HelloI want to pass a multiline description as a parameter from the policy to a script.The script is using the jamfHelper app. How can I define a manual line break in the description parameter? btw, is there a way to get the policy name or id to a script? thanks

Hi,I have On my iPad  General > VPN & Device Management only displayed VPN - not anything to do with MDM Upgraded to the latest OS from the device and now I see all the Configuration Profiles in General > VPN & Device Management but still when I try and do anything that uses a remote command from Jamf Pro such as restart or Inventory it stays with a status of "Pending". The MDM Profile looks to be current. Before upgrading iOS there were a bunch of failed commands like this in Jamf The UUID for the profile “Self Service Web Clip” is not unique. My current idea is to wipe it and rebuild with Apple Configurator. If it was a Mac I'd try a "profiles renew -type enrollment" command but I can't see how to do that for an iPad This is 1 of 80 but the only one that is misbehaving It, like the other 80 received a new config profile to access the wifi a week or so ago changing from user authentication to certificate authentication. It can access the internet fine

I am using Jamf Admin to try and add printers. When I click on the add printer the printer window does not open. Any ideas why it is not opening? When i click on the add dock items the little pop up window to add items pops up, just not for the add printers.Thank You

Hello! I am trying to create a script that would remove certain lines/strings from a .txt file. I have tried: sed "/$String/ d" File.txtBut had no luck, any thoughts or tips? 

Hi all,Quick background: I'm the Intune and Autopilot admin for my company and I have been tasked to test drive Jamf Pro Cloud so we can deploy MacBooks. I've configured the Jamf Pro and Jamf Pro Azure AD Connector and it is allowing me to use my Intune credential to onboard/zero-touch a MacBook. I've also created a test account and tested SSO from Azure successfully.The question I have is, is it possible to configure Jamf Pro to enroll machines and allow users to use their email addresses to log into MacBooks instead of us manually creating accounts for them? Please be patient, I'm a newbie with Jamf Pro. Thank you!!!

https://community.jamf.com/t5/jamf-pro/macos-ventura-amp-blocking-access-to-users-amp-groups-pane-in/td-p/276553here there are some good suggestions regarding blocking panes inside the system settings.My question is- can you block the System Settings app altogether from launching? Like PathBlackList magic?So that it'd require admin password to launch? <key>pathBlackList</key>this doesn't seem to work. 

Hello,I hope you are all ok…I have an issue with Web filtering Profiles. I have created a profile, which allows only specific websites during School hours but if students leave youtube open in a Safari tab from the day before, when they come to school they can browse youtube normally even though the profile was activated. Only typing the youtube.com URL in the address bar blocks it.Do you have any suggestions? Below you can see the video-recorded using zoom.  https://thegcschool-my.sharepoint.

EDIT: Removing the usual rant, worked with a Wacom dev team contact, verified these settings work with Monterey on Intel and M1:Codesign commands, to gather the info needed for the PPPC configuration profile:$ codesign -dr - /Applications/Wacom\\ Tablet.localized/Wacom\\ Desktop\\ Center.app Executable=/Applications/Wacom Tablet.localized/Wacom Desktop Center.app/Contents/MacOS/Wacom Desktop Centerdesignated => anchor apple generic and identifier "com.wacom.Wacom-Desktop-Center" and (certificate leaf[field.1.2.840.113635.100.6.1.9] /* exists */ or certificate 1[field.1.2.840.113635.100.6.2.6] /* exists */ and certificate leaf[field.1.2.840.113635.100.6.1.13] /* exists */ and certificate leaf[subject.OU] = EG27766DY7)$ codesign -dr - /Applications/Wacom\\ Tablet.localized/Wacom\\ Display\\ Settings.app/Executable=/Applications/Wacom Tablet.localized/Wacom Display Settings.app/Contents/MacOS/Wacom Display Settingsdesignated =

Hello, Today I setup Licensed Software titles using Software Identification Tags as per the kb article and cross-referencing Adobe's documentation. I need to get license counts for all Adobe products as we need those counts to purchase and true-up on licenses. The funny thing is that the Software Identification Tag method, and the Application search method does not come out even close to eachother. I know that both searches are probably incorrect. What have others out there done to ensure your software counts are good? Thanks,Ken Edgar

Does anyone have any advice on how to package JMP 17 and the license txt file in a silent install?

Hi AllMy problem is, I have restricted to "Only some Apps allowed", this works great, there is only one problem.I dont find how to allow Apple Sidecar on iPads.Please help me,thank you!

I have been using the erase-install.pkg successfully for some time, placing it within Self-Sevice and allowing users to install at their convenience. However, with one user, I have run into an issue where is appears that the step of grabbing the latest installer is failing.Background:This particular user attempted to install Ventura on their own through Software Update within System Preferences. It looks like the installer was downloaded, however they were blocked when they reached the prompt requiring an administrator to allow the installation.I directed them to Self Service where the erase-install.pkg is loaded (28.0). The attempt to install, the progress wheel begins to spin for a bit, stops, and nothing is installed.LogTaking a look at the applications installed on this user's machine, it looks like they have an older version of the installer present (Install macOS Ventura.app 18.0.02)&n

I know this has been asked many times, but I can't seem to find a specific script I can use in a policy to demote a specific user from admin to standard.  All our accounts are local accounts.  We have been doing some auditing and see too many admin accounts out there and are targeting specific users on specific remote/off site Macs.  I have seen scripts that target all users except "admin123" and demote everyone else but that admin account.  I need to specifically target a user by account name.  I am not a good at scripting, which I why I am asking for help.  Appreciate any feedback or suggestions.Thank You.

