We have just received our first M2 mac and it seems off the bat that there are some issues with enrolling it - usually during enrollment from our JAMF site (that we carry out with M1 and Intel macs) we could profiles installed onto the machines but with M2 I see for the first time it needs a QuickAdd package installed that completes installation. This always fails and then when I try manually enrolling with sudo jamf enroll -prompt I get the message - An error occurred while enrolling computer: The jamf binary could not connect to the JSS because the web certificate is not trusted. Checking in the background for policies that use the Enrollment Complete triggerEnroll return code: 70 We are currently using the in built JAMF CA cert...would this be causing it?

Hi,I was wondering if anyone can point me to a resource or a script that I can run via policy using Jamf Helper that will check the version of the installed O/S and if it's not equal to the latest we're supporting will advise the user how to upgrade and will potentially remind them once every week until it's done. I do not want to force the upgrade just remind users and give them the steps to update ie: Apple Menu-About This Mac-Update. If there's a better way to do this without a script I'm also open to that alternative but I think Jamf Helper might be the best way. Thanks in advance!

I have a case opened with support but hopeful maybe someone else has an idea for this. We have a few Apple TV 4k's we are trying to enroll in jamf. I was able to get it to show in AC2 and I prepared and wiped the device and it showed up in our DEP. The device shows up in my prestage in JAMF but no actual device exists in my inventory. When I try to step thru the apple TV, I get to the screen asking about remote management, when I click continue, I get an error saying Invalid Profile. Anyone seen this or how to fix this?

I understand the built in log out trigger is long gone, are there any newer workflows for running scripts at logoff?

Hi folks, hopefully someone can help. I've arrived in a new role at a new organisation and in the last week we have seen a huge increase in devices becoming unregistered from Intune - previously this happened at a rate of around 1 per week, but I'd say there's been 10-15 devices in the last week with this issue. Also, when users try to re-register their device via Self Service, it will go through all the steps (Self Service > Company Portal > Jamf Page) but not actually re-register the device. In most cases, the solution is to remove the MDM and re-enrol. I inherited this setup, but it was configured following this guide from Microsoft. Also, I don't have direct access to Intune (it's a financial company) but I can make requests for changes to be made on that end. So - where do I start trying to troubleshoot this? What logs am I looking in? What errors am I looking for? Thanks,David.

This morning my users started complaining that they could not log into their systems. I noticed that my JAMF Connect MenuBar ProfileJAMF Connect Login ProfileJamf Connect License Keyare missing from some of my users that I know were there.what happened? 

Hi all,I’ve been asked to block AirDrop on some students iPads. There’s an option in profiles in Jamf Pro that says Allow AirDrop and I restrict it. The only thing that’s happening to me is that the AirDrop function in Settings disappears and the AirDrop option in the control centre is disabled but AirDrop is still enabled.Is there something I’m missing here? Can I enable AirDrop to Contacts Only via profile? Thanks

Good morning,At the end of the week we received some reports that several of our endpoints had missing profiles. This was caught because of one configuration profile that is used on a small number of machines is to set a custom background. That background was reverting back to the default Monterey one and forced an admin to check and see that all of the profiles we employ for that set of machines was missing. The MDM status was also reported back in the console as 'No'. On a couple of these, it seems like re-enrollment resolved the issue but we are still wondering what could have triggered this. Some of these machines were recently upgraded to Monterey over the past few weeks. Has anyone been seeing behavior like this? Anyone have any ideas on what could have caused it? Thank you! 

What is the proper way to make a macOS Monterey Smart Group? Typically I put in the macOS number as the criteria (10., 11., etc) but that doesn't seem to work... It's catching OS X Sierra 10.12.x machines in it.  

Today we released Jamf Connect 2.15.0; this release includes the following enhancements:   Users Now See Password Requirements at Sign In If a user's password syncing fails because their new password doesn't meet the requirements enforced by macOS (via MDM passcode configuration, etc.), the user now sees a list of the requirements their password must meet directly in the Sign in window.   Menu Bar App Change Password Button When a user's password doesn't meet the password policy requirements you set in your MDM/UEM solution, the user now sees a Change passwordbutton so that they can change their password.   Product Documentation   See the Jamf Connect Documentation for more information, including Release Notes.   Thank you! The Jamf Connect team

Hello, I want to enforce a password policy with existing computers. After creating the configuration profile. How do I go about forcing the user to reset their password to something that satisfies the password profile. Also taking into account that there is a hidden localadmin account on the machine and I do not want that account to be asked to change the password. Just the employees user account. Any thoughts? Thanks

Hi everyone, We have PreStage Enrollments and we now have 2 Macs which initially enrolled and I see them registered in Jamf. The problem is, they do not check in after the initial registration and does not get our standard apps (which deploy via smart group targeting a policy for installs). I see that the device does get the configuration profiles and it registers in Jamf but after that initial it seems to not check in any more.Any suggestions where to look?   

No text available

While this is, arguably, a feature that Jamf should be able to handle at its core, what is the best method in 2021, across the gamut of supported OS's and architectures, to enforce Apple software updates? I understand that theres resistance to using any terminal commands for software updates. As stated in the Nudge channel, Since 2018 this has been a problem since Apple doesn't test softwareupdate commands that are triggered by a script. In addition to that, this requires a password if the computer is Apple Silicon. I recently rolled out the UEX-Tool-For-Jamf, and two of the components in it are no longer developed and throw gatekeeper issues in Big Sur. I would like to use Nudge, but, my confidence in my users is low enough to not expect Nudge to work fine on its own. Nudge cannot force the update to happen. What is the best way to handle software updates? Is there MDM magic I am missing? What is the downside to having the checkbox "keep my mac up to date"

I would like to upgrade to Ubuntu 20.04 LTS but do-release-upgrade forces me to prior install all updates for my current release. I hold back the mysql update because of the issues from Jamf 10.41 with mysql 8.0.30 using apt-mark hold mysql*.Any suggestions how to get to Ubuntu 20.04 and leave mysql on version 8.0.29?

