My boss asked, "How much data do our users save on their Macs?"Anyone know how I can figure this out? I manage around 800 Macs with Jamf Pro and they don't all have the same size of internal drive, so looking at something like "boot drive percentage full" or "boot drive available MB" isn't too helpful.Thanks,  --Jeff

Not really a Jamf Pro issue but posting here since I can't create a thread in the Community section...After the forum update on 2023-04-20 this site is basically unusable with Safari (version16.4/16.4.1) - extremely slow page load times and unresponsive content when the page does load. The site is much more responsive in Chrome, but one would hope Jamf wouldn't produce a web site that didn't work well with Apple's native browser.And what's with the "Open HTML promo area" block shown at the top of the right-side column of the Jamf Pro board? 

We are working on a Secure Token policy and have traced the issue to the Parameter Labels not resolving. Here is the script we made to test it: #!/bin/sh ## Pass the credentials for an admin account that is authorized with FileVault 2 adminName=$4 adminPass=$5 userName=$3 ## Prompt for Password userPass=$(/usr/bin/osascript<<END application "System Events" activate set the answer to text returned of (display dialog "IT needs to Activate Encryption, Please Enter your Password:" default answer "" with hidden answer buttons {"Continue"} default button 1) END ) # create the plist file: echo '<?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>Username</key> <string>'$adminName'</string> <key>Password</key> <string>'$adminPass'</string> <key>AdditionalUsers</key&g

Hi,We need a way to stop dummy eicar malware files being downloaded from online in Chrome, Edge and Safari.It looks like Jamf Protect or Jamf Radar can not do this. It can only stop the files being executed after they have been downloaded to the Macbook. Is there a way we can implement download restrictions using Jamf Pro?thanks 

Hey, we use Jamf School. How does everybody keep Google Chrome updated. What is the best way to push Google Chrome? I had the chrome enterprise downloaded. I uploaded it to Jamf School and pushed it as an in-house app. On new Macs, it downloads whatever version of chrome was available at the time I downloaded the pkg. Normally, Google Chrome then updates on the Macs. Today I pushed it to a Mac, and it could not update it took me to the webpage to re download chrome. I don't know if this is a common thing. To fix it, I downloaded the latest version of the and pushed that in Jamf School. Only issue.... for teachers that already have the old Google Chrome, it breaks chrome. Basically it installs the new, but does not tell the teachers to restart chrome. All they see is that Chrome is not working, and there is no notification to restart Google Chrome which fixed the issue.

i have a configuration profile that i distributed to "all computers". i have since made one of them unmanaged but its still listed as pending. any way to clear that?

I have been asked to implement Jamf to manage the local Firewall - security would like the Firewall to be enabled, user restricted from making changes, and block all incoming connections ASIDE from built in Apple or signed software. I can do this locally by just making sure the right buttons are selected, but when managing this through Jamf there is no way to allow built in Apple software. These services would include AirDrop, AirPlay and hand off from iOS devices to macOS. Jamf has two options: block ALL incoming connections (which prevents AirPlay etc) and "Control incoming connections for specific apps". The second option allows the user to select whether to allow or deny an incoming connection - and the message doesn't convey that the connection they are allowing is actually related to AirPlay, so I foresee a lot of tickets as a result.I've done googling for this and it looks like this used to be able to be fixed with scripting, but that isn't an option since Monterey dropped. How

Hello all - tried my hand at Applescript but failed. Tried to find some way to do this in Jamf but I don't think it can, not familiar enough with the guts of Apple bits and bobs to draw on any huge knowledge (though half ok in Linux) so pitching this to the community. All I want to do is add, either in Finder or by some method or another (putting an icon somewhere on the thing,) a SMB share (from a Windows server) onto my student ipads. They need to be able to browse to some files for an app (Clicker) to work. I cannot for the life of me fathom out how to do this. I've set up a separate AD account for authentication but really stumped. It surely can't be hard to do, can it? If anyone's passing and has done this I'd really love to get it working. Thanks all!

Hello,I need help about something :- we filtered the content of our iPads via Jamf content filter "Built in : limit adult content"- we add a few blacklisted url. on the iPad it's now impossible to delete safari browsing history. It's grey in safari and in Settings. I try to exclude an iPad from the group (content filter), now i can delete safari history again. Have you a solution to allow to delete browser history and keep "content filter".

Users whose name contains an apostrophe/single quote (ASCII code 39) are presented as @#039 instead of '.This is the case in their user profile and also in their device profile (which uses the user's name in the iPad).Users are imported from LDAP. 

Hello, I am looking to create a Jamf Extension Attribute to create a username that matches a users LDAP info $FULLNAME and turn it into `firstnamelastname` or `firstname-lastname` and then use the Jamf Variable $EXTENSIONATTRIBUTE_# on the Account Name within Prestage Enrollments Account Setup.$FULLNAME/REALNAME don't work as it creates a space between the names and this creates issues when attempting to call username in scripts as it will only see the `Last` name of the user. $USERNAME does not work as this is an email address from our LDAP and the @ symbol is also an illegal character causing the same issue.Unfortunately I have no idea where to begin other than knowing to use <result> with in the custom attributes, very new to scripting and I am the only Jamf Admin at this small company. Does anyone know how to accomplish this automatic Account Setup? 

