I just created a group for our iPads called D1-Smart, however, I noticed that these iPads appeared in our as Missing Devices in our Smart Device Group.  Why?

I've noticed the only thing that helps is to restart it and it gets back to normal for a day or so before spiking again. Mysql.exe is the culprit and when I had a look at the server logs while it was happening I found - 2022-09-01 12:18:32,527 [ERROR] [Thread-822 ] [GetBootstrapToken ] - Computer ComputerShell [ID=131, Name=ELM069] requested Bootstrap token but no token was found2022-09-01 12:20:45,479 [INFO ] [duledPool-0] [rentProfileCleanupMonitor] - Running parent profile cleanup.2022-09-01 12:20:46,156 [INFO ] [duledPool-4] [CsaTokenServiceImpl ] - (Token does not exist) No CSA enablement auth code found, so no additional processing is required2022-09-01 12:23:03,562 [ERROR] [Thread-827 ] [GetBootstrapToken ] - Computer ComputerShell [ID=12, Name=eggs’s iMac (23)] requested Bootstrap token but no token was found2022-09-01 12:24:17,443 [ERROR] [Thread-827 ] [GetBootstrapToken ] - Computer ComputerShell [ID=82, Name=EOMB010] requested Bootstrap token but no token was found2022-

Hi all, Novice Jamf user here. I have a configuration of 18 iPads we'll call "Teaching" iPads. As far as I can tell, I'm not using anything that doesn't already come in the box, so to speak, so I have a policy that configures a specific wireless connection and then pushes out five or 6 apps that we purchased through Apple School Manager, which is connected to our instance of Jamf.All the apps appear to deploy, but I keep getting this pop-up message on the screen that tells me to sign into iTunes to manage/install apps but we're not using iTunes on these devices and we don't have AppleID accounts associated with these devices, as they are being managed centrally by our organization.The only clue I get is when I pull up a specific device and look at the management history and see the command "Install App - Self Service" that is either at pending or can't install because the device was busy and I have no idea what this means.Any idea what I might be missing?

Can anyone please clarify what permissions are required for the LDAP Server Account?What functions does it perform aside from user/group lookup and authentication?TIA

Hi All i just wanted to know how people are managing turning on the firewall on your machines as i have 60 machines that i need to turn the firewall on but dont know the best way around this

Has anyone experienced any issues resetting (AD) passwords on a Mac? In AD I select an account and set, “User must change password at next login”, I attempt to login as that user and am prompted to change the password, but all password entered are rejected with: Your password does not meet the requirements of the server.” The password policy is set to 8 characters and that’s it. This same user will have no issue resetting in Windows. I will also receive the same error when attempting to reset from Users & Groups in System Preferences. I have seen this many times in the past so I don’t believe it to be strictly related to Mavericks, Yosemite or in this test case, Sierra. What’s strange is that some users will reset just fine. It would be great if I could resolve this as all of our student passwords are reset come deployment, requiring them to change it when they’re picked up. When we run into this problem we usually just change it in AD manually for them.

Has anyone been this stuck with a locked computer? I locked a computer remotely using JSS and creating the 6 digit code. The computer successfully locked, the student then tried to guess what the code is and got it wrong. He then brought it to me with the screen displaying "Your computer is disabled. Try again in 60 minutes" Once that time runs out it just shows "Wrong passcode. Try Again" without ever giving me the option to enter a code. I have tried booting into recovery mode and doing an internet recovery. Both times it just boots to the same screen. I took it to the Apple store and they claimed they have never seen this screen before and could not help. I then spoke with my Casper rep. They had me do a PRAM reset and a SMC reset, both times it booted to the same screen. She then told me to call Apple Support and they had me try everything listed above again. Apple Care sent this issue to the engineers and I am waiting for a response. I am looking for any sug

We have a configuration profile which enables the builtin firewall for the devices. It happens from time to time that developers are testing some applications and would accidentally deny the prompt for allowing access due to various reasons. Now, in previous macOS versions I would just fix the issue with socketfilterfw, however on Monterey macs I see the following:bash-3.2# /usr/libexec/ApplicationFirewall/socketfilterfw --getglobalstate Firewall settings cannot be modified from command line on managed Mac computers.So, now I have to move the device out of scope of the config profile, allow the blocked connection manually, then move the device back to scope. Furthermore, allowing exceptions on Jamf seems possible only if you have both the name and bundle ID, which is not available for a significant portion of command line tools as far as I am aware, only for signed apps. How are people handling firewall exceptions in an environment where people mostly do not have admin rights on their

We have a couple of mobile carts of MacBooks we occasionally loan out for testing or staff development days. Users will often leave online accounts signed in or have documents left in the folders. I have been seeking a way to clean up the devices without having to personally check for signed in Google accounts or downloaded files.The first step was to enable Guest User. Upon logging out, all files are erased. This has taken care of the biggest hurdle. Then, I have been looking for a way to automate it. There are bound to be MacBooks that have not been logged out of, which would mean they would still have to be checked upon return.I have independently tried the "Log out users after a certain time of inactivity" under Login Window and a script to automatically shutdown. Neither are suitable for this scenario, as I am using Guest User and these are MacBooks. Guest User has no log out timer and closing the MacBook will make scripting difficult.These carts will not be sent out often, so log

Is there a way for me to use Composer to make a package that I can put in Self Service that will install the application for only the user who is logged in/goes to Self Service and installs the software?Specifically I'm looking to allow users to install Zoom and install it only for them.  Zoom has an option to do this if the users download the installer from the Zoom website and do the right clicks to get to the "Install for me only" option.  I'm trying to make it easier for my users (and the people at the help desk who have to talk users through this on the phone).Thanks.

