With the implementation of a recent feature request, Setup Your Mac (1.6.0) introduces additional policy validation options to help ensure critical enterprise applications are both installed and their related services are running.IntroductionApple’s Automated Device Enrollment helps to streamline Mobile Device Management (MDM) enrollment and device Supervision during activation, enabling IT to manage enterprise devices with “zero touch.”Setup Your Mac aims to simplify initial device configuration by leveraging @bartreardon's swiftDialog and Jamf Pro Policy Custom Events to allow end-users to self-complete Mac setup post-enrollment.Continue reading

Hello all,3 of our devices were supervised and managed, but the Jamf records on our end were deleted while the devices were still active. So the devices still have Jamf on the system, but now phoning home is pretty weird. We were able to restore one of the records, but it appears to be only managed now. On this restored record, we are unable to push any commands or policies to the device that are normally available by default (Lock Device, Send Blank Push, etc.).Is there any way to get these devices reconnected to our system, or should we bag it and just re-issue new devices to these users?I'll be checking this all day so please feel free to ask any questions about anything I might have left out. Thanks!

Currently, app licenses get assigned when a user is scoped to a self service policy. I want to script an option that a user can “request” to have access to an application through self service and then automatically get added to a smart group that the application license and installation policy is scoped to. Has anyone done anything like this before? Thanks in advance!

Hi Pro,I am new to JAMF and looking in to get some help,I have to deploy the below code via JAMF and add it to the existing edge Plist defaults write com.microsoft.Edge AuthServerAllowlist org.kerberos.okta.comI have added this code to .sh and deployed it via JAMF policy and it didn't work TIA 

Hey Jamf Nation,We are having issues with LockDown Browser not opening after students install the pkg or dmg created from composer. The message that pop up on their screen is "the application is damage- App installed from an unknown developer(notarization)  ". Issue just happening with intel clients running on Ventura. 

Does anyone know what specific permission/privilege in Jamf Pro allows a Jamf Pro user to view and scope existing policies? I can't seem to find the right checkbox in the privileges page of Users and Groups. The user in question just gets a blank page but there should be a bunch of policies showing.

Has anyone implemented the API for Superman? Specifically the api details. I am a little lost on the configuration of it any help would be appreciated. https://github.com/Macjutsu/superThanks!

Is Jamf using the "softwareupdate" command line tool to collect the details on the Mac client?I am just wondering because even on clients with a major software update deferral profile (90 days set),Jamf Inventory shows the macOS Ventura Upgrade on macOS 12.6.1 Clients?Thanks in advance, Bjoern

Hello all,we use Shared iPads on schools. It would be fine to enable location services on shared iPads or at least to set the time zone in the DEP profile, but it is not possible in Jamf School.Is there any solution for that?Thank you in advance.Best RegardsAngelo

Hello!Since November or so I see HTTP Downloads (from an HTTP-DP served by IIS on our Jamf Pro Server)Server is Jamf Pro 10.42.1 running on Windows 2016 Server (it is the "DMZ"-Server of our clustered pair)Jamf only logs a "Package not found" although the Packages are definitely there, and I get a "404 0 2" error in the http-Logs. That mostly happens when the machine is first set up (DEPNotify is started right after the Setup Assistant finishes and users see the Finder for the first time.When the machine retries after setup ist finished (Policies are triggered through custom triggers and have retries set) then everything downloads ok.I am really stumped, has anybody seen something similar? MIME-Types are all set, the IIS on that Server was working fine up until November, when we moved the main Server to a different Datacenter. Bye, Fridolin.

Hello , I've got problem with python script ,  first line of script have command to import :import os.path ,os , getpassbut Jamf PRO have problem like below:line 1: import: command not foundDo you have some tips how to solve it ? 

I've had this issue since about January 2022. It hasn't been a huge issue because I am operating in an enterprise environment with less than 100 Macs. However, we are growing and this is steadily becoming more prevalent. The reason I post this here is because I'm the main point of contact for Jamf, but I'm still fairly new to setup in this environment so I'd love to hear if anyone has suggestions for this issue. Here's what's happening:I utilize SSO sign-in through Azure AD. Since about 12.2 and later, any new setup of Mac OS (brand new or refreshed) I have not been able to get users signed into their OneDrive app. We launch the app, put in their email, and then it is 'supposed' to go to the SSO splash page, but OneDrive does not go there. It just seems to refresh the page and ask for the email address again. Once you click next, the app does not ask for the password and then asks where the folder should be synced. You select a location, the app thinks for a moment, and then

For a computer policy that has a script object in it, is it possible to update the script parameters via the API? I found in the classic api documentation (seen below) that you can update some parts of a policy with xml. Would it be possible to update a specific parameter (7 in this case) for a script. Ideally that would be the only thing that would change.  <policy> <general> <name>Firefox</name> <enabled>true</enabled> <trigger>string</trigger> <trigger_checkin>false</trigger_checkin> <trigger_enrollment_complete>false</trigger_enrollment_complete> <trigger_login>false</trigger_login> <trigger_logout>false</trigger_logout> <trigger_network_state_changed>false</trigger_network_state_changed> <trigger_startup>false</trigger_startup> <trigger_othe

Hi, Which is the best practice to enroll the users via User Invitation Enrollment ?From Security Perspective it is not feasible to use share accounts amongst all users during enrollment process, would like to understand various approaches followed in other organisation 

I'm been experimenting with some scripts that we want to run at each user's log in. We're using Outset to handle them now, but it's been unreliable for us and seems to break part way through our semester, every semester. In light of that, I've been exploring new ways to get our users files and other things set up for them.I've had luck calling scripts using Jamf's Login Trigger, but the commands in the script are processed as a root user, not the currently logged in user, which causes the scripts to fail. I've found some documented fixes, but they're from previous less secure OSes and earlier versions of Jamf/Casper and I'm not sure they'd be successful under Ventura.Does anyone have some suggestions on getting the scripts ran as the user at login? Should I be going down the launchd rabbit hole?

