We are trying to find out if there's a way to schedule configuration profiles to be pushed out and pulled back at specific times. Similair to what is done in Jamf Parent.It looks like this feature is available in Jamf School with a 'time filter'? but have not seen this in Jamf Pro. I am aware that there are other ways to accomplish this task via our firewall, and am aware that this feature has been widely reported as unreliable. Was tasked to investigate this feature if available.Thanks all! 

Good morning,I am wondering if anyone has any tried and true method for searching for the existence of a file on a specified scope of machines? We are being asked to look for a specific file that would determine if a certain add-on pack is installed for Virtualbox. Any tried and true methods for running a process on a specific list of machines and determining if a file exists?ThanksD 

Hi all,  I have an NFR license with Jamf PRO. I am just trying to download it onto a MacBook to test.  I get this error message here when trying to download the Configuration Profile? I am not sure if this is right way to do this. Is there another way in which I can get Jamf PRO installed onto the MAC, is there a guide I could follow. Thanks

Hello,I just bought my first Apple device, the Macbook Pro 2020 M1 (bought second hand), the problem is that I have the impression that it is linked to an apple MDM program, because I receive random notifications from "DEP". (I have no idea what that is, my first time seeing it)I wanted to know what it is exactly?I knew about this forum from a link I found after running a request in the terminal "sudo profiles show -type enrollment" where I got a lot of information about a famous company, Screenshot: https://ibb.co/b2pVW9LNote: as I told you above, this is my first time buying an apple device, I'm a bit lost, since I always used windowsThanks(translated by deepl)

We had been making use of the Content Caching Module in Jamf School for many years to take pressure off of our Internet, however this is still in beta and has been failing to cache files for some time (I can't be certain of the exact date). I have since uninstalled the Caching module as it does not appear to work anymore and appears to have been installing older settings and profiles on our devices that were cached before the module stopped working.At this time I have configured 2 Mac Minis and an iMac with Content Caching in order to take pressure off our Internet. I would like to make use of the Content Caching module rather as this was more efficient and reliable than the Content Caching feature available on networked Mac OSx devices. Is there any way to speed up the process of fixing this module? The message I have on the module (when enabled) is:Due to recent changes in the macOS system store download pr

HI- so if we are pushing out updates to Ipads with security PIN enforced- how long after the devices are first unlocked after a reboot do we have the ability to push apps/changes? I know it has to have an unlock once after a restart (such as IOS update); but is there a timeout period before apple restricts the ability to push apps/changes? Thank you

Hi,we use the iPad as shared iPad.It can take days or weeks for updates to be completed on all devices. I can see only one reason: the update fails because a user is logged in. For these iPad a "temporary session" is shown. I suspect this is a guest. If I log off this account, then the update succeeds, at least sometimes. But sometimes it does not.Can I configure such an automatic logout in JamfSchool?Are there other reasons why the updates take so long?Best regards,Ralph

Hi AllWe recently enabled Auto-Enrollment on our Jamf Now and started testing our some auto-installed apps. One of the apps we are installing automatically is the Trend AV solution however it seems to keep on failing for some unknown reason. See below Install didFailWithError: Error Domain=PKInstallErrorDomain Code=112 "An error occurred while running scripts from the package “WFBS-SVC_Agent_Installer.pkg”." UserInfo={NSFilePath=./preinstall, NSURL=#tmsecurity.pkg -- file:///var/tmp/TrendMicro/WFBS-SVC_Agent_installer.pkg#Distribution, PKInstallPackageIdentifier=com.trendmicro.tmsm.application.trendMicroSecurity.tmsecurity.pkg, NSLocalizedDescription=An error occurred while running scripts from the package “WFBS-SVC_Agent_Installer.pkg”.}Aslo , /tmp/PKInstallSandbox.taKqhy/Scripts/com.trendmicro.tmsm.application.trendMicroSecurity.tmsecurity.pkg.HMedNp/preinstall: line 261: ./PE_InstallPluginPane: Bad CPU t

