Godo evening,a quick question, please: One of our applications is available as pkg installer but also as a "Jamf App Catalog" application in the Devices > Mac Applications tab. My understanding is that for the Application install pathway I can "enforce" updates via a configuration profile for System updates (or it should be enabled as the specific app says "Auto update disabled: no" whereas for the pkg installer I can create a patch management with subsequent definition of the latest package and a corresponding Patch Policy. The pkg pathway has the benefit of more granule scoping, however I am wondering what the general consensu on best practices is here?

Nudge Post-install (0.0.17) includes updates for Nudge (1.1.10)AboutConfigures Nudge via the Nudge Post-install script to create:LaunchAgent: Opens NudgeLaunchDaemon: Redirect LogsLocal JSON: Configures NudgeHides Nudge: Finder & LaunchpadReset function: Policy Script ParameterContinue reading …

Hello!I'm trying to use VPN Idle timer for mobile devices in Jamf Pro. After setting Idle Timer parameter for "1 minute" example, after saving configuration profile, Jamf sets this back to "Do not disconnect". Does anyone have ideas why Jamf doesn't save my option correctly?

So I have been looking for a way to have an extension attribute that reads all of the email address inside outlook and in mail. I am new to this and still learning on how to make things work and write code.  If anyone knows of anything that could even help me out I would appreciate it a ton.

We are getting the above error on few devices with VPP app. I saw lot of post regarding the same but no solution worked. Any alternate working solution?  ThanksJamf Pro 10.35.0macOS 10.15.7 

Hello,Can anyone help me, how we can change the JAMF cloud host name I.e, url for login JAMF console. For Example, I am having an URL x.jamfcloud.com and i am wanted to change it to y.jamfcloud.com Regards,sahasrarka

xpath is not super intuitive. Maybe I can clear up 1 tiny little thing here...First, a resource I go back to again & again: Xpath cheatsheetSecond, xpath is a querying language. It can look complicated, but, a way of simplifying it is to think of the syntax as an analogy: exposing xml data as a "file system" & the thing you want to "get" as a "file". Your xpath query is the "file path". Elements, in the analogy, are "folders" with stuff in them: one thing, many things, etc. E.g., you might want all IDs for some object in Jamf Pro (let's say policies) so maybe you tried: curl -Ss -X GET -H 'accept: application/xml' -u "$apiuser:$apipswd" "$jamfurl/policies" | xmllint --xpath "//id" - | tr '</id>' '\\n'​ Not great because you are stripping the xml data structure & tr often outputs strange results.Then maybe you looked at the xpath cheat sheet or took a Jamf course & discovered the magical text() command which strips xml tags! curl -Ss -

Hello, I've been using Jamf Pro at our school for a while. We manage approximately 350 iPads that are loaned to students.Occasionally we will put a device into "Lost Mode" if we need the student to contact us for some reason.Now our problem: If the lost mode was activated and the students switch the device off and on again, there is no longer a connection to the WLAN.Now I can't turn off Lost Mode and have to do a full reset via iTunes.Is there any other option? Can I connect the iPad to the computer running Jamf Pro with a cable to unlock it?If I reset the iPad, all of the student's notes are gone. He didn't make a backup.

Hello, I'm checking out the 'Hardware and Software History' logs in Jamf Pro for a Mac that's experienced some issues with the NIC. I read the documentation for how to use the logs, but it's unclear to me how to further investigate something that's listed in red (a piece of hardware that changed during an inventory report). Does anyone have any insight on this? Is there a way to view more specific logs?

Can anyone tell me the benefit of going with Jamf's Cloud solution over On-Premise? I keep seeing plenty of issues with cloud based setups but haven't seen anyone running into these issues with on-premise.

Hey everyone,I having a hard time trying to get Mac Devices in Jamf Pro to integrate into Endpoint Manager (Intune). I have got at least 2 devices to register in Endpoint Manager, however, some devices are not getting the follow-up prompt ""JamfAAD" want to use "microsoftonline.com" to sign in.". Does anyone with any ideas on how to troubleshoot this issue? 

Good day all,I have one of our developers looking into our Jamf api. I created a user account for the dev with full administrator permissions. They are able to make calls to the Jamf Classic API but not the Jamf Pro API. I have the same access and am able to make calls to both. Any ideas?

Hello, We deployed SHA 256 Network Security Settings through configuration profile but after 12.6.2 update the configured ssid not showing to user for connect. crosschecked and all setting are correct.Is anybody having same issue.I could not understand what could be the possible reason.Thanks in advance

We had a really weird hiccup the other night - On the evening of the 13th I sent a command to our lab Macs to update to macOS 12.6.2.  I did this as I've always done in the past - by going to their smart group, viewing it, clicking "Action," selecting "Send Remote Commands," and then selecting "Update OS Version," "Specific OS Version," "12.6.2," and "Download and Install the Update, then restart."  Of the 80 computers I sent this command to, 65 of them successfully updated to 12.6.2.  Then, of that 65, 27 updated to 13.1 on their own.  At first I thought I may have accidentally told them to upgrade to 13.1, but If I look at the Hardware and Software History, I can see where they updated to 12.6.2, and the next entry is them updating to 13.1.  (That and the fact that many of them ended up on 12.6.2 as was desired)Needless to say, this is not good - our labs were held back on Monterey for various reasons, and now we'll have to wipe and re-provision 27 Macs.&nbsp

