Hello Everyone,We have a department paying for a language interpretation service that comes with a corresponding iOS app (LanguageLine Insight). Currently we have the iOS app set to automatically install on all devices for that department, and if anyone in that department wants to use the app they must contact the department administrator for the authentication (license) code. They chose not to have us configure the auth code into the app during deployment for unknown reasons.Other departments have shown interest in this app so we are now looking at purchasing a site license for everyone to use. In order to facilitate easier billing for each department, the company is going to provide unique authentication codes for each department. The department heads however have shown interest in having the authentication codes pushed out with the app.The app itself does not support this feature. It supports a single authentication code during deployment only. My question is, can I simply add multi

We had a massive issue where all Mac's all the sudden stopped working in Self Service. When a user tried to run a policy from the SS it would fail after 1-2 sec, we created a support case that ended up taking more than 2 weeks to find the issue. We removed all configuration profiles, all policies, and all installed programs - the issue was still there.Just wanted to make a post about this so if someone else has this issue this might be the solution.We where using Jamf's JIM a while back, about 8 months ago we closed down that server but forgot to remove the configuration from Jamf Pro. The Self Service issue started about 1 month ago so therefore we didn't connect JIM and the SS problem.After removing all JIM configuration from our Jamf Pro SS started working again. Ticket number: CS0915102

Setup Your Mac (1.7.0) benefits from the latest swiftDialog 2.1 features and easily allows Mac Admins to specify a minimum OS version to help mitigate zero-day attacksIntroductionApple’s Automated Device Enrollment helps streamline Mobile Device Management (MDM) enrollment and device Supervision during activation, enabling IT to manage enterprise devices with “zero touch.”Setup Your Mac aims to simplify initial device configuration by leveraging swiftDialog and Jamf Pro Policy Custom Events to allow end-users to self-complete Mac setup post-enrollment.Continue reading …

I am setting up Nudge to be deployed via the Jamf App Catalog to facilitate keeping it up to date, but it does not appear to be installing the LaunchAgent even though the listing says it will 1) is this (or should it even be) the intended behavior? 2) Who manages the Jamf App Catalog entries?  Honestly, I think having a separate Nudge Launch Agent in the App Catalog may be better (in order to Balance the ease of Auto-Updates and deployments vs managing the Agent separately if that is also wanted) 

Here is the script I am currently using. I would like to convert it to Jamfhelper so I can use a logo which using the below console output workflow does not allow.  Does anyone know how to convert this to use jamfhelper? #!/bin/bashuser=`/bin/ls -l /dev/console | /usr/bin/awk '{ print $3 }'`#get User IDuid=$(id -u "$user")#Display a message to the user and if they click OK it will open the Self Service Policy#Message I want to Display- Make labels in JamfmessageToDisplay="$4"policyIDtoExecute="$5"policyAction="$6"#This will use a here doc MUST PUT ENTER/RETURN AFTER EOF#EOF is an example. You can use ANY word.. IE SHUTTLECOCKbuttonClicked=$(launchctl asuser "$uid" /usr/bin/osascript << EOFbutton returned of (display dialog "$messageToDisplay" buttons {"Delay Upgrade", "Upgrade"} default button 1)EOF)echo "$buttonClicked"# For paramter six we are going to view or executeif [[ "$buttonClicked" == "Upgrade" ]];then/bin/launchctl asuser "$uid" /usr/bin/open "jamfselfservice

I have been trying to get a script working that will run jamf Helper and if the user agrees to the upgrade it will open Self Service at the policy and either view or install the app. So far I have the below which works. #!/bin/zsh ### msg="$4 $singleApp " singleApp="$5" jamfHelper="/Library/Application Support/JAMF/bin/jamfHelper.app/Contents/MacOS/jamfHelper" currentuser=$(stat -f "%Su" /dev/console) policyid="$6" action="$7" timeout="$8" title="Application Update" iconLoc="/private/var/tva/casper/scripts/mickey.png" userResponse=`$jamfHelper -windowType utility -title "$title" -description "$msg" -icon $iconLoc -button1 "Dismiss" -button2 "Upgrade Now" -defaultButton 0 -cancelButton 1 -countdown $timeout -timeout $timeout` #Self Service = 2 #OK = 0 if [[ $userResponse = "2" ]]; then su "$currentuser&

