My company recently updated their Keynote template. I used Jamf Composer to create a snapshot package where I used the Keynote app to manually save the theme as a template. I saved it as a DMG, and applied it to a policy that Fills existing users. It does exactly what I expect, placing the .kth file in the user Keynote directory (~/Library/Containers/com.apple.iWork.Keynote/Data/Library/Application Support/User Templates). However, upon opening Keynote.app, the theme does not appear in the Theme Chooser. The final strange detail is that on the same computer I've been testing the policy on, if I create a new user before running the policy that has never opened Keynote before, the template does appear in the Theme Chooser on that second account, but will still not appear in Keynote on the first account. I'm very new to this so please don't hesitate to suggest that I've made a mistake that seems dumb or obvious to you, it's entirely possible. I'll take any and all advice and appreciate

Before I make my first ever post, I checked to see if anyone else has posted this. I did not see anything. Hopefully I searched correctly. I can add printers to my Macs, using the Terminal command line, or create a script in Jamf to add the printers. Same result. Here is an example of the command. lpadmin -p Tech_Room_55_Printer -L "Tech Room 55" -E -v lpd://10.100.105.92 -P /Library/Printers/PPDs/Contents/Resources/HP Color LaserJet M651.gz -o printer-is-shared=false I don't think I need to explain the contents of that command to any of you. Except to say, I want to add a Xerox printer in this case that uses AirPrint. I am connecting Macs, not iOS. When I add the printer manually, using the IP address, I end up with a default printer icon. When I use AirPrint, I get the full icon that represents the actual printer. My question is, how would I add a printer using a command line and tell configure it with AirPrint. I will keep tinkering.

Hi All,Does anyone know if it is possible to lock iPads which are in a certain group?We have a 'No Owner' smart group and we would like to be able to lock iPads inside this group to prevent use. I've searched through the various profile settings and nothing is jumping out at me sadly...Cheers

Hi all, I'm wondering if there is an undocumented API call for Lost Mode in Jamf School, since it's not in the docs. I used this extensively with Jamf Pro back in the day and am going to be in rough shape if there's not a similar API call for the School product...Thanks!Ryan

I am able to get CBDefense to install just fine however with Apple newest updates we have to go to security preferences and hit Allow. They have a recommendation on their site for this issue it says: " For enterprise deployments where it is necessary to distribute software that includes kexts without requiring user approval, you will need to configure the Apple Team IDs for our Carbon Black Products in your MDM Profile" My question is how am I able to do that? This is my first time having to do anything like that. Thanks!

Hi there, Is there a simpler way to install Ventura via self-service without the admin credentials? I've added Ventura from the Mac apps section on Jamf and it is available on self service but it requires admin credentials to install. 

I have a user that made an iCloud backup before wiping his iPhone 12 and reinstalling it. During the following setup the device was enrolled into Jamf (DEP + prestage). He also restored the iCloud backup and everything seemed to work ok. I can see it was enrolled 9/7/22 0907 am and last inventory update was 9/7/22 0908 am. Since then the iPhone doesn't communicate with Jamf anymore.It's running iOS 15.0, Jamf is v10.39.1. the device is still managed and supervised.

Can anyone guide me on how to use jamf pro and add devices to Jamf pro on a windows device. Any Help will be appreciated

I have a policy that joins a computer to the domain automatically when it is enrolled. This policy worked up until today and now I am receiving the same error message on all new Macs. I searched the error code and it says that 5103 usually means that the hostname is too long for AD but our hostnames are all 10 characters long... Has anyone run into this issue before? We tested windows machines and they work fine so I am not sure if this issue is from the AD server side or MacOS. Here is the error message. Thank you to anyone with suggestions

i see an article for Jamf School but i couldn't find anything for Jamf Pro. if available, can you provide a link for the documentation, we are trying to identify induvial users IDs for proxy server exemptions.

Hi,I now had two of my Users being locked out of their devices a day or so after turning on FileVault via Jamf. Nothing could get me back in. Has anyone had similar problems? Kind regardsAndreas Baumeister

Hi all,Just trying some API integration and the local Jamf account we have configured for API will not authorize to generate a token on our API page:https://mycompany.jamfcloud.com/api/doc/It just keeps saying "Authorization failed." and wondered if it's the privileges on the account. We have it set as follows:Read-Only on all Server Objects (apart from API intergrations which is set to create, read and update).No permission for any Server SettingsNo permission for any Server ActionsAm I missing something? Any help appreciated!

Hi all,Just started using Jamf connect with Google login.  Our Jamf Connect login configuration profile is using the option to "Create all new users as local administrator."That is working.  When it creates a new user it makes them a local admin.  problem is if you do a "Network login" with the same user, it converts it back to a Standard user.If you do a "Local login," it works and does not remove administrator rights

Hello All,Do we have a method or Script to make changes in the Software Update Pop-up window?I would like to change the word "administrator" to something "your login credentials"Thank you. 

