Hallo EveryoneOn one of our internal web tool, we receive the error: Your connection is not private.The same internal web tool works fine on Windows devices. We are told to solve the problem as it is a mac problem(?)I dont think that it is a mac problem or is it? Need some help to figure out what the problem is and how to solved it.I know about the SSL Certificate to be valid only for 1 year + Renew grace period which is issued on or after Sep 2020(https://support.apple.com/en-us/HT211025).But the SSL certificate of our internal web tool is issued on December 2019 and it valid for 3 years. Can it be that this certificate is also effected because fo Apple's validity period limitation?Here is the Behavior on different browser:Chrome: NET::ERR_CERT_VALIDITY_TOO_LONGEdge: NET::ERR_CERT_VALIDITY_TOO_LONGSafari: "x" certificate is not standarts compliantFirefox: it works without any issue or certificate errorAs I checked the certificate in chrome, I was only able to see the SS

First I had one mac with the issue - now few days later see a new mac with issueThe mac overall works fine, I can run all jamf commands, self service etc - I can see in the backend everything is fine, and machine is checking in, inventory - all fineBut when I go to system preferences, I have no "profiles" - I can open profiles through search, but it is just empty, no profiles AT ALL - and yes- jamf is still working ?!I tried an sudo profiles renew -type enrollment - nothing happens, no error no info - nothingHas anyone seen something similiar ? - Is is 12.5.1 monterey devices btw

Trying to get an EA to report if homebrew is installed so I can scope a GIT update. #!/bin/bash ## Work Area #################### which brew if [ $? = /usr/local/bin/brew ] then echo "<result>brew installed</result>" else echo "<result>brew not installed</result>" fi I only get "brew not installed" any ideas?

Hi all,Not sure why this is failing. I have an Extension Attribute that will simply not populate and I truly cannot figure out why. This EA runs a script that checks for the existence of a certificate on a custom keychain, then outputs either "Found" or "Not found" accordingly. I have removed proper names for privacy reasons:#!/bin/bash result=$(security find-certificate -a -c 'certificateName' keychainName.keychain) search='certificateName' if [[ "$result" == *"$search"* ]]; then echo "<result>Certificate Found</result>" else echo "<result>Not found</result>" fiRunning this script on a machine (outside of Jamf) returns the expected result. Once a device updates, the EA stays blank. Any help is super appreciated.

Has anyone had any experience with the new "self-heal" functionality in API? We've run into an issue with a bunch of devices lately that lose their device certificate, and need to be manually enrolled again.Wondering if I'd be able to script this out to a smart group I have set up for devices with no recent inventory.

For a few weeks now the Devices / Inventory page is often not loading. The menu is not showing at all and the frame for listing the devices is showing a loading circle. It happens as soon as you click on Inventory.This goes on and off. Some days we can access the devices, some days we can't. The computer we use to login doesn't matter (Windows, Mac, iPad, different browsers).Other pages like Automated Devices Enrollment are loading without problems.Any ideas?

Hi everyoneI'm trying to find a solution about silently uninstalling Fiery driver with Jamf. There are only old topics about that. Someone can suggest me about how to proceed? Thanks! 

Hi All, I am trying to set all my laptops DNS servers to Cloudflares. I set a test policy which does this: I see it on my test laptop, but its showing as "not running". Is there a permission or something I need to invoke it?  

Is it possible to allow NON-admins to manipulate settings like "Switch Control" without the need of administrator username/password? Please let me know if you have any insight. Thanks in advance.

Hello, I am looking for a way to run a script that requires new standard user accounts to reset their passwords, even before those accounts are created. Basically, I want the admin account to be able to create the account, set a temporary password, then when the standard user signs into that account for the first time with the temporary password they are immediately asked to change it. All I have seen so far requires the account to have created or signed into first.We are using model 2020 M1 Macbooks

Hi,I'm a sys admin and not much of a dev. I'm trying to extract a list of all computers I have in JAMF so I can list it on a sheet. I'm using Workato with the JAMF App integrated but I can only get a serial number per machine and not all computers at once. We want to automate the process to get our inventory up to date every day. Anyone has experience with this or know how to? Thanks

When there is an update for Jamf Connect Verify and that is installed on a machine (MacOS) it will launch a huge splashscreen even when HideWelcome is set to True. To get a silent install is there a method which will hide the splashscreen after upgrade

Could anyone assist with combining these two scripts; one to temporarily promote the logged in user (used from MakeMeAdmin) and the other is to demote that user and any potential accounts that were created or elevated during their temporary admin.  Promote - #!/bin/bash ############################################### # This script will provide temporary admin # # rights to a standard user right from self # # service. First it will grab the username of # # the logged in user, elevate them to admin # # and then create a launch daemon that will # # count down from 30 minutes and then create # # and run a secondary script that will demote # # the user back to a standard account. The # # launch daemon will continue to count down # # no matter how often the user logs out or # # restarts their computer. # ############################################### ############################################# # find the logged in user and let them kno

