Hey everyone, how can I go about zero touch macOS deployments? What are the Pre-Reqs for it? I have my Policies and apps build out. But device seems to still require a lot of “touch” by IT before providing it to the user.Any suggestion would be appreciated

Hi, i am sending a popup message to my users with SwiftDialog.In the logs i see a lot of these: Script result: 2023-01-25 12:17:12.598 Dialog[29366:629409] XType: failed to connect - Error Domain=NSCocoaErrorDomain Code=4099 "The connection to service named com.apple.fonts was invalidated: failed at lookup with error 3 - No such process." UserInfo={NSDebugDescription=The connection to service named com.apple.fonts was invalidated: failed at lookup with error 3 - No such process.}2023-01-25 12:17:12.598 Dialog[29366:629409] Font server protocol version mismatch (expected:5 got:0), falling back to local fonts 2023-01-25 12:17:12.598 Dialog[29366:629409] XType: unable to make a connection to the font daemon! 2023-01-25 12:17:12.598 Dialog[29366:629409] XType: XTFontStaticRegistry is enabled as fontd is not available. 2023-01-25 12:17:23.919 Dialog[29366:629433] Spell server connection invalidated Pressed Button 1 OrScript result: 2023-01-25 09:24:55.813 Dialog[1302:12330] XType:

Hi, i am seeing a lot of errors in the logs of my swiftdialog message policy: Script result: 2023-01-25 12:17:12.598 Dialog[29366:629409] XType: failed to connect - Error Domain=NSCocoaErrorDomain Code=4099 "The connection to service named com.apple.fonts was invalidated: failed at lookup with error 3 - No such process." UserInfo={NSDebugDescription=The connection to service named com.apple.fonts was invalidated: failed at lookup with error 3 - No such process.}2023-01-25 12:17:12.598 Dialog[29366:629409] Font server protocol version mismatch (expected:5 got:0), falling back to local fonts 2023-01-25 12:17:12.598 Dialog[29366:629409] XType: unable to make a connection to the font daemon! 2023-01-25 12:17:12.598 Dialog[29366:629409] XType: XTFontStaticRegistry is enabled as fontd is not available. 2023-01-25 12:17:23.919 Dialog[29366:629433] Spell server connection invalidated Pressed Button 1Script result: 2023-01-25 09:42:37.936 Dialog[11101:217909] Spell server connection invali

For anyone that prefers to make Safari updates available via Self Service, here are the standalone Safari 16.2 installer download links extracted from Apple's Software Update Server catalog...Safari 16.2 for macOS Monterey: https://swcdn.apple.com/content/downloads/56/51/012-74032-A_9J5DGEGRED/y2js2pclu7syop1z68wtptdnaddeog4u7f/Safari16.2MontereyAuto.pkgSafari 16.2 for macOS Big Sur http://swcdn.apple.com/content/downloads/36/08/012-82248-A_SAHUHK0ROJ/z04kizckik61f8z4fzyer6gw9mh50pbm9l/Safari16.2BigSurAuto.pkg 

Does anyone have a script to set Outlook 365 to the default mail client on Big Sir and Monterey? I have the native mail program locked out so it can't be done through there. 

The original logitech options (green icon) was easy to package because you could download the full 200mb installer.The new options plus (purple icon) has a "streaming installer" were you get a 20mb file at first then it kicks of the download for 200mb-ish installer.Anybody know how to package this?Grabbing the app from Application folder doesnt work due to other hidden files being installed. 

Is there a way to manage the "Sounds" setting? We want to force the headphone audio to enable " Reduce Loud Sounds".  Is there a way to do that?  

We are currently having an issue with our Jamf Pro enrollment link. When users try to access the are receiving a 403 Forbidden Error message. No other details are included on the error page. These are Macbooks that have not been registered with jamf previously. My coworker found that reformatting and visiting our enrollment link seemed to fix the issue. The problem is we have close to 200 laptops that would need this done, all remote. I am trying to find another way to get this working again without walking 200 people through a reformat. I don't usually work with Jamf, but the workload right now is considerable so I'm trying to help out. Not sure where to start with this. We do use Okta for SSO, and we do have a group that assigns jamf to a user (we did check group membership for affected users). Any help is greatly appreciated.

