Hi Jamf nationFor user level configuration profile to get applied, is required that the account is MDM-enabled User.We no longer bind our Macs to the active directory, instead we use local admin account with Apple SSO Extension for the connectivity to the AD.Using ADCS, we were able to deploy certificates in computer-level configuration profile and everything works smooth and flawlessly.As most of our users still have incorrect MDM-Capable user, is a reenrollment to fix this issue not an option for us.Did someone find any solution for fixing the MDM-Capable user?Any other ideas to fix this without reenrolling the device?

I'm hoping that someone else may have gone through the same workflow that I'm attempting to follow and may have some advice on how to solve this conundrum.Background:We have around 130 Intel Mac laptops and desktops in our environment, all are currently running Catalina. Unfortunately, we haven't been able to consider updating to Big Sur or Monterey until recently due to some issues with software compatibility, but now that those issues are resolved, we can finally start looking at migrating our Intel fleet to Monterey. We also recently migrated our users away from logging in with AD on-premise via Jamf Connect and Azure authentication, and as a part of that migration we deployed computer certificates with a WiFi profile for 802.1x authentication to our internal wireless network. Prior to the Jamf Connect and WiFi profile deployment, upgrading Catalina to Monterey was flawless, with the exception of the security software conflicts. After the Jamf Connect deployment, however, things hav

Hey folks, Im trying to create a Self-Service policy that will Disable or Enable the "Smart Quotes" keyboard feature in system preferences. When I run this code in my Coderunner app it works perfectly, but as soon as I load the script in the into a Self-Service policy I seem to have issues. The policies behavior looks good, popup comes up but the setting does not change. Any ideas? Thanks in advance   #!/bin/bash #Grab current logged in user user=`ls -la /dev/console | cut -d " " -f 4` #Check smartquote status currentstatus=$(defaults read NSGlobalDomain NSAutomaticQuoteSubstitutionEnabled) #SwiftDialog Location dialog="/usr/local/bin/dialog" #DISABLES if [ $currentstatus = 1 ]; then $dialog --message "You are about to disable Smart Quotes" --icon "/usr/local/images/deepwatch-Logo.png" --mini --button1text "Disable" --button2text "Cancel" sudo -u $user defaults write NSGlobalDomain NSAutomaticQuoteSubstitutionEnabled -bool false sudo killall Finder fi #

Hi there, We've recently migrated all our devices to jamf Pro from Meraki MDM. Our concern is because of how the jamf migrate tool brings devices into jamf Pro as user initiated enrolments that we are not able to manage local accounts the same way we would in prestage/ade enrolled devices. Is anyone aware of a means of getting control of the local user account that would make it possible for us to either delete or change the password of that account of the employee leaves? Since 80% of our devices have been enrolled in this fashion we'd be willing to use a paid solution as well.

Attempting to create a new package but stops at 99%I created a ticket, but no resolution. we started troubleshooting last Thursday.  Any ideas?

I am trying to set up JAWA (https://github.com/jamf/JAWA) to use within my organization for automated notifications to a Teams channel. We have an older Mac Pro we were going to use to host the RHEL server for JAWA. My organization's InfoSec department informed us they require this type of an application to be hosted by Azure for security and compliance purposes. I have not registered an application with Azure before, and I am also pretty foggy when it comes to certificates. I know it is a longshot as I would imagine JAWA is pretty niche, but if anyone has had to register an application with Azure before, or has successfully implemented JAWA in their organization I would immensely appreciate all the help I can get. 

Hi, is there a CLI from MacOS client to fetch the Room info under Inventory/User and Location/Room?

We're in the process of testing out Ventura. I updated from Monterey 12.6.2 to Ventura and keep getting AppSSOAgent error and it says quit or report. Our SSO is working, but this keeps coming up. Has anybody else experienced this error and have a resolution?  Thanks

Hi all,Has anyone had success using an Apple TV device on a touch screen monitor and gotten the touch feature to work? Looking to replace full blown PCs with Apple TV's for large touch screens that are used to display a webpage with different data navigable by touch.Any thoughts/successes you can share appreciated. So far all I have found out there is a bunch of "Apple TV is not a touch device" negative Nancy's. Hopefully some of you are creative and found a way.

