Hello!I am trying to change the mail.app settings on multiple Macs, but it is not working.If anyone knows how to solve this problem, please let me know.What I would like to achieve.-Check "Mark addresses not ending with" (mail.app>Settings>Composing)- Put any address in the blank field- Achieve the above two points using the payload function of the configuration profileWhat I have triedI thought the following plist was relevant for the configuration.~/Library/Preferences/com.apple.mail-shared.plistHowever, when I uploaded the plist reflecting the settings from Jamf>Configuration Profiles>Application & Custom settings>Upload, it was not reflected in mail.app.

Searched Jamf Nation but couldn't find anything close enough to my use case. I'm querying the Jamf API for computer IDs by way of usernames:jamfUserURL="https://[company].jamfcloud.com/JSSResource/users/name/$username" computerID="$(curl -X GET -s -k -u "$jamfUser":"$jamfPass" "$jamfUserURL" | xmllint --xpath '/user/links/computers/computer/id/text()' - )" echo $computerID This works great except for end users who have more than one computer in the environment. Then I get a result with all IDs combined into one return. Would it make sense to stick this in a for loop to iterate through the multiple IDs? If so, can someone please assist?

Where do we find the download link for the Jamf Pro admin tools?

We have a rather small Mac fleet of a few dozen MacBook Pro, a handful of iMacs. We implemented jamf with a minimum of features. The users have administrative privileges, our environment is scientific and has to be open in that way. We have to provide the best support and also want to limit the workload, while restricting the least.How do we get the most out of our jamf instance?Which policies, profiles, scripts, apps and packages do you consider must-have?

Is there any ability to suppress the Quick Start functionality in iOS for DEP/Supervised devices? The Quick Start feature is what allows you to setup one iOS device by holding another iOS device you already use near the new one and allowing them to share settings.

We want to keep track of when certain things happen on a device (USB drive plugged in, HDMI connected, etc). How can we monitor events in the system log and archive them for review later? Our review period might fall outside of when they naturally get purged from the system log.

Hello, Can anyone tell me why this script will not work when deployed through the JSS? rm -Rf /Applications/Install macOS High Sierra.app I've also tried: rm -Rf "/Applications/Install macOS High Sierra.app" When I run these commands in terminal, it works fine. When I push these commands as scripts through the JSS, they do nothing. Any ideas?

I have scoured the threads and the inter-webs and can't find much on this. I know how to show the uninstall package option on on-prem, I index the package in admin and voila.But such option is not possible on cloud.Please advise. Thank you, 

I notice that the Jamf Pro board history logs for the instances hosted on the Western European clouds are offset by 1 hour.Daylight Savings Time will change in Europe at 01:00 UTC on 26 March 2023.Until then, the logs should show the Standard Time of day.Kind Regards,Alberto CassoliBES/BAPS ICT Services      

I am just starting with Apple Business Manager and Jamf Now.  All devices were purchased independently so there are no devices in ABM.  As a test, I used Open Enrollment in Jamf Now on one device. It appears in the Jamf dashboard but not in ABM.  Should I be enrolling in ABM first using Apple Configurator 2and then syncing? Is there any downside to just using Open Enrollment vs Apple Configurator 2?Thank you.

Is Jamf Migration specialist is part of license plan or need to pay for Jamf migration specialist?

Hi Everyone!I help manage macs for a university and lately we've been having some issues with our local admin account created during prestage enrollment. It's become an issue where the account will create, and we will be able to login to the local account for a while and then suddenly without any indication we won't be able to login to the account or use it for admin privileges. Has anyone else had this issue? I haven't been able to find anything in the records for computers that this happens on and am lost now.

Has anyone possibly put together a best practices list for how to deploy Zoom is a school environment for a district that has not used it since the advent of PPPC profiles? (you know, on the off chance there was a global pandemic and they needed to do a quick rolllout...)

Does anyone have a script or a terminal command to show WiFi in the menu bar? I have been trying and nothing I do works. I am on Big Sur. I need a way to implement this to all of the Macs in my environment.

