Best Practice to implement Policies, which options are best from the following :We are planning to deploy  standard policies & profiles required for device after enrollment in JAMF PROIs it best to use Recurring check-in + Once per computer for most of the policies?As Startup, Network Change & logout are more inconsistent as we have to depend on user when he will act on it  

Hey,I want to collect the information from our Mac Clients, if the automated software update check is enabled. The BASH Script for this action works locally on my Mac and I get the correct information when used in Jamf Pro as an EA. But all other Mac clients do not report anything back ... the Software Update is managed by a configuration profile, any ideas? Thank you! #!/bin/bash ########################################### # Check Status of AutomaticCheckEnabled # ########################################### AutomaticCheckEnabled=`/usr/bin/defaults read /Library/Preferences/com.apple.SoftwareUpdate AutomaticCheckEnabled` LastDateCheck=`/usr/bin/defaults read /Library/Preferences/com.apple.SoftwareUpdate LastSuccessfulDate` if [ $AutomaticCheckEnabled -eq 1 ]; then result="Yes" elif [ $AutomaticCheckEnabled -eq 0 ]; then result="No" else result="Unknown" fi echo "<result>$result - $LastDateCheck</result>"  

Hi all, I'd like to uncheck OTP for users (app: Yuibkey Manager) for users.  Otherwise, once touched, OTP will generate random numbers and bother users. Here is an ex: cccccbctnbhgchgnnrnhhlibtknenrceddfgjfndfifvGuide: https://support.yubico.com/hc/en-us/articles/360013714379-Accidentally-Triggering-OTP-Codes-with-Your-Nano-YubiKeyissue:  Any idea how to make it happen ?Thanks, 

We have a question!We have for example 10 classes 5a,6a,7a, etc. with every same 71 teachers and diffrent 28 student per class and one teacher Group names NE16514teacher (see screenshot). All 71 teacher are Member of Group „NE16514teacher“ and Managable Groups 5a,6a,7a, etc. for Jamf School Teacher & Classroom App.So, if we put under a Member Group "NE16514teacher" teacher to catgegory „Teacher“, we could’t see all classes in the classroom app but only under Jamf Teacher. But if we move the Teacher from category „Teacher“ to „Students“ (see Screenshot), than it works and we can see all classes in the Jamf Teacher App and in the classroom App.Why is it so?FYI: In the screenshot you see the teacher Simon with "owner device: 0"please ignore that. We tested with the teacher and "owner device: 1" with the issue.

I am putting this out there because JAMF support has washed their hands in assisting us. We integrated JAMF Connect with Azure AD recently and are currently testing. The issue we are having is that Azure, and our MFA setup in Conditional Access, is requiring users to log in at EVERY restart. It also is requiring password verification after authenticating. As you might imagine, this would cause some inconvenience to macOS users, especially if their means of MFA authentication was not at hand: phone, Microsoft Authenticator app (iphone or ipad) or other means. MFA does not work this way for anything else requiring it. It is only required once per app, per device, until there is a password change. Support suggestion was to exempt macOS from requiring MFA, essentially. This did not go over well with our Sys Admin who is heading the rollout of our MFA requirement. This is a real frustration as JAMF Connect was touted as a solution for AD authentication, ability to provide zero-touch d

Hoping to get some assistance from the knowledge of the JAMF Nation. I am struggling to remove an individual configuration profile, that was installed manually, via the command line. Testing on Mavericks 10.9.1 currently. Used the profiles man page and this: https://developer.apple.com/library/mac/documentation/darwin/Reference/ManPages/man1/profiles.1.html Commands I've tried: sudo profiles -R -F /tmp/profilename.mobileconfig sudo profiles -R -p profileidentifier sudo profiles -R -p profileidentifier -U username No dice so far. Use case is that a profile is installed manually and it needs to be removed without removing all profiles. Any thoughts out there? Thanks!Ben

I have a goal this quarter to deploy Jamf Connect. Things are looking great and working. However, I have one big questions that I'm just not sure about.If we don't use the menu bar (which we don't because we're not on the right Google Workspace edition, and therefore it cannot be configured). Will the local password still sync with the Google Password if it's changed? I'm testing this and while I can log in with my new Google Password, I'm then prompted for the old local password, I thought maybe it would update, but so far, it still asks to verify with the old password.Does it eventually reconcile so the local password is updated to be the new Google Password or is this what the menu bar is for? 

Has anybody created a presentation for their staff that explains WHY you're moving to Jamf? We're a non-profit org of 200 staff members who are mostly remote working and are moving to mobile device management. I don't want to reinvent the wheel if somebody has already created a presentation that explains why the move to Jamf and the benefits of an MDM. Many thanks!

I am in a healthcare environment and we are configuring the devices with Jamf Setup and different profiles based on the user login.I am trying to deploy some webclips but I am finding when users change profiles the webclips are multiplying each profile change.  What am i dong wrong?

I am trying to deploy MuseScore 4 in self service to allow a lab of Mac’s to download the application. I first made it available via a policy, and the base package taken from MuseScore. The package would fail to install on my test device. It would download, and then just fail. I then went and made a package using composer(taking a snapshot>installing the app>opening app>finish capture>create package). I then deployed THAT package in self service and got the same results. I have done this so many times with other applications, what am I missing with this one? Have any of you successfully deployed this app?

Hi, i would like to create a bookmark to our server on a shared ipad but for some reason i am not allowed to do that.Basically i want to allow an user to tap on a link and connect to our smb shared drive.What are my alternatives?

