Hi, Does anyone have a link to the latest list of Installers available?T.I.A  

I manage a little under 100 public Macs at school. The Macs log in automatically in the student account with a kcpassword. After 5 minutes of inactivity the Macs display is turned off and after 50 minutes the Macs go to sleep. The Maximum Auto-Lock is set to '0'. As long as the Mac doesn't go to sleep, no password is asked. However when the Mac goes to sleep, it will ask the Student to log in again.Is there any way on macOS Ventura to automatically log in after sleep?

How Can I set the default value that "Use generic print features" is enabled on a printer ? - as I need to deploy it with that settingI have tried to set it, save the print with jamf admin - but when installing it on a new machine, the checkmark is removed again.I also tried to figure out which file this setting is stored in, but unable to find it, as I then eventually just could deploy the xml etc to get this setting I want 

Hey there,is there a possibility to display an extension attribute either separately at another place or to hide the attribute and make it visible by mouse click? It is about the fact that we have a script in use that implements LAPS - so assigns a local admin password and stores it in an attribute for emergencies. But I don't want this to be visible directly, but that you have to click on it first to make it visible, at least similar to the recovery key. Is that possible?Thanks in advance,Michael

I Have been tasked with creating documentation on how our Jamfcloud.com is currently setup. So our first thought to find a way to print the pages from the bowser. Because of all the iframe going on I cannot find a way to print an entire page - or even just the frame from top to bottom. I really do not want to create  2 dozen screen shots and more for every policy and config.Looking for ideas.

Hi - I have inherited a Jamf Pro environment with 1118 packages and 700-800 policies - maybe around 35% are actually being used.  What is the best way (or some ways) to figure out what can be deleted and what can't?  Is there a best-practice way to delete packages and policies?Similarly, there are around 550 computers that are probably out of service but still in Jamf.  What is the best way to figure out which computers can be deleted and which can't?  Is there a best-practice way to do something that will temporarily remove them so that I'm not exceeding my device count while I figure out if they indeed have been removed from service and can be deleted from Jamf?Thanks,  --Jeff

We seem to have an issue with the configuration of our Jamf Connect.We are using the connection with Azure to create our users.Some Macs login with the Jamf Connect window, but some show the native MacOS window with 3 buttons. This last is not desired, since most of our users do not know their Local User account.The native MacOS login window only appears after a reboot. When the Mac sleeps, it pops up with the desired login window (the one with the user icon).The thing is that this does not happen on all our Macs. Out of about 30 Mac, this has happened once on a M1 13" pro running Monterrey and this week on 2 new M2Pro 16" machines.Our configuration has not changes, since we onboarded to Jamf last October.I am sure we are doing something wrong here, but I have no idea where to start looking. Hopefully someone can point me in the right direction. 

Hey, friends! We're using software update deferral via the Restrictions configuration profile payload. (Screenshot of our settings attached.) At this point I'd like all of my Monterey users to have the ability to upgraded to Ventura in System Preferences > Software Update, but currently that seems to be downloading the full installer rather than the delta update. I can force it to present the delta update, but only by temporarily removing the Restrictions profile. I'd rather not do that as it's somewhat disruptive to the end user. Is there any way to maintain the deferral policy but force the delta update to show in Software Update?  

I need some help in figuring out how to disable the TouchID feature on the new MacBook Pro for now. In testing we found that it's been causing some AD lockout issues, and since we want to deploy these Macs before the 12.2.3 hits that suppose to fix this - I figured it would be easier to just disable the TouchID option for now and enable it later. So, I fired up Composer and told it to snapshot both new and modified files and proceeded to disable the TouchID for unlocking the machine (the other two options wouldn't work anyway since we don't allow iCloud access). I then checked the files, and none of them seem to be related to the touchID feature. I'm assuming there is some plist file out there that keeps track of the options the user chooses. Ideally I'd like to lock that down with the options turned off, and then hide the touchID and Wallet system panel. Any ideas? Anyone else having these issues?

Hi All,I'm new to Jamf pro and heard about the re-enrollment. However, I got a question that if we delete the entry of the device rather than enabled the re-enrollment option. What makes the difference? Kindly help me to understand. Thanks.

Hello,Is it possible to prevent iPad users to remove JAMF profiles from their devices? iPads are enrolled through AC2 (not DEP). Users are able to reach the profile under their iPad settings and simply click "Remove profile". This is causing huge constrains in managing our iPad fleet.Thanks!

Morning!I'm currently trialing Jamf School.  Want to test how to use Google authentication during enrollment.  I believe I have everything set up: Built Google API Console Project, created credentials, added redirect URIs, copy and saved client ID/secret, then added all that into Jamf School under Authentication method.On iPads I'm using for trial, I wiped and reset.  iPad went through enrollment easily enough.  But I expected to come up on a Google sign in page which needed authentication.  But nothing shows up.  Just normal enrollment steps.My questions - What should I be expecting?  How can I use Jamf School and Google in a 1-1 iPad setting? Thanks!- Kevin 

Right now we use a certificate to join our district school devices to WiFi.  This is delivered via a config profile with the network settings and the certificates.  When the certificate is getting ready to expire we deploy a new config with the new certificate. All works fine till we try to remove the old network settings and certificate from the machine - we lose network.  is there a way around this?

I am starting to use Self Service to push out Office Updates (primary concern), Flash player updates, run RUM to update CS 6 installs...pretty much all updates (even Apple Software Updates soon). I do this by promoting the updates through a series of smart groups. Is there any good way to notify a logged in user that they have new Self Service items waiting? So far I'm having no luck with scripting a decent solution.

