Is Jamf Migration specialist is part of license plan or need to pay for Jamf migration specialist?

Hi Everyone!I help manage macs for a university and lately we've been having some issues with our local admin account created during prestage enrollment. It's become an issue where the account will create, and we will be able to login to the local account for a while and then suddenly without any indication we won't be able to login to the account or use it for admin privileges. Has anyone else had this issue? I haven't been able to find anything in the records for computers that this happens on and am lost now.

Has anyone possibly put together a best practices list for how to deploy Zoom is a school environment for a district that has not used it since the advent of PPPC profiles? (you know, on the off chance there was a global pandemic and they needed to do a quick rolllout...)

Does anyone have a script or a terminal command to show WiFi in the menu bar? I have been trying and nothing I do works. I am on Big Sur. I need a way to implement this to all of the Macs in my environment.

You can now further configure your content policy with additional categories and subcategories under Policies > Content policy.Schools can use the changes to enforce a stricter overall policy by blocking all content and then allowing just the sites that students may need. They can also use to have more granular control over what sites students may have access to.Admins will be able to block all the same categories in JSI as they would be in Data Policy. This gives schools more granularity when deciding the sorts of content that students should be able to access.For example, one of the requested categories was "Other Shopping" as schools found students using iPads for online shopping during schools hours.The "Uncategorized" category will also be made available. This would allow admins to block all content that isn't in a JSI content category. Schools can use the above changes to enforce a stricter overall policy by blocking all content and then allowing just the sites that stude

I have to fill in for a co worker and have to renew the push certificate on several Jamf Pro instances of customers.  Believe it or not, I have never done this before. And although it's not a difficult task I'm having trouble renewing these certs.The problem I run into is that the customers don't have a Jamf ID (or is not known to them/me). Two questions:- Do I have to configure the Cloud Connection Services in order to obtain the CSR?- Does the Jamf ID that's being used have to be a unique ID that's connected to the customer's Jamf subscription? Or can I just use a generic ID (mine for instance) and use that one to generate a CSR for all customers?

Any way of Forcing Restricted Mode = STRICT in the YouTube.app on iPad? Seems the default for the YouTube.app is Restricted Mode is "Don't Filter". Without individually going to each iPad and turning them ON, I would like to be able to Force them to be STRICT. Don't see anyway of doing that though. We have set the DNS on our Router per Google's instructions, which is now "OVER" blocking our computers. Videos that should not be Restricted are being blocked as Restricted (ie serving on a jury, really???). We are getting by that restriction by using SafeShare.TV and adding a ?clean=1 to the end of the urls. BUT, the YouTube.app is getting by all the filters and allows people to view anything. I have a feeling it is because on a web browser, the setting is Restricted Mode ON, but in the YouTube.app on the iPad it is Restricted Mode STRICT.

I am looking for some examples for launchagent projects which can help my mac fleet. Any idea which can help my mac fleet in regards will be appreciated. Thanks in advanced.

Hello All,In an effort to lock down our Macs with the goal of removing local admins, we've created a Configuration Profile applying to machines which set various Restrictions. This includes what is accessible for users in System Preferences, Applications, functionality, etc. We also are using Admin By Request to allow users to request elevation for their Account Type to Admin to facilitate installs, updates, etc. However, with the way the Configuration Profile is applied, even when users elevate to Admin, the Configuration Profile with restrictions still applies.  Is there a better way to lock down functionality of these machines so elevated Admins aren't bound by the restrictions? Or, is there a way to apply the Configuration Profile at a user level for only Standard account - so Admins bypass it? Thank you for an assistance

Hi Team,We are migrating from On Prem to Jamf Cloud and working on redirecting the current JSS URL DNS to .jamfcloud.com to avoid re-enrolling the devicesDid anyone migrated with this method ? What will the JSS URL for the devices enrolling after the migration? Will it be *.jamfcloud.com or the old URL?Thanks.

We've seen this problem before, sometimes it clears itself out. Wanted to start a thread with "No data available in table" in the subject for anyone who searches for it (only one thread that isn't related to scoping). Anyone ever see this problem? If so has Jamf ever provided any feedback/guidance? We may open a ticket but wanted to check here first.

Is there such a tool that you can use to tell you the health of your mac, like battery life, how long the machine has not shut down, if the security as well as the other softwares are updated or not.I am trying to have a tool that will just pop-up to inform users that they need to update their software or to shut down the machine once in a while.

Hi, i am new at JAMF Pro and waitung for some demo licence. I can see, that there is no option for a 2FA authentication for the JAMF admin or i can´t find it. So for me the admin account is only protectec by a password. If this will be hacked, all mac´s behind this account are in trouble and me too :-)what can i do to harden this ? is there a way ? thank you.