Warning! With Jamf Parent, there is currently no way to unlink parent control of a device. There is a way to clear currently pushed settings, but the parent app still has the ability to reset those settings. This becomes a huge issue especially if one student's iPad is taken into Jamf Parent by another student, and now that second student has unvetted and unbreakable access to control the first student's iPad, without any sort of tracking available. Please +1 this feature request to help resolve this issue. Thanks

Hello, we have recently received complaints  from multiple users saying their mac closes all applications which are not running when they lock their mac and log back after few min .And they are getting the below error message when they log in back 

Anyone know of a way we can allow only "Security & Privacy / Privacy / Automation" without opening up the entire Security and Privacy area of System Preferences? Thanks!

Jamf pro cloud - ipads/Iphones not updating using mass action command download, install, and restart devices.They have full battery. One is on wifi, one connected ethernet using an adapter, another device is using mobile data. Under the management commands on the device, the scheduleOS update command is just pending, and there's hundreds of them. Like it's trying every day, all day long for the last week.I saw some posts from a couple years ago on the jamf nation forum discussing this issue with no resolution. Has anyone else experienced this? 

Happy Monday all (🤣) So last week after successfully making a script on the classic api to change a site for mac using bearer tokens and properly salted/hashed api creds, i'm now on to my next challenge of using the preview api to set the recovery lock ready for all these MBP M1 pro's that are arriving shortly :- https://developer.jamf.com/jamf-pro/reference/post_preview-mdm-commandsso after getting to grips and trying to utilise the nice example generator, i send this to it in a script but all i get back is " [ ] " so not even a proper rejection.can I assume first that the "managementid" is the UDID of the device and the clienttype is correct for a macOS device??  code below..  NB. its worth noting in actually passing the managementid as a "'"$UDID"'" as i am running this script locally grabbing the udid via the MBP's serial number from the classic api.  I still get the same response..   curl --location --request POST "$jamfpro

Hi,I just noticed a bunch of my computers (about 75%) stopped checking in to Jamf Pro  (cloud) on a specific day in August:On running sudo jamf policy I get:There was an error.     Device Signature Error - A valid device signature is required to perform the action. Jamf log at /var/log/jamf.log on the client shows:Sat Aug 13 06:22:26 ServerXXX jamf[15424]: Error Domain=com.jamf.jamfsecurity.error Code=-25293 "unlockWithPassword:error: : The user name or passphrase you entered is not correct." UserInfo={NSLocalizedDescription=unlockWithPassword:error: : The user name or passphrase you entered is not correct.}Sat Aug 13 06:22:27 ServerXXX jamf[15424]: There was an error.Device Signature Error - A valid device signature is required to perform the action.  The problem seems to be fixed on each client by running sudo jamf enroll -prompt on the client. It's a lot of busy owrk to do this on each client - is there a better way?Also, since this is possibl

Hi All, Looking for some input .. is there a way disable the log-in prompt when a new version of Jamf connect is deployed?im current deploying 2.15.0 but some of users are getting promoted to authenticate after the new version is installed … im not installing a launch agent or daemon during this deployment …thanks Rob 

User was recently removed from old AirWatch MDM and enrolled into Jamf using pre-stage command - sudo profiles renew -type=enrollment. Before I installed the Jamf profiles on the device, I had to re-bind the machine to the domain because the local password and Okta password did not sync. I then removed it from the domain again and verified the local password now matched the users Okta password. Restarted the device and had user log in with newly updated password. Ran command to install Jamf profiles, restarted the device and had user review and install profiles. After all profiles and policies installed I tested Jamf connect (desktop app) and was able to have the user sign in via Okta. On the next restart where the user has to connect the local account to Jamf connect for the first time it does not take the local mac password that was being used. Keeps saying invalid password. Had user try the old and new password that was on the device and still could not conn

I'm currently testing out a Jamf Now (Fundamentals) deployment for a couple of Macs we have. I haven't used Jamf before so not too sure how Jamf connect should work, but have a feeling mines not correct.I have setup the setting "Enable password sync with Jamf Connect" and done the setup in Azure for it. When a user first logs on it asks to type in both password (microsoft & then local password) so it could sync.Then we changed the password in Microsoft to see if it worked but on the macbook we have to login with the old local password and then in Jamf connect enter the email and the new microsoft password and it says they are out of sync and input the local password.I assume this should be a bit easier as its not exactly syncing the passwords currently?

Has anyone been able to install 1password 8? I have tried installing it on my build Mac and bundling it with Composer. The installer seems to finish, but is doesn't show up under Applications. I have tried pushing the installer to the computer and then running it with a script. the first time I tried the below script, it will download the program and then it asks for admin login.open /path/to/app.app & so I tried this scrip, but it just spins forever.su <admin user - not root> open /path/to/app.app & I know it can be installed via the Mac apps (at least 1Password 7 can), but that links to the App store and I have that locked out so the users are unable to access it.BTW, I'm wanting the app to be available in the SelfService portal.