After the advice I found on this sub, I switched from DEPNotify to swiftDialog (thank you all for that). However, I am having the same problem that I had with DEPNotify:Most of the policies in the array run without any issues - these are application install policies. They complete consistently without any problems.The policies that do not run correctly are the ones that set the Dock, rename the computer, apply the wallpaper, and (most annoyingly) Log Out the user via swiftDialog. It seems like they are the ones that rely on SystemEvents or osascript, etc... When I check in the Jamf Pro Policy logs, they are not even showing as being triggered so I can't get the cause for failure.Once the user logs out, enables FileVault, and logs back in, the policies run correctly (except for the fact that I need to give PPPC policies to Finder, which I don't seem to need on first login).Is there something that is either running or supposed to be running within macOS on first login that is causing the

Anyone with Jamf Connect setup in a Hybrid Azure AD config experience a wonky password experience from their users?  We see sync times with passwords lagging in some cases which causes confusion for the end user.  It's also hard for the support techs to assist.We reviewed our setup with Jamf Customer success and Jamf is functionally working fine as a product.  We are trying to better educate our population and I am curious if others had any information to share.  Thanks!

So in the past I've used a mac mini running VMware Fusion 12 and creating images for everything from Catalina to Ventura.  I can even test our Automated Device Enrollment which is great since we can record it to teach people about it.As we're moving to a Silicon chip world I've been trying to find a solution to do this on a Silicon machine.  I've tried testing both VMware Fusion Technical Preview and even the latest version of Parallels...nothing seems to work as well as an intel machine.  I know the world is changing and VM vendors are trying to catch up.  But has anyone figured a good VM solution for Silicon that will let you adjust the host to input ADE stats like hw.model and serial numbers?

We are currently in the process of changing our antivirus software and deploying defender 365 on every mac in the office.The problem is that randomly on some macs there is a message that says: no licence foundIf anyone knows the solution or has experienced this type of problem.

Hey! We've been setting up Jamf Connect with Google Workspace and encountered an issue using YubiKeys for MFA. Are there any workarounds for this?

Wondering if anyone can help with this, we have Jamf Connect and I would like to roll it out to all of our users. I have it set up and it all works the way I want it to. However, each and every login requires you to verify your second authentication factor, even if you have previously trusted the device. (Device trust is enabled in Google Admin) Also, the user consent screen is displayed every time (less of an issue but from looking at the other discussions this seems an inherent issue with Jamf connect at the moment)

Hi all,I have a question in relation to what people are doing re: Local Distro for policies..?GOAL: I'd like to run specific policies just for our device runups, this can easily be achieved by calling policies triggers during DEP that point to a local distro.At this point i've gathered the following results speed testing both running policies via Jamf Cloud, local MacOS distro and Windows Server 2019 IIS distro all tested on both wired and wireless connections. # All tests using same package - MacOS Catalina around 8gigConfigurations Tested:1. Local MacOS Distro, SMB: via Jamf PolicyCouldn't mount due to network segment issue, Removed network segment (Enabled Force SMB on local distribution via package policy) Over Ethernet: getting around 100-107 MBpsOver WiFi: sporadic but around 40 MBps2. Local MacOS Distro, HTTPS: via Jamf Policy Over Ethernet: Around 30 MBps comparable to JSS cloud DistroOver Wi-Fi: sporadically but around 35 MBps3. HTTPS: via Jamf Cloud Over Ethernet: Not co

I haven't been able to find more recent documentation on this particular situation/issue so figured I'd ask directly.My predecessors encrypted our AD binded lab devices which created major issues with new network user sign ins. After I got these physically locked down, I put the lab computer group into the exceptions of the FV2 policy. However, I realize of course the policy was already previously pushed to the devices and there is no "undo" button. I need to decrypt for all users and if I can avoid reenrolling the device altogether, that would be great. I don't know if fdesetup has the ability to decrypt for all users without a more complex script I'm not sure how to put together (our senior analyst who managed this left before I came on and honestly, looking at some of his work, I'm not sure he knew how do this management himself lol). I really appreciate any help that can provided for a fresh college graduate who basically had to become the senior analyst within 6 months haha--