Our setup has a generic local admin account to all enrolled macOS devices.We have a policy for FileVault that triggers on logout. I know this can be bypassed but the current workflow works for now until I can get my scenario to work.Our current fleet has encrypted and unencrypted devices.We also have a number of devices prepped, ready to be assigned and not yet encrypted. These prepped machines will have the local admin account and then get delivered to our assigned users. We use Jamf Connect's Microsoft 365 login to allow assigned users a way to create their local user profile.For the devices that are assigned and not yet encrypted, the assigned users have been canceling the encryption popup to bypass the encryption process. Ideal scenario:Do not enforce our FileVault policy to these devices that has not yet been logged in by the end users.After an end user has logged into the device, it will create a local user account which will not have administrator privileges. At this point

I've been testing the Mac Apps catalog and update functionality since the release of JAMF PRO 10.37.2. The timing is very interesting as right before this release we got the internal approval to procure Alectrona Patch to shore up our 3rd party patching.I'm curious though what is the trick to getting the 'InstallEnterpriseApplication' to actually "install" on Intel machines? I have no issues on ARM chipset machines but the intel machines I am testing on just hang in Pending Management Commands and never complete: 

I have a room of M1 Mac Minis used for a Digital Art/Printing lab. The instructors like to use a plug-in that has not yet been updated to run natively on Apple silicon, so to use the plugin the students/users have been finding the Adobe Photoshop.app, getting info, and ticking the Rosetta box manually... nearly every time they go to run the app (the user account is removed upon log out and refreshed via script).I'm curious if anyone has any experience managing these settings. They appear to be set in a plist file in the user's Library folder: ~/Library/Preferences/com.apple.LaunchServices/com.apple.LaunchServices.plist; but I have not had any success trying to manage this with a custom config profile in Jamf, nor does dropping the preconfigured file into place during account creation keep that box checked.

I have been trying to setup an extension attribut for the automox agent on my machines. >#!/bin/shif [ -x /usr/local/bin/amagent ] ; thenecho "<result>Automox Installed</result>"elseecho "<result>Not Installed</result>"fi<I have been running the above on a machine that I know has the agent installed but I am always getting the not installed return. can anyone give me advice?thanks

Hi, Can anyone help me to provide the latest "SetTimeZone and SetTimeServer" Jamf script? as their old scripts are not working in M1+Monterey OS. Scripts are executing without any error but Time Zone>>"Set time zone automatically using current location" tick is not not enabled. 

Hi, I'm running a script from Jamf that pulls a gitlab repo then executes a script from said repo that installs some packages leveraging brew install. The script works nicely on the intel laptop but not on M1The error showing in Jamf should the script executed other parts of the script but fails when calling brew.install.sh: line 10: brew: command not foundIf I run sh install.sh locally via terminal it works well. If I run brew in either bash to zsh it finds the command.What could be occuring differently when executing the script via Jamf Self Service that means it's completely oblivious to the brew installation?Jamf Script Snippet#!usr/bin/env bash #Get loggedInUser name loggedInUser=$( scutil <<< "show State:/Users/ConsoleUser" | awk '/Name 😕😕 && ! /loginwindow/ { print $3 }' ) #Execute script under loggedInUser #sudo -u "$loggedInUser" ~/devtools/install.sh #!usr/bin/env bash ############################ # installs homebrew packages # i

What I was doing in the past to enable the USB services doesn't seem to work on the newer version of the client.  I need to update student's client because their current version does not work on our version of Horizon now.    Previously I did the following after install.sudo chmod 755 "/Applications/VMware Horizon Client.app/Contents/Library/InitUsbServices.tool"sudo "/Applications/VMware Horizon Client.app/Contents/Library/InitUsbServices.tool" &>/dev/null Has anyone had any luck enabling the USB Remote Services for standard users?