Hi all, we are trying to finalise a roll-out of Jamf for Mac management, with zero-touch from IT. Devices are enrolled automatically to our Jamf MDM server in Apple Business Manager, and ideally we'd like to send devices directly to users, for them to unbox and run through Jamf Pre-Stage Enrollment.The issue I have seen, maybe one in every 10 builds, is enrollment will not complete correctly. We have a device at the moment that hasn't renamed correctly, hasn't deployed all Enrollment Complete software/policies, and hasn't deployed all config profiles (including FileVault enablement).Running this command locally on the device will essentially re-run enrollment:sudo jamf policy -event enrollmentCompletebut my concern is sending a device to an end-user, the device doesn't enrol correctly, the user tries to work on the device but doesn't have Office apps, or the device doesn't meet security requirements, such as disk encryption.Does anyone

Hello all,We deploy Xcode Command Line Tools to all mac machines in our org, one issue is having to deal with Xcode CLI updates.When trying to update via command line using softwareupdate, it reports installed, then when checking again they will show back up.Is there a way to update on current macs, or is this just borked?

Is it possible to fully automate the wipe of an Apple Mac Mini?Currently, I have a lab of M1 Mac Mini's, these devices will be used by students in an open lab environment.  they are configured in a prestage enrollment that seems to be working fine, but when I click the "wipe computer" button from the management tab of the device, it begins the process to wipe the computer correctly, but, it then stops after is activates the device.  I have to physically go acknowledge the activation to move the process along.  I'm hoping to find a way to automate this.  Then, I have to manually start the os install which I would like to automate this too, and after I start the OS install, the device enrolls successfully, but then stops at the user creation screen, and requires me to create a user.  Because this is an open lab environment, at the moment, we do not need to create a new user.  I would rather JAMF fill this information for me, then JAMF configur

Hi, I have been asked to look at packaging and deploying Python, with a numver of additional applications - TensorFlow 2, scikit-learn, PyTorch and Matplotlib. These are the only ones for now. Where I am stuck is that I am not unsure how I'd go about doing this. One suggestion is using Anaconda as the Python install and then adding each in its own Virtual Environment. I'm just wondering when to start. Would I potentially install on a reference Mac and then capture as one instance using Composer or could I package/deploy Anaconda and then use individual scripts to install the applications or somehow create individual packages of the applications that can be deployed individually and link into the Anaconda install, independently? If, of course, I am even on the right track here. Our build is macOS Catalina 10.15.7. Thanks for any help or advice.

I guess the subject says it all, Jamf Connect Stays Open when Selecting Connect.  After the latest update to 2.20.1 last month, it worked.  It just recently stopped working as it should (connect and close).  I also have seen this work as expected and not at times over the years, so don't know the mechanics behind it.  Has  anyone seen this or know why this happens? I can select change and reset password, and the Azure window opens and I can change or unlock it there. Company Portal is OK, as device shows enrolled with Jamf. (I don't think that has anything to do with the issue I have though). Thanks for any info you can provide! 😀

Hello Everyone,I am still pretty new here so bear with me on this one. Our organization uses binds our Macs to AD and people sign in to create mobile accounts. These accounts have admin privileges but some things are restricted. For example, terminal access on mobile accounts is deactivated. When you open a prompt, the terminal window says "process complete" and doesn't let you enter anything. What kicked this all off is that we recently installed SPSS v. 29 on a machine and noticed that the local Admin account can run it fine but the mobile account cannot. In the local account, we noticed that SPSS launches a few terminal commands to load Java and launch SPSS. We suspect that the mobile account can't launch SPSS b/c the mobile account access to terminal is blocked.In the process of troubleshooting, we used the chmod 777 command on the SPSS folder in App

I am trying to figure out a Smart Computer group that can see which Macbooks have not registered with AAD yet and need to.The setup guide says to use a group for if the Macbook has the Company Portal app. Which is great for the first run but what happens if user ignore or it fails part way.I have come across this past on an EA, but it seems this should no longer be needed: Solved: Intune Extension Attribute - Jamf Nation Community - 211981I also like this idea but no mention of how the smart group was done: Solved: Jamf policy frequency every hour - Jamf Nation Community - 263626I see the items that Intune adds, such as Computer Azure Active Directory ID, Conditional Access Inventory State and others.But I can't

I've tested with empty packages and our Apps Package, there are no errors, there are also no references to it downloading in the install.log. It will then install during a policy trigger, but when done via prestage enrollment, it just skips over the package.I've run out of ideas.

