in the United States with the goal of improving public safety and emergency response. I believe a configuration profile will be needed to allow access to system events. Not too sure if I will need to get the Team Identifier or Bundle ID. Also, looking for a way to automatically input the host address so users won't have to manually input it. If anyone already has this set up and don't mind sharing, that would be awesome.

Trying to figure out the update process. I'd like to keep my macs up to date with the latest versions, especially when i see the notes identifying an issue I'm having. The problem is, I can't see how to scope an individual machine, or several machines, to test the latest update. Is that even possible?

I recently updated my Jamf Pro instance to the latest version, but I am unable to locate the Jamf Pro Laps feature. Can anyone provide guidance on how to set it up? The "Jamf Pro API Changes and Enhancements" section has been updated since the initial publishing of these release notes to clarify information in a note about how the local administrator password solution (LAPS) feature works with a secure token.

jamfcloud.com/devices/updatesNew look update button in the updates page needs a little UI polish to fix the button width relative to the text/symbol overlay.

I've installed the connector according to Jamf documentation on a server running Windows server 2016 and different one running 2022. I have found multiple posts on the Jamf forum regarding setting up a service account as the identity on the ADCSproxy. I created a service account, switched the identity, I added the same service account to the IISUSR group on the machine, and to the local admins. Port 443 is open on the device, port 443 is open on our network. When I try to test the site from within the IIS Manager, I get an error: ERROR_CONNECTION_RESET. Certificate invalid, site not secure. Any ideas?

Hello everyone,We have encountered a problem that we have never encountered before. When we enrolling our new M1 Macs, the computer restarts or shuts down after we have logged in at the remote management.The only thing left to do is to reinstall the computer again. If we're lucky, the problem won't reoccur. But we have had to reinstall some computers several times.The devices ship with macOS 12.3.0 and we're running on-prem Jamf Pro 10.30.3, if that makes any difference.What could be the error? Does anyone know? Is there any solution? Seen others with the same problem on this forum but not with any confirmed solution.

I have created and configured a lot of Jamf Pro servers over the years. While creating a new one today to use for testing, I ran into an issue I have never seen before. While following the steps for installing Jamf Pro on Ubuntu I am not prompted to create a root user password during the MySQL install process. I'm also not prompted to use legacy authentication. The Jamf article I am using is here:https://learn.jamf.com/bundle/technical-articles/page/Installing_Java_and_MySQL_on_Ubuntu_for_Jamf_Pro_10-14-0_or_Later.html#concept-5140What, if anything, could I be doing wrong? MySQL installs. I'm just not being prompted. Even though I have followed this process many times I always pull up the instructions published by Jamf to ensure that I complete all steps and catch any new or modified steps. Fortunately I have a snapshot of my server so I can revert back to the base install of Ubuntu quickly.

I just configured Teamviewer Remote integration after watching this videohttps://www.jamf.com/resources/videos/jamf-pro-and-teamviewer-supporting-users-wherever-they-are/and the documentationhttps://docs.jamf.com/10.32.0/jamf-pro/administrator-guide/TeamViewer_Integration.html All went well but there is an issue if I click in Jamf on the manage computer and and Management I dont see the option for Remote Management in the list!!Is it buggy or what could be missing that it is not working?

I feel like I'm playing whack-a-mole with these but our students with macbook airs are finding ways to get around everything I have in place and still managing to install VPNs Students have a standard accountI have a profile in place to prevent adding chrome extensionsI have the App Store set to updates onlyStudent devices have Securly at home filtering set up The latest VPN they have is StarVPN it doesn't show up as running, the only way to see it (so far that i've noticed) is it adds a network service, which they shouldn't even be able to do without admin permissions. any suggestions on preventing this further? We are being forced to hold off on device collection until the last day of school and are worried that VPNs will prevent us from locking computers that aren't returned.

Hello,I hope someone have a suggestion how to sovle this in Jamf ProI want to have two Search Invetory Groups1. One that list all Macbooks we have that are managed but never wiped with remote command.2. All Macbook we have still in Jamf, but they have been wiped with Wipe Computer command = not in use anymore.The reason for this is that we must keep all computers in Jamf that we have taken out of use, but still remain as proof that we have done a remote wipe on them.

Can anyone tell me the location of the Self Service company branded icon.This is not the Jamf icon found in Applications/Self Service.app/Resources/AppIcon.icns I am after the branded icon that you upload into the Branding section of Self Service in Jamf Pro. The reason I ask is I wanted to add this to messages we send out using Jamf Helper and -icon "full path to icon location" I would have thought this would be locally on the machine somewhere, but I have had no luck looking for it on the machine, or within Jamf Nation posts. Many thanks

If I have Jamf cloud and I have integrated my Jamf cloud with Azure AD for device compliance and also registering the mac in AAD then should still need AD-CS connector to get the certificate? If yes then why? and this AD-CS connector should run on DMZ?How can I know if AD-CS connector is integrated properly in my Jamf? Is it from Settings/PKI Certificate/Certificate authority?

