Is there any good way to do this? I have some icons that were replaced with higher quality ones and I would like to remove the older ones, but there is no interface I know of in the JSS. I realize I can go into the icons table if needed but would prefer not to.

We have been using Jamf Connect for a couple years. It is connected to Okta for SSO login.We recently got Apple Business Manager and are starting down the path for Intune BYOD for iOS devices. We want to turn on federated authentication to our Azure AD for managed Apple ID's.Just want to double check this would have no effect on Jamf Connect. I am 99% sure it would not since Jamf Connect points to Okta only.

Hi,I'm trying to deploy Nudge in a mixt environment Intel/M1. It seems that the package is deployed in Utilities and the configuration profile is there and found on devices.I have a pile of devices with Monterey and Ventura; the test we want to accomplish is upgrading to 13.3. Even if the deadline is there the Nudge window does not appear and of course, no upgrade notification. This is my config profile and policy. I even added in the policy all the packages.Any specific reason why.The pile of devices consists in:Air M1 with Monterey 12.6.1MacBook Pro intel 15" Montery 12.6.3MacBook Pro intel 15" Montery 12.3.1MacBook Pro intel 15" Ventura 13.2.1   

When creating a Jamf Pro login account in the console, there is a need for a feature that allows us to set a time period for credential expiration

Hello,We had McAfee/Trellix Firewall installed on all of our MacOS computers.We have to quickly uninstall it but during Firewall uninstall process, a prompt for admin username and pass is showing to uninstall the extension system.But none of our users is administrator and it is just not possible to go on more than 1600 computers for that.Do you know how it is possible to uninstall completely and silently?Thank you for your help

Could you please provide information on which OS builds are considered safe to use for BIG SUR, Monterey, and Ventura?

I am being tasked with sorting out a solution for macOS SysLog redirection. Security is wanting/needing macOS user Authentication logs among other logs. Most of the tools I am seeing died when Apple updated to Universal Logging. I'm working with our Splunk team to see what options we have with Splunk. However, I am wondering what other organizations and admins are doing for log redirection.

Hello,I'm pretty sure one of you will know this. I stumbled upon a script left by the previous administrator in our Jamf instance. It's a script to name machines. The naming convention uses Building + Laptop or Workstation + Last 7 digits of serial. For example, a laptop in the San Francisco building should be named like this: SFOMLP-xxxxxxx. A workstation would be named SFOMWS-xxxxxxx. Everything works well except the part where it determines whether it's a laptop or a workstation. That part of the script looks like this:# Determine if portable or desktopcomptype=$(/usr/sbin/system_profiler SPBluetoothDataType | awk '/Complete/ { print $NF }')if [[ $comptype == 'Portable' ]];then base="MLP"elsebase="MWS"The problem is that it names everything with the base MWS, which suggests to me that the comptype variable needs to be edited because it's

I work in a school district and was wondering if anyone had used scripts to shut down apps after a certain time.  We are looking for a way to stop students from accessing safari and google chrome after school hours.  Any help would be appreciated.  I'm new to scripting and haven't had much practice with it.

Hi All Does anyone know how to actually disable the Airdrop service on OSX Sierra ( I've tried the command "defaults write com.apple.NetworkBrowser DisableAirDrop -bool YES" ) dont the Mac's are still broadcasting via Airdrop I've restricted AirDrop using a configuration profile - But this only removes the AirDrop from Finder and not actually disables the service Any advice would be greatly appreciated

I feel like i'm missing something here. Aren't nested groups supported in v9? I don't see how to add a computer group to a static group.For example: If i have static groups called Lab1, Lab2, Lab3, etc. that all have specific computer assignments, then i'd like to have another static group called something like All Labs that have the static groups Lab1, Lab2, and so on. That way, if i want to push a config profile to all labs, i can just select All Labs as the scope, rather than listing all of the individual labs.

I just wanted to know if there is any restriction to use same Apple ID for push notification can be used for ABM login for any order for VPP app or DEP device assignment. Or this two Apple Id has to be different and it is must?

I am following the below link to sign a package.https://learn.jamf.com/bundle/technical-articles/page/Creating_a_Signing_Certificate_Using_Jamf_Pros_Built-in_CA_to_Use_for_Signing_Configuration_Profiles_and_Packages.html My question is if I dont go to keychain and do those steps mentioned in the link and go to Jamf Settings/ PKI Certificate and download my JAMF built-in certificate and installed it on my mac and sign the package with composer when building the package then there should be any issue? Or this two method are having different purpose, if yes then what is that?

Hi Community,I had an idea to solve a problem I'm facing but wanted to know if Jamf Pro could encounter an issues with this idea. Problem: users in our environment have been saving confidential information in specific location. Given the nature of the documents and contracts we have these files need to exist somewhere else.Solution: script that does a search in the problem directory (I've nailed down this one) and create an EA that reports "True" if the script returns non null/0 results. Realistically I'd like to see these files and results but I can worry about that some other time. Primary concerns here:1. The directory has at least 30 files but could be over 100 so performance issues is a concern.2. Running this kind of script on 30+ machines at a time - Jamf delays?

