Hi all! Question: we are sending out a policy using jamfHelpers "fs" window and I'm pretty sure in the past one was unable to exit out of it entirely (which is what we desire) but recently, I've seen (and tested) that hitting "command-Q" actually works to exit the fs window. Sometimes the fs window shows up then disappears after a few seconds on its own. Is this normal and/or anyone has seen before? Just curious. Test machines are M1 on Monterey. Here's our script: #!/bin/bash # Variables jamfHelper="/Library/Application Support/JAMF/bin/jamfHelper.app/Contents/MacOS/jamfHelper" # Message prompt "$jamfHelper" -windowType fs -heading "Test" -description "Hello! Try exiting this window" -icon /usr/local/jamf/logo.png  

We have to push a new certificate out to our config profile. We are able to push it out and it gets installed correctly as we can see it in our Keychain Access.  The issue is we want it to be trusted always.  How do we set that in our Config Profile to be set to trusted.  Just a quick warning, I am not great at command line statements, so the simplest and easiest is best.  Thanks

Just wondering if anyone has a list of the Abbreviations and its full name for the remote update managerSo we have it implemented as a script to download RUM and reveal to the user that a certain adobe app has updates available however when it prompts the user to install updates it shows in this format : (ACAI/0.5.3.1/macarm64)we know PHSP means Photoshop, IDSN means indesign but does anyone know of a full list of what all these abbreviations mean

So I'm hitting a wall with the last piece of my zero touch deployment.My organization is looking to begin deploying ~150 iPads each year to students. We've run a beta group and I've got the unboxing and setup experience all automated how we want where we just hand them the box and they're ready to go. My last hurdle is assigning the specific User in Jamf to the specific iPad they end up with in hand.For the Beta I just manually wrote on each box which student it would belong to and kept a spreadsheet with the the serial number/User assignments. Then after the devices powered on used MUT to bulk update the entries in Jamf to reflect the spreadsheet.Is there any way I can avoid having to write and keep track of ~150 names and serial numbers each year? It's not the end of the world but I'd like to eliminate as much human error as I can. Maybe there's a way the student can enter their User info when first setting up the device?Open to any recommendations!

Hey guys, hoping for a little advice as I think I'm missing something key here.We are a Jamf pro customer and looking at integrating SSO to be enable support staff to login to our Jamf portal using their enterprise credentials. We are also wanting to leverage Apple SSOE to allow our users to log into Jamf Setup using enterprise creds. This is currently in preview and requires Microsoft Authenticator.My question - The org prefers using Okta for IdP purposes - If we setup Okta as our IdP in Jamf to enable portal login, will we still be able to use Azure for device SSOE? Or, does Okta offer the same functionality for using the Apple SSOE?Even though it's in preview, the SSOE testing is quite handy for our use cases and don't want to lose that functionality if we choose to use Okta for our IdP.If federating with Okta blocks our ability to use the SSOE/Setup functionality would like to know so I can submit an exception for Azure.Thanks ahead of time.

Hi I have been testing the new Jamf Mac apps and I am loving it.Its working fine for some of the Microsoft apps I've been testing but strangely its not working for the Adobe Acrobat Reader DC Continuous.It seems to have installed on 10 machines but no more and these may have been logged into at the time.I have also noticed that if you are logged in when it fires up the silent installer you cannot restart the machine at all.If you try to restart you get the message the computer cannot be restarted because software is being installed.And the Acrobat DC installer box pops up at Running package scripts. But never goes' any further.Does anyone know where i can check the logs or any ideas why the installer is not working. Cheers all  

For older macOS versions when swiftDialog isn’t an option, leverage Jamf Helper to provide your users actionable messagesBackgroundFor computers running macOS Big Sur 11 or later, swiftDialog is our go-to tool for displaying end-user messages.For the less than double-digit stragglers we still have running macOS Catalina, a fresh deployment of Nudge-Python  seemed overkill, so we turned to our old friend jamfHelper and added some new racing stripes:Auto-terminate fullscreen mode (after a configurable duration)Auto-execute the specified action (when in fullscreen mode) Continue reading …

I am trying to troubleshoot why Zoom 5.8.3 installed fine but 5.8.4 is failing every time. I am pushing it out through Self-Service and it fails every time. I install it manually and it works fine but installing from Self-Service fails. I have tried both the Zoom.pkg and ZoomInstallerIT.pkg both seem to be failing to install from Self-Service. Anyone got any advice?   

Hi Is there anyone suggest me that how I can Implemenet 100% Zero touch deployment for mac devices for our on Prem Jamf pro instences. Is there any one here implement have that successfully. And also macs are bound to Domain to use their AD asccount. So we setup our LDAP server in Jamf pro. In this situation I need suggestion that if we want to integrate Intune with Jamf pro how that will Impact though we didn't integrate our Azure AD with Jamf pro. I know it is little complex but any seggestion is appriceable. 

I was in the process of testing the erase-install.sh file. I was modifying the same policy and forgot to change the policy back to specific computer and users. I added my device to the specific user and our jamf policy is set for 5min. Not realizing that until I got pinged, I disabled it. It was as 21 devices on Friday afternoon, but keeps growing. We did send out a communication to the Mac users, to not enter password. Is there some way to prevent the policy from running?

