What is the impact of the bookmark path in the content filters and how can i configure it?Devices > Configuration Profiles > Payload: Content Filter Typ: Specific Website Only  section: Bookmark Path. Thank you in advance.

I just discovered that Apple is introducing a new Model Identifier scheme for the new Macs. The 13" M2 MacBook Pro is "Mac14,7" and the Mac Studio is "Mac13,1" Has anyone found any explanation for the new format? Will we be able to use Model Identifiers in a meaningful way (like MacBookPro11,5 is older than MacBookPro16,1) or will the numbers be just a random assignment to new models? 

Hi Nation. I'm fairly new to Jamf and I'm looking for some advice regarding Chrome extensions and more specifically, the settings within the extension. I am deploying the G App Launcher extension (G App Launcher) and this is working well, however there is a setting within the extension with the key 'displayMarketplaceApps' that is always set to false. I would like to deploy the extension with this setting set to True.I can export the settings via json file, however, I'm struggling to figure out how to configure this for Jamf and deploy deploy along with the extension (if possible) I'm pretty new to json as well, so any pointers/advice would be great.

Hello Jamf Nation, For security reasons at my org, we are trying to compile a list of installed extension for the Chrome, Firefox and Safari browsers.  I've seen a couple posts about chrome extensions and have a script for just Chrome. Does anyone know of a good script that can pull extensions from all three? 

Disregard, is there a delete post option for dumb questions? :)

Hello. Does anyone know a working (!) way to leverage with Jamf Pro that just certain apps/browser sessions use a VPN connection? We need to avoid for obvious performance reasons that our VoIP app also routes phone calls via VPN. Any help/hint is much appreciated. :-) Best regardsChris

Easily create simple macOS Notifications with swiftDialog v2BackgroundFor the last several weeks, the now 550+ users who frequent the MacAdmin’s Slack #swiftDialog channel have been all abuzz about Bart Reardon’s soon-to-be-released version 2 of swiftDialog.One of the features I’ve personally been anxious to try is macOS Notifications via swiftDialog, but as Bart explained when he closed the feature request with wontfix, Apple’s restrictions conflict with what many Mac Admins require: Branded Notifications. VoodooThen, two days ago, Bart posted:Special bonus installer – Same build as RC2 but with some voodoo in the pkgPlace an image (recommended 512×512 png) at /Library/Application Support/Dialog/Dialog.png and then run the installer.Two words: It works!Continue reading …

Hi folksOur client does not have the budget for Jamf Connect and wants the ability to create and log into local Mac accounts via Okta.  Is this possible with the SSO plugin?  has anyone done it?  If so, please point me in the right direction!!! Thanks!

I have a "1 Extension Attribute Error" error on Google Drive File Stream patch management template, a bit like this error.I'm not sure what is going wrong, I see no logs.But I do have one laptop which has the latest version installed. In patch management, it is reported as Unknown. But when I run the script manually, it reports the correct version. Other patch management items have no problems.Now I noticed it has the old name (with File Stream). So I wanted to add the package "Google Drive", but when I press on the (+) button, I get a "404 Page Not Found" error. When I want to add another package (for example "Textmate"), it just works.What is the problem? Do I first have to remove the "Google Drive File Stream" package, before adding the new one? I'm afraid it will still fail... Also, how can I see what's going on. It seems very magical to me right now...  

Hello,I have one configuration profile with restrictions configured as followedIt works as expected with macOS Monterey 12However, it doesn't work on macOS Ventura 13+. The setting screen shows message "Screen Saver settings are not available"Any suggestion on how this could be fixed? Thank you !

Hi,We are a fairly small company and offer a COPE service to our employees. Since the question came up how the employees can copy their data to a new private iPhone when they leave. Is there anything to be aware of when using Quick Start on a private iPhone to copy the data from an iphone managed in Jamf?Or is that not possible, because otherwise the management would also be copied?

Hi All,We are going do the MacBook refresh. And we would like to our users not to lose the followings,1. Bookmarks2. Cache3. Applications4. Desktop shortcutsDo we have any application to backup above listed and restore it in new MacBook. Suggestion are welcome. Thanks.

We are using the Mac Apps with the Jamf Catalog packages to keep some of our client-side apps up to date.Most of the time that work great and gets all of the clients to a better state then they were before using this feature.But the issue we found is that the updates are slowly spread across the devices AND it block the auto-update feature for eg Google Chrome.This way more devices then we want are running an older version; they will get the update but not as fast as we want in this occassion.This auto-update feature is blocked for eg Chrome, but for Brave it is not.Will this be made a free choice?What is the best option to push an update without spending much time on packaging?

This issue popped up on me in the spring and has resurfaced now as we prepare iPads for students. After setup most iPad apps install everything fine, however some devices show apps either dark or with the bullseye placeholder and say "waiting", but when you click on them you get this message: Unable to install "Jamf Self Service"You must purchase this app to install itView in app store Some of them show as installing in the system but not all. They do not process unless I manually delete every dark app and restart the iPad. This is obviously not ideal when managing large fleets, or when devices are at home with students during remote learning situations. Wondering if anyone has dealt with this issue and found a resolution.