Hello Everyone, I have been able to successfully integrate jamf with ServiceNow with some great tricks and tips from the community here, so firstly thank you. I'm still looking to bring in some additional attributes from jamf into ServiceNow but could find in any of the APIs or in the console, I'm wondering if we actually have these in jamf? Network adaptersDisk information Thanks,Mayankmayank.verma@accelerateits.com

Just checking if anyone might help me find what I am overlooking.We got a new Cloud-instance and the migration is done. I would like to populate/edit the computer name field and has done so with MUT on other JAMF instances. But I´m getting a 401 error. The data loads in MUT and everything looks fine but when submitting the data to Cloud the log shows this and just runs threw the file without any PUT being set.  </html> 2023-02-23 12:36:03 [INFO ]: Submitting a PUT to https://xxx.jamfcloud.com/JSSResource/computers/serialnumber/xxx 2023-02-23 12:36:03 [ERROR ]: Failed PUT. 401. 2023-02-23 12:36:03 [ERROR ]: <html> <head> <title>Status page</title> </head> <body style="font-family: sans-serif;"> <p style="font-size: 1.2em;font-weight: bold;margin: 1em 0px;">Unauthorized</p> <p>The request requires user authentication</p> <p>You can get technical details <a hr

Hello,I am very stupid because this topic has been talked earlier, but I haven't been able to find it. My question is: Can you run two MDM solutions at the same time? I have both MS Intune and JamF available to me and I was wondering if it was possible? I don't think it is, but I want to make sure. TellCulvers

Happy Friday everyone! I'm sure that I'm probably missing something very obvious to the right person... My experience with bash is currently limited (hopefully not for too long!). I'm trying to mount an SMB share using the below script, there is more to the script, however I've removed it as I know the issue lies in this part.If I run the below locally on my machine replacing $3 with $USER the script works perfectly and the Apps share maps straight away. #!/bin/bash mkdir /Users/$3/Apps mount -t smbfs //userName:userPassword@myServer/Apps /Users/$3/Apps As soon as I deploy the above from the JSS and perform Sudo Jamf Policy on the targeted machine it creates the directory Apps and somewhat mounts the drive. The directory stays as just a folder and does not change to the intended SMB share, as soon as you click in it the folder then

Hey guys,  I have an old Mac 2018 that I wanted to add to ABM, I deleted .AppleSetupDone sudo rm /var/db/.AppleSetupDoneand I thought I would get the setup assistant but no, instead I got the login window, after I enter the password of the account it logins then reboots again and so forth !!it's like running in a loop, can't boot to the desktop and can't get the setup assistant !Any ideas please?

HelloI'm currently working a job where I need to connect several iPads to a jamf pro network. These iPads are either brand new or being formatted after previous usage. There have been details given to me on how I would get them to connect to jamf but there has been an odd batch that refuses to be picked up by the network proper.What I mean is when I input the proxy settings for the iPads, usually it would detect the jamf server and enroll into it. However I have been having an issue where it doesn't give me this at all and goes through a standard iPad set up procedure. I've formatted the iPads over and over again but results are generally the same.Is anyone able to determine my problem?

I'm currently working on the Jamf 100 course.  Is there a simulator I can use to do the practice sections on Section 3 Lessons 19-21? 

I’d like to get some more information on the recommendation for this setting from Jamf. A dedicated Password was the only option when we initially set this function up. I agree the concept of a randomly generated Password for each account makes sense going forward, but I would like to know if this change is added, whats the impact, and does this affect existing enrolled devices? Any recommendations?  

We have started seeing an issue lately where devices get stuck on the Jamf Connect screen.  It stalls on the part where it states "Passing command and control to Jamf Pro" and even after multiple reboots it gets stuck there.  The most recent one was our CIO who got stuck at that screen after updating the OS.  Previous users randomly just got there after rebooting.Has anyone seen this?

What's the best way to push out macOS Security updates to the macs via Jamf? I'm trying to configure so all the macs in my org can get the security patches as they're released from Apple.

I have a new field tech whose LDAP account I need to add to several policy scopes.  The policies are scoped using Static User Groups, and up until today have never had any issues.I can add the tech's LDAP account to the JSS console (Settings/User accounts and groups) without issue, so I know the LDAP lookups are working as expected.  The tech has the same privilege set as all of my other field techs.I watched the tech log into the JSS console and self service app, so the LDAP account is active, they know their password and the login works.Our JSS is hosted in the cloud w/ Jamf Infrastructure Manager, which passes all communications tests, and we are using SSO with external 2fa, all of which works fine.What I cannot do, in any way, shape or form, is add the tech's LDAP account to a scope or a static group.When I try to add to a Static user group, I edit the group, go to "Assignments" tab, where I see a list of all users that can be added,

I see that we can add assets like computers/iPads etc with a formatted CSV. I am looking to add over 650 printers for our college to JAMF. Ultimately want to have a new user who is receiving a new laptop have the appropriate printer assigned and the drivers installed. Being I have so many printers to add I was hoping that I could add them via a similarly formatted CSV but one for printers instead of the one for general assets. Thanks