Hi, I registered a few devices via Self Service and the Device Compliance to our Azure AD. The registration process is fine and the devices show up after 2-3 min in Azure, but it takes many hours or a day that the device is marked as compliant? There is just "N/A". As long as the status isn't marked as compliant the user can't access apps which are restricted to company devices that must be compliant. Does somebody have the same issues? I think it is not related to AzureAD because Jamf checks the compliance criteria by itself and send it to AAD. The devices are listed in the Smart Group with the compliance criteria's. Best regards, Jonny Update: As you can see in the following image, the device was not updated until the next day. The screenshot is from the AAD Audit Log. First the device is marked as "managed" and on the next day as "compliant".

I have an environment where we are deploying Chrome Enterprise, not enrolled in CBCM, and we need to enforce the RelaunchNotification Chrome policy. I have the following plist for you viewing pleasure:<?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>updatePolicies</key> <dict> <key>global</key> <dict> <key>UpdateDefault</key> <integer>0</integer> </dict> <key>com.google.Chrome</key> <dict> <key>UpdateDefault</key> <integer>0</integer> <key>TargetVersionPrefix</key> <string/> <key>RollbackToTargetVersion</key> <string/> <key>TargetChannel</key> <string/>

I am using shared iOS devices using Setup/Reset and Microsoft Authenticator.I would like to get one of the profiles the ability to delete and reinstall apps on demand due to the problem of app configs only being deployed as a part of app deployment.I found I am able to uninstall an application not through long hold and delete but only settings general storage then deleting the app.  The app isnt reinstalling on its own however.  I tried deploying the self service app but that app doesnt seem to see any configurations and isnt showing any catalog.Is this possible, or is there a better way?

Hello everyone.I am deploying Snapcomms, a screensaver-type application to be used by our communications department. The pacakge is installed successfully, but it needs access to PPPC settings. I am using the command codesign -dr - /Applications/Snap\\ Client.app to get information about what settings to utilize. These are the settings I got: However, the deployment errors with this message:In the payload (UUID: EF17794A-9081-4D7B-944F-EAA52BDA761F), the key 'CodeRequirement' has an invalid value.I contacted the company's support, but we don't have any new information yet.I am looking for suggestions in case someone has already deployed Snapcomms with Jamf or suggestions about troubleshooting this issue.Regards!

I have been trying to get auto cert selection working in Safari for a bit.  I could not see a solution in a plist, so I believe an Identity Preference in Keychain would be the next bet.I have been struggling to find any type of documentation on this.  I basically am looking for a solution to auto select the Microsoft Office cert for all Office logins.  I have tried using *.microsoftonline.com (with and without slash), and several other variations... To the full URL and it does not seem to work.Anyone have any tips on auto cert selection for Safari?  Much appreciated in advance

Anyone else have multiple users having a corrupted Zoom error after the latest 5.12.3 App Installer update?

I have been using Cisco Security Connector for iOS without issue for the past year.  After updating to iOS 16, it is no longer filtering Safari.  It does appear to be filtering system level web traffic, but Safari is bypassing the filter.  Has anyone else experienced this issue?  I've been looking through the changes in JAMF related to iOS 6 and cannot find anything pertinent to the issue.

Couldn't find a script that did this. We don't use this a lot but I was asked to patch Cisco Webex to ensure that the users that do have it were on the latest version. This is based on a script we've been using that does the same thing for chrome.https://github.com/theadamcraig/jamf-scripts/blob/master/Cisco%20Webex%20-%20install%20latest%20version.sh

I am working with a new graphics team trying to support AJA on a 2019 Mac Pro running Monterey. AJA does not seem to have great familiarity with a managed environment let alone Jamf. I have set up Approved system extentions for all of the known extentions and allowed drivers. ALLOWED SYSTEM EXTENSIONScom.aja.controlpanelcom.aja.ajanmoscom.aja.controlroomcom.aja.performancetestcom.aja.iokit.ntv2I still cannot get the AJA software to and or Mac to find the drivers for the onboard video card. The System report sees the card in the 6th slot of the Mac pro. If AJA is installed prior to the machine being included in Jamf all is well the moment Jamf manages it the drivers are unavailable. I have not set up a PPPC yet as I am having trouble figuring out if I need that and how to format it for this product.

What does this setting in the configuration profile do? its under software restrictions. "Pairing with no-supervision configured host"I have a few ipads which are not functional, their mdm profile is so old that its red and it wont communicate with jamf. So i wanted to use apple configurator to manage them, but they say "pairing is prohibited by a policy on the device" just wondering if its this policy causing it. i'm going to try wiping it with itunes next.

I am working with a new graphics team trying to support AJA on a 2019 Mac Pro running Monterey. AJA does not seem to have great familiarity with a managed environment let alone Jamf. I have set up Approved system extentions for all of the known extentions and allowed drivers. ALLOWED SYSTEM EXTENSIONScom.aja.controlpanelcom.aja.ajanmoscom.aja.controlroomcom.aja.performancetestcom.aja.iokit.ntv2I still cannot get the AJA software to and or Mac to find the drivers for the onboard video card. The System report sees the card in the 6th slot of the Mac pro. If AJA is installed prior to the machine being included in Jamf all is well the moment Jamf manages it the drivers are unavailable. I have not set up a PPPC yet as I am having trouble figuring out if I need that and how to format it for this product.

This might be a simple fix but I have searched and my Google-Fu is weak after Daylight Saving Time ;-). I have a supervised 12.9" iPad that is in Single App mode. Somehow, it lost the Wifi and cannot be managed/reset/etc. by JAMF Pro. I have tried to reset it and put it in recovery mode but it will not go Plugging it into a MacBook Pro and iTunes yields the "This device is supervised by another device...." It seems that I have an unmanageable device that I cannot get back. Seems there has to be a way to get control of it again. Ideas? TIA, /randy

Hi has anyone seen this.Trying to integrate Azure Sentinel with JAMF Protect and getting an error."S3 forwarding values must only contain alphanumerical....." We are not configuring this and is turned off any ideas? 