We have been using EAP-TLS wi-fi with our iOS and macOS devices for some time.  I use a Jamf pro configuration profile with 3 parts:1) install the wi-fi profile2) install the root and intermediate certificate for our internal AD CA3) use SCEP to request a machine certificateBut I'm looking to expand this so the wi-fi user also gets a user certificate.  I can utilize more Wi-Fi roles and place users into different VLANs and ACLs, etc.So my question is anyone installing AD CS user certificates on your macOS and iOS devices?  Are you doing it in an automated way using SCEP?  Or are the users going to a web site and enrolling themselves?If you can help, please provide as much detail as possible.

Hi guys,i am willing to create a schedule task in order to restart my managed ipads every week.is it possible?

Curious about any district using MacBooks (Pro, Air or otherwise), and if you are using any app or service for more parental controls? I have parents wanting more control of website blocking, time limits, and general view of what their child is doing on said machine. Jamf Parent would be great for this if it worked with Macs and not just iPads. Gabe ShackneyPrinceton Public Schools

I'm trying to authenticate against the JSS API URL with a valid login credentials and it seems to constantly fail, e.g. ../JSSResource/accounts with error 401, not authorized. The user has full admin privileges, but continue to fail on the basic auth. I've even tried cURL to see if the behavior is different: $ curl -kvu "jss:****************" -H "Content-type: text/xml" https://jss.*********/JSSResource/accounts * Trying *.*.*.*... * TCP_NODELAY set * Connected to jss.**** (*.*.*.*) port 443 (#0) * ALPN, offering h2 * ALPN, offering http/1.1 * Cipher selection: ALL:!EXPORT:!EXPORT40:!EXPORT56:!aNULL:!LOW:!RC4:@STRENGTH * successfully set certificate verify locations: * CAfile: /etc/ssl/cert.pem CApath: none * TLSv1.2 (OUT), TLS handshake, Client hello (1): * TLSv1.2 (IN), TLS handshake, Server hello (2): * TLSv1.2 (IN), TLS handshake, Certificate (11): * TLSv1.2 (IN), TLS handshake, Server key exchange (12): * TLSv1.2 (IN), TLS handshake, Server finished (14): * TLSv1.2 (OUT),

Having a little trouble finding the correct operations to pull the Warranty info from the API. Im not even sure if it is possible. The reason to do this is to have a popup on a computer, which is coming up to warranty end, to inform the end user to prepare their machine for replacement. If there is a better way to do this please let me know.

Hello,Has anyone been able to configure the Payload needed for Crowstrike to run with Ventura? (Screenshot attached it all Crowstrike's support continues to give me)I have configured the system extensions as well as the content filter, but can't seem to figure this one out as they don't give much information. I've attempted to use PPPC-Utility as well as Apple Configurator, but they don't seem to work. As we have to go in and manually approve access. This is not ideal as it's our antivirus software and we'd like to have it up and running as soon as the device is enrolled. I am also confused about how to enter the XML script into Jamf, that they provide to allow full disk access to Crowstrike. (Code below) Any assistance is much appreciated. Thank you!<dict> <key>SystemPolicyAllFiles</key> <array> <dict> <key>Allowed</key> <true/> <key>CodeRequirement</key> <string>identifier "com.crowdstrik

So i just update my mac to ventura, and the things is that i changed my AD password 1 day before. Now after updating to ventura, i can only login to my mac using my old password.is there a way to force nomad to check ad and sync the latest password?

Hello, we are attempting to deploy the Zscaler connector using a zero-touch deployment method. However, after completing SSO, users are prompted with a message in Safari asking if they want to allow the page to open "Zscaler". Is there any way to bypass this and pre-allow/permit access?

Hello all,In our institution, all staff users have managed computers using standard accounts. Computers have filevault enabled and PRK's are escrowed into JAMFcloud under the disk encryption pane.I've seen it happen a couple of times - occasionally we have users that go to boot their device up and log in, but after entering their password, they are fed into device recovery with a request for a password. Entering their password can't unlock the disk/proceed and only a PRK can allow you to go further.With the PRK entered, users can attempt to change their password, but it doesn't make a difference. On restarting device, they still can't log into the computer and are again fed back into device recovery.The quickest routine is to flatten the device and re-install macOS as troubleshooting with staff present often leads nowhere. As we're not using 'Erase all contents and settings', reinstallation takes over an hour, and then have to re-enroll and resetup the computer.Has anyone seen occasion

Do I understand correctly that there seems to be no method currently for Jamf School to deploy apps to iOS devices for "On-Demand Installation"? This is not spelled out in any of the Jamf School marketing materials or documentation. And because Jamf School blends its UI for both OSes, it seems to allow me to select "On-Demand Installation," when scoping apps to iOS devices or groups. But Self Service for iOS appears to only support Jamf PRO, and is only documented in the Jamf PRO manual, not the Jamf School manual. I am frustrated, not so much by the absence of this feature, but by the absence of any communication from Jamf or elsewhere on this subject. I have searched and searched. Can someone please spell this out? Is On-Demand install of apps on iOS supported in Jamf School or not?

 Hi All, I completed my Jamf 200 on July 2020, I didn't take a copy of it. Now I am unable to find it. Can anyone help me where to find it.