Hello, I'm trying to let non-admin users install Ventura using: eraseinstall script: https://github.com/grahampugh/erase-install.Policy is enabled in self-service. Install is not successful.Any idea?Thanks    

Changing Port from 8443 to 443 on-prem hosted Windows Server clustered JSS environment running 10.41, we have been asked to make a change to the host port and currently have many devices enrolled, is there a way to preserve or re-enroll devices with a new MDM URL with minimal impact or this just wishful thinking?

I'm looking for clues on whether AoVPN using IKEv2 can be done and how.  I can see that IKEv2 is available as a protocol for iOS in the VPN Configuration Profile settings but not for MacOS in the corresponding VPN Configuration Profile settings.There are hints here and there in Jamf Nation but mostly with 3rd party solutions.If anyone can point me at some info that could help I would really appreciate that

We're looking at migrating to HTTPS for our main file share distribution point from SMB.  We've used SMB since we began with Jamf and have just had that port open on our state's firewall.  Recently they've told us no more on that and have deleted/remove the rule, our only choice going forward would be to use port 8080.  So, as of now our Mac's cannot mount our file share and get packages when off of our network.  Not the end of the world but it was handy to have policies work from home, especially overnight.  We followed the steps to migrate to HTTPS listed inUsing IIS to Enable HTTPS Downloads on a Windows Server 2016 or 2019 File Share Distribution Point - Technical Articles | Jamfhowever, we get a 503: Service Unavailable message when testing a download in browser and also when a Mac tries mounting to run a policy with a package.  I spent several hours troubleshooting different settings as well as trying different read-only accounts, recreating certific

I am noticing that all devices encrypted before manual Enrollment in to JAMF Pro, are missing personal recovery keys. Does anyone know how can I issue a new key to already encrypted devices, bearing in mind encryption happened prior to Jamf enrollment. Thank you :)

Is there anyway to add a PM definition ourselves or we depends on Jamf?Application: TailscaleApp URL: https://apps.apple.com/us/app/tailscale/id1475387142?mt=12&uo=4The app is installed from App Store.

Trying to create something for my self-service for the end user to send the local Jamf log to the server for the team to be able to review - although I've never run into an error like this.  Grateful for any input Script as follows: #!/bin/bash ##Get the serial number serialNumber=$(system_profiler SPHardwareDataType | awk '/Serial Number/{print $4}') ##Get computer ID id=$(curl -sku api:api -H "accept: text/xml" https://OURJAMFURL/JSSResource/computers/serialnumber/$serialNumber -X GET | xmllint --xpath '/computer/ general/id/text()' - ) ##API call to upload the system log to the computer running the policy curl -sku api:api https://OURJAMFURL/JSSResource/fileuploads/computers/id/$id -F "name=@/private/var/log/jamf.log; filename=system-`date +%F\\ %T`.log" -X POSTAnd the error is: ##Script result: <html> <head> <title>Status page</title> </head> <body style="font-family: sans-serif;"> <p style="font-size: 1.2em;font-weight: b

With the implementation of a recent feature request, Setup Your Mac (1.6.0) introduces additional policy validation options to help ensure critical enterprise applications are both installed and their related services are running.IntroductionApple’s Automated Device Enrollment helps to streamline Mobile Device Management (MDM) enrollment and device Supervision during activation, enabling IT to manage enterprise devices with “zero touch.”Setup Your Mac aims to simplify initial device configuration by leveraging @bartreardon's swiftDialog and Jamf Pro Policy Custom Events to allow end-users to self-complete Mac setup post-enrollment.Continue reading …

Hello all,3 of our devices were supervised and managed, but the Jamf records on our end were deleted while the devices were still active. So the devices still have Jamf on the system, but now phoning home is pretty weird. We were able to restore one of the records, but it appears to be only managed now. On this restored record, we are unable to push any commands or policies to the device that are normally available by default (Lock Device, Send Blank Push, etc.).Is there any way to get these devices reconnected to our system, or should we bag it and just re-issue new devices to these users?I'll be checking this all day so please feel free to ask any questions about anything I might have left out. Thanks!

Currently, app licenses get assigned when a user is scoped to a self service policy. I want to script an option that a user can “request” to have access to an application through self service and then automatically get added to a smart group that the application license and installation policy is scoped to. Has anyone done anything like this before? Thanks in advance!

Hi Pro,I am new to JAMF and looking in to get some help,I have to deploy the below code via JAMF and add it to the existing edge Plist defaults write com.microsoft.Edge AuthServerAllowlist org.kerberos.okta.comI have added this code to .sh and deployed it via JAMF policy and it didn't work TIA 

Hey Jamf Nation,We are having issues with LockDown Browser not opening after students install the pkg or dmg created from composer. The message that pop up on their screen is "the application is damage- App installed from an unknown developer(notarization)  ". Issue just happening with intel clients running on Ventura. 

Does anyone know what specific permission/privilege in Jamf Pro allows a Jamf Pro user to view and scope existing policies? I can't seem to find the right checkbox in the privileges page of Users and Groups. The user in question just gets a blank page but there should be a bunch of policies showing.

Has anyone implemented the API for Superman? Specifically the api details. I am a little lost on the configuration of it any help would be appreciated. https://github.com/Macjutsu/superThanks!

Is Jamf using the "softwareupdate" command line tool to collect the details on the Mac client?I am just wondering because even on clients with a major software update deferral profile (90 days set),Jamf Inventory shows the macOS Ventura Upgrade on macOS 12.6.1 Clients?Thanks in advance, Bjoern