Hi,I downloaded the latest Autodeploy PKG form Parallels and made the changes in the config file and aded a Windows VM as described in the Admin manual. After Deloyment I get on the client the Error"Parallels Desktop Autodeploy.pkg" could not be opend because the developer could not be verified" in German"Parallels Desktop Autodeploy.pkg" kann nicht geöffnet werden, da der Entwickler nicht verifiziert werden kann.Should be because the app is not signed. Can you help me to solve the problem?Kind regardsMathew

If I use JAMF protect in my environment and integrate JAMF protect with my SIEM (Splunk) then we can ignore the deployment of compliance reporter app on mac? Or still it is needed?

We've been using LDAPS for some time without issue. It recently stopped working sometime over spring break when not in regular use. SSL certificate had expired on 03/30, so the new/current SSL certificate was uploaded but the issue is still not resolved. No other settings have been changed, firewall or otherwise.Test simply returns, "Unable to connect to the LDAP Server." "No Suggestions Available".Cloud logs don't seem to provide anything more specific. I'm not sure what may have changed to cause this issue; may have been Windows Updates on the LDAP servers, or possibly something on the JAMF Cloud side?JIM was a bit behind, so updated it from 2.2.2 to 2.4.0 and rebooted with no change.I can connect using regular LDAP (non-secure/test-only). Somehow there's a problem with the certificate, I just don't know what it is or where to find more specifics. The Subject and SAN both match the FQDN of the host, as expected. And as I said, this has been wo

I'm being assigned to find out AppConfig for Epic Rover App, so we can deploy the App with server URL and path. There's not much information online, and seems like most app developers are not aware of this feature at all. Ranting aside, anyone has anything related to share?Thanks in advanced

Hi All,We have just purchased 3 Mac Studios with Apple Studio Displays.The problem is I would like to record the serial/asset numbers of the displays to the Mac Studio they are connected to.Anyone got any ideas around this?

So we have had Jamf Connect and Jamf Pro for a 4+ months now and things are going pretty well (read as: still new to Jamf Pro)However I had my first ever "I totally forgot my Azure password" call the other day.After reseting their Azure Password. We were faced with getting the local password reset. No problem, just enter the wrong password three times and I'll give you the recovery key to get in - right?We could not get the MacOS login screen to prompt for a recovery key after many failed attempts. I eventually used the admin credentials to do it.I am testing on a Ventura 13.3 machine enrolled in our Jamf Pro instance running Jamf Connect 2.22.0 and I cannot get MacOS to prompt for a recovery key after trying 10+ unsuccessful logins.Is this a configuration policy in my Jamf Pro? Could it be something configured in Jamf Connect?

I am trying to set an email address as the office licensing activation email.This is what is showing up on the profile on the test machine OfficeActivationEmailAddress = "$O365_licensing_email"Under the Application & Custom Settings paylods I havestring$O365_licensing_emailUnder the computer extension attributes I have:O365_licensing_email:IT@domainnamehere.comWhat am I missing to get that email address populated into the profile payload?

I'm looking for an extension attribute that I could add that would report whether the currently logged in user has the old or the new Outlook UI.  We've run into some issues that seem to be fixed by switching between the two and while we have a gut feeling for how many of our users are still on the old UI, it'd be nice to have some data to back that up.  I haven't been able to find any preference files or anything else specifically that would really tell me one way or the other.  Has anyone else found anything that works?

Hello folks! Wondering if it's advised to remove a computer from Jamf Protect if we plan to repurpose it from one user to another - or will Jamf Protect be able to tell it's on a new user, with a new hostname, etc? Noticed that one of our computers hadn't checked in "3 months" yet it's checking into Jamf Pro every day. Upon digging noticed that the host or computer name were different in both. Thanks!

Is it normal for a policy that only has a script as the payload to never get logs? I have our "master enrollment" script that calls on other policies after enrollment and it shows "pending" on end for any computer. What's strange is that the policies that it calls within the script work/are triggered.Trigger: Enrollment CompleteFrequency: Once per computerScope: All computers - Specific Users

Hello Jamf Nation! We hope your April has started off great! I'm pleased to announce the availability of Jamf Pro 10.46.0 Beta. New features and additions include additional device attribute reporting enhancements, Configuration Profile enhancements, a Volume Purchasing Location redesign, further improvements to LAPS, and more! How to join the beta: We’ve also made some changes to the Beta enrollment process with our new Jamf Nation platform. Please enroll in the Beta Program under Product Feedback at account.jamf.com. Once you’re enrolled you’ll see a link to the Beta Forum. There will be a short delay between enrollment and Jamf Nation beta forum access - you will receive a notification in Jamf Nation to join the beta forum. Once you receive the invitation click on "Join this group Hub" to access the forum.