Hello, Just wondering if anyone else that uses Memcached with their Jamf Pro environment has found a way to enable authentication with memcached? Been searching and have not found any documentation on this. Thanks

We use Carbon Black App Control on our macs and I also have Chrome set up in the Jamf App Catalog. When Jamf tries to push Chrome out Carbon Black blocks it. My question is if Jamf fails to install Chrome via the App Catalog does it delete the installer .pkg file? The issue with getting Chrome whitelisted in Carbon Black is we can't get the hash for the files because it's gone after it fails. Also, is there a standard directory where Jamf puts the installers that we would possibly whitelist?

Is there a way to add an Active Directory user account using a Terminal command? Our normal workflow when on site is to:- log in as admin- bind the Mac to AD- log out of the admin account- have the user sign into their AD account at the macOS login screen, thus creating their user account and user profile. If we have a computer outside of our local network and need to add a network user account to a Mac, we have no way to do it. If we connect to the VPN logged into the admin account, we can hit our AD servers. But as soon as we log out of the admin account, or if we try to switch users or go to "login window..." the VPN connection drops and then we cannot add the network user account to the Mac. So my question is, is there a way to add an AD user account from Terminal? Is there a way we could log in as admin, connect to VPN, bind to AD and then add the user somehow without logging out of the admin account. We are looking at getting away from AD binding with Jamf connec

I've been trying to get the trial version of Jamf Connect Login to work since Wednesday and can't seem to figure out what I'm doing wrong. I even tried following Traveling Tech Guy's blog post : https://travellingtechguy.eu/jamf-connect-login-with-azure/ But the results are the same. Here's what's happening: Azure login window pops up asking for credentials. I put in my credentials. Next screen says create a new local password and verify with a greyed out Create Account button. Thing is - the moment I start typing the app goes black and starts over from the beginning. Any ideas?

Has anyone who is running on-prem Jamf been able to successfully configure and run with HSTS enabled?  If so, I'd love to see your configuration. The following will now load any sub-pages such as inventory or policies. <filter>  <filter-name>httpHeaderSecurity</filter-name>  <filter-class>org.apache.catalina.filters.HttpHeaderSecurityFilter</filter-class>  <init-param>    <param-name>hstsIncludeSubDomains</param-name>    <param-value>true</param-value>    <param-name>hstsMaxAgeSeconds</param-name>    <param-value>31536000</param-value>  </init-param>    <async-supported>true</async-supported></filter>  <filter-mapping>  <filter-name>httpHeaderSecurity</filter-name>  <url-pattern>/*</url-pattern>  <dispatcher>REQUEST</dispatcher></filter-

Hey Jamf guys and gals! I am trying to query information from our JAMF Pro server through the API. I'm like halfway there but I definitely don't know what I am doing completely.  The name scheme we want to do is "(first 4 or 5 characters of the building)-(JAMF ID #)" . I am able to query both of those pieces of information through a script that calls the API, however I can't seem to get the "cut" command to take the first 4 or 5 characters of the building information. Any information on how to cut up the building information would be so helpful. This is what I have so far: #!/bin/bashapiuser=$4apipass=$5jssurl=https://myjamf.comserial=$(/usr/sbin/ioreg -rd1 -c IOPlatformExpertDevice | /usr/bin/awk -F'"' '/IOPlatformSerialNumber/{print $4}')computerID=$(/usr/bin/curl -u $apiuser:$apipass $jssurl:8443/JSSResource/computers/serialnumber/$serial -H "accept: text/xml" | /usr/bin/xpath -e "/computer/general/id/text()")location=$(/usr/bin/curl -u $apiuser:$apipass $jssurl:

I was wondering if anyone has this set up in their environment? Most machines are Monterey, but there are a few Big Sur machines. I tried setting it up and was encountering a few issues. When I restart the machine, it does not read the Yubikey. Will I need a 2nd piece of software to allow it to log in from restart? Is it possible to leave the account as a local user, and still enforce the verification of certificate? 

Hi,I test the deployment with "App Installers" (jamf app catalog)I want to reinstall an app. Is there a way to "force" the reinstall of the app? (like the flush button in a policy)Sébastien

Hey all,Just wanted to relay an experience we had with a company who does hardware buyback, hopefully to help others possibly avoid what we went through.We tend to sell back groups of old Macs/iPads once we refresh our fleet and in the past have had pretty good success.  When we contacted the company we normally have worked with, they said that due to the engraving on our devices, unfortunately they would not be able to purchase our units this time around.With that in mind we reached out to other companies and spoke with Diamond Assets about a buyback and we were very clear that we had engraving on the devices.  We specifically asked how much of a mark down they would receive in an email to their rep. The rep stated it would just be a $10 fee per device that are engraved which seemed reasonable.  They quoted us a great price (for all A ratings) based on the number of units we had.Once we locked in the pricing and signed the contract they finally asked to see the engravin

I am using the JSON template for com.apple.mcxprinting (https://github.com/Jamf-Custom-Profile-Schemas/ProfileManifestsMirror/blob/main/manifests/ManifestsApple/com.apple.mcxprinting.json) which works well but I can't figure out how to get more than one printer in the User Printer List.  If I work with the profile in Profile Creator or iMazing Profile editor, neither is able to specify more than one printer either.Apple's Dev. Docs show an example profile in XML and looks like just a Dictionary with a string identifier and a dictionary of print attributes (printer URI, PPDURL, Name etc). See: https://developer.apple.com/documentation/devicemanagement/printingDoes anyone have an example in JSON or XML that is working with multiple printers they can share?Thanks!

