Hello! I've recently migrated a fleet of laptops into a new JAMF instance using JAMF Connect. Everything has gone smooth but i have two users with an issue i can't explain. When they log out for the first time and log back in, instead of being prompted to connect the user to a local account, it skips right past that part and creates a new user instead. I've only asked one of them to unenroll-renroll but that didn't seem to fix anything. I know i could move them over to the new account that is created but that might be painful. Any thing i'm missing or can check? Right now they are just having to log out and log back in Locally to get to their original account where all their local data is. any help would be appreciated, thanks!

I have been getting an error every time I run sudo jamf manage. Has anyone seen an error like this before? It seems to be the root of a lot of other issue in my environment. It started when I upgraded my on prem instance from 10.36 to 10.45Errors: - code=INVALID_STATE description=Internal Server Error id=0 field=null 2023-05-08 15:18:14,991 [DEBUG] [Thread-3 ] [lientCommunicationServlet] - Error processing communication content com.jamfsoftware.api.core.exceptions.ApiException: 500 INTERNAL_SERVER_ERROR "500 [code=INVALID_STATE description=Internal Server Error id=0 field=null]" at com.jamfsoftware.jamfmanagementframework.impl.computerinventorycollectionsettings.ComputerInventoryCollectionSettingsServiceImpl.lambda$collectWhenOnlyOneIsPresent$0(ComputerInventoryCollectionSettingsServiceImpl.java:49) ~[jamf-management-framework-impl-10.46.0-t1681398190.jar:?] at java.util.function.Function.lambda$andThen$1(Function.java:88) ~[?:?] at java.util.stream.ReferencePipeline.

Hi all,We're piloting Snipe-IT in our environment and we're trying to automate as much of the asset collection as possible.  I found Jamf2Snipe a couple of days ago (https://github.com/ParadoxGuitarist/jamf2snipe/) and got it working, but as soon as I did my sync I realized that I'd made a few mistakes in my config file.  I've fixed those, but now that I'm trying to resync...nothing is happening.  If I run Jamf2Snipe in verbose mode, it says it's processing all the computers in my Jamf Pro tenancy but the computers aren't updating in Snipe-IT. Anyone able to shine some light on what's going on here? TIA!

Does anyone here have experience connecting iPads to the NYC Dept of Ed wifi networks (ncpsp) using a configuration profile. I've got the network and password setup correctly but am not able to make a connection via the configuration profile. I can only connect entering the password by hand. I think I must have one of the parameters set incorrectly. Long ago, I remember NYCDOE required special proxy settings but I don't know what that would be currently. Any clues are appreciated. Thanks.

Hey everyone!We are relatively new to Jamf School and iPads in general for our district!We come from a Chrome environment so of course there are some abilities we had with GAC that we would like to emulate with Jamf School! Are we are to lock Chrome or Safari to only sign-in/authenticate with our @Domain accounts? Our fear is that students will just be able to login to any personal account and message/interact with each other that way (our admin is very pro-restricting student's virtual communication platforms).I appreciate any and all help!Thanks all,

Has anyone been able to this without using Configurator or touching each device?

We're installing Adobe Creative Cloud (formerly the Desktop Manager), and it needs to auto update before you can use it once it's out of date. But that auto update requires admin rights, which we don't give users for security reasons. We don't want to repackage this every time there's an update available. Working through the workflow, I noticed it first downloads the installer app to a temporary folder in /private/tmp/XXXXXXXX. If it used a local updater, I could launch it through a Self Service policy and we'd be fine. However since it's a random folder, I can't do that. Does anyone run the updater somehow without granting admin rights to users? I found this thread and tried the script, but still get prompted for admin rights:

Hi All,I can see in Menu Bar App Settings - Jamf Connect Documentation | Jamf it says that Microsoft DFS shares are not supported in Jamf Connect at the moment.Are there plans to implement Microsoft DFS support ? If so is there an estimated release date for the functionality ?Thanks !Sam

I know you can skip different setup assistant windows, but we still get an Analytics window that we'd like to hide.https://developer.apple.com/documentation/devicemanagement/setupassistantHas anyone come up with a way to hide the Analytics window?