We recently purchased 3 x M2 Macbook Airs with 256GB of storage. They were installed and has been used by a single user on each machine between November 11th and December 1st.Within the last couple of days all 3 users have complained about disks running full. Neither user has large files, the one with the most data uses ~40Gb in total (*including* applications!). I have tried running both CleanMyMacX (yuck!) as well as Grand Perspective. Both apps show ~40GB storage used, and the rest is "invisible". We are running Jamf Cloud and Jamf Connect on all machines. Disk Utility shows no APFS Snapshots.All of them are running macOS 13.0.1 and neither user has enough available space to update to macOS til 13.1. What to do? I seem to be looking at 3 reinstalls, but I would REALLY like to avoid this option :-)

Hello All, Please help me to convert MS office package into source file by composer, all time it is getting failed, any reason to get failed and what is the resolution. I am using Jamf composer.

I'm relatively new to PPPC configs. I ran across a PPPC config profile for some old software that had been renamed, but the profile hadn't been updated. It's a softphone client and requires Accessibility permission and access to the mic. Since macOS doesn't allow us to enable the mic, this PPPC should only have one property to set. I figured this would be easy. 😂I used the Jamf PPPC Utility to create the config profile. I added the application on the right panel, picked the Accessibility property, set it to Allow, then uploaded it to our Jamf server. On the Jamf server, I assigned the config profile to my test laptop (running Ventura). On the laptop, I verified that the profile had been installed. When I check my work in System Settings -> Privacy & Security -> Accessibility, the toggle for this softphone is still disabled.Am I doing something wrong? It's a fairly simple workflow. Maybe my expectations are off? I expected to see the Accessibility toggle for the s

I know this may not be the place to ask, but I wonder if some of you can assist. When I go into Rec Mode (2021 MacBook Pro M1) I go in Term > resetpassword > however only ONE admin shows, when there's multiple. Can anyone advise why and how to solve? Thank you, 

I manage a lot of Jamf environments for my clients and most of them have some Macs that have to be enrolled outside of ADE/ABM so I use the Enrollment Invitations in Jamf Pro. I got tired of having to create this url manually so I made app to do it for me.Here is a link to download this and guide on how to use it.https://github.com/kylejericson/Jamf-Enrollment-URL-Generator/blob/main/README.md

Hi folks,Does anyone have a reliable method for setting MS Edge as the default browser?I came across the below script that I added to a policy that runs once per computer, but it doesn't work half of the times and I cannot pinpoint the cause.#!/bin/bash#### https://github.com/palantir/jamf-pro-scripts/blob/main/scripts/Set%20Default%20Browser%20and%20Email...# Name: Set Default Browser and Email Client.sh# Description: Sets default browser and email client for currently logged-in user.# Created: 2017-09-06# Last Modified: 2020-07-08# Version: 1.4.3### Copyright 2017 Palantir Technologies, Inc.## Licensed under the Apache License, Version 2.0 (the "License");# you may not use this file except in compliance with the License.# You may obtain a copy of the License at## http://www.apache.org/licenses/LICENSE-2.0## Unless required by applicable law or agreed to in writing, software# distributed under the License is distributed on an "AS IS" BASIS,# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIN

Bonjour,Depuis la diffusion et le passage à ipadOS 16.2 (Pas de retour avec les version précédentes), je suis dans l’impossibilité de pouvoir donner des "Ordres" sur mes appareils... (Actions > Avancées > Redémarrer / Éteindre).Les schémas d’enrôlements fonctionnent, pas de message d'erreur, identité de supervision actif, aucun problème sur ipadOS 15.7.2Quelqu'un rencontre t-il un problème similaire sur cette version ?Apple configurator : 2.16 (8A14) / MobileDevice (1497.1.14.101.4)Merci pour vos retours d'expérience,Cordialement,

Hey Guys! Not sure if this is possible anymore, but is there a script/command to use to allow an app for Accessibility? Trying to see if this is possible since our lab machines do not allow admin access. macOS 10.13 Thanks all!

Seeking advice and guidance on upgrade of existing EOL PingID mac authentication.to uninstall and then install a newer version of pingid for mac sso via jamf for test macs, then wider audience, please.https://docs.pingidentity.com/r/en-us/pingid/installing-the-pingid-integration-for-mac-loginthank you