I'm still kind of new to Jamf, I had an incident on Friday and need to disable iMessage and Facetime but can't figure out how.

I am at a loss with this issue. I have uploaded a PLIST to JAMF and I am scoping it to my test machine. Chrome is showing that the policy is taking affect but it is not being enforced. ( I have attached a screen shot of the policy within Chrome). Here is the PLIST that I have configured <?xml version="1.0" encoding="UTF-8"?><!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"><plist version="1.0"><dict> <key>RestrictSigninToPattern</key> <array> <string>scsd2.com</string> </array></dict></plist> Anyone who could offer some advice would be greatly appreciated.

I have a new iMace that the user edits pages and numbers files off a windows SMB share. She is constantly getting a message that the file cannot be saved. I had assumed it was autosave, so I disabled that via the general settings in the system preferences. but the issue is still happening. the windows share is on a windows 2019 server. this was not a problem on her previous iMac that was replaced. any suggestions?

Hello, I am just starting with Jamf and was wondering if there is a way to put different options in configuration profile in order, set by me.Here's what I mean:We are trying to deploy a profile with 2 options:- Network, with PEAP configured to 'any ethernet'- Certificate with, well. A certificate. Our intention is to have users authenticate on the login screen, so they don't receive any additional pop ups. So far it looks like it works just fine, when the certificate is on the machine.However, because I deploy both certificate and network configuration in the same profile, it looks like sometimes the network part applies before the certificate is installed, which causes pop-up with 'choose certificate' to appear. So the question is - is there a way to deploy both options in 1 configuration profile, but delay the network part until the certificate is installed?If not, is there maybe any other way to achieve what we are trying to do?  Thanks in advance

But the policy will work if I run it from self service or if I issue the sudo jamf policy command at terminal.  All my policy is running one command "kdestroy -a". Regardless of where it runs from it does not report any errors but when the command is executed during reoccurring checkin the kerberos tickets are not deleted.  Its so odd because as I said before when I run it from self service it works and when I issue the sudo jamf policy command it works.  So I'm a bit stumped.

We currently use LANDesk/Ivanti for Windows management, but they're moving towards Intune. With that, they want to have one MDM for all devices. In the meeting I was just in, I explained briefly that when we tried that years ago pre-Jamf it was an awful experience for us and the users. Remote only worked 50% of the time, no ability to push software, etc.There's another meeting next week to discuss that more in-depth, and I'm currently writing up a justification for what we use Jamf for as I don't know if Intune can do all of it. They also mentioned that Ivanti might now be able to do better software packaging/remote access for Macs now compared to 6 years ago before we got Jamf. I really want to convince them to not go the Ivanti route, and only go with Intune if it can actually replace Jamf properly. We have about 450 Mac clients, plus at least 50 iPads, various iPhones, and a few Apple TVs we're managing through Jamf. Anyone who can speak on experience with this would be appreicated.

Hey folks... For branding reasons that are unknown to me, management would like to see if it's possible to limit the choices of what desktop wallpaper pics users can set, as they have our marketing team working on some branded pics that I have to push out.I know I can lock the desktop pic using the Restrictions profile, but does anyone know if / how I could limit their choices on what wallpaper they can pic and choose from?I'm simply hoping that nobody knows or the answer is no, so I can get back to them and put this trivial issue to bed.

Example of today's headline: School bus driver who raped a 14yr old won't go to prison. We have suppressed the News App, we have turned off the Notifications for News. And still, the News Widget is splashing these "Headlines" across Student iPads.I have searched through Config Profile options for any reference to Widgets, not finding anything.Has anyone found a way to make it stop?

Has anyone managed to get IPP printing working from macOS?We are predominately a Windows shop and our print server is hosted on a Windows 2019 Server VM. As SMB is no longer a possibility, I set up an IPP queue on it and am attempting to send jobs to it from test Macs but nothing appears in the printer queue on the server.On the client side, when sending the job I see an information pop-up appear but I can't work out what it is saying as it disappears after half a second. I don't get the printer icon in the Dock like we used to with SMB printing.Is the IPP version on Windows compatible with later macOS revisions, or is this where third-party solutions come in (such as PaperCut etc.)?

Help users easily identify their 50 largest directories in preparation to upgrade to macOS VenturaBackgroundOne of the most common barriers for general Workforce users upgrading to the next major operating system is lack of available disk space.We have benefited greatly from Zack Thompson’s Get-LatestOSSupported.sh Jamf Pro Extension Attribute which helps inform users if their Mac meets Apple’s latest requirements.However, frequently users observe the message: Ventura / Insufficient Storage.Continue reading …

I have to imagine this is coming, or maybe I missed something, but I cannot find a way in JAMF Pro 10.36.1 , to stop a user from connecting an iPad via Universal Control to their computer without restricting iCloud accounts. Does anyone has anyone have any knowledge on how to prevent this?

Hi,I’m using the command below but the --preservecontainer usage doesn’t appear to work tried it before the  eraseinstall and after.'/Applications/Install macOS Monterey.app/Contents/Resources/startosinstall' --agreetolicense --preservecontainer --eraseinstall --forcequitapps --newvolumename 'Macintosh HD'Anyone know what I’m doing wrong here?could it be the --newvolumename 'Macintosh HD' causing --preservecontainer not to work?