Hi all, Is anyone having issues with users changing their AD password with NoMAD and macOS 10.15.5? The error we sometimes get is "Configuration file does not specify default realm." What I have done to resolve this in the past is simply reapply the NoMAD Config profile to the user's machine. With 10.15.5, I've found that reinstalling NoMAD is sometimes necessary. However, I have one user who is still getting the error even after a new reinstall of NoMAD and after reapplying the config profile. Has anyone else encountered this?

Beginning 02 February 2023, GitHub Atom 1.63.0 and 1.63.1 is no longer available.For detailed information about this change, see Action needed for GitHub Desktop and Atom users from the GitHub Blog.Jamf restored Github Atom 1.60.0 as the latest version available in the Jamf App Catalog. You do not need to take any action if you distributed GitHub Atom 1.63.0 or 1.63.1 using the App Installers service. Jamf will automatically distribute GitHub Atom 1.60.0 to computers in your scope.

Jamf connect installed on devices. Not binded to AD.User changed their password on a windows device. When they go to a Mac and try to login, the message stating "network password does not match your local password. Please type in your old password to sync.".What do you do if they don't remember their old password? Trying to deploy a password change for the local account through jamf has been unsuccesful.Is there a way to auto update the local password without having to type in the old one?

I want to install JAMF Connect on Macs that will have Multi-User. FileVault is enabled, we use Okta as our IDP, I tried every possible key and attribute and the JAMF Connect screen only appears after someone logged in from Local then JAMF Connect appears or when someone Log Off. It defeats the whole purpose of having JAMF Connect. I mean we want anyone to login into the computer even tho they never logged in before and for that we need JAMF Connect to show up after restart but it doesn't.Any solution please??

I am working on an Update Script to get our fleet of Macs (M1/M2/Intel) upgraded to Ventura. I am using swiftdialog to notify the users that they may need to input their password and erase-install to actually run the process. I have tested it on 3 or 4 Macs (Apple silicon) and the process worked without a hitch. However, on my last two test machines (we have a variety of hardware configurations) the process fails.I added the --overwrite and --cleanup-after-use flags but they do not seem to help. Any idea what I am missing Here is the script command I am using../Library/Management/erase-install/erase-install.sh --reinstall --os=13 --update --overwrite --current-user --min-drive-space=60 --check-power --depnotify --cleanup-after-use  and here is the error in the log...Result of command:[erase-install] v27.1 script execution started: Mon Dec 12 08:16:10 CST 2022[erase-install] Caffeinating this script (pid=1207)[check_free_space] OK - 447 GB free/purgeable disk space d

I am starting to see users have issues where all of a sudden they cannot sign into their devices.  Jamf Connect states their network password is incorrect.  No password changes or anything.  They can login elsewhere fine (Windows machines, work email on personal phones, etc) but just not their Macs when they are prompted to sign in.  I have seen similar questions asked on here but none seemed to have an answer.  Hoping maybe someone may know whats going on.

Can someone please advise how or where to get this .pem cert? Do I need to be a dev? Thank you, 

Currently each admin has their own apple business manager account.  I have all the servers setup under my account and that also pairs with activation lock as well.How can I have a shared account act as the activation lock account so that I can share the creds/pw with the techs?  How do you get by the mfa tied to your phone number?

This is probably kind of a weird situation.I have a device that the power port was destroyed and repairs were denied.  So I unmanaged the device.  But the battery was dead so I never got the signal.  I later on got he device repaired and I am trying to re manage it.  I can't communicate and get the signals.  I have tried to restore the devices, but because of it being managed I can't restore the OS, it fails each time I try.  It is not stuck on the restore screen, itunes can see a device, but the restore makes it to the end and says unknown error each time.  Anyone know how to get this running again?

I have a fun situation.M1 macBook Pro, Enrolled into JAMF, with a 5 day deadline for Pairing a SmartCard before automatic enforcement kicks in.The intel macBooks haven't been an issue, since once enforcement kicks in, the user can still login to FV2 using their PW and then the machine can get policies from JAMF. (Removing the configuration profile if we so choose)The M1 macBooks appear to finally support SmartCard login at the FV2 screen, the problem with this is that we cannot use a PW or the Recovery Key from JAMF to bypass this screen. As the macBook doesn't have network connectivity while at the FV2 login screen, we cannot remove the config profile.We tried booting into Recovery, unlocking the disk, opening terminal, and removing the folders below with no luck. /private/var/db/ConfigurationProfiles/Library/Managed Preferences Any suggestions? I both love and hate the FV2 support for SmartCard as it greatly simplifies login, but now means that getting past recovery has bec

Not real sure on this, can I jump from 12.3 to 12.6.2? My friend a while back an the 12.6 update on a 12.4 device, but it only updated the 12.5.1. He was using erase-install and had picked the specific version 12.6.

Our third party service provider is asking if our MDM allows UI configuration profile to be installed. Does JAMF Pro have a setting for this? Bill

When OneDrive version 22.248.1127.0001 is installed, it immediately updates itself to 23.002.0102.There is nothing about 23.002.0102 on MS official release notes page:https://support.microsoft.com/en-us/office/onedrive-release-notes-845dcf18-f921-435e-bf28-4e24b95e5fc0?ui=en-us&rs=en-us&ad=us#mac&OSVersion=MacAppStore also only offers 22.248Question - anyone can share the URL to download 23.002.0102, please?  

When trying to wipe and restore a couple of DEP/JSS managed iPads I am getting a message: "The configuration for your iPad could not be downloaded from Long Road Sixth Form College" "cancelled" Does anyone know what might cause this? There's no firewall between the iPad and our JSS, they're both on the same network, same subnet. Is there some Internet related thing that has to happen when downloading a configuration profile via DEP? We already set up our JSS with an externally-trusted HTTPS certificate, and it hasn't expired, so it shouldn't be that. Thanks,Dan Jackson (Senior ITServices Technician)Long Road Sixth Form College