I have a 90 day delay in place as well as restricted software payload to kill the installer. However, some computers Ventura still show up on and is still able to install, others it displays correctly "your on the most current OS allowed by your administration". These are both applied to the same static group I don't get what is going on. I'm frustrated and feel like nothing works right in Jamf. Help!  

xpath is not super intuitive. Maybe I can clear up 1 tiny little thing here...First, a resource I go back to again & again: Xpath cheatsheetSecond, xpath is a querying language. It can look complicated, but, a way of simplifying it is to think of the syntax as an analogy: exposing xml data as a "file system" & the thing you want to "get" as a "file". Your xpath query is the "file path". Elements, in the analogy, are "folders" with stuff in them: one thing, many things, etc. E.g., you might want all IDs for some object in Jamf Pro (let's say policies) so maybe you tried: curl -Ss -X GET -H 'accept: application/xml' -u "$apiuser:$apipswd" "$jamfurl/policies" | xmllint --xpath "//id" - | tr '</id>' '\\n'​ Not great because you are stripping the xml data structure & tr often outputs strange results.Then maybe you looked at the xpath cheat sheet or took a Jamf course & discovered the magical text() command which strips xml tags! curl -Ss -

Hello, I've been using Jamf Pro at our school for a while. We manage approximately 350 iPads that are loaned to students.Occasionally we will put a device into "Lost Mode" if we need the student to contact us for some reason.Now our problem: If the lost mode was activated and the students switch the device off and on again, there is no longer a connection to the WLAN.Now I can't turn off Lost Mode and have to do a full reset via iTunes.Is there any other option? Can I connect the iPad to the computer running Jamf Pro with a cable to unlock it?If I reset the iPad, all of the student's notes are gone. He didn't make a backup.

Hello, I'm checking out the 'Hardware and Software History' logs in Jamf Pro for a Mac that's experienced some issues with the NIC. I read the documentation for how to use the logs, but it's unclear to me how to further investigate something that's listed in red (a piece of hardware that changed during an inventory report). Does anyone have any insight on this? Is there a way to view more specific logs?

Can anyone tell me the benefit of going with Jamf's Cloud solution over On-Premise? I keep seeing plenty of issues with cloud based setups but haven't seen anyone running into these issues with on-premise.

Hey everyone,I having a hard time trying to get Mac Devices in Jamf Pro to integrate into Endpoint Manager (Intune). I have got at least 2 devices to register in Endpoint Manager, however, some devices are not getting the follow-up prompt ""JamfAAD" want to use "microsoftonline.com" to sign in.". Does anyone with any ideas on how to troubleshoot this issue? 

Good day all,I have one of our developers looking into our Jamf api. I created a user account for the dev with full administrator permissions. They are able to make calls to the Jamf Classic API but not the Jamf Pro API. I have the same access and am able to make calls to both. Any ideas?

Hello, We deployed SHA 256 Network Security Settings through configuration profile but after 12.6.2 update the configured ssid not showing to user for connect. crosschecked and all setting are correct.Is anybody having same issue.I could not understand what could be the possible reason.Thanks in advance

We had a really weird hiccup the other night - On the evening of the 13th I sent a command to our lab Macs to update to macOS 12.6.2.  I did this as I've always done in the past - by going to their smart group, viewing it, clicking "Action," selecting "Send Remote Commands," and then selecting "Update OS Version," "Specific OS Version," "12.6.2," and "Download and Install the Update, then restart."  Of the 80 computers I sent this command to, 65 of them successfully updated to 12.6.2.  Then, of that 65, 27 updated to 13.1 on their own.  At first I thought I may have accidentally told them to upgrade to 13.1, but If I look at the Hardware and Software History, I can see where they updated to 12.6.2, and the next entry is them updating to 13.1.  (That and the fact that many of them ended up on 12.6.2 as was desired)Needless to say, this is not good - our labs were held back on Monterey for various reasons, and now we'll have to wipe and re-provision 27 Macs.&nbsp

Hi everyone,I'm a quite new mac System admin. We would like to manage properly identity on Apple devices. Because bind mac to AD bring some hassles and some are out of our network (don't reach AD).So we're looking a product that provides identity from our hybrid environment (Active Directory + Azure Active Directory). Most of our environment is Microsoft but some VIP and departments ( Graphic Designer ) use Mac. We saw that one of last version of Jamf Connect can manage hybrid identity.I found some feedback but not enough with hybrid environment. What do you think about this product ? Do you know an alternative because it's a bit pricey 2$ / month / Device. Our environment:- Hybrid (Active Directory + Azure Active Directory)- Office 365- Adfs 3.0 will upgrade 5.0 soon (may be not possible with 3)- MFA Azure- Active directory authority for local resources (Printers, file servers, wifi,...)- Intune- Apple Business Manager (just few Macs)- Couple Macs bound to AD others are "Free"&nb

Hello, is anyone able to assist me on how I can disable Airdrop using Jamf Pro?I have already tried the method using configuration profile>restrictions>media>unchecking airdrop. (this did not work) can someone please help me by giving me step by step instructions on how to get this done successfully?Any help with be appreciated! 

Hello. From my understanding after reading through many posts on here, it is possible to enroll a Mac running Monterrey or higher OS into Jamf and not ABM, is that correct? If so, I assume that you would need to send out user initiated enrollments via email? Now, my real question is - by enrolling in Jamf and NOT in ABM, what features/control would I be missing? I am more than happy to explain more in detail the scenario, etc if need be. Thanks.

After upgrading to ventura OS 13, I cannot make restrictions on profiles, are there another way to prevent an administrator user from deleting the MDM profile?

