Hello all,Just wanted to know if anyone here has taken the Jamf 100 certification exam. I've been studying for about 3 weeks and wanted to know anyone's experience taking the exam in the past.Also I would like to know how accurate is the practice exam compared to the actual exam.

It is possible to use installomator with jamf cloud and not jamf pro server ? 

Hello all,    I've tried difference scripts (bash and AppleScript) but none seem to work for me.  Basically, (and I see this has been asked a lot but varies), I would like for any user that logs into the Macbook, connect to their smb share AND place that drive as a shortcut in either the Locations (in Finder) OR Desktop.  Users should not be prompted for their username and password.  Here's what the smb path looks like:smb://servername/Userdata/UserName/My%20DocumentsWhere UserName can be any user that logs in to that Mac device.  But do not prompt for username and password if possible.  If password is a must, then I'll take whatever I can work with.

We have about 50/50 M1 vs Intel chip Macbooks.We are using Jamf Connect as well (not sure if relevant)We have a standard Admin account created and loaded for every computer during prestage enrollment.We are not able to run the MacOS Ventura Installer on the M1 macs because it does accept the Admin credentials provided. These same Admin credentials are working for installing apps, etc. The update does work if you switch to the mentioned Admin account on the computer and then run the update.The update has none of these issues for the Intel macs. I can run the update from the user's account using the same Admin credentials. Anyone know why the M1 would not let us run this update from the user's standard account, even providing the correct Admin credentials?

Blocked Messages app on a Mac with a plist:<key>familyControlsEnabled</key><true/><key>pathBlackList</key><array><string>/System/Applications/Messages.app</string></array><key>pathWhiteList</key>and it is indeed blocked, but evey time i log in i get the below:The extension is inside the Messages app in the Extension directory. Does anyone know where is this set up to run at every session start? It's not in Login Items...

Hello Team, Is it possible to create a recovery partition on mac clients via a JAMF policy? We have few mac devices where recovery partition is missing and FV key too. I want to reissue those FV key to escrow in my JAMF console. Any idea will be appreciated.

Hey I want to achieve the following. If a certain local user logs in to open a terminal window and show the jamf.log file.What I have done so far create a policy. with the trigger Login that executes a script that looks the following  #!/bin/bash# Check if the user is sadminif [ $(whoami) = "admin" ]; then# Open a new Terminal window and run 'tail -f /var/log/jamf.log'osascript -e 'tell app "Terminal" to do script "tail -f /var/log/jamf.log"'fi the policy is executed when user "admin" logs in and gives no errors but there is no terminal window being opened and displays the jamf.log fileI dont know where the error is or why it won't work!? How can I achieve this?

Hello !I'm managing the inventory preload for our organization. I wanted to remove an entry as the computer is no more there. I select the entry then click the delete data button but it removed everything ! I then searched how I could remove only the selected computers but I don't see where I may be. Is it a bug or did I miss something ?Thank you for helping me !

Is it possible to push the Change Management Logs and Jamf Pro Access Logs to a SEIM like SumoLogic? We currently have a ComputerCheckIn webhook event that's set up to send data to SumoLogic but I don't see an option under the Webhook Event types for the two logs I mentioned above.

Hello Everyone, do anyone has the same issue ?We have some devices in CHina, who has the Problem that the days couldnt reset the count and run in negative Days, in Germany we can handle it with reconnect VPN but in China its not allowed to use it.Is there any other way to handle this ?

Hello,I've noticed all of my package downloads are failing with error -1200.  I checked the PKI cert, the Tomcat SSL cert, and the IIS cert (it's an on-prem windows server) and all are good.  If we go directly to the link, we can download the file.  It just does not download using Jamf.  Has anyone seen this before?  Thanks, AJ. 

Hello everyone, I am trying to configure Screen Saver Corners Are Secure -tr-corner ( https://www.tenable.com/audits/items/CIS_Apple_macOS_13.0_Ventura_v1.0.0_L2.audit:d8e594473ad878254160a22990e7bb3a) and for solution I can create a profile.But there is mentioned that "the key to include is Forced". Can someone please explain what is this key and how you use it?Thanks,Traian

For anyone that prefers to make Safari updates available via Self Service, here are the standalone installer download links extracted from Apple's Software Update Server catalog for what Apple's  Security update bulletins published today are calling Safari 16.3.1. Unfortunately what Apple actually released today were new builds of Safari 16.3 with updated Build numbers. This means you'll have to use an EA to extract the CFBundleVersion string from the Safari app bundle to figure out exactly what version of Safari you have installed (also posted below).Safari "16.3.1" for macOS Big Sur: http://swcdn.apple.com/content/downloads/30/47/032-38743-A_CT6YB7IU0E/etlliehrvoqmlrb8mso9d2lh8vtnb59e0o/Safari16.3BigSurAuto.pkgSafari "16.3.1" for macOS Monterey: https://swcdn.apple.com/content/downloads/61/07/032-38754-A_I6L5FGHO4W/6vezgtgkabm4112wd26y1moii3kak18ykb/Safari16.3MontereyAuto.pkgEA to report Safari CFBundleVersion: #!/bin/sh #

Hello All,We use a proxy on our network and we are trying to come up with a solution to allow devices to establish a connection to Apple without bypassing that proxy. Has anyone encountered a similar situation and has come up with a way to resolve it? Any and all help is appreciated. Thank you

We deploy a licensed Mac Store app through Jamf Pro. I had to send the device off for repair recently and so unenrolled it from Jamf Pro, and uninstalled the program. When I went to reenroll the device, the app will not install. There are no associated commands (pending/failed etc). It showed that the licenses is being used and it's attached to that device but there is no action to install. I even unenrolled and reenrolled the devise and it still acts the same. I tried it on another newly enrolled device and it worked as expected. I've searched the Library directory for remnant ofthe app, and can't find anything there either. 