I'm guessing this is a long shot. Our district just bought a ton of M1 macbook airs with Kensington Thunderbolt docking stations. The problem we are seeing is that if the macbook is restarted, the docking station does not communicate with the computer until either the docking station is power cycled or the usb-c cable is disconnected and reconnected to the macbook. I'm guessing this is no, but is there anyway to script disabling the Thunderbolt ports on the macbook air for like 5 seconds and then re-enable them? Then I guess this script could be dropped into a policy that runs at start-up. 

Many of our users are complaining about MFA fatigue on their Macs. We are a Azure shop and use Microsoft Authenticator. What could be causing the multiple MFA prompts per day all of the sudden and what would a solution be? So far we have thought possibly Jamf Connect is improperly configured. Or potentially adding the "Windows Accounts" Chrome extension since that is a requirement on the PC side. Any thoughts on this issue? 

This is probably a dumb question but I have not been able to find an answer.I was requested to remove an App which was purchased by a 3rd party and converted to a "dangerous" app. I am able to get the Bundle ID for the App but not the Name (IE: App Name "Keynote" would be Bundle ID "com.apple.Keynote.") When I type the name of the app in nothing related shows up. As long as I have the Bundle ID, can I substitute my own "App Name" and still have the App Restriction work?

I'd like to set a Configuration Profile or policy on my Mac mini servers to grey out or hide the Sleep, Restart, and Shut Down options on the Apple Menu (login window too, but I think I already know how to do that part). The purpose to this is to force someone to open a Terminal and issue a shut down or restart command which would ensure someone doesn't just click the wrong button. Is there a way to set this? it is for Mavericks 10.9.3. Thank you

Hi all, wondering if you can help, as I am at a loss as to why this is happening. We run jamf connect to sync our passwords with our AD accounts, and it is working fine for everyone except those running Ventura. For those on Ventura, it gives us an error every few hours saying our ldap password is out of sync and we must enter it, but when we try it gives en error on jamf connect: //ping.***.com/as/token.oauth2, ERROR: Unknown error. Message: grant_type is required, STATUS: 400Everything is working fine, we can get on our network shares, use teams and outlook fine, there is absolutely nothing wrong other than this error not disappearing. Has anyone seen this before and if so do you have a fix? I have updated to the latest version of Jamf Connect but that hasn't changed anything. 

I'll try to keep this as short as possible folks, promise. I have two issues rearing their heads around the corner:First being that devices that have been enrolled for some time now have suddenly started asking the User to login with Jamf credentials in order to use Self Service. This is happening despite the fact that the mobile device in question has been using Self Service just fine until this point. Second is a device that is showing within School Manager as Supervised and Jamf as Managed, is suddenly denying access to Self Service altogether. For a little bit of background, our team just swapped from on On Prem to Cloud last week. I know it's easy to just say it's an issue that may have occurred during migration but I'm not so easy to jump to that conclusion with confidence. Any ideas and insights as to how to resolve these issues would be greatly appreciated; especially if this continues to pop-up with other devices. 

For some reason, you don't need admin access to install Java games, it just installs a .jar file that you can open. Is there a way to block .jar files from opening? 

Hi all, I have a application that is a DMG, and I have a license file that i need to drop into the users application folder. Any suggestions on the best way to deploy this app? I am not sure if using the built in payload in policy would be enough or to use composer? Any guidance appreciated. 

How To from Jamf Nation that has pretty much all the info you need to do in Jamf, but since we use Godaddy for our Certificate, there are some extra steps. https://www.jamf.com/jamf-nation/articles/115/enabling-ssl-on-tomcat-with-a-public-certificate All of these Commands should be done on a Mac in Terminal. Open the command prompt or Terminal. Create a folder on your desktop named "Certs" and navigate to the directory using the following commands: mkdir /path/to/Desktop/Certscd /path/to/Desktop/CertsGenerate a Private Key and CSR by executing a command similar to the following: openssl req -out CSR.csr -new -newkey rsa:2048 -nodes -keyout privateKey.keyWhen prompted, enter the appropriate information. The certificate authority (CA) administrator should be able to provide the desired values for these fields. Ensure that you use a fully qualified domain name (FQDN), "[Your Jamf on prem URL]". Note: These valu