Hey All,As part of our DEP workflow, we have Jamf Connect Login to create the account but as a previous step we have the Jamf SSO + PreStage LDAP auth features enabled - Has anyone seen where this can cause issues with corrupting users' account when they try and log-in after a reboot. Im currently investigating where after a reboot users are getting stuck at a macOS loading bar after they have auth'd to FileVault and wondered if the above is causing a conflict.let me know what you think ...Rob 

Hey all!I'd like to have an alias that points to Self Service available on the desktop of all Macs across our fleet. I guess there are several ways of doing this. Just looking to get some ideas on what a quick and easy method would be.Thanks!

Hello.  I'm fairly new to Jamf Pro and need a little guidance.  I sent a Mass Action MacOS update to 12.5 to the smart group All Managed clients.  I followed the workflow for Download Mac and allow to install later with a deferment of 3 times.  So far no one is seeing any message come up that the software update needs to be installed.  It's been over 12 hours and I would have thought they would see something by now.  I'm not sure if I missed something and I've gone back over several times to see if I did it right.  I can see the looking at the computers that the policy for 12.5 is in the scope for each mac with the trigger set to "check-in".  I had a few users run sudos for policy and recon but nothing comes up to prompt them to install.  I have no idea what the user experience is supposed to look like so if anyone knows please enlighten me. 

This is something I have been wishing for a while and decided to put it together myself. It is ready to be used as a JSS Computer Extension Attribute if you want to automate Druva inSync re-install/re-activate via Smart Group or simply obtain a list of computers on which Druva inSync is currently Inactive. Please note: the script is using jq JSON parser, which can be installed on each mac using only a script as I posted here: https://community.jamf.com/t5/jamf-pro/homebrew-and-js-deloyment-using-only-scripts/td-p/247472  You can get the script here on my gist: https://gist.github.com/shurkin18/2c0a1e454f5dbac8b91cfca5893e7722 Or from below:     &

I'm still kind of new to Jamf, I had an incident on Friday and need to disable iMessage and Facetime but can't figure out how.

I am at a loss with this issue. I have uploaded a PLIST to JAMF and I am scoping it to my test machine. Chrome is showing that the policy is taking affect but it is not being enforced. ( I have attached a screen shot of the policy within Chrome). Here is the PLIST that I have configured <?xml version="1.0" encoding="UTF-8"?><!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"><plist version="1.0"><dict> <key>RestrictSigninToPattern</key> <array> <string>scsd2.com</string> </array></dict></plist> Anyone who could offer some advice would be greatly appreciated.

I have a new iMace that the user edits pages and numbers files off a windows SMB share. She is constantly getting a message that the file cannot be saved. I had assumed it was autosave, so I disabled that via the general settings in the system preferences. but the issue is still happening. the windows share is on a windows 2019 server. this was not a problem on her previous iMac that was replaced. any suggestions?

Hello, I am just starting with Jamf and was wondering if there is a way to put different options in configuration profile in order, set by me.Here's what I mean:We are trying to deploy a profile with 2 options:- Network, with PEAP configured to 'any ethernet'- Certificate with, well. A certificate. Our intention is to have users authenticate on the login screen, so they don't receive any additional pop ups. So far it looks like it works just fine, when the certificate is on the machine.However, because I deploy both certificate and network configuration in the same profile, it looks like sometimes the network part applies before the certificate is installed, which causes pop-up with 'choose certificate' to appear. So the question is - is there a way to deploy both options in 1 configuration profile, but delay the network part until the certificate is installed?If not, is there maybe an

But the policy will work if I run it from self service or if I issue the sudo jamf policy command at terminal.  All my policy is running one command "kdestroy -a". Regardless of where it runs from it does not report any errors but when the command is executed during reoccurring checkin the kerberos tickets are not deleted.  Its so odd because as I said before when I run it from self service it works and when I issue the sudo jamf policy command it works.  So I'm a bit stumped.

We currently use LANDesk/Ivanti for Windows management, but they're moving towards Intune. With that, they want to have one MDM for all devices. In the meeting I was just in, I explained briefly that when we tried that years ago pre-Jamf it was an awful experience for us and the users. Remote only worked 50% of the time, no ability to push software, etc.There's another meeting next week to discuss that more in-depth, and I'm currently writing up a justification for what we use Jamf for as I don't know if Intune can do all of it. They also mentioned that Ivanti might now be able to do better software packaging/remote access for Macs now compared to 6 years ago before we got Jamf. I really want to convince them to not go the Ivanti route, and only go with Intune if it can actually replace Jamf properly. We have about 450 Mac clients, plus at least 50 iPads, various iPhones, and a few Apple TVs we're managing through Jamf. Anyone who

Hey folks... For branding reasons that are unknown to me, management would like to see if it's possible to limit the choices of what desktop wallpaper pics users can set, as they have our marketing team working on some branded pics that I have to push out.I know I can lock the desktop pic using the Restrictions profile, but does anyone know if / how I could limit their choices on what wallpaper they can pic and choose from?I'm simply hoping that nobody knows or the answer is no, so I can get back to them and put this trivial issue to bed.

Example of today's headline: School bus driver who raped a 14yr old won't go to prison. We have suppressed the News App, we have turned off the Notifications for News. And still, the News Widget is splashing these "Headlines" across Student iPads.I have searched through Config Profile options for any reference to Widgets, not finding anything.Has anyone found a way to make it stop?