Why is there an option to only scope this to 1 smart group? While every other policy that installs apps lets you scope multiple things. Or am i missing something? 

Hi all Now that iOS 10 allows you to delete stock apps (e.g. Calendar, Reminders, Notes, etc), it looks like the only way to have these available for reinstall on devices that have the App Store restricted is to make them available in Self Service. But I cant seem to find them all on the VPP store to get the licenses. Has anyone else found these on the VPP store yet?

 Hi,my goal is to manage Jamf users in Google Workspace and not have to set up users in Jamf Cloud. For that, I have set up SAML SSO and the Google Secure LDAP Integration. Both separately work fine.Searching and matching users to groups via LDAP in the Cloud Identity Provider Mapping Test page works.Signing in via SSO also succeeds as long as a user is present in Jamf with a matching email address.     The SSO login stops working with "Access Denied" when removing the user in Jamf and only having an LDAP group in Jamf.Has anybody done a similar setup? Any help would be greatly appreciated!  Thanks,Christian https://docs.jamf.com/10.42.0/jamf-pro/documentation/Single_Sign-On.htmlhttps://docs.jamf.com/technical-articles/Configuring_Single_Sign-On-with_Google_Workspace.htmlhttps://docs.jamf.com/10.42.0/jamf-pro/documentation/Google_Secure_LDAP_Integration.html 

 Hi Jamf NationWe have released Jamf School 11.0 (2022-10-24) Compatibility With iOS, iPadOS, macOS, and tvOS This update provides compatibility with macOS Ventura, iOS16, iPadOS 16 and tvOS 16 including compatibility with management workflows such as, App distribution, Profiles and Installation of the Jamf Teacher, Jamf Student and Jamf Parent appJamf School also update provides additional Accessibility support such as, Enable Bold Text, Enable Zoom, Increase Contrast and Enable Touch Accommodations. Check out the full release notes for Jamf School here 

A Jamf Pro Extension Attribute to report the status of macOS Ventura’s new Rapid Security ResponseBackgroundFor a number of macOS versions, we’ve been reporting on the status of Install system data files and security updates  and macOS Ventura introduces Rapid Security Response.Continue reading …

Has anyone noticed issues with the Microsoft VPP applications (ie: Outlook) taking a long time to finish installing using Self Service? After clicking "Install", the application will download and complete but not show up in the /Applications folder for 3 or 4 minutes later. This is causing the Self Service button to display "Install" instead of "Open". Then the user clicks install multiple times causing failed install error in Self Service. Jamf is showing it failed because of multiple requests to install. The application does eventually show up after a few minutes.

Hello All,I am trying to get Cylance to install in a prestage enrollment and have been making slow progress thanks to all of you. Cylance requires the user to put in a token when installing. I have followed this post https://community.jamf.com/t5/jamf-pro/installing-cylance-package/m-p/145087#M134146 exactly. Everything seems to be running when I look at the logs, however I see this error: Result of command:/bin/sh: /private/tmp/Cylance/install_cylance_with_token.sh: Permission deniedIf I am understanding how executing a command works it should run as root. Could this be because this solution is a little older? Does anyone have any idea how to get this script to run? Thanks in advance.

Hello, Does anyone have a best practice in place to create a group for reclaimed machines that may be temporarily unmanaged before redeployment. Smart Groups will not work if the machine is unmanaged and Static Groups could get tricky if I need to remember to remove them from a static group before redeployment to a new user. I would love to have a group listed someone in my instance that compiles all of my reclaimed machines, rather than keep an excel spreadsheet as I go. Work smarter, not harder, ya know? Any ideas on this? Thank you!

A copy-pasta function to output all vendor preference keysBackgroundWhile implementing feedback from Søren Theilgaard, we needed an easy way to output every key / value pair from any vendor’s preference files, in either the user or system domain. # readPreferenceKeys "vendor name" "domain [ system | user]" readPreferenceKeys "apple" "system" readPreferenceKeys "apple" "user" Continue reading …

Has anyone had issues with Zoom infrequently disconnecting when Zscaler is running using wifi or lan?Zoom and Zscaler deployed via Jamf Pro. Currently both on latest release version and macs running Ventura. Issue also happened when the macs were running Monterey.Windows machines in the same office using the same wifi or lan connection  and on the same versions of zoom and zscaler do not have this disconnecting issue.    

I'm using the JSON configuration profile in Jamf and for some reason every time I try I save the text verbiage in the configuration profile it doesn't update on the end device so I'm stuck with the default wording. I've also tried changing it in the JSON file directly and still the same issue. Anyone run into this before?  

Anyone experiencing any problem behind proxy (corprorate network)on macOS Monterey?On earlier version of macOS Monterey, we experienced a bug that safari didnt load any external sites when the device was connected to corporate network(wifi or VPN) as described in this post: https://community.jamf.com/t5/jamf-pro/monterey-safari-proxy-bug/m-p/251972From Monterey 12.6 and now on Monterey 12.6.1, we have network problem on many of clients that occur ramdomly.We have noticed the following problem:MS Teams: cant sync with the error: we ran into a problem. Outlook: Same as MS Teams. Mail cant sync. we get the sync status on the bottom right corner with the error "connecting to $Email Address and Not connected to $Email"Safari: cant load any external sites. Chrome and other browser works more or less betterOneDrive: Sync problem_____________________________________________________________________Our proxy is still http and I know that http will be deprecated and should work still. S