HiI just discovered that i have a lot of macs with the red marks on jamf protect. This means that they did not connect to jamf protect since one month. This is strange because those computers regularly check in with jamf pro and jamf protect is pushed automatically from jamf pro.What can be the problem and how can i solve it?

I am trying to achieve the following steps.  But unable to do so : 1.Launch Installer2.Place pipeline.json to the location in/Users/Shared/TheAPP3.Click Install button on Installer UI (/usr/local/theapp/macOS/installer) 

I’m trying to create one policy that will deploy 3rd party updates using the current smart groups we’ve created. From the few different test’s, I’ve down, I can’t seem to get it to work, I still have to go in and add/remove test groups.  The below steps and screenshots are how we currently do it. We have to control the majority of the software updates; we aren’t allowed to just set so they always update except for some developer apps that update a lot. We create 2 smart groups for each application like the Postman one below and depending on the test group, will add in either alpha, beta or uatI then have a policy for each software, I have it set to recurring check in, set to ongoing and then set our deployment date/time each month and use the specific software update update computer groupWhen the software updates, the device will drop out of the smart group, so it won’t keep installing. That way I don’t have to go in to the device to fl

Can you give me some more information on jamf fundamentals version of Protect? I know its a cut down version. Can you tell me what version of application "Jamf protect" should come with Jamf Fundamentals installs ?  When was the last update of this app? Kind regards

Easily clear your users’ policy-specific deferrals when using Installomator with Jamf ProBackgroundSince fully embracing Installomator v10.0, which includes support for swiftDialog, we’ve been testing Mischa van der Bent’s approach to leveraging Jamf Patch Management Software Titles for versioning information, which, on the whole, seems to be working quite well.However, allowing users to defer Jamf Pro policies introduces its own set of challenges.Continue reading …

Hello All,I am getting ready to start building policies for users to add self-service printers. There are about 100 printers to add. Each policy will be set up exactly the same (category, frequency, self-service, etc.). Is there any way to create these policies in a batch with the name of the policy matching the name of the printer or do I have to create each one individually?

We added a new VPP account to our JAMF instance this morning and since then, I've been repeatedly spammed with a pop up from the app store. (changed my organization name to "myorgname" but it really shows our actual org name)Invitation from "myorgname""myorgname" wants to make apps available to you. and then there's a "Not Now" and "Accept" "Not Now" causes the pop up to reappear 1-60 seconds later and it never stops."Accept" throws me to an apple page with the URL that includes "associateVPPUserWithITSAccount" and then launches the app store.I verify my email address and password and get an Apple Media Services agreement.  I click "Agree" after checking the "I have read..." box and a window opens with the title "Allow Assignment" and the text "The organization can now assign apps and books to you".I click done and 0-60 seconds later the same darn pop-up appears and if I click

Hello all, Is there a way to disable the Passwords option in safari and delete all saved passwords? (see attached ss). I've already managed to lockdown the "Passwords" in system preferences pane but I've noticed that it is still enable in safari ( safari -> Preferences -> passwords)Thank you!

A number of our supervised Pads have apps (installed by the user) which I need to get rid of en masse but there is no option to delete any of these apps through Jamf School.I'm not sure how they were installed in the first place as the profile applied to the devices shouldn't allow them access to the app store but it does.Any ideas?Thanks

Hello Community! We are facing with a "problem" with expiring local administrator account password.From security reasons we have set Maximum Passcode Age option to 180 days, but local administrator account is under this policy too.We are not using any SSO accounts.How can we exclude this account from this policy?

 Followed the instructions and everything appears to be working the status says completed, but I checked the logs and it appears I am getting the below error message.

Long story short, when AutoCAD is deployed via Self Service it completed. When I run a pop up asking for permissions for ~/Library/Autodesk on the profile that I run the installer on. I remedy this by giving read and write access to that specific profile. Once done AutoCAD runs along with other profiles. My questions is, can I run a script that gives everyone read and write access to that folder and link it to self service as an extra step in the deployment process? I keep looking but see that it's on a per user profile basis.