A user has left their iPad in a location they cannot recall on the way back to the office. I am attempting to set lost mode, but it isn't staying enabled. I am assuming it is nowhere near or connected to wifi hotspot so the command cannot be sent to the device. Kind of a useless feature if this is the case. I am not sure location services are setup on the device either.

Apple has changed where Time Machine data is stored in the latest OS and how that data is organized. I've modified the original JAMF Extension Attribute to accommodate Apple's changes in Mavericks. The XML is ready for upload. I've only tested this in the Casper Suite 9.2 but it should work fine in any version that supports Extension Attributes. https://dl.dropboxusercontent.com/u/874171/TimeMachineLastBackupCompleted.xml.zip Cheers,Chad NielsenForget Computers

Hi,since our mac mini caching servers are run out of storage we're curious if it's possible to have an external volume for cache storage or other options. We#Ve already tried to use the "Content Caching" payload and entered Data Path "/Volumes/nameofexternaldisk/Cache" which didn't work with the error that the profile wouldn't install because of a wrong Data Path. Does anybody have a suggestion here?Best RegardsJonas

I have a scenario whereby I need the Jamf Pro server to execute some action, and pass on this information to the client.It should work like this -client is triggered to install 'policy A' --> client asks Jamf Pro server for infromation X (which is needed by the client to complete the policy installation) --> Jamf Pro executes some script/API call to a separate internally-hosted webservice --> Jamf Pro recevies the output from the webservice and passes it to the client The webservice is not publicly accessible, thus the client is unable to reach it, and has to rely on the Jamf Pro server to make the API call on its behalf. Is this somehow possible?

I have a policy to install a package, which I want to make available to all computers via Self Service, but I only want it to automatically install (e.g. via enrollment trigger) for some computers only.Can this be done somehow, without having 2 different policies? (e.g. 1 policy for Self Service, another policy for enrollment trigger) I presume, when configuring the scope of a policy, it applies to both 'trigger' and 'Self Service' scenarios.

Has anyone had this issue with Jamf Connect? It is becoming a widespread problem within our organization.  This (attached photo) will pop up upon login and you can't make it go away.   We thought updating everyone 2.12 would solve this problem but it's still happening.  The only fix that we've found that works is going in and manually re-installing (via Jamf id site) the latest version.  I'd like to avoid manually re-installing for our whole environment so any help/ideas would be greatly appreciated.   

Hey everyone! I having some issues enabling some users to FileVault with our local account pw. We have a set Prestage enrollment with a local account and password that FileVault 2 is enabled. I know for a fact that I’m entering the information correctly because it accepts the local account everywhere on their devices but not to turn on FileVault. I did notice one thing but not sure if its a coincidence or a bug issue. For every device that we were not able to enable, as soon we click “Turn On FileVault” the field to type goes directly to the password field and not the username field (picture is below) and never accepts the local account. However, other devices when we try to enable users to FV doesn’t do that at all. Any help would be appreciated.      

This morning we had a student lose their iPad. It was found and it was in lost mode, and I was able to remove the lost mode. The problem is, it didn't make a sound. We would have found it hours before if it played the sound. It was on and the volume was up. Also, the location wasn't showing up in Jamf. Any ideas on why, or how we can fix it?

I am setting deferred updates from jamf the com.microsoft.autoupdate2 configuration profile and typically pause the updates to give time for testing.   Does anyone know if I send select to Pause the update at like 16.66 will jamf profile push any of the patches for that version?Recently Office 16.66.0 was released and the next day the 16.66.1 patch came out to resolve a launch issue.   I rather not pause at 16.66.0 and then have a bunch of launch issues since it doesn't send the patch update.  

I've been tasked with some CIS recommendations for our apple estate. I am currently mulling over the firewall parts of this. Do you guys enable firewalls in your estate? It seems like a no-brainer, but this isn't windows and i don't know how much it really helps on the mac side. There are a lot fewer programs actively listening for ports and connections. Also with that, if i implement it now, what programs would it break? How do you guys handle this? Do you find its good to have one or not worth it?

While trying to send data from Jamf to SCCM, I am getting the following errors:-  [ 5] ERROR Jamf.ProxyService.Plugins.SCCM.SccmReports - There was an unexpected error sending the device to SCCM.- System.InvalidOperationException: Invalid registration state: Error. Cannot continue.We are using version 3.70 of the plug-in and SCCM version is 2111I have look through quite a few of the support articles and I am seeing various information, but none of them ever offer a solution and they just end. When I use the Jamf SCCM Proxy Service Helper and try to just send one machine manually I get different error.- [ 67] ERROR Jamf.ProxyService.Plugins.SCCM.Utilities.Certificates - There was an unexpected error sending the device to SCCM.- System.InvalidOperationException: Invalid registration state: Error. Cannot continue.