Oops!  I deleted a computer from Jamf Pro by mistake.  The computer is still being used (I thought it was out of service).  What do I do to get it back into Jamf and managed?  I tried to manually enroll it but the MDM Profile that gets downloaded to the machine isn't fails to install ("New profile does not meet criteria to replace existing profile.")Help!Thanks! --Jeff

Hey all. I'm still fairly new to all this. I've been trying this for a couple of days now, and I cannot seem to get the proper permissions for AdminByRequest to work. Per this article, I need to allow SystemFilesAllAccess for ABR. I've been using PPPC Utility to created the profile, and I have tried a few different combinations of settings, but none of them have worked. I know it will not show in the Security settings on the Mac, but in profiles, my PPPC is there, and it still not working. I've uninstalled and reinstalled the app with the profile applied, still nothing.Has anyone had any experience like this, whether with ABR specifically, or another app, that could give me some pointers? This has all been on a singular test computer on Monterey, and I need to try to deploy this PPPC to about 80 or so machines, so the manual route is not really an option. Thanks,C

Hello dear Jamf community,I hope you can help me here. I'm very desperate and can't find any help.We have 17 iPads connected to Jamf-School at work.Some apps won't install or update. It says "Wait" all the time, but nothing happens even if you update the app via the Jamf administration etc.Does anyone know the solution to this?

I've getting reports of people that have upgraded from an older OS (anything from 10.14.x on up to 12.x) to Ventura, but it seems like a significant portion of them put in their credentials at the FV screen but never get a desktop.  The progress bar seems to halt around 3/4 of the way through.  The support technicians noticed it's a lot of the Intel Macs vs the M series, but I haven't been able to confirm it.  Further, it seems like it may be related to a login script and home drive mapping in AD for their accounts.  Typically we can clear that and have them reboot on the corporate network.  The issue becomes when users are remote and can't get to an office building. The accounts have all been AD mobile accounts.  Typically when I'm working on those devices I will convert them to local accounts and then use Kerberos Extensions to handle the AD relationship.   Curious if others have run into this?  I

I download the O365 package from https://macadmins.software/ and then by installer command and -showChoicesXML flag I built an XML file and opened the XML file and made the value 0 for OneNote app so that it should not get installed on my mac when installing. Now if I am running the installer command with -applyChoiceChangesXML flag with the path of XML file and office package path, it is telling me below. installer: Package name is Microsoft 365 and Office for Mac installer: choices file '/Users/asif/Desktop/office.xml' either could not be found or was malformed.%What could be the cause behind it?My path for XML file and office package is correct as I copied and pasted in terminal.

I have a list of requirements/desires that have been handed to me from management and I want to make them happen. No clue how, though.-Set Scrolling to Classic (down is down, up is up)-Set default to Home Folder, not recent items-Show Hard Disks on desktop-Show Connected Servers-Show filename extensions-Set Accent Color-Set Desktop Wallpaper-Always Show Scrollbars-Warn before emptying trash-Dark mode selected by defaultAny advice or direction would be appreciated! Thanks!

I'm hoping someone here can answer my question. I'm building an app to work with our JAMF mobile environment and I want to collect the "Device Ownership Type" from the device general information. Unfortunately, I'm unable to gather which column this really is.

A Jamf Pro Computer Extension Attribute which returns enterprise-domain Apple IDsBackgroundLike most organizations, we want the best — most secure — experience for our users. So, naturally, we’ve investigated leveraging Managed Apple IDs.While Managed Apple IDs come with some fairly signification limitations, my personal favorite has to be:Allows browsing but not purchasing, paid or free in: App StoreHowever, the promise of a Shared iPad is quite alluring.The RubI also suspect “the rub” for most organizations who wish to federate their domain is Apple’s unwillingness to inform the enterprise which of their users will be impacted before federation is enabled:… but you can’t see their actual personal Apple ID.