I currently leverage a smart group, softwareupdate -aiR, custom notifications and the deferral option for an automated OS patching workflow both myself and user base are really happy with. In testing the m1 chipset I am finding softwareupdate -aiR isn't functional in the workflow. Looks like there is an additional prompt for a password prior to downloading??? Anyone seen this or have any ideas as to why?

I added an anchor certificate to a few of my PreStage Enrollments, but cannot delete it. When I click the Delete button, I only get the indefinitely spinning blue circle until JAMF times out and logs me off. Is my only option to delete and recreate the PreStage Enrollment?

Hey Jamf Nation, CleanMyMac X team here. We are a cleaning software for Mac that is notarized by Apple. Just wanted to notify you that CleanMyMac can be now installed and customized through Jamf Pro. Here’s how you can set up CleanMyMac: Visit our Business or Academia pages to purchase multiple licenses at a special price. Download PKG file Run the PKG to install CleanMyMac X through Jamf. Create a property list file (plist) with the following structure: Add your license to License.plist as an ActivationKey value Put license to Application Support (path: ~/Library/Application Support/CleanMyMac X/License.plist) Once CleanMyMac is run for the first time, the license will be read and the app activated on all Macs. And that’s it :) Hope you’ll enjoy using CleanMyMac on your clients’ computers. Please leave comments below if any questions occur.

With Python not being automatically installed as part of Monterey, the old script to adjust the dock once dockutil is installed doesn't work as written. Here is a sample of a script that has been revised to work with Monterey and dockutil 3.0.2 #!/bin/bash # NEW DockUtil Script without python v2.2 # Include Standard PATH for commands export PATH=/usr/bin:/bin:/usr/sbin:/sbin # Set up variables whoami="/usr/bin/whoami" echo="/bin/echo" sudo="/usr/bin/sudo" dockutil="/usr/local/bin/dockutil" killall="/usr/bin/killall" loggedInUser=$( echo "show State:/Users/ConsoleUser" | scutil | awk '/Name :/ && ! /loginwindow/ { print $3 }' ) LoggedInUserHome="/Users/$loggedInUser" UserPlist=$LoggedInUserHome/Library/Preferences/com.apple.dock.plist ########################################################################################## # Check if script is running as root ########################################################################################## $echo if [ `$who

I want to automatically install the Netflix app on all my Apple TVs.....but I only want to have it available for Self Service on my iPads.How do I go about doing this?Any help would be very much appreciated.

I'm getting very close to a true zero-touch deployment solution for our iPads, and I'm hoping the community can pull me across the finish line on a strange issue I'm having with managed apps. My test iPad enrolls via DEP/Prestage Enrollment fine, but the ensuing automatic install of the Self Service app is asking for iTunes credentials (I'd like this to not happen). In what might be a related issue, VPP apps set to "make app managed when possible" are not doing so, despite this option being enabled. Getting this working would be a great to have for an upcoming hardware refresh, and I appreciate all the help in advance.

Hello,Just seeking some advice on best practice for unmanaging iPads. We have an iPad program where the students keep their iPads after 3 years so we unmanage etc end of term. Up until last year it was just a matter of unmanaging and taking the iPads out of a prestage then releasing from ASM. However when we did this last year it seems that when the students then wiped their iPad the activation lock screen would appear and needed the code to unlock.Just wanting to know how we can avoid that this year, should I send out the 'Disable and prevent Activation Lock' command then unmanage?We are on JAMF Pro, any help would be fantastic thank you.

Is anyone having issues with accessing their case request with Jamf? I am getting a white screen when I try to access or log into Jamf support 

As the attachment, on mac it displays that DMG file is mounted in Google Chrome. The frequency of this display is variously which some people displayed four to six times in few hours and some has never seen it. I have tried to stop Google Chrome’s policy, which already started the program, and to pull out by using detach command below, but the display still appears. If there are related library file I will like to delete them. Does somebody have a different solution for this problem? Or have some suggest of “related library file” to this problem？ Please feel free to post any solutions! Thanks! ■This is detach command I tried /usr/bin/hdiutil detach/Volumes/"Google Chrome"

Hi, I got some issues with the computer name changes in my environment. Changing the computer names directly after the prestage enrolment and changing the computers based on serial number (HMserial). Everything is correct except for the LocalHostName change. Unfortunately this does not happen for all devices but just for some of them. Script I use: #!/bin/bash #Get Serial number SerialNumber=$(system_profiler SPHardwareDataType | awk '/Serial/ {print $4}') scutil --set ComputerName "HM-$SerialNumber" scutil --set HostName "HM-$SerialNumber" scutil --set LocalHostName "HM-$SerialNumber" ComputerName and HostName are changing correctly but for the LocalHostName change I receive a failure: SCPreferencesSetLocalHostName() failed: Invalid argument The strange part is that this is not happening for al computers but just for some of them. Anyone has an idea what can be the cause of this error and how to solve it? Help is appreciated!

I was trying to get iphone device informations from terminalI could get many things from termnal but i was wondering if i can get the information of find my device is turned on or off from my mac terminal.I was searching for it but could not find any command line script or anything else .. Can any one help me out please?

I'm currently testing out a Jamf Now (Fundamentals) deployment for a couple of Macs we have. I haven't used Jamf before so not too sure how Jamf connect should work, but have a feeling mines not correct.I have setup the setting "Enable password sync with Jamf Connect" and done the setup in Azure for it. When a user first logs on it asks to type in both password (microsoft & then local password) so it could sync.Then we changed the password in Microsoft to see if it worked but on the macbook we have to login with the old local password and then in Jamf connect enter the email and the new microsoft password and it says they are out of sync and input the local password.I assume this should be a bit easier as its not exactly syncing the passwords currently?