I'm happy to see bootstrap token support in Jamf 10.19, but I only want to run profiles install -type bootstraptoken for users that don't have a token escrowed. I couldn't find an existing EA here to help scope my policy, so I put one together. Hopefully someone finds this useful :) #!/bin/bash tokenStatus=$(profiles status -type bootstraptoken | awk '{ print $7 }' | sed 1d) if [ $tokenStatus == "NO" ]; then echo "<result>Not escrowed</result>" elif [ $tokenStatus == "YES" ]; then echo "<result>Escrowed</result>" else echo "<result>Unknown status</result>" fi

I need help deploying zoom updates or allowing non-admins to update zoom because zoom is constantly updating. Any suggestions?

I have recently tried to deploy a few applications through the new Jamf App catalog feature, but for the devices assigned to this they are all reporting back failed. I cant find any logs or indication as to why it failed Any ideas?

Hello y'all. I was just recently hired by a small (less than 500 k-12) students to manage their new 1:1 technology program. They had purchased 255 MacBooks, 180 iPads, and 60 Apple TVs. They also purchased Jamf School "at the recommendation of Apple." We finished deploying devices to students and teachers today, and after the 7th phone call about a student forgetting their local account password, I realized that Jamf School was extremely limited in comparison to Jamf Pro with regards to MacBooks.So, my questions.1: Is it possible to upgrade from jamf School to Jamf Pro without re-enrolling devices?2: If not, is there a 3rd party software we can deploy on top of Jamf School that will allow us to manage user accounts? I'm the first IT staff to be hired, so I tried explaining the limitations to the superintendent, and they are open to discussions about upgrading should it be available. I'm just realizing how insecure and unmanageable our MacBooks are at this point.

Hi All, Any help appreciated, We are trying to deploy the new Maxon One .app from JAMF, however standard packaging seems to fail each time.We had the same issue before with Red Giant Manager.Seems to be an issue with it installing and running the RedGiant Link service.It looks like it installs , however when you launch it, it gives the error that it needs to be fixed, and then just recycles through the same error. Does anyone have this working? and if so how? Thanks

Mac-Mini 2018 -- Monterey -- with Jamf Connect creating local accounts -- not bound to ADThe only user that gets a login keychain is the local admin. Any new users who sign in and create a local account DO NOT get the login keychain. We noticed keychain errors go away if the device is not enrolled in Jamf. As soon as you enroll, keychain errors happen. We started adding config profiles one by one until the keychain error popped up. This is what's causing it:Unchecking this box allows new users to create a local keychainWhy would this cause keychain issues? Is there additional configuration needed to avoid keychain errors? 

I'm trying to create an extension attribute to show what time server is configured on our Macs. This should make it easier to show an auditor that we manage the time server on endpoints. Does anyone know of a terminal command that would output a machine's time server?

Hi all, A bit of a weird one. Here's the scenario:- A user creates a local account within Macbook. Let's say the name is "John"- We have now domain joined this Macbook so users can log on with the AD account- When this person, who's domain account name is John, tries to log onto the Macbook, it does not create a new profile. Instead, it thinks it's already found "John" locally, and therefore does not create the domain account within the Macbook. Hope the above case make sense. Anyone can think of a way to log on with the domain account without deleting the existing local account?

I have created a couple of managed prefs to expand all of the print and savedialog boxes and set them to user level enforced. I rebooted the machinesthat are part of the profile and the save dialog boxes are working as theyshould but the print dialogs are still not expanding. Any ideas? Domain: .GlobalPreferencesKey: PMPrintingExpandedStateForPrintKey Type: BooleanValue: TrueUnion Policy: unchecked by the way, does anyone have any idea what the union policy checkbox is for?I could find no explantation anywhere in the documentation or on the supportsite. ThanksAlan --Alan Benedict?Macintosh TechnicianThe Integer GroupO: 515-247-2738C: 515-770-8234http://www.integer.com

Hey all,Any create a privacy configuration profile for Mimio Studio and the Mimio tablets yet? Gabe ShackneyPrinceton Public Schools

Is anyone else having issues trying to login in via Jamf Connect on the Monterey Beta 2 that was released? As soon as I try to enter my password the second time my machine sits at a black screen? I've seen this issue on the Mac mini and a MacBook Air both on M1.

Anyone out there know if there is a way to export or download the logs of a policy? I see way to grab the policy logs of individual or groups of computers, but no way to download the logs per policy. Am I just missing something or a specific workflow? Appreciate any insight or ideas for what others might be doing!