Does anyone have experience deploying printers in JAMF with Mojave? I've tried to use JAMF Admin to capture it, built a script using lpadmin, etc, and none of it works. There seems to be something missing. #!/bin/sh sudo lpadmin -p "PRINTER" -L "Location" -D "Printer Name" -E -v "ipp://<local_ip>" -P "/Library/Printers/PPDs/Contents/Resources/HP Color LaserJet M750.gz" There always seems to be something missing. When attempting to open the Print Queue, I'm prompted that the printer is missing software. When you try to install it, it looks like it is going to load, but never does anything beyond this.

 Welcome to the Jamf Safe Internet product forum. We are pleased to bring our purpose built content filtering and network threat prevention product to the education market.  Please use this forum to share questions, insights and feedback to both our community and our teams here at Jamf. If you’d like more information about Jamf Safe Internet please check out this webpage and if you’d like to request a trial then please use this link.  We look forward to hearing from you all as we continue to empower student success with our whole product experience offering for education.  Many thanks  Aaron WebbSenior Product Marketing Manager 

We are thinking about switching from Apple MDM to JAMF and the municipality already has a JAMF server with regular Pro licenses, so my question is, can we add EDU licenses to the same server and select on device basis or do we need 2 separate servers. Can't find any clear info on it so I'll just ask here if anyone knows.

Hello Team,The project I am currently working in, has got some vulnerabilities with installed Apache Tomcat into the JSS serverThe Apache Tomcat needs to be upgraded. Could you please guide with the instruction process of upgrading the Apache? Thanks,Abhik

I have created a useful Dashboard in Jamf Pro, but it is only visible to me. How can I create a universal Dashboard that is visible to all Jamf Pro administrators?

We are in the middle of migrating between Sophos and Defender and have observed a large percentage of our devices don't have the right Defender Configuration profiles required to onboard our devices.  Defender has installed fine through policy, but can't work without its settings which are applied via Config profiles.The Config profiles for Defender on a lot of active machines were discovered to be "Pending" from the Configuration Profiles view within Jamf, but for most Macs, there are no pending Management commands from the Inventory view, and for some they simply sit there indefinitely saying Pending.I've managed to replicate the problem with really simple config profiles, such as some Finder config, without finding a fix.  We've just upgraded to 10.34.0 in the hope it magically fixed things, but it hasn't.The devices affected are all active, checking in and updating inventory.  There's no obvious commonality between devices affected, almost everything comes in th

Anyone having issues with using the Activation Lock Bypass Code from Jamf on Monterey? I have three Macs now on Monterey that I can't unlock with the bypass code. Get an error saying: "The operation couldn't be completed. Your Apple ID or password is incorrect." Tried on a Mac running Big Sur and the bypass code from Jamf worked to activate the Mac. With the computer erased and activated I installed Monterey, enabled Activation Lock through Find My Mac, erased it through Recovery and tried to activate using the refreshed bypass key from Jamf - got the error again. So looks like it may be a Monterey issue?I would expect the bypass key to work regardless of whatever Apple ID the Mac has been connected to so not sure why this check fails or is even made.Thanks. 

We have implemented Shared iPads in our environment, and for some reason the Markup feature in Safari has disappeared. We've found that our normal 1:1 iPads in the environment have the feature, so we're trying to figure out if this is another Shared iPad "quirk" or if it's merely a setting we have that's accidentally restricting the feature.

I manage a retail shop's point-of-sale iPads and the POS software they use sometimes causes weird glitches with new updates which are fixed quickly usually. I know I can delay iOS updates but I can not figure out how to delay individual app updates or I would be happy with delaying all 3rd party app updates for a certain time. Is this possible?

Here we go again. Just a discussion on Software updates in 2022 rather than necroing an old post.How are you guys keeping up with OS updates and figuring out if devices failed patching or still processing? I'm over here still needing to manually check each device that is not running the OS build I am expecting and digging through the install.log if the MDM commands are showing as completed.JAMF still has not given us a way to deploy software update MDM commands via policy. Even after saying it was a possibility 10 months ago. Checking status requires going device by device and checking inventory records and if OS updates fail you get nothing as JAMF is not using the StatusUpdate key. Managed Software Updates - using deferrals via a m... - Jamf Nation Community - 249821Example mass action/remote command workflows moving forward: (Existing) Admins can issue a remote command to a set of devices to download and install to an upgraded version of macOS ASAP, restarting end-user machine

Look for some strings to pull at with a few machines that regularly check-in but never update inventory.If we re-enroll them they'll update inventory on enrollment but never automatically after. Occasionally we can run sudo jamf recon but eventually even that seems to fail. jamf.log indicates an "unknown error" over and over and overTue Aug 30 20:18:22 LAPTOP jamf[91415]: Checking for policies triggered by "recurring check-in" for user "USER"... Tue Aug 30 20:18:26 LAPTOP jamf[91415]: There was an error. Unknown Error - An unknown error has occurred.  In searching the forums here I've seen a few times to disable "Collect available software updates" during inventory collection (Settings > Computer Management > Inventory Collection) due to a character length issue with some Apple updates, but alas that doesn't seem to have helped, nor did the above error seem to indicate it was an update concern. I know this issue can be a number of things so I'm jus

Hi, every file I package with Composer comes up with  "this package is incompatible with this version of macos" when I try to install it manually on the same Mac I created it on. All I can find on this are solutions related to Cisco installs, this is happening on everything I try to package, eg Brave browser, Firefox etc, the process I follow is download the dmg from the vendors site being careful to make sure it's either silicon or intel specific, drag it into composer, convert to source then in source select build as package and save it to the desktop. I am only doing this for software I can't get the pkg for obviously. I am sure I am missing something simple here?

Is there as easy way to deploy single hot corner config , i need disable screensaver when cursor is moved to bottom right corner.Regards