These instructions are for those who have an existing profile created for Jamf Connect but would like to utilize properties for a newer version without creating an entirely new profile. In this case, I show how to do this for Update Watcher released with 2.19 on a profile built for 2.16.The easiest way to add the key without creating another profile, or completely redoing your current profile is to go into your current Jamf Connect Login profile, hit Add/Remove Properties and at the bottom go to Custom Property and enter in the key DisableUpdateWatcher.After that you can hit Add, then you should see it in the list of properties to add to the profile.Lastly, after you add it, you will want to choose a data type of Boolean, then you can choose True or False.After that, you can save and redistribute the profile. Note: Users will have their Jamf Connect window pop up once you redistribute.

Hello all,I am having issues with the Okta Browser Plugin Chrome extension settings. When you open the plugin settings, the option "Disable browser password prompts" is toggled on and greyed out with the message "This feature is not available because your privacy related settings are managed by your organization or another extension". I want the users in the organization to be able to toggle this off but cant seem to find the cause of this blockage. I've spent hours working with Google Support and Okta Support trying to figure out what could be blocking this, iv ruled out both Okta and Google Browser Management and confirmed with Google support that none of my policies are blocking this setting.   I did some digging in the "Chrome://policy" json file and found this warning along with the Okta Browser extension ID "warning": "This policy is working as intended but a conflicting value is set elsewhere and is overridden by this policy."My next steps are to lo

I just joined a new company that currently uses a combination of Addigy and Meraki for MDM. After spending the last three weeks with Addigy, I can point to only one advantage over Jamf Pro. Addigy is more MSP focused. We can create multiple tenants to manage clients separately. In the past I have used sites in Jamf Pro for this and dedicated Jamf Pro servers for clients who are setup with Apple Business Manager. While I was being interviewed for this position, I made it very clear that I feel that Jamf Pro is the best solution and that I prefer to work with it over other MDM solutions. Today we have a meeting scheduled to discuss how the company will move forward with MDM solutions. I am strongly pushing for Jamf Pro. I would love some advice on how to convince the owners of the company to go with Jamf. I could learn to use Addigy but I feel that this would be a huge time drain when I already know Jamf Pro extremely well. What are some good points I can make to help convince them that

Do you deal with compliance on macOS devices? Have you reviewed the macOS Security Compliance project (mSCP) but have more questions? Have you heard about Jamf Compliance Editor?Great news, there are Open Office hours on Wednesday, Nov 2nd @ 2pm ET! Please sign up here: https://forms.office.com/r/erLkfc42xR

Got macOS Security Compliance questions and issues?Come join us at 2PM on January 17th hosted by Jamf. https://forms.office.com/pages/responsepage.aspx?id=cJqnEPyQ1kuuCb9PR6fLwHEhiguaPIBHukzYbVEa3eNUQlY1RzdNRlcyOVAwQ0M4UDlIV0o4TjczOC4u

I am trying to setup out JSS to relay messages out to Office 365. All of our mailboxes are in the cloud.I have it setup to use smtp.office365.com on port 587 with SSL. Anyone else set this up and have any info. I keep getting an error when sending a test email.

Is there a way to either delete Pre-installed Apple Apps through Jamf Pro or configure settings so that they do not install? 

Hi folks, Enrolling some macs via the QuickAdd package, and while it works for 12.5.1, it fails for 12.6.2.  Trying both a signed and unsigned package.Anyone else seen this behaviour yet?  Package built using the latest Jamf Pro tools.Regards,Ally

Hello Jamf Nation, Looking for assistance for forcing password resets for our users who almost all have Standard User accounts. There are some exceptions in which some users have an Admin account. We are doing this to increase the complexity of passwords and the amount of characters needed.- Our current configuration profile has the old character count.- Our users are also using a static password as well (keeping static for now) How would we go about creating a policy that forces them to reset their passwords (once we've updated the config profile to include the new amount of characters needed)?