I'm trying to automate our deployment process using Jira webhooks and the Jamf API and webhooks.I want to generate a unique invitation URL when a user is added using our existing Jira workflow.Jira (fully approved) > Webhook to cloud function > Call Jamf API computerinvitations and send to user > Jamf webhook on computer added to site > cloud function to complete user setup. The docs for the computerinvitations endpoint are sparse (https://developer.jamf.com/jamf-pro/reference/computerinvitations). My particular question is related to the XML payload i need to pass in the request body. There is a sample in the docs, however I'm wondering what of this sample is required/mandatory and what is optional?For instance the SSH user/password and some other details are set at the org level in settings in "User-initiated enrollment". Also when setting the site in the XML payload, the invitation info in the portal does not show the site i set in the payload. Any help is appr

I have an app that sometimes can be problematic and will require a removal of the app off the iPad and then reinstall. It seems that currently when using the Self Service App, and tapping on "Reinstall" it does simply that reinstall overtop of the app.  I need to have Home Screen Layouts configured on these devices because I hide all apps minus a handful that I require and a few of the default apps. These iPads are quite locked down and I am hoping there is a good solid way to have this accomplished where Self Service will do a remove and reinstall.  

In doing some testing today I've uncovered a rather odd situation. In our environment, our computers flow in via DEP, through a prestage that creates a hidden local admin account. This is the same prestage we've always used since we started using JAMF. It seems the correct location for a hidden admin account home is /private/var.  I'm not sure if this is correct or not, but reading on the community I believe it to be correct.  For a hidden admin account called JSSAdmin, you'd obviously have the home folder as /private/var/JSSAdmin.This has not been my experience in the past.  Up until I'd say Big Sur, our hidden admin account has always resided in the /Users directory.  I noticed in doing some testing for Big Sur that the admin account had moved to /private/var. I assumed this was a change from Apple and moved on. Fast forward to today, and it seems like there's more going on. I have a machine I enrolled a month ago that has the admin account in /Users, and I h

We are looking into Digital Signage but we have an immediate need to be able to display a welcome type message on an AppleTV while offline. So if there a way to configure an AppleTV while online then have it display some type of custom welcome message on a TV while offline? We're looking at Carousel for Digital Signage but looking to get something for next week so not sure if I can get everything working with Carousel in that time. Any recommendations appreciated. 

Hello,We are moving MacOS units from JSS to Cloud. 1) Tried the JAMF Migrator tool. Moved Computers first, seemed to be working but not seeing the result in the Cloud instance. 2) Testing to move Static groups after, not working as the JAMF Migrator does not seem to pick up any (none show in the box), nothing moves. Version 7.1.2 3) I was reading the suggested moving order is Devices, Smart Groups, Policies. Anything else to add or that I may be missing? Anything to ensure we do after these have moved? 4) I was reading JAMF provides a Re-Enroll feat. Is this something I can download or JAMF provides? Thank you, 

Hello, I am currently making a group of kiosk machines with limited functionality. essentially, they will be using square links to scan qr codes. They will not be using the square app. Is there a way through web content filtering to establish allowing all links with the beginning of https://square.link/u/ and blocking all others?

Hi, Does anyone have a DN script with a solution to the above?? TIA

Hello All, I was looking for the best way to set homepage and start up page set for Safari and Firefox browsers through JAMF. I am able to do it for Google Chrome through a JSON file and config profile, but JSON is not working for both Safari and Firefox, please help me to do it.  

Hi I am failry new to Jamf. we have devices that are not checked it (mostly its because the users got it at home)do we need to go to Jamf in cloud to be able to manage these Macs?