Has anyone managed to get IPP printing working from macOS?We are predominately a Windows shop and our print server is hosted on a Windows 2019 Server VM. As SMB is no longer a possibility, I set up an IPP queue on it and am attempting to send jobs to it from test Macs but nothing appears in the printer queue on the server.On the client side, when sending the job I see an information pop-up appear but I can't work out what it is saying as it disappears after half a second. I don't get the printer icon in the Dock like we used to with SMB printing.Is the IPP version on Windows compatible with later macOS revisions, or is this where third-party solutions come in (such as PaperCut etc.)?

Help users easily identify their 50 largest directories in preparation to upgrade to macOS VenturaBackgroundOne of the most common barriers for general Workforce users upgrading to the next major operating system is lack of available disk space.We have benefited greatly from Zack Thompson’s Get-LatestOSSupported.sh Jamf Pro Extension Attribute which helps inform users if their Mac meets Apple’s latest requirements.However, frequently users observe the message: Ventura / Insufficient Storage.Continue reading …

I have to imagine this is coming, or maybe I missed something, but I cannot find a way in JAMF Pro 10.36.1 , to stop a user from connecting an iPad via Universal Control to their computer without restricting iCloud accounts. Does anyone has anyone have any knowledge on how to prevent this?

Hi,I’m using the command below but the --preservecontainer usage doesn’t appear to work tried it before the  eraseinstall and after.'/Applications/Install macOS Monterey.app/Contents/Resources/startosinstall' --agreetolicense --preservecontainer --eraseinstall --forcequitapps --newvolumename 'Macintosh HD'Anyone know what I’m doing wrong here?could it be the --newvolumename 'Macintosh HD' causing --preservecontainer not to work?

Does anyone have experience deploying printers in JAMF with Mojave? I've tried to use JAMF Admin to capture it, built a script using lpadmin, etc, and none of it works. There seems to be something missing. #!/bin/sh sudo lpadmin -p "PRINTER" -L "Location" -D "Printer Name" -E -v "ipp://<local_ip>" -P "/Library/Printers/PPDs/Contents/Resources/HP Color LaserJet M750.gz" There always seems to be something missing. When attempting to open the Print Queue, I'm prompted that the printer is missing software. When you try to install it, it looks like it is going to load, but never does anything beyond this.

 Welcome to the Jamf Safe Internet product forum. We are pleased to bring our purpose built content filtering and network threat prevention product to the education market.  Please use this forum to share questions, insights and feedback to both our community and our teams here at Jamf. If you’d like more information about Jamf Safe Internet please check out this webpage and if you’d like to request a trial then please use this link.  We look forward to hearing from you all as we continue to empower student success with our whole p

We are thinking about switching from Apple MDM to JAMF and the municipality already has a JAMF server with regular Pro licenses, so my question is, can we add EDU licenses to the same server and select on device basis or do we need 2 separate servers. Can't find any clear info on it so I'll just ask here if anyone knows.

Hello Team,The project I am currently working in, has got some vulnerabilities with installed Apache Tomcat into the JSS serverThe Apache Tomcat needs to be upgraded. Could you please guide with the instruction process of upgrading the Apache? Thanks,Abhik

I have created a useful Dashboard in Jamf Pro, but it is only visible to me. How can I create a universal Dashboard that is visible to all Jamf Pro administrators?

We are in the middle of migrating between Sophos and Defender and have observed a large percentage of our devices don't have the right Defender Configuration profiles required to onboard our devices.  Defender has installed fine through policy, but can't work without its settings which are applied via Config profiles.The Config profiles for Defender on a lot of active machines were discovered to be "Pending" from the Configuration Profiles view within Jamf, but for most Macs, there are no pending Management commands from the Inventory view, and for some they simply sit there indefinitely saying Pending.I've managed to replicate the problem with really simple config profiles, such as some Finder config, without finding a fix.  We've just upgraded to 10.34.0 in the hope it magically fixed things, but it hasn't.The devices affected are all active, checking in and updating inventory.  There's no obvious commonality between devi

Anyone having issues with using the Activation Lock Bypass Code from Jamf on Monterey? I have three Macs now on Monterey that I can't unlock with the bypass code. Get an error saying: "The operation couldn't be completed. Your Apple ID or password is incorrect." Tried on a Mac running Big Sur and the bypass code from Jamf worked to activate the Mac. With the computer erased and activated I installed Monterey, enabled Activation Lock through Find My Mac, erased it through Recovery and tried to activate using the refreshed bypass key from Jamf - got the error again. So looks like it may be a Monterey issue?I would expect the bypass key to work regardless of whatever Apple ID the Mac has been connected to so not sure why this check fails or is even made.Thanks. 

We have implemented Shared iPads in our environment, and for some reason the Markup feature in Safari has disappeared. We've found that our normal 1:1 iPads in the environment have the feature, so we're trying to figure out if this is another Shared iPad "quirk" or if it's merely a setting we have that's accidentally restricting the feature.

I manage a retail shop's point-of-sale iPads and the POS software they use sometimes causes weird glitches with new updates which are fixed quickly usually. I know I can delay iOS updates but I can not figure out how to delay individual app updates or I would be happy with delaying all 3rd party app updates for a certain time. Is this possible?