Hello!I am a technology coach who is new to jamf.  Our students are currently unable to login to their iPads using their Apple ID.  When you go into settings, the option to sign in is greyed out.  We are having tons of federated ID issues, and no one from the district tech team has been able to give me a good answer as to why.Can someone here tell me what device restriction is turned on in a config profile so I can fix this?  

We are moving to make our end users be required to be standard accounts and remove thier admin rights, but we need to have a secondary local admin account on the machine to authenticate admin privs when needed, but our IT Security is requiring it to be for authentication only and not able to log in as a user. So far, I can't seem to find a way to make this possible to block the accounts ability to login while still allowing the account to auth when needed.Anyone have any suggestions or run into similar needs?

We are relatively new to using Jamf Pro in our environment. Our preferred method is having staff update their mac with the "Try Tonight" option if they so choose and not force a reboot by admins. My question is has anyone been successful with the Try Tonight option in their own environment? To confirm this is NOT the Apple push notification but the Jamf push notification. The Apple push notification with Try Tonight appears to work. This option, via Mass Action, is available but I have yet to see it work as designed. Is anyone else having this frustrating experience? 

Hello !I'm working on installing a computer and I just found that when I change it's IP address and start a recon, the IP address doesn't update on the computer's inventory in Jamf. I just tried to my own computer too and the same thing happens: the IP address doesn't update in Jamf. It's a problem as I have some policies that run based on that information.Is there something that I can do or is it a problem with Jamf itself ?Any help is welcome !

Hi,We are trying to complete our setup for deployment of Mac devices which including Jamf Connect and for some reason all of a sudden when we do a unbox and our MDM (Intune) installs Jamf Connect the menu bar app is prompting for the login of the user where it used to pass the login info from the Jamf Connect Login. If the user does not sign into that window it never seems to connect even after a reboot it just keeps prompting and you can close the window so the password syncs are never occurring.If another user logs into the MacBook and the new user profile is created it automatically connects the accounts, but the first time user account never gets connected unless they login. I'm not sure what has changed for this to occur, anyone else experienced this?We are using Jamf Connect 2.21.

A profile with a “Assessment Mode” payload is already installed on the system. Basically only one app can have this setting at a time.  You can find this error message in JAMF under the laptop's account and Management.  It will be a failed command and have the above reason for failure.  If you get a device with this issue, you can open the System Preferences > Profiles and search each for a "Setting  Assessment Mode". This should help identify the offending config file with a conflict.  There are a few approaches for a fix.  For instance, you could use Self Service to deploy the apps.  Have one delete the other when it is installed by a script that runs BEFORE the package.  Then have Smart lists to detect the software and use those groups to deploy and withdraw the respective Configurations.  This is one example of where it would be great if we could deploy configurations within date ranges in a similar way to policies.  -P

If only I had known before customer made this purchase…One has to sign in to an online account just to run the installer.Maybe it's not too late to be returned.

I am dealing with this issue where some users created webclips using Safari on their iPads. How can I prevent users from doing this? Also I am not able to delete the webclips they have created with inappropriate names. I have started looking to see if there are any configuration profiles that are preventing me from deleting those web shortcuts. Any help or suggestions is appreciated. 

I'm running into some problems with a Application & Custom Settings payload pushing a PLIST for Microsoft Edge where it refuses the values for ExtensionInstallAllowlist and ExtensionInstallForcelist.Anyone else seen this?

This is probably a dumb question but I have not been able to find an answer.I was requested to remove an App which was purchased by a 3rd party and converted to a "dangerous" app. I am able to get the Bundle ID for the App but not the Name (IE: App Name "Keynote" would be Bundle ID "com.apple.Keynote.") When I type the name of the app in nothing related shows up. As long as I have the Bundle ID, can I substitute my own "App Name" and still have the App Restriction work?

Does anyone have a good way to auto install homebrew for apple silicon and intel? Previously I used this script but it's getting stuck. #!/bin/sh# Set variables for the logged in userloggedInUser=$(stat -f "%Su" /dev/console)#Obtain processor type and add to variableprocessor=$(/usr/bin/uname -p)# Check for Homebrew if it exists then update it otherwise install Homebrewwhich -s brewif [ where brew ]; thenecho "Homebrew is installed ...moving on"elseecho "Homebrew is not currently installed. Installing..."/usr/local/bin/jamf policy -event brewfi# Create elevated permissions during installecho "$loggedInUser ALL=(ALL) NOPASSWD: ALL" > /etc/sudoers.d/elevated# Adjust permissions to elevatedchmod 440 /etc/sudoers.d/elevatedchown root:wheel /etc/sudoers.d/elevatedecho "$loggedInUser"# Check processor architecture type and run command according to processorif [ "$processor" = "arm" ]; thenecho "Installing brew app for M1"sudo -u "$loggedInUser" /opt/homebrew/bin/brew reinstall -

First time poster. Hopefully I'm doing this right. We are looking to implement Graylog in our environment (Mac/PC)To start, we are looking to just get logins and logouts. Is there a way to send Computer Usage Logs from Jamf Cloud to Graylog?Or, where does the Computer Usage Logs come from in macOS (10.13 or above)?Is there a login/logout script that I can run to send those specific logs to Graylog?