Run any Jamf Pro policy at the next user login or computer rebootBackgroundRecently, we had a need to run a particular Jamf Pro policy only the next time the computer rebooted.Having previously created Recon at Reboot, I started on a modification for this one-off need. About a third of the way into the modifications, a Heaven-inspired question came to mind: Why don’t you write a script to execute any Jamf Pro policy at the next reboot?Continue reading …

Hi,Does Jamf support configuring a firmware password or preventing users from entering Safe Mode?Thanks, 

Hi All,Really just wanted to post the video of our 2022/2023 device enrollment that is currently fully automated and 'zero touch' really just as a thankyou for all the knowledge you guys and gals have inadvertently poured into me to make any of this possible.If anyone has any comments, require assistance or even suggestions id be more than happy to take the time to reply,https://youtu.be/G5Cm0gUNVDc Kind regards and keep doing what your doing!Pete

Hello, Struggling quite a bit with the Firewall features in JAMF and I'm wondering how others are working with or around it. The configuration options are very basic either Block Everything or Control incoming connections for specific apps which looks like you'd then need to populate the list with any application that could possibly receive incoming connection which seems like an impossible task. Also the fact that if you have a policy applied to the machine with the Firewall payload its locked to whether that policy says the Firewall is enabled or not. In our environment, we do not allow incoming connections nor server services to be running on user workstations. Being able to easily block this with a policy is nice, but then we have cases where someone wants to use AirPlay which needs incoming connections to work. Allowing 1 application through the firewall does not appear to be an option so the alternative is to not apply the Security and Privacy policy to their machine. Defini

Hoping someone's done it! Currently we disable Lock Screen notifications for a couple of apps. this has the downside of the rest of the notification settings of that app becoming locked up and we've seen complaints about users who want sounds on, sounds off etc. Has anyone managed to disable just the setting "Allow notifications when the screen is locked" ?

Hello,Fonts are distributed on shared iPads (through profiles ;-))These profiles are well installed BUT the fonts are not accessible...Any idea?

Hello everyone,I am using Jamf Connect with Google Workspace over a few sites. Everything works fine except for the Google/Jamf Connect login window which in certain countries defaults to the local language.Is there a way to configure English as a default language for the login screen ? In theory, we'd append hl=en but the question is where ?Thanks in advance!

Hi All,How to configure VPN (Not per-app VPN) for macOS from Jamf Pro. Also, the requirement is that User should not able to change or remove VPN  

Anyone have a good way of setting the time zone up correctly? I have tried using the time zone script on the jamf forums, however we are still seeing issues with the time being up to 5 minutes off. Is there a way to enable the automatically detect time zone setting while also enabling locations services to allow this to happen?

Hi!  We are trying ot extract the APNS certificate form the Jamf Pro database to be able to monitor the expiration date, but the keystore is password protected.  Does anyone know how to retrieve the password? This is what we get from the database:  mysql> select * FROM push_notification_keystores; push_notification_keystores_id : xkeystore_type                  : xkeystore_password_encrypted    : ...keystore                       : binapple_id                       :

I want to deploy a .jpg file in a customized path on macOS, /Library/MyCompany/logo.jpg Now on my test mac I placed the .jpg on the mentioned path and using by composer I did drag and drop the entire path and built as .pkg. Now if I deploy it through JAMF Pro, it will create any issue or better to sign this package using by Jamf Pro's built-in certificate downloading it from Jamf Settings/PKI Settings and install cert and make it trust in system keychain and sign using by Jamf Composer when going to build the package and then deploy it. Which is correct?Instead of using Jamf Pro to deploy the package if I try to install the unsigned .pkg it will create any issue on different mac?

Google have pushed out an emergency update for Chrome on the Mac. I've noticed in our 'Mac Apps' - Chrome is not yet up-to-date.Is there a way to force a 'Mac App' to deploy the latest version? Or do we just have to wait for Jamf to sort it out at their end? 

I recently deployed our first enrolled M1 MacBook. I logged in and added the user as an Admin account but the user could not install Teams or Zoom. Both failed after the user put in her password for the install. I logged in as me and both apps installed OK following the user’s method of downloading from the respective websites. User logged in and was able to set up both programs. Is there a Jamf setting that is preventing her Admin account from installing or is this an Apple setting?Any insight would be appreciated

👋Hey there, Jamf community!We have some exciting news to share with you all. The Jamf User Research Team has been hard at work organizing weekly customer workshops, and we want YOU to join us! These weekly workshops are the perfect opportunity for you to have your voice heard and provide feedback on a range of topics alongside other Jamf customers. Plus, you'll get to connect with like-minded individuals in the community and learn from their experiences. We're always adding new workshops, so be sure to keep an eye out on the Jamf Nation events page for updates. Signing up is a breeze - simply click on the workshop you're interested in and follow the Calendly link to register. All sessions are recorded for research purposes and participation is limited. Have an idea for a workshop topic? Drop your idea in the comments! 👇 So what are you waiting for? Join us for our next workshop and help us shape the future of Jamf together! ❤&#6