Microsoft released version 16.45 of their Office apps for Mac yesterday. I’m disappointed that Microsoft still has not released their so-called “new” Outlook for Mac users that promises better performance and better features. This new version is still not feature complete. They have been blogging about this software for months, and extolling the great new features and better performance. What did we get? More of the same. Switching to the “new” (incomplete) Outlook will not give users anything new, except a reskinned interface that looks like macOS Big Sur. When I switched to it just now, I was told that a shared mailbox that I had attached to the account that is logged in is not supported. Really? Shared mailboxes are not supported by this “new” and allegedly improved Outlook? I have no idea what they’re thinking in Redmond. Apple users are charged the same amount for Office but they get less product in return. Outlook for Mac has always been missing important features that the Window

I am looking for a way of scripting the account icon for a local user account used across multiple devices. Instead of a random picture, the idea is that this account would be singularly identifiable on any device.Using dscl seems to be the method and maybe it is just identifying the image path for default Apple icons or Monogram.There are scripts like this one that utilize a resource folder being placed so a custom image can be utilized, but in this case a generic user silhouette or Monogram is what I am looking for.In the past I found that attempting to set the user icon via script, if the path to the image didn't exist or was invalid, the icon would revert to a default grey silhouette picture. This worked for what I am trying to achieve but I would like to specifically set it using a known method, to a Memoji or already existing icon, even the headshot silhouette picture. 

A couple of my users have had an issue where they go to login with their Okta credentials in Jamf Connect login and they are then prompted for their local password to migrate the accounts. The problem is that the local password is always registered as incorrect. This happens even when I reset their local password and then try to sync again. The only work around I have found is to disable Jamf Connect Login on their machines and have them continue to use their local account for now. Reinstalling Jamf Connect Login has not fixed the issue nor has rebuilding my plists.Any thoughts?

This might be a dead horse at this point but since the posts I see are a little old, I am going to ask anyway...  When it comes to Office 365, what is your preferred deployment method? I see 3 main types:  Direct download from Microsoft and make a PKG, use Mac App Store applications, or use Jamf Catalog.  I have done a manual direct Microsoft method but am looking to more easily automate the updates for patch management purposes. The only downside I know of so far for the MAS method is that when Office updates are created they are first provided by Microsoft through their own channels, then passed along to Apple for approval.  Apple might or might not approve the update in a timely manner so it may be days to weeks before the MAS version update is available. I do not understand enough about the way Jamf Catalog titles are updated to know if they also go through a similar delay before updates are available. At this point, I am leaning towards

I am trying to add JAMF script variables to my script, the scripts function is to check user home folders and if it had not been modified in an X amount of days it will delete the folder. I want to be able to change the amount of days depending on the deployment location. Would I simply just need to add $4 to the area where the variable would be input?#!/bin/bash# Set the number of days to 90days=90 (<----- This would just change to days=$4, then in JAMF I would set the amount of days in the first variable section. # Set the excluded usersexcluded_users=("macadmin" "shared" "Shared" "admin")# Get current date in secondsnow=$(date +%s)# Iterate over all users home folderfor dir in /Users/*; do# Check if the folder is a directory and not one of the excluded usersif [ -d "$dir" ] && [[ ! " ${excluded_users[@]} " =~ " $(basename "$dir") " ]]; then# Get the last modified date of the folderlast_modified=$(stat -f "%m" "$dir")# Calculate the difference between the last mo

Just wondering if anyone has configured the Lansweeper agent for deployment on OSX yet. I tried to use Composer to capture the dmg install, but I'm not seeing the device agent checking in. I fear that it has copied the config of the Composer machine and that is how it is reporting. Here is the documentation on the package if anyone can think of hints: https://www.lansweeper.com/knowledgebase/silently-installing-lsagent-on-a-windows-linux-or-mac-computer/

The Standard Account on managed Mac get changed to Admin Account without any change done from Jamf Admin.User do not have a way to get default admin password to make changes to his account.And, I've already run a script to change the standard account to admin and next day again the account got changed to admin.Not sure what changes took place or what might have caused this change.It would be much appreciated if I can get some input on this.

Looking to use Active Directory groups to populate smart user groups. We currently have SSO and Azure AD as a Cloud Identity Provider setup. Do I also need to add an LDAP server? Thank you.Kevin 

Hello,I have a user whose computer has "Chrome" and "Slack" listed as separate storage drives. While both Chrome and Slack on running on their machine, Jamf is continuing to list their computer as "unencrypted" since neither the Chrome or Slack "drives" are encrypted. They have also complained that when they update their computer, they have to "reinstall" Chrome and Slack, though I am not sure how relevant that fact is. In any case, this is the only user who has this problem, and we have the same configuration profile running on the same model with different employees without this issue. I'm not even sure how I would recreate this problem on a separate machine, so any advice is appreciated.

So a bit of a weird one, we have a normal MDM control on chrome preferences (com.google.chrome), which is normal stuff, but then as we allow google account sign in.  when someone from a 3rd party who is using a goole workspace account now in the about chrome box its changed from managed by your browser is managed, to this browser is managed by xxxxxxx (third party) has anyone had this before, just working on how its going to impact our settings or if thats just an errant message?

I wanted to create a smart group that contains computers that have two different configuration profiles installed. That is, both of them, not one or the other.I created a smart group with the criteria:configuration profile identifier is XYZ-and- configuration profile identifier is ABCNo results. I know for a fact that with have 100+ computers with both installed, mine included. Tried both identifies separately and found all correct matches. But as soon as I add more than one to the criteria, it does not work. Is this expected or am I doing something wrong?Thanks