Hi.Can anyone advise why scripts are failing to remove non crop apps?I have recently added several policies to jamf pro to remove non corp apps.Policies \\ Scripts added for.App Books RemovalApp Chess RemovalApp FaceTime RemovalApp Garage Band RemovalApp Home RemovalApp iMovie RemovalApp Migration Assistant RemovalApp News RemovalApp Photo Booth RemovalApp Podcasts RemovalApp Stocks RemovalApp Time Machine RemovalApp TV RemovalApp Weather Removal copyI followed another script I found on JAMF Nation  :  /bin/rm -rf /Applications/*.app   ( where * is application name )For example :   /bin/rm -rf /Applications/Books.appI also tried with system in the file path:  /bin/rm -rf /System/Applications/Books.appThe scripts run on the macs but don't actually remove the app(s).The log file below is for the script set to remove Books app.  I have not added the whole log file due to this post not being able to exceed 20,000 characters. Log is ful

I am currently studying for my Jamf 100 and have ran into a couple question on the Jamf 100 practice test and I am not sure I understand the material or understand the questions. Can you all give me a hand?Supervision is available as part of a computer PreStage Enrollment configuration. a. True (my answer)b.False  (answer according to the answer sheet) Which method can be used to enroll a mobile device with Jamf Pro? a. Apple School Manager  (correct answer according to the answer key)b. Recon c. Volume Purchasing of Apps and Books d. User-Initiated Enrollment  (my answer)

Would just like to see some input on how other manage adobe CC Normally the Adobe RUM take care of the updates within the version like version 21.2 to 21.3But how about going from 21 to 22 that needs a new full installer, as adobe does not seems to have a normal update mechanism for that So create the package at adobe admin console. But do you then unpack etc this package or just keep it as it is and upload to jamf ? And what communication do you use to upgrade- jamf helper or just self service item? Hope some can give some best practise on this

Many software publishers provide static (non-changing) links that always point to the latest release.Consider this download link for Zoom:https://zoom.us/client/5.12.9.13190/zoomusInstallerFull.pkgIt works, but it always downloads version 5.12.9.13190, even if a newer version is available. Now, consider this download link.Zoom (Intel): https://zoom.us/client/latest/Zoom.pkg As the name suggests, it always points to the latest release. You can use that URL with a Universal Installer script (like the one found here) to create a Jamf policy that never needs to be updated.Similar static links are available for lots of other apps, but they're not always easy to find.That's why I created this thread.  It is my hope that others will share these static links here, so that this thread can be a continuing resource to Jamf Admins.Here are a few more.Zoom (Apple Silicon):https://zoom.us/client/latest/Zoom.pkg?archType=arm64Coconut Battery: https://coconut-flavour.com/downl

Is it possible to have multiple instances use the same ADCS server at the same time? I've been told yes, but the ADCS deployment appears linked to a specific cloud instance. How do you generate an additional client certificate for use with the second cloud instance of Jamf Pro?Or maybe an additional client cert isn't needed?

I am the Mac admin for my company and we are thinking about using the Jamf Connect product. I was able to work with my Ping team and get my test environment setup properly, but I am having some connectivity trouble with setup for my production environment. The OIDC connects and validates with no issues. The ROPG test shoots me back an error message that states"ROPG test failure: Error from request to URL: https://idp.aa.com/as/token.oauth2, ERROR: Unknown error. Message: There are no access token managers available for the selected client and authentication context, STATUS: 400"Does anyone have any idea what this means or what I should have my Ping team try to change/correct for the successful test of ROPG? Any assistance or guidance would be greatly appreciated. Thank you

Before Ventura was released, we were testing out erase-install.sh and it worked pretty good and updated from to 12.6 pretty fast. We had to set to just install the latest version, but since Ventura is considered a minor update on 12.6, I had to change some of the install options. I added the os option, but the download is now installing the full installer and takes about 1hr and 15min to complete. Below are the options I'm using to install 12.6.1. In way to get this to update faster?/Library/Management/erase-install/erase-install.sh --pkg --reinstall --os=12 --update --min-drive-space=35 --current-user --check-power --no-fs --depnotify --cleanup-after-use 

We have a 'Make Yourself an Admin for 10 Min" self service that stores logs for those 10 min. Issue is I am not sure how to grab them or get them somewhere where we can do spot checks. Is this possible?

We have JAMF Connect and the Kerberos SSO extension deployed and 1 particular user’s sso extension every 14 days seems to disconnect and you can’t reconnect or sign in unless you reboot. Has anybody come across this before? Running 12.6 on an M1 Pro.

Having a bit of a weird issue. So I have this script that pops a notification box open on check-in, and it's working fine, except that it won't display the branding icon in the box. It's probably easier to show than to tell, so see below (executing this script in macOS Ventura 13.0.1): jamfHelper="/Library/Application Support/JAMF/bin/jamfHelper.app/Contents/MacOS/jamfHelper" windowType="hud" description="Insert description here (edited for the sake of this forum post)" icon="~/Library/Application\\ Support/com.jamfsoftware.selfservice.mac/Documents/Images/brandingimage.png" #this path is accurate title="macOS Update Required" alignDescription="left" alignHeading="center" button1="OK" timeout="600" window=$("$jamfHelper" -windowType "$windowType" -lockHUD -title "$title" -timeout "$timeout" -icon "$icon" -description "$description" -alignDescription "$alignDescription" -alignHeading "$alignHeading" -button1 "$button1") What am I doing wrong?

We have deployed microsoft defender via Jamf. However it seems they got deployed in standalone mode and not managed mode.In defender portal the count is zero for MacOS. we followed https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/mac-jamfpro-policies?view=o365-worldwideany suggestions?

