So far my org has a handful of machines on Ventura. Oddly, Jamf is showing two of them as reporting version "13.0.0", and the rest are just showing "13.0".I have a script that pulls the OS versions and counts via API, and when I run the output through uniq it's treating these as two different versions. I should be able to adjust the script to deal with that, but before I go to the trouble I was just wondering if anyone had any thoughts on why that would happen. One of the "13.0.0" machines is Intel and one is Apple Silicon, the unaffected machines are some of each.

Hello all, We have switched from DigiCert to Let's Encrypt.With the help of this old script from Jamf, which I have tweaked a bit, we were able to flawlessly generate the Let's Encrypt certificate and install it in the Java KeyStore.Unfortunately, Jamf now crashes on startup. I see a lot of messages like this:  2022-10-28 16:13:36,544 [INFO ] [startStop-1] [efaultSecurityFilterChain] - Will secure Ant [pattern='/servicediscoveryenrollment/v1/userenroll'] with [org.springframework.security.web.session.DisableEncodeUrlFilter@7b332ffb, org.springframework.security.web.context.request.async.WebAsyncManagerIntegrationFilter@7c9d12bb, org.springframework.security.web.context.SecurityContextPersistenceFilter@7bcf9bfc, org.springframework.security.web.header.HeaderWriterFilter@3d3a5b23, org.springframework.security.web.authentication.logout.LogoutFilter@2e1d93c6, com.jamfsoftware.enrollment.web.security.AuthorizationTokenHeaderFilter@690605fc, org.springframework.

We are receiving a "Tomcat SSL Certificate Expiring in 20 days" warning. Apparently, we are using the built-in Certificate authority but since we updated this a long time ago, we aren't sure what to do. Do we need to choose the first option, since we don't want our clients to lose their connection? And if so, how and where do we obtain (download) this SSL Certificate Keystore for uploading into the JSS? Your help is appreciated.

We have Cisco AnyConnect 4.10.03104 working great on Mojave-Big Sur, with users not receiving any popups.  When upgrading from any OS to macOS Monterey, we receive the popup below, regarding a system extension being blocked.  Our configuration profile is scoped to all devices.  When reloading a Mac fresh from Monterey, users do not see the message below.  It only appears to be happening after an upgrade.  Just wondering if anyone has a solution. 

Can we use Microsoft Office applications like Outlook Client, One Note,One Drive Business and other office applications on Mac Machines managed via Jamf Pro. If possible please help .. Thanks again. RegardsSagar

Hi,Once the user is enrolled via User-Invitation method, Jamf connect do not identify the Azure password and prompts user with JC login screen asking to enter credentials .There are no password restriction policy deployed via Jamf on our devices

Hello, it seems that users are able to delete apps even when the box is unchecked to "Allow user to remove the app" on the specific app page.We have Lightspeed relay smart agent app that we don't want deleted. iPads on iPadOS 15 work correctly, they have a profile to allow removal of apps but the relay app does not allow removal so they can't remove it. iPads on iPadOS 16 with the same config allow removal of the app.It seems that is is all or nothing as far as app removal goes on iPadOS 16.1 Anyone else experiencing this?

Hello,Our marketing department tasked IT with providing office signage for our two offices- originally we were looking at BrightSign which seemed fairly expensive per device. With the recent discount on Apple TVs, I thought they would provide a cost effective solution as well as giving AirPlay capability to the monitors around the offices.The thought was to give each department a Managed Apple ID to drop their own photos and slides into iCloud photos and have the Apple TVs cycle through those images when not in use. And if whoever is managing that account leaves the company, we could reassign the Apple ID owner in Apple Business Manager.When attempting to sign into a managed Apple ID on the Apple TV that is enrolled in ABM & Jamf, we receive the message, "This Apple ID is not supported on this device." It has already been logged into www.icloud.com as well as on a Mac- but for whatever reason will not login on the Apple TV.Is this just flat out not possible? If not, do you hav

I'm not sure if this is even possible but is there a way to lock a computer in JAMF with a timer? Say we give a user a new mac to replace their old one but they want 2-3 weeks to transfer their data. Instead of putting it on my calendar or remembering to lock that mac when time is up, is there a policy that we can set to automatically lock that mac with either a specific lock number or random lock number that can be shown in JAMF? This would be a pretty good feature to have in JAMF.

I noticed that our macOS Monterey app still shows an older version of the app (latest is 12.6.1 but shows 12.6). Is there a way to refresh it so it can grab the latest version or is this normal for macOS updates? All other apps are up to date. I don't want users updating to an outdated version only to have to update it again.

We just ran into a problem where a users adobe suite updated from 2020 to 2023 and broke all their plugins.  I tried our old 2020 install package we had initially deployed with and they wouldn't install.  I went to the adobe admin site and they only allow n-1.  I reached out to their support and was told basically current and one behind is it.I want to make sure that we get the updates turned off before it affects too many people, but I can't find a script/config profile to disable those auto-updates.  Does anybody have a manageable way to do this? 

