How can I pull the specific insight's non-compliant system list as a csv file or as report in Jamf Protect? is there any options available for this?

Hi. I am IT in a school and use Jamf Pro. I tried Jamf Parent few days ago and was surprise to observe an easy way to disable the limitations for the student: he downloads Jamf Parent with a personal device, flash the QR Code from Self Service, and then disable the rules and other limitations to have a full access. Did i miss something ? Thanks, Kévin

Hello,I am preparing the deployment of a new antivirus with Jamf. A profile has been created for the authorizations following this documentation:https://www.pandasecurity.com/en/support/card?ID=700101&track=26424 However, the antivirus still requires an additional authorization (Content Filter): I did not find this information. For other antiviruses yes, not for Panda. Is it possible to authorize this on a computer and then retrieve the necessary informations with a command line? Trying in Jamf the following information, it does not work:Thanks for your help

I don't use the cli tools often, and when trying to check something today, I'm being prompted for the configuration password but none of my documented passwords are being accepted. Is there a quick and simple way to delete the cli configuration and set a new password? I believe the only thing I had set was a scheduled backup, which appears to have not been running correctly, so attempting to get in there to check it but unable to do so at the moment.

Glad to see they we can finally have some insight into what is going on when we push MDM commands to attempt to enforce macOS updates. Disappointed to see that apparently none of this info can be used in a Smart Group, Advanced Search, etc for tracking and reporting. Baby steps I guess.

Button placement issue. 

Hello,With the new certificate renewal procedure I had to reconnect directly to the Apple site which manages the certificates.The problem is that the specific Apple ID we used for this when originally installing the product, is now asking me for answers to the passphrases we lost. And therefore I cannot access the certificate management.To work around this I used another Apple ID from our company to generate a new certificate.But after installing it in our Jamf server, I notice that the push no longer works: In view of the logs, it comes from the certificate.Is there a way to force Jamf and associated devices to use the new certificate from another Apple account?If not, what is the procedure with Apple to recover the original account that managed the push certificate for our Jamf server?Thanks in advance for your suggestions.Regard's Stéphane

Guys,We are migrating from Jamf to Intune. Once Jamf profile removed from devices, did drive get decrypted?If not a policy is enough to escrow the key to Intune?

Hi All,I have created one wifi profile and deploying Root CA and sub CA in the same profile where SCEP is configured. At the end it is getting failed after deployment giving error as "<NSOSStatusErrorDomain:-909>".Any suggestions please

I keep bumping up against the issue of different things like Macports, HomeBrew, gfortran and precompiled command line executables need their own specific environment in the shell. I've been lucky most of the time that there's been enough overlap of the apps and I could negotiate to not have MacPorts or HomeBrew but I finally hit one that is just causing pain as I really need everything.  When I've seen big linux systems, they usually have something that you can run to configure your environment usually when you open the shell.I was thinking I'd try something along the lines of a script that runs when you open Terminal and it displays choices for MacPorts, HomeBrew etc and runs the environment setup for them that way rather than my existing all you can eat way from the system wide files in /etc.  I did talk with one of our big system managers who said they use something called Environment Modules (

Hey All,Need some help regarding reseting user password on MacOS devices.I'm trying to avoid separate admin account with LAPS on all company devices. To do that I want to use manageable Apple ID's so the user can reset it by themselves . Unfortunately we are using integration from ABM to Azure with SSO and my problem is that the MacOS recovery window is not visualizing the pop up window in which I have to confirm my credentials. Dose anybody find any solution for this ?

I know this is the old way of doing things,. I have multiple domains in the same forest and a service account in one domain that I'm trying to use to join another domain.  I'm just wondering how I need to specify the service account's domain on the directory binding I created. In Jamf's directory Binding there are fields for domain, username, password, verify passsword, and OU: For domain I specified the domain I want to join, not the domain the service account resides in. For username I have just the simple username of the service account.  Do I need to specify it in the SIP format?  user@domain?  Or maybe with a backslash?  domain\\username?  

Got this Error while handing out apps on my Ipads. Is there a solution?

Hello,I am trying to add an EA's value "YES" to the existing EA's name "Decommed:" in JamfPro.Spending hours and still not being able to figure it out! New to API/XML and learning along the way by watching the presentation from JUNCxxx.so far this is what I have and I am sure the curl statement is not working with the error message <p>ERROR in XML file</p>Appreciated your help.-------------------------#!/user/bin/shjamfuser="jamf_account"jamfpw="jamf_password"jamfURL="

Apple Script format #Created by Kyle Ericson Date July 24th 2018 #If you want to remove from JAMF uncomment this #do shell script "sudo jamf removemdmprofile" user name "Administrator" password "superpassword" with administrator privileges #do shell script "sudo jamf removeFramework" user name "Administrator" password "superpassword" with administrator privileges #Remove Company Portal Items do shell script "killall 'JAMF' || True " do shell script "killall 'Company Portal' || True" do shell script "sudo rm -R '/Applications/Company Portal.app/'|| True" user name "Administrator" password "superpassword" with administrator privileges do shell script "sudo rm -rf '/Library/Application Support/com.microsoft.CompanyPortal.usercontext.info'|| True" user name "Administrator" password &

What are the possible causes we can expect to become mac device unmanaged in JAMF Pro console? As enrollment is not completed successfully so we cant see any enrollment log under /var/logsHow can I do the troubleshooting to fix this issue.