Hi,We mainly use Jamf Connect with Azure AD for staff and student user accounts on our Macs. However, I'm thinking about using a generic local user account for consultants and guests because it is our school's policy to not create school domain accounts for consultants and guests. When I log into the local user account that I created, the user is logged in successfully, but the Jamf Connect login window pops up asking the user to authenticate to Jamf Connect. This login window can't be closed or ignored, unless I disable the setting "RequireSignIn" in the com.jamf.connect configuration profile plist. By disabling that setting, the login window will still pop up, but now I can close the window and ignore it. Are there any repercussions to disabling this setting? How will that setting affect other Jamf Connect with Azure users if I leave it disabled?

Good day When I am sending updates to some applications via Jamf pro there is failed command with invalid status code.  We have license for that application . I am very disappointed about that. I need help to get it function.Thank you for help Regards Richard   

I'm looking for ways to migrate existing machines into our JAMF Pro implementation.  Utopia would have us erase the machines and re-enrol through DEP.  Out thinking is we will do this as part of our hardware refresh cycle.  In the meantime I've been looking at using reenroller (GitHub - jamf/ReEnroller: Migrate macOS devices from one Jamf Server to another.) to migrate existing machines across.  Although the migration is working the MDM profile is not downloaded for the user to approve.  Am I missing something in the configuration or do I have to script a Profile to manually download and open "Self Service" to prompt the user to approve it.Thanks 

Hi All, I am fairly new to Jamf Pro, and I am facing an issue that I am trying to find a solution for.In our organisation, we have approximately 600+ iPads, enrolled in 5 PreStage Enrollment groups, and each group will have anywhere from 30-90apps being pushed to the iPads automatically once they are enrolled. Each group has been assigned a different range of apps to suit the users in their respective groups.As you can imagine, that is a TON of data trying to be pushed through on our network, and we find that if we are resetting any more than 5-10 iPads at a time, it is completely bombing our network.My question. Is it possible to set up self service, to show only the apps that, currently, are being pushed out automatically to the PreStage Enrollment Groups, to not install automatically, and just have the user download the apps they require when they need them,? rather than pushing every single app to the device automatically, where half of the apps might not even get used....This woul

We are currently testing Jamf Unlock in our environment. I've found that every time I use Unlock, it keeps asking for Keychain access. Documentation says that it should ask for the password during the first login attempt. I get it every time when I come back from screen lock. Any suggestions or recommendations for a fix? 

Does anyone know how devices would become unsupervised? We've been running into issues and I noticed a lot of these computers weren't supervised, so I ran a report and somehow over 800 computers are reporting unsupervised. We will be wiping all the computers over the summer so it's not an urgent issue, I'm just curious how this could happen.

My company will soon be implementing Tenable for all clients. How can I pull that information out of Jamf Pro and what kind of information will be available?

In Jamf Pro I see that we can add columns like "Packages Installed by Casper" and "Packages Installed by Installer.app/SWU" how can I get that information into my Power Bi Dataflow? 

We have been running Jamf Connect 2.12.0 for many months just fine. I recently installed version 2.17 for testing and it seems to work ok. This morning I saw that 2.18 is available so I installed that for testing. As it just so happened, I needed to change my password, so I changed it via Jamf Connect and it worked great! I decided to restart my Mac to make sure the FileVault password also synced up but when I restarted my Mac running macOS 12.6.1 I no longer get the FileVault login with the icons to pick from. I only see the ID & PW boxes. No amount of restarts brings back the FV icons. It also seems to have forgotten out our desktop wallpaper that we use on the Login screen (without FV).Is this expected behavior?

Hi There, I am a noob so please excuse my ignorance. We have a new install connected to GoogleID and have had an issue from the beginning where the Jamf Connect Menubar's Change Password and Reset Password pages comes up blank. I've tried changing default browsers with no luck. I've made sure both browsers were signed into the Google account with no luck. The Connect option seems to work and pulls up the correct email and password info as it logs in. I should add that other than that Jamf Connect seems to be working as expected. Here's what the plist info is set to.  I appreciate any help you all can offer as I'm stumped.  -Jason <?xml version="1.0" encoding="UTF-8"?><!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"><plist version="1.0"><dict><key>ChangePasswordURL</key><string>https://myaccount.google.com/intro/signinoptions/password</string><key&gt

I am looking for a way to create an extension attribute to show when the last inventory (Recon) was done on a computer.  Any assistance would help and is appreciated.

Does anybody know a script to unlock Energy Saver prefs for non-admins? Thanks,Jared

We recently had a configuration change to our AD domain controllers which has caused an issue with our 10.5 clients. I'm looking at an easy way with Casper to turn off IPv6 on the 10.5 clients. If I take the /Library/Preferences/System Configuration/preferences.plist file from a machine I turned IPv6 off I also get the computer name and other unwanted data. Has anyone tried this before? I'm not a script guru so I haven't ventured down that path. This will be a temporary fix as we're updating the OS for out fall semester. Thanks for any suggestions or pointers.Brad ---------------------------------------------------------------------Brad GunnellsUniversity of IowaInformation Technology ServicesInstructional Services/Learning Spaces TechnologyIowa City IA 52242(319)335-5524 FAX (319)335-5505mailto:brad-gunnells at uiowa.edu---------------------------------------------------------------------

Hi,I have a question about Apple IDs. I am moving my group to JAMF as we purchase new Macs. I have restricted the Apple ID pane in the PreStage config. When migrating end user data from their old Macs their Apple ID info is automatically coming over as well. Is there a way to avoid this on future installs and how would I remedy this situation on the machines that are currently affected? Thanks for the advice.