Hi team,I was configuring the splunk on jamf integration but I get the following.2022-09-27 10:55:36,376 INFO pid=2078630 tid=MainThread file=setup_util.py:log_info:117 | Log level is not set, use default INFO2022-09-27 10:55:36,376 INFO pid=2078630 tid=MainThread file=setup_util.py:log_info:117 | Proxy is not enabled!2022-09-27 10:55:36,376 INFO pid=2078630 tid=MainThread file=jamfpro.py:get_token:72 | JSSAuthToken requesting new token2022-09-27 10:55:37,180 ERROR pid=2078630 tid=MainThread file=base_modinput.py:log_error:309 | Get error when collecting events.Soma help thanks.

I have noticed that attempting to set the default user shell to zsh in the Jamf Directory Binding pane doesn't work. Settings > Computer Management > Directory Bindings > User Experience > Default User Shell New users still default to Bash on both Big Sur and Catalina. Is this a known issue?

Hi; I am looking for a way to reboot both MacOS and iOS/tvOS devices via API commands, either with classic API or uAPI. I've found that I can use the classic API's mobiledevicecommands RestartDevice <id> endpoint to reboot mobile devices. But this doesn't apply to Computers. Oddly, the classic API computercommands endpoint does not include a Restart command like Devices does. I've found that I can create a Policy for computers and setup the Restart Immediately policy, and setup a custom event trigger such as "Reboot" to trigger it. Two questions - First, how to trigger a Policy custom event via either of the APIs?Second, how do I scope this so that I can select only one or some subset of Computers to reboot? I don't want to create a separate policy for every computer, but definitely don't want to reboot all my computers! I do realize that I could setup reboots to happen at specified times, but I really need this to be an on-demand type of trigger that get's initiated via an

Hello,I have all the configs in place for DEP & user-enrolement. But let's say, we sent a new macbook to a new employee who is starting as Work from home and the employee doesn't connect to wifi during initial MAC setup and goes on to create a local account. I have the macbook in ABM & in the scope of prestage enrollement as well. Can we do anything about it? Thanks! 

Using a newly drafted Okta Device Trust script, this is the issue that some users are running into ERROR: Error in accessing default keychain Originally it was an issue with python and python3, but that has been resolved, however, even after running the following command for the, the user still sees the okta keychain in Keychains, though its grey with all actions also greyed out but the user can see the okta-db file when running security list-keychains"sudo security delete-keychain "/Users/$user/Library/Keychains/okta.keychain-db". I ran the above during an ssh session but even after closing and reopening the Keychains app it still shows up, which is troubling. Tried confirming deleting the file and from the SSH session at least it shows its gone sudo security delete-keychain /Users/$user/Library/Keychains/okta.keychain-db security: SecKeychainDelete: The specified keychain could not be found. running "sudo ls /Users/$user/Library/Keychains" shows that

My district recently purchased Jamf School to manage all of our iPads and a lab full of iMacs.  So far I haven't run into many issues with enrolling devices and deploying apps, but I've hit a wall when it comes to Adobe CC.  I've searched the forum here for solutions, but most of them seem to involve Jamf Pro tools, and I haven't been successful with the few workarounds I've seen.  I have tried using Composer to package the installer and I was even sent a script by Jamf support to download the package from Google Drive and install it, but with no luck. I have tried deploying the package for the stand alone creative cloud app as well as packages with some of the Adobe apps included.  I'm using the Apple Silicon versions right now, but would eventually like to deploy the Intel packages as well for some of our older iMacs. Does anyone have another suggestion for this macOS/Jamf newb?  Thank you

Hi all,I'm having two challenges and I need to find a solution.  I would like this solution to be native.  That is, I know there is a solution that uses the macadmin-python.  I'd like to avoid that if possible and find a solution within Jamf Pro or the scripting framework built into macOS 12.3.  Here's my challenges:1. when I add an 802.1x network profile using the Configuration profiles in Jamf Pro, it places the network at the BOTTOM of the list of preferred networks.2. I have not been able to find a scripting solution other than the macadmin-python script in many other Jamf nation posts about this topic.Does anyone have any other solutions?  This really is challenging because our users are not connecting to the proper Wi-Fi network (Employee 802.1x) and employees are so insistent on adding the Guest and BYOD to their school laptop. 

I want a simple script to add to self service which will give me a dialog box with some selection/drop-down and some text boxes which will all tie together at the end to create the name and then recon to push to jamf.Drop-down will have 4 choices each and everything will be selected manually.Final name will beExample: NA.John.Doe.M1Pro14 

I have the ADCS/802.1X configured with unbound macs using Jamf Connect. The profile works, but sometimes I notice that the com.apple.network.eapolclient.configuration is blank; even with the configuration profile and proper certificates in place. I have to re-deploy the profile fix the issue. Has anyone run into this before?   

Hi everyone,the previous Administrator at my Workplace used the Model identifier with like "Book" and not like "Book" to sort the Macs into MacBooks and all the other more Stationary Macs.After the first departments bought the new M2 MacBooks Pro, we noticed that Apple had removed the word Book from the Identifier, meaning that the MacBooks were suddenly treated like an iMac or Mac-Mini.My solution for this would be to evaluate the value of Battery Capacity. For iMacs and Mac-minis it says N/A, while MacBooks always have a percentage there.Out of curiosity, how do you implement this distinction, if at all?Would anyone recommend another way?

I have a user group, that has only site level access.  But I'd like to have it setup to where the group has the ability to use jamf admin for only their site.If I'm understanding correctly how JAMF has this setup, what I'd like to be done is not possible.  It looks like to give some access to JAMF admin, they have to have full access.  Am I correct?  or am I missing something?Thanks!

