Hello.  I’ve got 3 regional domains (AMER, APAC, EMEA) each with corresponding JIM server and LDAP entry in Jamf Cloud.  I plan to use the built-in Jamf Azure migration tool to migrate from LDAP to Azure.  Jamf’s built-in migration tool can only migrate one LDAP entry to Azure.  Is there any way to combine three LDAP entires into one, and then migrate that one entry or, alternatively, to migrate the three LDAP entries individually, and then compress them into one Azure identity afterward?  Our Azure admin has raised concerns with having three Azure cloud identity entries in Jamf.  Thanks.

(We use Jamf School, which has less flexibility with customizing deployment of scripts compared to Jamf Pro, but with the Scripting Module we are able to push out scripts normally.)SMART boards are used a lot in the building and we have had issues with all of them regarding screen sharing/mirroring. We are trying SMART's own screen sharing application and, like their other applications, require Privacy permissions that are requested at different times. With how many MacBooks we would be pushing this too, that will be a lot of times for us to type in the admin password and grant those permissions.Is there a way to script these permissions to be granted? They aren't requested all at once, which may make it more difficult. For example, connecting to the SMART board requests Accessibility permissions, then initializing the screen sharing requests Screen Recording permissions.Or if there is an alternative setting that I don't know of that would automatically grant permissions would be great

Since. we are new to Jamf and the Jamf App Catalog is new to Jamf, I am Struggling a strategy to assign app to user groups.One option we though about was create a Static Computer group of the devices we want to install the app on.Not sure if this will cause us headaches in Jamf world.Also, should we just deploy the app without App Catalog using normal pkg, DMG, etc.. allowing us to deploy to a user group, and Self Service, then use Patch Management to keep those apps up to date? Is that an option?

We have found that on Monterey devices, using a previously working (as in worked on Big Sur) configuration profile to enable screen recording for Google Chrome, Slack, and Zoom no longer works correctly. To explain, the config places the three under Screen Recording in the privacy menu, allowing the standard user to checkmark them. For the profiles, we tried both enabling and disabling "Big Sur compatibility". Now when attempting to share the screen, the applications still prompt for the user to checkmark the options, even though they are already check marked.  When we manually add the three applications through Privacy, they function normally.  Has anyone else run into this?  I've included the PPPC for Zoom, as an example Identifier: us.zoom.xos Identifier Type: Bundle ID Code Requirement: identifier "us.zoom.xos" and anchor apple generic and certificate 1[field.1.2.840.113635.100.6.2.6] /* exists */ and certificate leaf[fiel

HelloI am looking to install filemaker extensions like mailit with JAMF.Can you help me?

Anyone else getting really slow upload speeds for the cloud distribution point? Uploading packages bigger than a few MB seems to take hours when it should take minutes based on our upload speeds.

Hello, We are using Apple School Manager with a direct integration with JAMF. We have seen an issue where we have some duplicate students; all the information looks the same except that one will have a roster associated from ASM and one does not. Is there a way to run a search query against this and just delete any user not associated with a roster?

Hi everyone,We're currently evaluating Jamf Connect to use with our Okta instance. Currently at the stage where we want to set up the Okta configuration profile for Jamf Connect. Using the Jamf Connect Configuration tool, I'm curious to learn which fields those of you who have the same combo (Connect + Okta) have you filled out?Thanks!

Hi,I just deployed Safe Internet on a test student iPad.  So far so good, configuration and deployment was straight forward and everything seems to be working properly.  One thing I cannot find is the ability to see an individual device or a users browsing history of blocks and allows.  I didn't see a way to see it in the GUI or in a generated report.  Anyone how how to access that data?

Hey guys, I was recently shifted into the role of Sys Engineer after tackling some MDM projects. A new project I am tackling is setting up Jamf in Okta so that our users can enroll their apple devices in Jamf via Okta.Does anyone have experience with this? I of course scoured the internet for guides and documentation but there is nothing notable.This is utilizing Jamf Pro.

Before I posted this I did search for this issue both here and google. The issue I am seeing is with 10.13.4 systems. After the upgrade my users are being prompted that a system with the same name exists on the network. I have checked DNS and DHCP for duplicate systems and none exist. The wildcard here is the number after the computer name increments up really high and really fast. The number also only seems to only append the computer name not the local host name or dns name. Has anyone else seen this or similar and if you have is it fixed?

Hi JAMF Nation,is there a way to restrict all AppleID domains to login to App Store and allow specific domain like mycompanyAppleID.com?is there a plist item string that we can edit to get this configured? thank you for the assistance :)

Hi,What is the current billing status of our Makalapa Elementary School Jamf Pro account?Lloyd Take**bleep**a4435 Salt Lake Blvd.Honolulu, HI  96818

I'm reconfiguring Jamf Connect and am a little confused by the overlap of the com.jamf.connect and com.jamf.connect.verify application domains. It seems like you have to use both to fully customize the menu bar and password syncing functionality of Jamf Connect, but the existence of the same settings in both domains is stressing me out.Are they actually configuring the same thing? Does one take precedence over the other? Is there a set of best practices to follow? The Jamf Connect documentation isn't clear on this, and it doesn't even seem to reference the fact that you can configure it at the com.jamf.connect level.Long story short, I’ve got things working, but "A," I’m not sure I did it “right,” and "B," there’s no way anyone who looks at these configs after me is not going to have the same exact questions.Thanks, Matt