Hello,I'd like to deploy 2 network configs once mac is is enrolled as shown below: 1. Automatic: home, personal..2. Enterprise: this one for company lan/wifi Enterprise should provide below listed items:802.1x cert presence.Fulfil Proxy blank with the desired linkConnect to company's  available wifi/lan. This is done today manually as below:Any idea how to automate things ?Thanks

Even after reregisting to Intune or running below didnt resolve the issue./usr/local/jamf/bin/jamfAAD clean/Library/Application Support/JAMF/Jamf.app/Contents/MacOS/JamfAAD.app/Contents/MacOS/JamfAAD -verbose gatherAADInfo -disable-cache-read no aad id found for macos user account Does any face the same issue.

Hi, i need to update the wording on the login window configuation profile that we have deployed to our machines. Before i do, anyone have any experience doing this? I assume its simple and the change should take affect, but wondering if there is anything i should look out for or could really mess things up. 

We've locked the computer with Jamf Pro and unmanaged it without backing up the lock code. After few weeks all the completed commands disappeared :(Is there anything that can be done to unlock the laptop?

what happens if both are configured, they are compatible?It's gives preference one over the other, or it's not possible to configure one if the other is configured previously?

Hi,I am wondering how Configuration Profiles are pushed, and how often they are pushed, but I can't seem to find any documentation on it. I am editing and testing some config profiles, however they seem to be pushed to the machines at random times. Would someone be able to point me towards such documenation?Also, is there a command to force downloads of configuration profiles, similar to the command "sudo jamf policy"?Thanks!

Hello, Per ABM, we have two Logic Pro licenses in use. Per JAMF, we have 0. JAMF > Computers > Mac Apps > Logic Pro > I did place two Macs in Scope, the Logic Pro shows as something I can install in Self service, when I click install I get an error "Cannot connect to a JAMF MDM profile". My unit is configured correctly however. Can anyone advise?Thank you, 

I'm pretty new to Jamf Pro so please excuse my ignorance. I have Splashtop setup in Jamf Pro and the deployment works great except for the fact that screen recording it not being enabled by Splashtop's script. I tried to post the script below but it's too long. I don't see any reference to screen recording in the script but I may very well be missing something. Can anyone able to offer any insight? I'm waiting to hear back from Splashtop support on this as well.Thank you,-Jason  

Hi Everyone,I need some help with the Zoom auto-update bash script for MacBook Pro/Air M1. Does anyone manage to script the Zoom auto-update? Thanks!RJ 

HelloOur school works heavily with Jamf Teacher to control student's access to apps and resources. Recently we have discovered that they can always access their Quick Notes. This is also the case when the Notes app is not allowed. Consequently, they are starting to use these Quick Notes to cheat. Noting the quickness (pun intended) of opening and closing the Quick Notes, this is a very efficient way to cheat.Other apps that restrict the students (Apple Classroom, SafeExamBrowser …) do not allow this behaviour. Sadly, these apps have the shortcoming that you can only restrict the students to one app, where in many cases two or three apps are needed.Does anybody share this experience, or maybe even know how to help?RegardsAlexander

Self Service is a cool tool I would like to incorporate at our school for employees. Is it available with Jamf School or just Jamf Pro? 

Hey guys, first post here so I hope I'm correct :)It happened a couple of times a student left the school and no one passed that information through to IT so we weren't able to put the device in lost mode and the student would return it.Now our plan is that the devices auto-lost mode after a given time when not connected to our schools wifi (our school has multiple SSIDs depending on the location). From my experience that would be possible in other MDM solutions like Citrix XenMobile, but I haven't found anything similar in jamf school. Is that even possible, if so, how? If not, how do you manage these types of situation? We're still in the process of digitizing the whole progress, so please be gentle :D Really appreciate your helpThanks :) 

No previous experience in scripting or making plist, I was tasked with creating one for setting up an automatic backup using RSync on our Mac minis. Users log in using their AD accounts. The idea is to have three folders to back up for any users that logs into the mini. We are using AD setting for a home folder on a NAS. This part is already tested and works. Now to automating this, I have asimple script in /Library/Scriptsrsync.sh (name)#!/bin/bashrsync -ahP -delete ~/Desktop /Volumes/$USER/BackupDatarsync -ahP -delete ~/Documents /Volumes/$USER/BackupDatarsync -ahP -delete ~/Downloads /Volumes/$USER/BackupData and a plist in /Library/LaunchAgentscom.backup.rsync.plist (name) <?xml version="1.0" encoding="UTF-8"?><!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"><plist version="1.0"><dict><key>Label</key><string>com.backup.rsync</string><key>ProgramArguments</key

I wanted to change the mailing server name into the configuration profil applied to all our iphones enrolled into Jamf. I then create a new profil with the new server name, exclude somes devices from the firt profil and add them into the new profil: it works fine except for 2 iPhone where the actions are pending. I ask user to reboot the iphone but without any success. Is anybody have an idea about the origine of the problem and the soluce the fix this issue?

On a daily basis, users are noticing Apps e.g Teams and Outlook disappearing from their phones and re-installing. I can see in the management history that on a daily basis it's getting a "install xxx app" The version is always the same until a new version comes around at which point will start installing daily with the new version.I do run a daily inventory on devices The apps in general have the following settings;Install automaticallydisplay app in self-service after installSchedule jamf pro to automatically check app store for updatesautomatically force App updatesMake app managed when possibleconvert unmanaged ap to managedI want to keep the apps updated when a new version comes around but don't believe the app should be uninstalling/reinstalling if there isn't a new version. Does anyone know if this is typical behavior or have any idea what might be wrong?