I’m at a loss here. I’ve been suddenly fighting Zoom screen sharing being completely “blocked” with my JAMF Pro setup on all new computers. All machines are running 12.4, Zoom 5.11, and I have a PPPC payload deployed on some that allows non-admins to allow screenrecording and the other half does not have this. No matter which configuration I use, even when I allow full disk access and screen recording, Zoom still tells me to open my Security & Privacy to whitelist the app to screen record. I have tried both the IT installer PKG and the regular PKG to no success. Does anyone have advice on what I need to check for?? I’m at a total loss right now. Thanks in advance!!

Hey I was wondering if anyone else was having issues with the new macOS Ventura update? After pushing the new update to the students none of them are able to use Safari. When Safari is launched it will open for a split second then close. I rebooted and reinstalled update macOS but no changes. Please advise on how to correct issue. I tried: Holding Shift and click on Safari to openRight click and open methodRebootReinstallUpdate Safari

Hello friends,I am unable to get my Macs on 12.4 to update to 12.6.2. The update downloads, prepares to install, and the Macs restart but they are still on 12.4.I have tried updating through sending a command via Jamf Pro, and manually via the System Preferences pane.I have tried a Safe Boot.I CAN get the Macs on 12.6.2 by reinstalling the OS in Recovery.Anyone have any other suggestions?Thank you.

I have "AutoRenewTickets" set to "True" in our Jamf Connect config profile, but it doesn't seem to be automatically renewing the tickets. Do we also need to configure the SSOe payload or something? Alternatively, I'm just gonna set up a launch agent to renew the ticket but that's really more of a last resort. Thanks, Matt

I hope anyone in Jamf Support or in the community can provide some guidance since Jamf Support takes forever to respond...Objective: Install CA certificate to Mac's processed Pre-Stage enrollment. Problem: The configuration profile used to install the CA to enrolled Mac's works great for "User-Enrolled" Mac's. For some reason it is not working with Pre-Stage enrollments. The configuration profile should be available for distribution from the profile settings section but it is not available for Pre-Stage. Troubleshooting:- After Pre-Stage enrollment I signed in and out of the Mac computer to see if that would trigger the config profile to run on the computer, but no success there.- For testing, I changed the distribution method from install automatically to Self Service and that did not worked as well. Config Profile Details:- Profile is configured with a Lev

Not being a troll, just want to know the real world options for me here.I have about 20 devices in JamfNow, and its going pretty well. I dabbled in Intune and there is just too much going on there, and I run into more issues than not.That said, Im looking to commit to either going back full time to JamfNow, which is where this question came from. Is there a value to going to Pro if Now seems to be just fine?

Hello, do we have any other way to block major os update aside from using the configuration profile (restriction - > functionality then defer for 90days) and restricted software in JAMF? Is there a plist that we can configure and upload or maybe a script to block the OS update and stop it from checking an available update?

I'd like to create a new user via policy that is enabled for FileVault 2/has SecureToken. As noted in the Local Accounts payload, the "Enable user for FileVault 2" no longer works in anything beyond 10.13. After doing some digging, the only solution I have come across to do this is using sysadminctl to grant SecureToken to the account after creation. This is something I'd like to avoid if possible since it requires passing not only the credentials for a SecureToken-enabled admin through a script, but also the credentials for the account to be enabled.Are there any secure methods to achieve this? 

Hi all, since system 10.14 we have been using a script that calls some policy triggers during "enrollment complete" and forces certain apps to install (chrome, firefox, microsoft company portal, office365 etc).  Since using 13.1 as the base we are seeing random installs failing during this process.  Sometime chrome is failing, sometime office365, so it's randomly not liking the install.  I feel like it must be another process that is running that is causing a conflict (perhaps the app store installs of pages numbers keynote and GarageBand and iMovie?), but I'm not sure. Anyone else seeing this?  Also running the same installer again seems to go through without error.  Wondering if i can maybe modify the script to check for errors and try a 2nd time if it fails."Installation failed. The installer reported: installer: Package name is Microsoft 365 and Office for Macinstaller: Upgrading at base path / installer

Hello all!We have been having an issue lately where machines will start their prestage installation process (policies, app installs, scripts, etc) that we run on first setup BEFORE the user is able to even log into the machine via Jamf Connect 2.Previously the user would boot the machine for the first time and it would go through language selection > warn them about Company MDM setup > ask for location > then prompt for a Jamf Connect 2 login. It would wait there until logged in by a user THEN begin the full 10-15 minute setup. It would finally end with a reboot and come back up to a local login and the user would be able to log in without issue because it created a local user for them during that 10-15 minute setup.Now, the setup will begin nearly immediately after warning them of the Company MDM setup (about the same time as it asks for location. If a user gets distracted and doesn't log in at the JC2, it will go through its install then finish with a