We have 10 iPads we bought from a local store to beat a budget deadline, and I'm having issues enrolling them to our jamf pro (cloud), and getting similar results. Using a URL/QR code for self enrollement, only pushing a wifi config. When I install (from app store or from tethered connection and apple configurator) self service, it loads but says "This app must be associated with a jamf pro server. One of the 10, works, and under Settings>General>VPN&MDM, it shows Apps and in it is Self Service.I've tried transferring settings from a working iPad over after a wipe, fresh wipe + custom settings, apple configurator with manual enrollment, apple configurator with automatic enrollment. I keep getting the same outcome of Self Service not being associated and my jamf only being able to lock screen to its current screen pin.  I've followed this documentation: https://docs.jamf.com/10.27.0/jamf-pro/administrator-guide/Self_Service_Web_Clip.html I would love a good best

Hello,we try to update our Mobile devices via the API.https://developer.jamf.com/jamf-pro/reference/createmobilescheduleosupdatecommandurlhttps://yourServer.jamfcloud.com/JSSResource/mobiledevicecommands/command/ScheduleOSUpdate/{install_action}/id/{id_list} nor  https://yourServer.jamfcloud.com/JSSResource/mobiledevicecommands/command/ScheduleOSUpdate/{install_action}/{product_version}/id/{id_list} are working. We get a 401 with a restricted user or a full admin Response:HTTP/2 401 date: Thu, 01 Sep 2022 15:12:24 GMTcontent-type: text/html;charset=UTF-8content-length: 424set-cookie: XYZ; Expires=Thu, 08 Sep 2022 15:12:24 GMT; Path=/set-cookie: XYZ; Expires=Thu, 08 Sep 2022 15:12:24 GMT; Path=/; SameSite=None; Secureserver: Jamf Cloud Nodestrict-transport-security: max-age=31536000; includeSubdomains;x-frame-options: DENYcache-control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0accept-ranges: bytesx-xss-protection: 1; mode=blo

Question regarding the software update notification. It might be to late, so our Macs got the software update prompt for 12.5.1 today and we thought we had the notifications turned off. I went in to our restriction profile and unchecked it. After I uncheck it, should the notification go away, or will it only affect the Mac's that haven't got the prompt yet? Thanks,

Hi,Google Drive File Stream has become Google Drive and all the scripts out there for installing are now defunct. Does anyone want to take a crack at updating the Script out there? I'd love one that works! DL location is now https://dl.google.com/drive-file-stream/GoogleDrive.dmgand the DMG opens to create GoogleDrive.pkg Note, this still does not run on M1 processor.

Hi guys, I'm trying to push a configuration profile to allow Google Chrome notifications, but I seem to be running into some issues. I've created a profile with the Bundle ID: com.google.Chrome but it seems like I need to add in a separate bundle ID since I see two instances of Chrome in the Notifications System Preferences. Is there an easy way to find out what bundle ID I need to allow?

I need to manage 2 macs, our Windows devices are in Azure / Intune. I'm looking at Jamf as I've heard its the best solution for macs.We only have 2 devices and a small business so was looking to use Jamf Now but have a few queries on this setup... Does Jamf Now work with Intune, all the documentation points to Jamf Pro?Why do you run Intune & Jamf? They both seem to be similar in what they do (encryption, policies, etc)Is it viable to just use Intune when its just a few macs? One key thing is we want them to sign into macs using AzureAD accounts?

We are currently moving all our Mac away from binding to use Nomad, the problem we are having is we having tested this on a test Mac server and when running nomad and sharing directories it does not seem possible to interrogate AD for users to set up directory permissions, when bound in the add users section of file sharing they are all there, but nothing with Nomad, has anyone done this and could give a pointer?

Googled.  Found this.  It doesnt reference anything like my Apple School Manager.Is there documentation for exactly how to do this now?Thanks for any help.

HI all, Im trying to implement a way of sending out a nofication (branded if possible, but not necessary) that says something like 'A new version of Firefox is available' that the users can then download from self service, in the same way Apple Software Updates or Jamf notifications appear As I said it would be nice if I can get my company logo (the same one I have used as the Logo for Self Service) in there somewhere, but if not that's fine Any help appreciated!

We just rolled out jamf connect to a test environment and we're noticing a few things.If you restart you don't get the jamf connect login window. It wants a user to login with their password. What is the workaround for this? Is there a way to force user log out after a restart or power outage?Also our file vault settings are set to personal (individual), but jamf is not recording the key. It says no key present. Any ideas?I saw a post on jamf Nation saying the only option is to disable file vault on computers running jamf connect. Is this true?

If we set a policy Execution Frequency to "OnGoing" will the script only apply the policy if there has been a change or not already applied to the computer? If we have software or a configuration in place and set it to ongoing at "Recurring Check-in" will it only apply the policy once and just check if there are changes? For example, I'd like to leave some of the software installs or preference policies available for Jamf Self Service in case they need to reinstall the option or if they make changes to something and they want the ability to re-apply the policy. Also maybe it's software we require to be installed and they remove it then the policy would kick in to re-install. Just curious if it will keep re-installing the same policy over and over if left to "OnGoing" with "Recurring Check-in"?