I want to apply for a trial of jamf connectI have filled in the information, but there is no reply to the email to me

hey there,it is planned that various computers that are currently managed in a separate jamf now will be transferred to our jamf pro. so this is a move of various macbooks into our existing system.is there a best practice here? maybe even instructions? what do we have to think about in general? how does it work with the tokens / certificates? do the devices have to be set up again for this?i know my way around jamf very well by now, but this is a sore point, unfortunately, and will certainly come up soon.thank you!

Hi,I'm using jamf pro. I need to disable all safari because the only browser we manage in our company is Chrome.iv tried to search in configuration profiles - restrictions - application - but there is no reference to safari except Safari autofill.what do you guys recommend me to do?thanks :)

Hello everyone,We are trying to use the following process to upgrade user machines from Catalina to either Big Sur or Monterey (depending on hardware support):Use a policy to cache an install of MacOS, targeted by static groupOnce the cached install has completed successfully, add the computer to a second group to manually extract and install the cached installer using a script.  The script uses jamfHelper to allow users to delay the upgrade, etc., and ultimately culminates in the following command:/Applications/Install\\ macOS\\ Big\\ Sur.app/Contents/Resources/startosinstall --agreetolicense --nointeraction --forcequitapps --pidtosignal $jamfHelperPID >> /var/log/startosinstall.log 2>&1 &We've verified that the script works when run directly, as well as when run by a policy that is triggered by login.  However, if we set the policy to run on recurring check-in, we see miscellaneous oddities including Jamf Helper launching in full screen and then immediately

When will Jamf add this to the Jamf console? See link from Microsoft about this.MS Link

Why does jamf support always prompt users to log in when after a version upgrade?I'm using a policy to upgrade the app and I have a postscript to kill the app but it will appears.

We are looking to map 2 network drives based off of the AD user that is currently logged in. We used to manage these iMacs using Profile Manager and in the Login Items payload there was a section called Authenticated Network Mounts but Jamf Pro does not have this. It seems simple but I'm not familiar with custom scripts/how to implement them using Jamf Pro. Any help would be greatly appreciated!

Anyone had any luck finding an MFA product that is deployable to devices, works with local admin accounts, and works with the new M1 processors? Duo won't work with M1. Yubikeys are not deployable.

Leverages swiftDialog v1.11.2 (or later) and Jamf Pro Policy Custom Events to allow end-users to self-complete Mac setup post-enrollment via Jamf Pro's Self Service.Continue reading …

Hello all,Posting here to possibly get some help on an issue we’ve been running into using Duo Mobile and macOS.We are deploying Duo through Jamf Pro and we have no issues using the automated enrollment for Mac users that are in office. Our issue is with the Mac users that work remote. As i understand it by default macOS will not allow you to select or change wifi networks from the login screen. This causes conflicts with Duo to where a user is unable to login to the Mac because it is not connected to the internet and it will block a user from logging in, We have it set to enroll them into offline access as well, but this will not prompt them to do so until after they complete the 1st initial authentication.All of our Macs are on the latest 12.5.1 and we are using MacLogon-2.0.0.pkg being installed through a policy in Jamf Pro.If we install Duo on a Macbook then ship it to a remote user, it is essentially a paper weight that they can’t login to or connect to the internet with.Has anyon

Hello everyone,We use JAMF school to manage our iOS devices. We are primarily a Windows environment when it comes to laptops and desktops. We currently have new and older MacBook’s(iMacs too) that are not in the domain. They are stand-alone. For security reasons we need to start authenticating users when it comes to macOS devices. I have read some documentation regarding authentication via Azure or LDAP. What would be the pro and cons of going with either one? Also, would it join the domain after the Device enrollment? If so, would those configurations be done in the organization settings or within the profiles? I also read about directory binding. Would this need to also be configured, or is it something not related?I have several questions to have a better understanding before moving forward.Any help would be greatly appreciated.

I want to enroll a Jamf Now Fundamentals setup to x3 new MacBook Pro's, I've configured the apps/software I require etc and am ready to enrol.Do I need to setup a local Admin and Standard accounts on the new Macs before enrollment?Or can I just get away with a Standard local account on the Mac?As I may need to install additional apps that's are't available on the App Store.

Hello!Current Issue:Issued Command "Enable Lost Mode"iPad was found - However, when "Disable Lost Mode" is sent it does not get received. Nor does any other command.iPad was restarted - From what I read that does cause the wifi to shut off. I have downloaded Apple Configurator however, the computer does not see the iPad when it plugged into it. Any help would be much appreciated in this problem. Thanks! 

Hello community,My organization has recently rolled out the latest version of Jamf Connect and when some user's sign out, and they are on Wi-Fi only, they are getting the error that you can't sign in to Jamf Connect because computer is offline. Is there a way to make sure the wireless connection always stays on for Macs when logging off? Can we update our Jamf Connect configuration profile to do so? Or could this just be the way our Wi-Fi cert for our network works? Any insight is appreciated and I'm sorry if I didn't make this question too clear.

We are starting to use Apple Classroom for one of our grades to test.We are manually rostering classes is Jamf Pro (10.39.1).  Every time I try to create a 16th class, it overwrites the 15th class.  We need to roster 20 classes.  Does anyone know if there is a limit to the number of classes we can manually create in Jamf Pro?We are trying to avoid having to use Apple School Manager because we use Veracross as our SIS and moving data between the two is nearly impossible.Any insight is appreciated!