Hello Anyone could help me on this? Iooks like it needs user intervention before the installation will proceed anyway to bypass it? or any known fix on this? i tried several commands and im still stucked on this one. Thank you very much for your usual assistance.

This command works from the Terminal when I activate my Admin button beforehand:#sh /Applications/Zscaler/.Uninstaller.shAnd then it prompts the password. If I enter:#sh /Applications/Zscaler/.Uninstaller.sh <password>And put in the actual password, it will go straight to uninstalling it, but only from the Terminal.If I put this same script in a Jamf policy, it won't push. I'll hit my sync button and it will fail. Has anyone figured this out before? Thanks.I followed the instructions here already: Uninstalling Zscaler Client Connector | Zscaler

I'm using ASM as the user truth.Interestingly, as we switch to the new year I see a range of student user records that flip to manual. (It's most likely because those who leave the school are still assigned a device at this point, so if they disappear from ASM they can't yet be removed from Jamf School).However, there isn't a Filter option to be able to see just those records that are manual (or ASM).Sure, I can sort the list by Source but it would be more efficient to have a filter. It is currently cumbersome to clean up student records in the following year. I've run into the issue where I do have two user records for the same person - one from ASM and one manually. 

Evening Everyone.We have been patching safari for the last few Version on our Monterey device. Currently patching 16.3.While all looks well in Jamf patching management for Safari. I have checked a handfull of devices and 16.3 is install and working. We are seeing some devices advertising Safari through software update despite it been full up to date on the machine. Has anyone seen this before? it looks like some sort of delay. Thanks   

Newbie MDM user here. Signed up for Jamf Now and have 6 iPhone 14's being managed for work. The iPhones are not signed into an iCloud account. What is the best/easiest way to push a managed list of contacts to the phones?

Leverage MDM-delivered Configuration Profiles and a custom Bash script for dynamic, yet consistent Sensor Grouping Tags in CrowdStrike FalconBackgroundAs we’ve considered deploying CrowdStrike Falcon on macOS, we’ve wanted to leverage Sensor Grouping Tags in a way which was dynamic, yet consistent across our fleet.However, learning about any new software product also includes learning about its limitations.Yet another job for system engineers.Continue reading …

Since I migrated Jamf to a Windows 2019 server two weeks ago, I have been troubleshooting the primary distribution point. The distribution point and jamf server are running on the same VM. I have tried and failed with https, probably because of the same root cause... so I am trying to simplify the issue by first troubleshooting the SMB dist point problem.I am able to mount the share both from Windows and Mac clients using the jamf service accounts. I have been able to validate that the accounts work as-should... one read-only, the other read-write. I don't know what the jamf binary and jamf admin do differently to mount the distribution point, but both fail without any helpful messages.I'm wondering if any of you have had a similar experience, and whether you have been able to locate your root cause and resolve. I have a packet capture out to Jamf support right now. I have been working with them for two weeks without resolution. I just re-built my Jamf server a second time with the sam

Does anyone know of a way to join a WiFi connection before a user logs in? We have a situation in which our users travel quite frequently, so when a password reset policy has to be pushed due to a forgotten password, they are unable to pick up the policy. We're hoping there is some way we can have them join a wireless network from the login screen from wherever they are working.

Hi,I’m hoping someone can help.I went to renew my push certificate, but on logging into Apple the original one isn’t there - don’t know why.Anyway, my issue is that my push certificate is now expired and can’t be renewed and now my iOS devices aren’t reachable via push and when I went to wipe them with Configurator 2 they’re showing as locked so I can’t do that either.My installed profile isn’t user removable and doesn’t allow for wiping from the device.so far I’m stuck with 60 odd unusable iPads - any help would be greatly appreciated.thank you in advance

Hello,I wanted to install Freeform on our iPad, but unfortunately I can't find the app at Apple School Manager.What can I do?Best Regards,Ralph