Jamf Composer was used to build a simple packagepackage deposits an .app into /Applications. Tested and verified it works locallyUsed Jamf Composer and a Apple issued cert to sign the pkgUsed the IntuneWrapper to create an .intunemac file for IntuneFile was accepted by Intune and policy successfully createdErrors when trying to deploy.I’ve since been able to successfully build, sign, wrap and deploy using terminal however I would like to figure out what went wrong with the Composer build as I see the need for much more complicated packages in the future.Because I removed the policy that was failing and rebuilt a successful one I no longer have the error code Intune spit back for this post. There was no useful error message, just the error code close to, but not exactly, 0x87D13BA2. I stress this was not the exact error code as I was unable to find the exact code ANYWHERE, not even from Microsoft documentation of err

We are trying to deploy the Forescout connector on a Mac machine through a Jamf policy, which requires us to deploy a .pkg file, a script, and most importantly, the folder containing the Forescout agent on the desktop. This folder includes the launch daemon and a few other commands. However, we are encountering errors and are not able to successfully deploy the folder. Can you advise us on how to proceed?

Hi there. I read somewhere that  GitHub Santa  can be integrated with Jamf Pro. If this is indeed true, can someone point me in the right direction to get started? And yes, I see the documentation included with the app, but was asking for more Jamf specific instructions as I am fairly new to MacOS Jamf configs. Thanks.

Hey JAMF-er's. This is probably an easy one but I'm still not super versed in scripting. I've cobbled together an script that Makes calls the Classic API to get the position, building, and asset tag information from a computer record. Here are the lines I am using to accomplish this:position=$(/usr/bin/curl -s -H "Authorization: Bearer $token" $jssurl:8443/JSSResource/computers/serialnumber/$serial -H "accept: text/xml" | /usr/bin/xpath -e "/computer/location/position/text()")location=$(/usr/bin/curl -s -H "Authorization: Bearer $token" $jssurl:8443/JSSResource/computers/serialnumber/$serial -H "accept: text/xml" | /usr/bin/xpath -e "/computer/location/building/text()")asset=$(/usr/bin/curl -s -H "Authorization: Bearer $token" $jssurl:8443/JSSResource/computers/serialnumber/$serial -H "accept: text/xml" | /usr/bin/xpath -e "/computer/general/asset_tag/text()")It all works as intended, but s there a way to combine these lin

Hello Jamf Nation! We recently released Jamf Protect 4.1.0. This release includes the following changes and improvements: Telemetry enhancements for collecting performance metrics, BIOS/EFI data, and diagnostic/crash files. These enhancements aid in meeting compliance requirements and improve incident response and IT troubleshooting workflows. A new diagnostics command for the Protect command line tool (Protectctl). Updates to existing Insights and the addition of two new insights to verify device compliance: 2.3.1.2 Ensure AirPlay Receiver Is Disabled and 2.6.1.2 Ensure Location Services is in the Menu Bar. Improvements to file quarantine and scanning functions to resolve a known conflict with some third-party security tools. Product Documentation  For additional information on what's included in this release, review the

Hi guys. New on the tool, and I am pretty amazed about it.The thing is that some client it is asking us to monitoring web content that the macOS users browsing.I know that is possible to configurate a profile to create white and blacklists of websites and all that (never do it, but I know is there).What we would like to know if is possible to get logs of the browsing from the users, so then implement blacklist or whitelists of websites.Thank you!

We use AD in our enviornment, but we have many local users with admin rights. Now that our use of Casper has become more robust. We want to take the local admin users and turn them into standard users. Any suggestions as to the best way to do this?

Does anyone know if there's a way with Jamf to capture, or view, who enrolled a device via the user initiated web portal (https:jamfserver.com/enroll)? My Jamf instance has SSO enabled, so manually enrolling a device requires a company login, so I'd love to be able to view what user initiated an enrollment of a device. If I look at Jamf's change management log, that info doesn't seem to be captured -  only the name of device, the device ID, and the site it was enrolled in are captured there. I also briefly looked at the Jamf Pro server logs and a machine enrolled ~90 minutes ago doesn't show up in the logs by name, serial, or ID#. There isn't anything in the computer record in Jamf, that I can see, that stores this info either - the MDM Capable User is just the first user account created on the machine, not necessarily the person who enrolled it; and when enrolling devices a person can assign the machine to an alterative user, so the user set in Jamf isn't nece