We have good number of mac clients in Intune and Munki, what is the best way to migrate those mac clients in JAMF Pro without interrupting end user?

Hi all,We've recently deployed Jamf Pro on-premises and made it available on the DMZ. We're planning on having an HTTPS DP available on the DMZ (Apache running on Debian) However, when I try to add the DP to Jamf Pro, it keeps asking me for the SMB Share info and credentials which this distribution point doesn't have. Is there any workaround for this issue? We do have a samba share on the internal network but I can't have an SMB share on the DMZ and even if I could our security team will laugh in my face. Does anyone know how to get around this issue? Cloud Distribution points are not an option for us.Thanks in advance!

Hey EveryoneI am working in a multiuser lab environment and I have been asked to create a shared folder space on the local machine then provide a desktop shortcut/Dock icon to this folder. What is the best way to achieve this? 

I am restarting the mac via a policy, I used shutdown command to restart, User are getting popup to select restart operation now, after 1 min, after 5 mins, after 1 Hrs or after 2 Hrs. If user select 1 Hr or 2 Hrs then before going to be restarted user should get a popup window that mac is going to be restarted in some mins/time. So that user can be ready to save all opened item. May I know which command will help me or any flag is there for shutdown command? Warn-ing command is showing message in terminal but no popup window, any idea for this?

Hi, How do we restrict users to not remove the profiles on iphone enrolled via User-Invitation enrollment method

I'm seeing a lot of machines that when booted into recovery, Ventura is not being presented. Usually it's Monterey. Appears to be the OS the machine is shipped with. All of these machine were previously on Ventura. When can fix it with AC2, but that's not scalable. Anyone seen this?

Hi all,Long time lurker, first-time poster. Hope everyone is doing well :DI've got this really weird issue with our config profiles and I'm wondering if anyone can point me in the right direction.It started around a week ago, I noticed that apps were downloading onto our devices ok, but the profiles themselves that carry the payloads for restrictions kept erroring out. I get quite an unhelpful error message.

Good Afternoon,I've opened a support case with JAMF but haven't heard anything so I thought I'd try here until I do.We're running JAMF 10.35.x and are unable to upload any pkgs to the cloud with JAMF Admin. The error is as follows: There was a problem uploading the package to Jamf Cloud. Connection failure: "The operation couldn't be completed. ( error 504.)This happens with any pkg file at any size.   

Just wondering whether anyone else has seen any performance issues on an on-premise instance of Jamf Pro running on Windows Server 2019?We recently upgraded to v10.37.2 but since ~10.34.2 we’ve seen a lot of unresponsiveness at various points throughout the day, such as no response when trying to log in, or lots of white space and blue circles when moving around the web UI, say from Policies to Configuration Profiles for example. After 10-15 minutes of unresponsiveness, everything is fine until it happens again. When this happens, our platform guys report “100% CPU caused by Apache Commons Daemon Service Runner”. There's nothing conclusive in the Jamf logs.The VM has 4 x 2.40GHz CPUs and has 16GBs of RAM, 8GB of which is allocated to Tomcat. Java and MySQL is fully up to date. Our (internet facing) DP is also hosted on the same server.I have a case open with Jamf who have logged in and run various MySQL commands, but they’re not really sure what is going on. Therefore I’d really apprec

I was wondering if we can build a smart group for devices based on the devices country?at the moment, we have our devices scattered around the globe (USA[Chicago/NewYork/SanFrancisco/Florida/Houston], United Kingdom, South Africa, Japan, New Zealand, Australia [Sydney/Melbourne/Brisbane/Perth]

Hi all,My goal is to delete any files or folders on the desktop when the user logs out.I'm using this command in bash script: rm -Rf /Users/<currentuser>/Desktop/*The sript is set to run at logout.Unfortunately it does not work.When I try the command in the users Terminal it prompts "sure you want to delete all X files in /Users/<currentuser>/Desktop [yn]?"According to this post under Jamf Pro the script should work if the script is set to run at 'startup', but this option is not available in Jamf School.Is there any way to get it to work?

Hi,Sorry if this is the wrong place to ask this or if has already been answered. We have purchased a large number of M2 Macbook pros from an authorised reseller. They show in ABM and in prestage, however when I go to enrol them it does not work how it should! Sometimes after the Remote Management screen it goes straight to a log in screen (even though I have not set up an account yet!) or it allows me to create the local user account but does not configure the laptop as it should do (does not clean up the dock and enable filevault). I have resolved some of them by erasing the entire disk and then reinstalling the OS, however for osme of this even this does not have any effect (tried 4 or 5 times!) Any ideas or suggestions as to how we can resolve this would be appriciated. Thanks