Hi, is there a way to install an application and activate the license on a class of computers with jamf pro ?Thanks 

Guys, need help in managing the admin access through script. I'm planing to have a script to put it on policy. In case user needs an admin access can run the policy from self service as and when required.however, that admin access can last longer for 5 - 10 mins. Kindly someone help me with the script with the timing. Thanks for understanding

I'm trying to figure out how to install apps for users that are not local admins. Of course they can install from Self Service just fine, which puts the application into /Applications.The problem is that many apps (Chrome, Firefox, Signal, etc.) will periodically try to update themselves, but the user does not have permissions to /Applications, so the app can't update itself.I was considering installing apps to ~/Applications insteadMaybe something like:Package action=cachethen a script that will runinstaller -pkg /Library/Application Support/JAMF/Downloads/application.pkg -target ~/ApplicationsBut I wanted to ask community first. Is there a "best practise" for installing apps so that non-admin users can update them?

We are starting to use Printerlogic for printer installing across the company.  Manually installing the pkg or via a Policy install from a script I found on the forums here it doesn't install the needed Safari extension.  Found 2 commands to run from Printerlogic's forum that enables it.sudo killall PrinterInstallerClientopen $(cat /etc/pl_dir)/service_interface/PrinterInstallerClient.appI tried adding the commands as Exexute Commands under Files and Processes in the Policy. Watching the install on a MacBook it looks like it works but when I open Safari and check the extension it isn't there.  I can then run both commands manually in terminal and it works as intended.  Has anyone else been able to successfully push out Printerlogic?

Hi,I believe I used to set the "Show item info" preference with a Configuration Profile in the Finder payload. Or the old Global Plist payload.Can't recall. It doesn't appear there anymore.Is anybody using a script to check this off? 

We have a fleet of iPads, some requests come in stating that they would like to print using AirPrint, now I know sometimes some of the printer's are not AirPrint enabled so we enable that functionality, and still AirPrint is non functional, we end up having to add the printer brand app to their iPads and manually enter in the IP on the app to have them use the app as like a middle man t print from the iPad - any remedy out there for traditional AirPrint to work as intended?

anyone have a scripted solution, or profile setting that can be applied to Edge for Mac to auto open specific files, eg citrix ica files, Remote desktop RDP files etc.?It can be set manually per user within the Edge browser  (right click file in downloads - set to "always open files of this type"), but looking for a way to script and deploy via JAMF for all users across the Mac fleet.  tried using composer to capture the changes when its user-initiated but cant pinpoint the change, nor how to manage that.  Ideally would be via a PLIST, (defaults write per user or manageed preference). No options within current built in schema for Edge in JAMF Pro.   

Friends, We send mass os update command from JAMF to all mac users. Even the OS is update still user getting pop up to update OS. If user select to install now, again its appearing next day. We noticed, its poping up for ventura also. Note- when this pop up coming, its says you can differ 3 timesScreenshots attached,  Thanks .  

Hello guys, any news with screen recording privacy preferences via MDM in Big Sur/Monterey? Is there a way how to enable teamviewer recording without user allowing to? 

we have a policy to restrict access to "Users & Groups" under system preferences, but we do allow the user to be local admin, and I used to be able to use the following script so users can give themself local admin right from self service, but it stopped working.we are using MacOS 10.12.x (x=3,4,5,6) and 10.11.x (x=5 and 6) and JSS 9.96 does anyone have a different way of creating a self service policy so the users can make themself local admins ? thank you in advance for your help. #!/bin/sh if [ -z $3 ]; then currentUser=`stat -f '%Su' /dev/console` else currentUser=$3 fi # Add the current user to the local admin group on the Mac dseditgroup -o edit -a $currentUser -t user admin if [ "$?" == "0" ]; then echo "Successfully added $currentUser to admin group" else echo "ERROR: Unable to add $currentUser to admin group" exit 1 fi exit 0

 Is there any known issue or someone faced the issue?  

The Jamf cloud team is working on an effort to improve the infrastructure of the Jamf Pro cloud environment. This is part of a continued effort to always provide you with the latest features that are available from our Amazon Web Service (AWS) environment, most notably to improve reliability and scalability to reduce environment downtime and better serve you as a Jamf customer. As an incremental step in this process, we are planning to migrate all Client Sandbox Jamf Pro cloud instances on Saturday, December 10, 2022 which will require a small outage of any Sandbox instances. Note: this will NOT affect any Production instances. Thank you

So my new job uses Jamf Pro according to the policy. I was wondering if the policy description is all Jamf can actually do. Currently it does not say it is allowed to capture my screen. Does this mean it is impossible for jamf to capture my screen unless the policy is updated and sent out? I'm just trying to figure out what Jamf can and can't do and if I can figure out exactly what it has permission to do on the system.