This is a feature request. On the view of individual Smart Groups, please add the list of items that are scoped to all devices in the smart group (applications, policies, profiles, etc.).

Hi everyone!We're looking for a workflow on how to do a double Inventory Update after the policy has run. Specifically, we're installing Jamf Connect via a policy, and while there is already an inventory update set to run as a maintenance task after the policies execution, this inventory update does not yet include Jamf Connect in the list of installed applications. So we need to have another one run a little bit later, which then reports Jamf Connect app as installed, which uninstalls other profiles from the computer. How could we go around doing that?

Hello... I thought this would be easy but I'm struggling. I need to create a report that contains all "FileVault 2 Enabled Users" per machine that is rolled into Jamf. I can click on an individual machine and check it manually per machine at the disc encryption section, but I can't figure out to have this automated into a report via an Inventory search/Smart Group. Anyone?

Hi all, Is there a way for script remove computers on jamf protect with more than 30 days no contact? The goal is if they connect again they will be added but if not they are gone gonethanks Carmelo

 Hello,I have DEP in place and working fine.I have some Macbooks that require User-initiated enrolment.As far as I am aware, I can invite the users by enrolment invitations or sending them the link https://companyName.jamfcloud.com/enroll/I have LDAP (Google) setup but why is it asking for the user to login. Shouldn't it just let the user search their name via LDAP and download the profile to install once I invite them to download or send them the link?I have attached 2 screenshot. To login, I can only use my Jamf admin account to login and then it let me use LDAP to search for the employee to download the profile. By this way, I need to give my admin credentials to the employees to login.  Am I missing some options to ignore the login screen or this is the only way?Any help is appreciated. Cheers!

Figured I'd start a chat thread for commenting/chatting during JNUC 2022. So the keynote is about to start. Are you hyped? :) Will we blown away? Or will it be mostly "meh"? :)

Resorting to posting my issue here because Apple has been no help when I try to explain what is going on. I can't find anything useful as nothing I come across seems to be the problem we are running into. This is in regards to updating our user machines which are a mix of both Big Sur and Monterey throughout the company. We use Nudge as a means to steer our end users to install the most recent versions of macOS. We were seeing issues with downloads failing, even after reviewing firewall rules with the system admins and Zscaler exceptions as outlined on Apple's own website. We have also tried to install the install assistant for testing, and that failed due to a "could not communicate with a helper application" failure message. All of these issues require us to direct the end users to boot into safe mode, which so far is the only way that we have seen any success with getting these things installed. We are a pretty small team and our company is rapidly growing, so I would like to g

I have been requested to make two sided black and white the default print option for our Xerox Printer. I was able to accomplish this and add some handy presets for the user to select other options like 1 sided and color. What I have found is unless I open the Show Presets... option and check Reset Presets Menu to "Default Settings" After Printing... Print jobs will use the last preset selected by the user... so if they selected color... the next job will print color as well. Selecting the option above does just what it says and reverts to the default after each print job. My question is... is there a plist or a command line flag to check this box? I did not see anything in the plist file for the printer or in lpadmin. Any assitance would be greatly appreciated.

Hello All, I Have a macbook that will not update inventory. This device was recently updated from High Sierra to Big Sur. When looking in JAMF Pro it shows that the device is checking in properly but hasn't updated inventory since last July. Any suggestions?

During the setup of Jamf connect, is there a way to push out the network info during setup, for example, Zero Touch? The user opens up and starts the Mac for the first time. Get to connect to Network, and then needs to choose which network to connect to. I understand that this can be done via configuration profile, but what about prior setup? I would like users to use the work network but don't want to give out any PW. Currently, I have to direct them to the Guest network, or home network. Is this something that is even possible during the Zero Touch process? 

Hello everyone, Hope you are all enjoying the holidays. I (UNCA) need some help writing a script for the deployment of Monterey. I found a few guides for Big Sur. From Jamf, Github, and a few others. Thank you in advancehttps://community.jamf.com/t5/jamf-pro/mac-os-monterey-update-via-self-service/td-p/254256Jamf Pro - Upgrading Macs to latest operating system - IS&T Contributions - Hermes (mit.educhrome-extension://efaidnbmnnnibpcajpcglclefindmkaj/viewer.html?pdfurl=https%3A%2F%2Fhcsonline.com%2Fimages%2FPDFs%2FUpgrade_Big_Sur_Jamf.pdf&chunk=true

We are using Jamf Pro cloud and want to setup the system to email us. We are also using Office365 for organizational mail. As an organization we have chosen to not allow SMTP basic authentication for accessing our corporate mail accounts. This has created a challenge for my team to get emails from our Jamf Pro Cloud instance. Has anyone else run into this issue? If so how did you solve it? Has there been any effort from Jamf to integrate Microsoft's suggested solution of Microsoft Graph and OAuth 2.0 for secure email communication? I realize we are probably bleeding edge over here, but I could see the benefit for other customers looking to use more secure methods to access email in their Jamf installations.

Hi,I have a MacBook that seems to have lost any connection to the Jamf Pro Server (on premise). All SelfService Options Display a "failed" message if the user uses them. The last time it made an inventory update or a check in was almost two months ago.To make matters worse there are no credentials to the local admin account and the firmware password blocks access to the recovery mode. The OS is 10.14.6 because the user seemingly never updated it, but that cant be the reason for this all, or can it?Anyways some tips would be really appreciated.Kind regards

Hi is there anyone on here that has created a smart group for Macs that have CrowdStrike Endpoint protection installed? It doesnt install as a app so having trouble. Goal is to make a smart group to see which machines actually have it installed, since on my policy it says completed but in logs failed for some reason