I am trying to remove stale / inactive mobile acct from the workstations after a certain time period.I tried a script but for some reason it also seems to delete the accts that are not in the time range ( e.g. set to delete acct after 14 day and the current user that logged in yesterday gets deleted also )I am trying to use a Config Profile > Mobility > Account Expiry payload but whenever I save the CP, it reverts back to 0 Hours.I've downloaded the .mobileconfig file and checked with a CP editor and it also shows 0 sec.I've created an new .mobileconfig file with 604800 ( 7 days ) and upload to Jamf Pro. The uploaded CP shows up with the correct duration ( 7 days ) but when I click Save, it reverts back to 0 hours.

Hi, I want to change default font in Outlook desktop on our Mac's.I tried using the OutlookFontPoke from Github but it didn't worked. Here is the error message:"Script result: usage: dirname path/Library/Application Support/JAMF/tmp/Outlook Font: line 20: cd: HOME not set WARNING: Registry DOES NOT exist at path /Library/Group Containers/UBF8T346G9.Office/MicrosoftRegistrationDB.reg. Attempting to create... mkdir: /Library/Group Containers: No such file or directory cp: //TemplateRegDB.reg: No such file or directory ERROR: Registry could not be created."Is there any other way of changing it? I need to change to Arial 10pt #272727

I am using AC2.1 to move an iPad to supervised state - I go through the migration, see the iPad in ABM and edit the MDM server to JAMF pro, as well as I see it in Prestage enrollment in the MDM as assigned, but on the actual iPad I get to the remote management screen and the error I get is " The configuration for this iPad could not be downloaded from company A, the request timed out" any thoughts/resolutions?

This appears to be happening to all our devices. Many times when a user or even myself goes to our iPhone and open up teams it is grayed out and is need to update. This is happening constantly, at first i thought "oh wow, they are doing lots of updates to this app." but that isn't the case. when this happens we are not getting notifications for the app. When i checked my phone, i am on the latest iOS still the issue.I do have in JAMF setup to push updates automatically, make app managed if not managed, and the scope of the app is for all devices. We are not out of licenses as i still have around 198 available still.

macos 10.15.3, jamf binary version 10.19 I am using the command /usr/local/bin/jamf createAccount -username "${name}" -realname "${name}" -password "${passwd}" -home /var/"${name}" -admin -hiddenUser It looks like it is working and I can see the user in dscl . list /Users but if I try login <name> and enter the password it fails with 'login incorrect'. It was working on a Mojave machine fine.

Hey all,I just wanted to share something I have been working on. In my environment we have a lot of developers with many versions of Java installed. Of these users none of them are local admins. In an effort to cut down on the users reaching out on a daily basis for temporary admin rights to import a new certificate I pieced together this script to let the user choose their certificate, ask the user to choose an Alias for this certificate and then import it to all Java Home locations. Feel free to use or offer improvement.EDIT: This will only allow certificates to be uploaded from a location Jamf can access. I have a note for my end users to ensure the certificates are either on their OneDrive or /Users/Shared/..loggedInUser=$( echo "show State:/Users/ConsoleUser" | scutil | awk '/Name :/ && ! /loginwindow/ { print $3 }' )JAVA_VERSIONS=$(sudo -u "$loggedInUser" /usr/libexec/java_home -V 2>&1 | awk -F'"' '{print $5}')theSelectedFile="$(osascript -l JavaScript -e 'a=Applic

I am trying to force a switch from Intune to Jamf on IOS - on Macbooks etc we already use Jamf.Just wondering what other did to switch and with what reason.My overall opinion is that with Jamf and Apple you get 2 players that are close to eachother and there first movers on cooporations on new products. Where Intune always will lag behind as IOS will never be Microsoft prioritised platform 

I'm publishing an EDGE plist, that were created by iMazing Profile Editor.  Defined the "RestoreOnStartupURLs" setting. Set to 4 (open a list of URLs). Additionally added the setting "RestoreOnStartupUserURLsEnabled" = true. Problem is: The User can add & remove their own startup urls, but not remove the defined ones from "RestoreOnStartupURLs". Is it possible to accomplish that?On Windows you can change this behavior. Microsoft Edge Browser Policy Documentation | Microsoft Learn 

Hello, could anyone help me with this Topic please:I had already deployed the user to all CLients, with a Policy and now i need to set the User to "remote LogIn" He needs to be put here:  preference>sharing>remote login> users and groupsThanks in Advance :) 

When I try to upload a VPP token to Jamf Pro (On Premise, Version 10.43) I receive an error message "Unable to handle file upload". I downloaded the VPP token again and tried to upload using Safari, Chrome and even Edge with Windows 11. Every time I get the same message. The log only shows the same error.Has anyone encountered the same problem and has a solution to this issue?