Hi everyone,I'm a quite new mac System admin. We would like to manage properly identity on Apple devices. Because bind mac to AD bring some hassles and some are out of our network (don't reach AD).So we're looking a product that provides identity from our hybrid environment (Active Directory + Azure Active Directory). Most of our environment is Microsoft but some VIP and departments ( Graphic Designer ) use Mac. We saw that one of last version of Jamf Connect can manage hybrid identity.I found some feedback but not enough with hybrid environment. What do you think about this product ? Do you know an alternative because it's a bit pricey 2$ / month / Device. Our environment:- Hybrid (Active Directory + Azure Active Directory)- Office 365- Adfs 3.0 will upgrade 5.0 soon (may be not possible with 3)- MFA Azure- Active directory authority for local resources (Printers, file servers, wifi,...)- Intune- Apple Business Manager (just few Macs)- Couple Macs bound to AD others are "Free"&nb

Hello, is anyone able to assist me on how I can disable Airdrop using Jamf Pro?I have already tried the method using configuration profile>restrictions>media>unchecking airdrop. (this did not work) can someone please help me by giving me step by step instructions on how to get this done successfully?Any help with be appreciated! 

Hello. From my understanding after reading through many posts on here, it is possible to enroll a Mac running Monterrey or higher OS into Jamf and not ABM, is that correct? If so, I assume that you would need to send out user initiated enrollments via email? Now, my real question is - by enrolling in Jamf and NOT in ABM, what features/control would I be missing? I am more than happy to explain more in detail the scenario, etc if need be. Thanks.

After upgrading to ventura OS 13, I cannot make restrictions on profiles, are there another way to prevent an administrator user from deleting the MDM profile?

I currently leverage a smart group, softwareupdate -aiR, custom notifications and the deferral option for an automated OS patching workflow both myself and user base are really happy with. In testing the m1 chipset I am finding softwareupdate -aiR isn't functional in the workflow. Looks like there is an additional prompt for a password prior to downloading??? Anyone seen this or have any ideas as to why?

I added an anchor certificate to a few of my PreStage Enrollments, but cannot delete it. When I click the Delete button, I only get the indefinitely spinning blue circle until JAMF times out and logs me off. Is my only option to delete and recreate the PreStage Enrollment?

Hey Jamf Nation, CleanMyMac X team here. We are a cleaning software for Mac that is notarized by Apple. Just wanted to notify you that CleanMyMac can be now installed and customized through Jamf Pro. Here’s how you can set up CleanMyMac: Visit our Business or Academia pages to purchase multiple licenses at a special price. Download PKG file Run the PKG to install CleanMyMac X through Jamf. Create a property list file (plist) with the following structure: Add your license to License.plist as an ActivationKey value Put license to Application Support (path: ~/Library/Application Support/CleanMyMac X/License.plist) Once CleanMyMac is run for the first time, the license will be read and the app activated on all Macs. And that’s it :) Hope you’ll enjoy using CleanMyMac on your clients’ computers. Please leave comments below if any questions occur.

With Python not being automatically installed as part of Monterey, the old script to adjust the dock once dockutil is installed doesn't work as written. Here is a sample of a script that has been revised to work with Monterey and dockutil 3.0.2 #!/bin/bash # NEW DockUtil Script without python v2.2 # Include Standard PATH for commands export PATH=/usr/bin:/bin:/usr/sbin:/sbin # Set up variables whoami="/usr/bin/whoami" echo="/bin/echo" sudo="/usr/bin/sudo" dockutil="/usr/local/bin/dockutil" killall="/usr/bin/killall" loggedInUser=$( echo "show State:/Users/ConsoleUser" | scutil | awk '/Name :/ && ! /loginwindow/ { print $3 }' ) LoggedInUserHome="/Users/$loggedInUser" UserPlist=$LoggedInUserHome/Library/Preferences/com.apple.dock.plist ########################################################################################## # Check if script is running as root ########################################################################################## $echo if [ `$who

I want to automatically install the Netflix app on all my Apple TVs.....but I only want to have it available for Self Service on my iPads.How do I go about doing this?Any help would be very much appreciated.

I'm getting very close to a true zero-touch deployment solution for our iPads, and I'm hoping the community can pull me across the finish line on a strange issue I'm having with managed apps. My test iPad enrolls via DEP/Prestage Enrollment fine, but the ensuing automatic install of the Self Service app is asking for iTunes credentials (I'd like this to not happen). In what might be a related issue, VPP apps set to "make app managed when possible" are not doing so, despite this option being enabled. Getting this working would be a great to have for an upcoming hardware refresh, and I appreciate all the help in advance.

Hello,Just seeking some advice on best practice for unmanaging iPads. We have an iPad program where the students keep their iPads after 3 years so we unmanage etc end of term. Up until last year it was just a matter of unmanaging and taking the iPads out of a prestage then releasing from ASM. However when we did this last year it seems that when the students then wiped their iPad the activation lock screen would appear and needed the code to unlock.Just wanting to know how we can avoid that this year, should I send out the 'Disable and prevent Activation Lock' command then unmanage?We are on JAMF Pro, any help would be fantastic thank you.