An iPad was returned to me that was long considered lost.  It was gone so long that it was deleted out of jamf. The iPad however, still has the mdm profile installed along with all of the restrictions that we push out to our student iPad. This means I cannot wipe the iPad from the iPad itself to re-enroll.   So I plug it into my computer and try to wipe it via apple configurator 2. A lock icon appears when it's plugged in and will not allow me to wipe from configurator either. I then try and boot the iPad to it's "restore" mode and try and restore the iPad via configurator. It spits out an error there as well.  If I had to guess I am unable to do anything because of a restriction that is still sitting on the iPad from when it was enrolled, but being that it is no longer enrolled I have no way of removing the restrictions if I can't wipe it.  Am I screwed?

Good Morning, Reaching out to the Jamf community for some clarity as i can't seem to see anything online. Has something changed in Jamf 10.42 or a recent version that may cause what i'm seeing in this screenshot below? I can't edit  the version manually or edit when Jamf will look for new ones automatically, am i missing something simple or is this no longer possible? 

Hi All, I've had a bit of a dig around the internet and can't seem to find anything on this. I am aware of an App Configuration to allow teachers automatically on an iOS device. Is there a way to achieve the same thing with the app on MacOS (Jamf Pro)?

Hello Everyone , I have created package for Burp Suite to install on systems automatically.Post installation when I try to open the application then I get prompt to accept Terms and Conditions, thereafter getting License activation prompt to enter the License key .It would be really helpful if someone has already installed the application and there might be some way we can skip this two prompts for end user by directly accepting the terms and conditions prompt and activate the license key from backend as soon as the application is installed on the system .Since I'm new to this application ,any help will be really appreciated !! 

Hi All, I am trying to uninstall app using jamf pro.However, when i tried to select uninstall from the action menu - i dont see uninstall option. https://docs.jamf.com/10.24.1/jamf-pro/administrator-guide/Uninstalling_Packages.html#:~:text=Select%20the%20Packages%20payload%20and,the%20settings%20for%20the%20package. Am i missing something here? 

Wondering if there is a way to for a chrome extension to always be on, even when a user opens an incognito tab? I see posts about how to enforce an extension to always be installed and not be able to uninstall, but the way around that is to just open an incognito tab. 

i enrolled my iPad into jamf, for my company. the enrollment of the iPad, was successful. i was able to see the device in jamf. And the MDM profile was successfully installed. however no prerequisite, application was installed on the iPad. would it be possible, if i installed the self service app from the app store. And would self service, contain all my company approve apps. 

I have some .workflow quick actions that encrypt and decrypt files. I want the end users to be able to just right click on a folder, and under "quick actions", select either encrypt or decrypt. I'm able to install these into the services folder, and they show up in the system prefs as an option to enable, but I can't find a way to automatically enable them so they will show up in the quick actions menu without any additional user input.  I know you can install the quick action by opening the .workflow file, but this prompts for install, and I'd rather not have a prompt for install come up for users, I want this to be automatic, in the background. Is there a way to silent install a .workflow so it shows up in quick actions without any user input?

Hi everyone, I'd like to ban users from disabling chrome/safari specific extension (McAfee Endpoint Security Web Control). Any idea for the config to setup in jamf ? Should I rebuild Chrome bundle or just push a policy ?

Does anybody know of a way of setting a default value when using an Extension Attributes of an input type of a Popup Menu. I want to have a true or false pop-up which sets the text of the field to false instead of null within the inventory database so that if the computer has recon run and someone forgets to select something from the popup I get a value set in the field. Does anyone have any ideas?

Hi,we always hear what we can do with the products but nobody's saying what is sensible.We use Apple School Manager to manage iPads and Apple TVs and to buy software.In Jamf we have Device Groups (and Profiles) for teachers and for Shared iPads including the classes you need for the Shared iPads, which are mainly iPad cases.We do not have classes or students in the Apple School Manager.My question is: What advantages do we get, if we do the work and integrate classes and students into Apple School Manager and not only have them in Jamf School? 

Hi Folks,New to JAMF Pro. I'm going through the steps to connect JAMF to Apple Business manager. I was able to create the MDM on Apple Business Manager and download the token. When I upload the token, I get an error "Problem Contacting Apple Services".Any suggestions on how to resolve?

Hi All,I've been trying to setup Tableau Desktop to install on our managed Macs.  I'm very new to setting up packages to deploy but have had success with other installs.  This one just does not want to install.  Has anyone had success with getting this setup and would like to provide how they did it?

Hey All!Management has requested that I:*Make a VPP app scoped to all iPads (more probably in the future)*Make that app available in Self-Service (not forced deployed)*Make that app Locked (limitations tab)  to a particular LDAP group so that the app only shows up in self service if your login is a member of that group We have many policies scoped in Self-Service this way to MacOS devices, and have no issues. When we are trying to do it this way with VPP apps, it seems to break distribution of said app. It keeps putting up a message that says: "Pending - All licenses are in use or the license is not assigned yet"Even though we have made plenty of app licenses available and it shows there are still plenty available in JAMF. My current theory is maybe because we don't use managed apple ID's and it's having trouble getting that info from Apple?  I'm just wondering if anyone else has had this problem or has a fix for this.