Hi all,I am currently facing a really bizzare issue and not really getting far with support.I have a prestage enrolment which for the most part works fine. It prompts for authentication and ive set it to pre populate the 'user creation' screen with the username used on the enrolment authentication prompt.Policies run in the background as normal, however after the user is created and it logs in (automated process with the prepopulated fields) any subsequent polices set to run on enrolment complete do not run.If i use a prestage enrolment which doesnt automatically create the user (so it sits on the login screen) all policies run, however I then face issues with other things)If i set the prestage enrolment to create a user (but for me to enter the details manually on the user creation screen) all policies run if I leave it on this screen. If i create the user and log in as it while policies are still running it will interrupt the process again.

Following the upgrade of our cloud instance to 10.46.1 over the weekend, we have machines that are reporting the following in their jamf.log on a repeated basis:Mon May 22 17:47:51 TEST-MBA13 jamf[299]: Upgrading jamfHelper.app...Mon May 22 17:47:51 TEST-MBA13 jamf[299]: The checksum of /Library/Application Support/JAMF/tmp/jamfHelper.app/Contents/MacOS/jamfHelper did not match. (259218dc3c490c86db89be5bc936db11 != e9a1923730a36128986922e6d3a9b9d0)Mon May 22 17:47:51 TEST-MBA13 jamf[299]: Upgrading JAMF notification service...Mon May 22 17:47:51 TEST-MBA13 jamf[299]: The checksum of /Library/Application Support/JAMF/tmp/Management Action.app/Contents/MacOS/Management Action did not match. (35247d66f433b9b6406e4d2f62d737bd != 0ccbad7bef47314eca5e58ac7ab373c2)Beyond the fact that this is showing up repeatedly in the logs, it also appears to be causing self-service triggered policies to falsely report failures (the user receives a "Item failed" notif

Hi all wanted to share this in hopes it's useful for anyone. I wanted a way to be able to collect the last backup done by Druva inSync just to avoid having to go to two different interfaces to find out. It could be improved a bit more, but it does what I need it to do at this moment. I also wanted to avoid having to install anything extra. #!/bin/bash #Created: 5-05-2023 #Description: Runs through all druva insync logs for that last finished backup cycle and returns the date and time # Get the current GUI user's username gui_user=$(stat -f '%Su' /dev/console) # Loop through the log files in reverse chronological order until the "Finished backup cycle" line is found backup_finished="" IFS='' log_files=$(ls -t "/Users/$gui_user/Library/Application Support/inSync/logs/inSyncClient"*."log") while IFS= read -r log_file; do if tail -n 50 "$log_file" | grep -q "Finished backup cycle."; then echo $log_file backup_finished=$(tail -n 50 "

Can anyone explain the Activation code and Licensing? We are licensed for 195 and we are at 195 active computers.  I just received an Activation code for 215 which I added to Jamf Pro in Settings - Activation code.Do I have to update the license configuration file again to have computers update to the 215 licenses?  Is there a document referencing when we get a new activation code and what has to be done for licensing?  

Hi A question: How can I deploy to turn on automatic login for a local user. I found in a other discussion this script but I cant get this working: http://www.brock-family.org/gavin/perl/kcpassword.html What do I have to do to enable the automatic login? I'm a bit confused with this script. Thank you!

A couple of users departed & we don't know their iPhone passcodes.Their iPhone 12's have iOS16.x installed and are Supervised and Managed. They have been restarted. The phones have Verizon SIMs and show an LTE data connection (we have poor service in this location).It seems these phones do not connect to WiFi until the passcode has been entered.Swiping up just brings up the passcode screen with "Your passcode is required when iPhone restarts".Problem - Tried sending 'Clear Passcode' management command assuming it would go via Verizon cellular data but it just shows as Pending in Management History tab (in the queue with the Update Inventory command).Question  - should I expect 'Clear Passcode' management commend to work over a cellular data connection after an iPhone has been restarted?Many thanks!  

Update 10 May 2023: Cloud upgrades are scheduled for the weekend of 19–20 May (details below). We appreciate your patience. Today we are releasing Jamf Pro 10.46. Highlights of this release include: Declarative Status Reporting for Additional Inventory Attributes The following Jamf Pro inventory attributes are now subscribed to the declarative device management status channel: Computer Inventory AttributesOperating System Category > Operating System Supplemental Build VersionOperating System Category > Operating System Rapid Security Response Mobile Device Inventory AttributesSecurity Category > Passcode Compliance Updated Expiration Notification for the Jamf Pro Built-In Certificate Authority The expiration notification for the Jamf Pro built-in certificate authority (CA) has been changed from 90 days to 360 days. This change provides

What is the best way to identify endpoints with removable MDM profiles? I suspect that some computers in my environment may have been deployed that way before I was hired.

Hello,We are running on-premises JAMF Pro 10.37.2 server, and today we've got our first M2 MacBook to enrol.The enrolment process  was similar to M1, however it didn't apply any policies or profiles till I manually run jamf recon and then jamf policy and jamf manage commands - it was just MDM profile sitting there for a long time and that's it. Typically it's finishing enrolment in couple minutes with no issues - at least for other Intel and M1 Macs - moreover other Macs enrolled around the same time finished the process successfully, so it doesn't look like network problem.Unfortunately, we haven't got other M2 Macs to check if this issue is related to new M2 chip or not.Has anyone else faced this kind of enrolment problems with M2 chips? Is JAMF supporting M2 Macs already or not yet?Thank you.