Hello! I recently updated the 'Master Mac' I use that runs jamf admin, This sits now on ventura with the most up to date version of Jamf Admin (At this time V10.44.1) and I cant for the life of me add new printers!  When clicked it asked for my admin login, once given nothing appears... click again and the same issue... Anyone else had trouble with this? 

Hi all,I'm creating a Google Chrome configuration for managing settings on multiuser computers (that have many users every day using the same computer and account). I am looking for ways to disable logging into the Chrome browser, and (if possible) a method for removing browsing history/cookies/cached data, etc. upon closing the browser.Right now, I'm using the iMazing Profile Editor to develop property lists for the settings. I have found many options for Chrome in iMazing for tweaking settings that will help, such as removing the ability to sign into the Google Chrome profile, and disabling autofill, etc.Then, I found these options for setting "Incognito Mode Availability":No ValueIncognito mode availableIncognito mode disabledIncognito mode forcedHaving incognito forced might give us all we need. A user can still sign into user accounts such as Gmail in incognito. Has anyone tried this before? Does using a forced incognito mode raise any red flags?I'd like to duplicate these efforts

When uploading a .mobileconfig to Jamf pro most setting are not displayed, nor configurable. This does not seem to be the case with jamf now. When will Jamf pro work like Jamf Now with .mobileconfig

I have an iPhone 6 that is passed around to people who travel on behalf of our school. I just received it back from someone and wiped it out. Now during the setup at the Remote Management screen, it says the configuration could not be downloaded. Cancelled. It was originally enrolled in DEP with Apple Configurator 2 and added to Pre-Stage Enrollment with no problem. Is this a certificate issue?

I'm in the process of migrating users from a company we just purchased to our JAMF instance... i can remove the MDM profiles using using the command: "sudo jamf removeMdmProfile && sudo jamf removeFramework" through a policy, but the Jamf Pro Built-in CA is still there after that... I want to be able to remove the Cert remotely without revoking the cert from all users at once... Anyone have suggestions?

Hi folks,I support a Fire Department and there's an iPhone assigned to each Company Officer. So the phone is not assigned to an individual but instead a whole crew. That crew is on a four shift rotation so from day to day, the person possessing the phone changes.So, the phones are basically used as kiosk devices- no Apple ID, no personal logins, no email, no messaging, just our organizational apps, and as a calling device. There are times when it would be useful to be able to send an email to a particular device, regardless of who is using it that day. And it would be useful to be able to receive mail from the user of the device if they take a picture in the field or a screen shot of something.Has anyone come up with a decent working process where devices can be used as user agnostic kiosk type devices, but also be able to send and receive email from the device? I've thought about creating accounts for each device, but then you throw in password management or MFA and things get complic

Hi,Just wondering if anyone has any guidance or advice for renewing external certs on jamf pro to our iPads. The way i'm thinking is to push out the new certs as separate configuration profiles and wait till they're deployed alongside the current profile.  Then just removing the older cert once the new ones installed? Can't think of any other way of doing it but just wanting to see if anyone else had an opinion on this? Thanks,Paul 

Hi all, I hope everyone had a great Christmas and New years? So we are in the middle a project to change our MDM provider from Mosyle to JAMF and Identity management from Jump Cloud to Okta. Now I am quite new to MDM solutions at least at this level (mostly apple based company I am at) so they went with an MDM solution over trying to use AD joining and such (I have managed a small number via Intune) But mostly I have been in Windows based companies with AD/SCCM imaging type set ups. So after looking trough the community I struggled to find anyone posting a similar question to me. My question is has anyone done the same moving from Mosyle to JAMF recently and how did you go about transitioning the machines (removing current profiles and un enrolling etc.) from Mosyle and then enrolling via JAMF? We will be using JAMF pro if that helps :) Thanks in advance

Hello everyone,I am having a problem where I need to block access to a specific Google Site on our school iPads. When I add the URL to the blocklist, it blocks ALL Google Sites. When I try to allowlist a different Google Site it apparently differs to the more restricitive and blocks access anyway. I am assuming it is blocking the root (https://sites.google.com) and not allowing anything past the lead in (https://sites.google.com/coolschoolstuff.com) <-made up URL for this example.Anybody have a solution?Thank you!

So, this is pretty straight forward for Jamf Pro, but I can't seem to figure out how to apply a custom icon to an in-house package deployed via Jamf School Self Service. Am I missing something obvious? Thanks!

I created buildings in my Jamf Pro instance, and then I created Device Smart Groups where the criteria is “Building..is…[select ellipsis to chose the building from the list of buildings]”.I created 20 Device Smart Groups with this criteria, and all but three have populated correctly. I have Prestages where I have selected the Building in the drop-down menu in the User & Location to be added to all devices in that Prestage. I have confirmed that the building has populated correctly in the inventory records for these devices.I’m so confused, I used the same process for the other groups and they populated just fine. Has anyone else come across this before?

I have a new requirement to be completed within my organization which is to restrict enrolling MAC EOL OS versions. Anyone tried this before ?

Just curious if anybody has seen this. I've tried this at work and on my home wifi. When I go to run the 12.6.3 update, I'll get the network error. I'll try it 2 more times and then the update just goes away, but it eventually shows back up. This is happening on a bunch of Mac's on different networks. At the time I did it, I did check and there weren't any apple server issues. We do have a couple of security tools installed that could affect it, but there are some devices that can run it.