Hey Jamf Nation! We've just released Jamf Pro 10.45.0 Beta. This release includes new features and enhancements including Google BeyondCorp Enterprise integration enhancements, Failover Login URL Update for single sign-on Integrations,  App Installers deployment improvements and much more.  How to join the beta: We’ve also made some changes to the Beta enrollment process with our new Jamf Nation platform. Please enroll in the Beta Program under Product Feedback at account.jamf.com. Once you’re enrolled you’ll see a link to the Beta Forum. There will be a short delay between enrollment and Jamf Nation beta forum access - you will receive a notification in Jamf Nation to join the beta forum. Once you receive the invitation click on "Join this group Hub" to access the forum.   If you have any questions please email beta@jamf.com.  As always, the beta program is operated under non-disclosure, so please do not share any information regarding

I'm attempting to create a Smart Group for "desktop Macs." We have a number of different iMacs and minis in our environment. But it appears I have to choose from predefined models (e.g., "Model IS iMac Intel (21.5-Inch, Late 2015) OR Model IS iMac Intel (21.5-inch, Mid 2017)," etc., in order to start seeing the Smart Group get populated.I was hoping/expecting to be able to construct criteria such as "Model LIKE 'iMac' OR Model LIKE 'Macmini' OR Model Like 'MacPro'" since the official Model Identifiers under the hood all use such strings, and they're unique enough across product lines. That way it wouldn't matter what exact iMac or mini models I've got in our environment, and don't have to add new Model criteria when, say, the M3 minis start showing up at some point.I don't think I'm missing anything obvious, but it wouldn't be the first time something escaped my eye.

I'm trying to get a smart computer group running to check for Java/java version. I can't seem to get it working. I use the script below in an Extension Attribute and have the group set for "is not" Java 8 Update 131 build 11 Any ideas? #!/bin/sh version=`defaults read /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Info CFBundleShortVersionString` echo "$version"

Hi gang,I'm trying to accomplish two things with Self Service. One policy will open Google Drive (this I have working in my script) followed by launching the location in a new Finder window upon clicking (ie: //Users/$loggedInUser/Google\\ Drive/Shared\\ drives/) for when people tell me "they lost their Google Drive." This new finder window is the piece that is not working. My error says location does not exist even though it does. So sounds like a permissions error?For my next trick I want to have a policy that opens a PDF file stored on a shared Google Drive.I have tried lots of ways to script this which all work locally for me fine but not when calling the policy through JAMF. I'm thinking permissions here too. Maybe a PPPC that I need to allowed Files and Folders access to JAMF or something else?Thanks!

Hey JAMF People! Our management is wanting to have iPads come out of the box with the Free (Pages, Numbers, Keynote, iMovie, GarageBand,) removed from the iPad and made available only in Self-service. Looking for some suggestions. I'm pretty sure if we set-up a restriction for those apps, they would not be able to downloaded from Self-Service? They would just be forever restricted right? If they wipe the device using a JAMF reset or we wipe it with MDM reset it does not reinstall them, but it is adding an extra set to our "enrollment" work flow. These are kindergarten student iPads so it's been deemed too much to ask them to remove the apps themselves.  I guess the TLDR is there a way to remove an iPad app once, but not restrict it so it can be downloaded later through Jamf Self-Service?   Too bad you can't just "rm -rf" on an iPad right?

Both CIS and Tenable provide a configuration profile method to undo any hot corner set to disable screen saver.CIS uses <≠6>Tenable uses <!=6>Neither seem to work. Anyone have any luck with this?

hi all,Jamf just spin off 1 free dev sandbox for me and i am looking to copy everything from my production jamf pro cloud to this cloud dev sandbox using jamf migrator. I am new to github - so can anyone help me on how to use Jamf Migrator in github (https://github.com/jamf/JamfMigrator)?I download the zip code and extract it but could not find any apps inside

Jamf Pro ver 10.42.1I've created a CP to delete mobile accts but when I set the time (e.g. 1 day, 1 week, etc...) and save it, the CP reverts back to 0 hours.I have updated it several times and recreated a new CP with the same resultsI know there is a script to do this but I like to use CPs if possibleAny ideas on why

tl;dr: I want to write a script to monitor the log JAMF generates when executing a policy.We are deploying macOS updates by pushing the installer version we want down, then executing "/Applications/Install macOS Monterey.app/Contents/Resources/startosinstall" --agreetolicense in the Files & Processes policy module. The problem with this method is that there is no feedback shown to the user to provide the status/progress. I'm going to write a script to use in combination with Octory & octory-notifier to display the current progress. I'd like to use the policy log output as it is generated, and monitor it with less -f -n0|grep... to trigger whatever update I want in Octory.Is it possible to monitor the policy log as it's generated?

Hello,Can anyone get Google Chrome to install from the Jamf App Catalog? I have three different Macs, and it doesn't work on any of them. I get the error "Unqualified for App Installer" on all three. I am deploying Microsoft Teams the same way, which works perfectly without any issues. I've tried many things and continue to get the same error. Thanks in advance for any help!Steve

In the olden days (Catalina and prior) we used the Software Update option to let users install any Apple software updates available (this doesn't include upgrades like 10.15 to 11.x, but just 10.15.x to 10.15.x+). But obviously this doesn't work now with Monterey (apparently).I'm aware of configuration policies to force updates down onto machines, but we can't do that. We're a 24/7 organization with users in every time zone, and many do not have Silicon Valley quality internet (literally leasing lines from sheep herders in some countries or using mobile satellite terminals with bandwidth measure in KB not MB or GB). So we've trained the users to run the update regularly from our self service portal.I've tried using the Files and Processes with... softwareupdate -iaR...but that doesn't even seem to work for Monterey.Any suggestions? Can't use a caching server, as sometimes these are the only users of ours in a location. Maybe a policy to cache the update and then install but they s