You can now further configure your content policy with additional categories and subcategories under Policies > Content policy.Schools can use the changes to enforce a stricter overall policy by blocking all content and then allowing just the sites that students may need. They can also use to have more granular control over what sites students may have access to.Admins will be able to block all the same categories in JSI as they would be in Data Policy. This gives schools more granularity when deciding the sorts of content that students should be able to access.For example, one of the requested categories was "Other Shopping" as schools found students using iPads for online shopping during schools hours.The "Uncategorized" category will also be made available. This would allow admins to block all content that isn't in a JSI content category. Schools can use the above changes to enforce a stricter overall policy by bloc

I have to fill in for a co worker and have to renew the push certificate on several Jamf Pro instances of customers.  Believe it or not, I have never done this before. And although it's not a difficult task I'm having trouble renewing these certs.The problem I run into is that the customers don't have a Jamf ID (or is not known to them/me). Two questions:- Do I have to configure the Cloud Connection Services in order to obtain the CSR?- Does the Jamf ID that's being used have to be a unique ID that's connected to the customer's Jamf subscription? Or can I just use a generic ID (mine for instance) and use that one to generate a CSR for all customers?

Any way of Forcing Restricted Mode = STRICT in the YouTube.app on iPad? Seems the default for the YouTube.app is Restricted Mode is "Don't Filter". Without individually going to each iPad and turning them ON, I would like to be able to Force them to be STRICT. Don't see anyway of doing that though. We have set the DNS on our Router per Google's instructions, which is now "OVER" blocking our computers. Videos that should not be Restricted are being blocked as Restricted (ie serving on a jury, really???). We are getting by that restriction by using SafeShare.TV and adding a ?clean=1 to the end of the urls. BUT, the YouTube.app is getting by all the filters and allows people to view anything. I have a feeling it is because on a web browser, the setting is Restricted Mode ON, but in the YouTube.app on the iPad it is Restricted Mode STRICT.

I am looking for some examples for launchagent projects which can help my mac fleet. Any idea which can help my mac fleet in regards will be appreciated. Thanks in advanced.

Hello All,In an effort to lock down our Macs with the goal of removing local admins, we've created a Configuration Profile applying to machines which set various Restrictions. This includes what is accessible for users in System Preferences, Applications, functionality, etc. We also are using Admin By Request to allow users to request elevation for their Account Type to Admin to facilitate installs, updates, etc. However, with the way the Configuration Profile is applied, even when users elevate to Admin, the Configuration Profile with restrictions still applies.  Is there a better way to lock down functionality of these machines so elevated Admins aren't bound by the restrictions? Or, is there a way to apply the Configuration Profile at a user level for only Standard account - so Admins bypass it? Thank you for an assistance

Hi Team,We are migrating from On Prem to Jamf Cloud and working on redirecting the current JSS URL DNS to .jamfcloud.com to avoid re-enrolling the devicesDid anyone migrated with this method ? What will the JSS URL for the devices enrolling after the migration? Will it be *.jamfcloud.com or the old URL?Thanks.

We've seen this problem before, sometimes it clears itself out. Wanted to start a thread with "No data available in table" in the subject for anyone who searches for it (only one thread that isn't related to scoping). Anyone ever see this problem? If so has Jamf ever provided any feedback/guidance? We may open a ticket but wanted to check here first.

Is there such a tool that you can use to tell you the health of your mac, like battery life, how long the machine has not shut down, if the security as well as the other softwares are updated or not.I am trying to have a tool that will just pop-up to inform users that they need to update their software or to shut down the machine once in a while.

Hi, i am new at JAMF Pro and waitung for some demo licence. I can see, that there is no option for a 2FA authentication for the JAMF admin or i can´t find it. So for me the admin account is only protectec by a password. If this will be hacked, all mac´s behind this account are in trouble and me too :-)what can i do to harden this ? is there a way ? thank you.

We have good number of mac clients in Intune and Munki, what is the best way to migrate those mac clients in JAMF Pro without interrupting end user?

Hi all,We've recently deployed Jamf Pro on-premises and made it available on the DMZ. We're planning on having an HTTPS DP available on the DMZ (Apache running on Debian) However, when I try to add the DP to Jamf Pro, it keeps asking me for the SMB Share info and credentials which this distribution point doesn't have. Is there any workaround for this issue? We do have a samba share on the internal network but I can't have an SMB share on the DMZ and even if I could our security team will laugh in my face. Does anyone know how to get around this issue? Cloud Distribution points are not an option for us.Thanks in advance!