Has anyone been this stuck with a locked computer? I locked a computer remotely using JSS and creating the 6 digit code. The computer successfully locked, the student then tried to guess what the code is and got it wrong. He then brought it to me with the screen displaying "Your computer is disabled. Try again in 60 minutes" Once that time runs out it just shows "Wrong passcode. Try Again" without ever giving me the option to enter a code. I have tried booting into recovery mode and doing an internet recovery. Both times it just boots to the same screen. I took it to the Apple store and they claimed they have never seen this screen before and could not help. I then spoke with my Casper rep. They had me do a PRAM reset and a SMC reset, both times it booted to the same screen. She then told me to call Apple Support and they had me try everything listed above again. Apple Care sent this issue to the engineers and I am waiting for a response. I am looking for any sug

We have a configuration profile which enables the builtin firewall for the devices. It happens from time to time that developers are testing some applications and would accidentally deny the prompt for allowing access due to various reasons. Now, in previous macOS versions I would just fix the issue with socketfilterfw, however on Monterey macs I see the following:bash-3.2# /usr/libexec/ApplicationFirewall/socketfilterfw --getglobalstate Firewall settings cannot be modified from command line on managed Mac computers.So, now I have to move the device out of scope of the config profile, allow the blocked connection manually, then move the device back to scope. Furthermore, allowing exceptions on Jamf seems possible only if you have both the name and bundle ID, which is not available for a significant portion of command line tools as far as I am aware, only for signed apps. How are people handling firewall exceptions in an environment where people mostly do not have admin rights on their

We have a couple of mobile carts of MacBooks we occasionally loan out for testing or staff development days. Users will often leave online accounts signed in or have documents left in the folders. I have been seeking a way to clean up the devices without having to personally check for signed in Google accounts or downloaded files.The first step was to enable Guest User. Upon logging out, all files are erased. This has taken care of the biggest hurdle. Then, I have been looking for a way to automate it. There are bound to be MacBooks that have not been logged out of, which would mean they would still have to be checked upon return.I have independently tried the "Log out users after a certain time of inactivity" under Login Window and a script to automatically shutdown. Neither are suitable for this scenario, as I am using Guest User and these are MacBooks. Guest User has no log out timer and closing the MacBook will make scripting difficult.These carts will not be sent out often, so log

Is there a way for me to use Composer to make a package that I can put in Self Service that will install the application for only the user who is logged in/goes to Self Service and installs the software?Specifically I'm looking to allow users to install Zoom and install it only for them.  Zoom has an option to do this if the users download the installer from the Zoom website and do the right clicks to get to the "Install for me only" option.  I'm trying to make it easier for my users (and the people at the help desk who have to talk users through this on the phone).Thanks.

I want to apply for a trial of jamf connectI have filled in the information, but there is no reply to the email to me

hey there,it is planned that various computers that are currently managed in a separate jamf now will be transferred to our jamf pro. so this is a move of various macbooks into our existing system.is there a best practice here? maybe even instructions? what do we have to think about in general? how does it work with the tokens / certificates? do the devices have to be set up again for this?i know my way around jamf very well by now, but this is a sore point, unfortunately, and will certainly come up soon.thank you!

Hi,I'm using jamf pro. I need to disable all safari because the only browser we manage in our company is Chrome.iv tried to search in configuration profiles - restrictions - application - but there is no reference to safari except Safari autofill.what do you guys recommend me to do?thanks :)

Hello everyone,We are trying to use the following process to upgrade user machines from Catalina to either Big Sur or Monterey (depending on hardware support):Use a policy to cache an install of MacOS, targeted by static groupOnce the cached install has completed successfully, add the computer to a second group to manually extract and install the cached installer using a script.  The script uses jamfHelper to allow users to delay the upgrade, etc., and ultimately culminates in the following command:/Applications/Install\\ macOS\\ Big\\ Sur.app/Contents/Resources/startosinstall --agreetolicense --nointeraction --forcequitapps --pidtosignal $jamfHelperPID >> /var/log/startosinstall.log 2>&1 &We've verified that the script works when run directly, as well as when run by a policy that is triggered by login.  However, if we set the policy to run on recurring check-in, we see miscellaneous oddities including Jamf Helper launching in full screen and then immediately

When will Jamf add this to the Jamf console? See link from Microsoft about this.MS Link

Why does jamf support always prompt users to log in when after a version upgrade?I'm using a policy to upgrade the app and I have a postscript to kill the app but it will appears.

We are looking to map 2 network drives based off of the AD user that is currently logged in. We used to manage these iMacs using Profile Manager and in the Login Items payload there was a section called Authenticated Network Mounts but Jamf Pro does not have this. It seems simple but I'm not familiar with custom scripts/how to implement them using Jamf Pro. Any help would be greatly appreciated!

Anyone had any luck finding an MFA product that is deployable to devices, works with local admin accounts, and works with the new M1 processors? Duo won't work with M1. Yubikeys are not deployable.

Leverages swiftDialog v1.11.2 (or later) and Jamf Pro Policy Custom Events to allow end-users to self-complete Mac setup post-enrollment via Jamf Pro's Self Service.Continue reading …

Hello all,Posting here to possibly get some help on an issue we’ve been running into using Duo Mobile and macOS.We are deploying Duo through Jamf Pro and we have no issues using the automated enrollment for Mac users that are in office. Our issue is with the Mac users that work remote. As i understand it by default macOS will not allow you to select or change wifi networks from the login screen. This causes conflicts with Duo to where a user is unable to login to the Mac because it is not connected to the internet and it will block a user from logging in, We have it set to enroll them into offline access as well, but this will not prompt them to do so until after they complete the 1st initial authentication.All of our Macs are on the latest 12.5.1 and we are using MacLogon-2.0.0.pkg being installed through a policy in Jamf Pro.If we install Duo on a Macbook then ship it to a remote user, it is essentially a paper weight that they can’t login to or connect to the internet with.Has anyon

Hello everyone,We use JAMF school to manage our iOS devices. We are primarily a Windows environment when it comes to laptops and desktops. We currently have new and older MacBook’s(iMacs too) that are not in the domain. They are stand-alone. For security reasons we need to start authenticating users when it comes to macOS devices. I have read some documentation regarding authentication via Azure or LDAP. What would be the pro and cons of going with either one? Also, would it join the domain after the Device enrollment? If so, would those configurations be done in the organization settings or within the profiles? I also read about directory binding. Would this need to also be configured, or is it something not related?I have several questions to have a better understanding before moving forward.Any help would be greatly appreciated.

I want to enroll a Jamf Now Fundamentals setup to x3 new MacBook Pro's, I've configured the apps/software I require etc and am ready to enrol.Do I need to setup a local Admin and Standard accounts on the new Macs before enrollment?Or can I just get away with a Standard local account on the Mac?As I may need to install additional apps that's are't available on the App Store.

Hello!Current Issue:Issued Command "Enable Lost Mode"iPad was found - However, when "Disable Lost Mode" is sent it does not get received. Nor does any other command.iPad was restarted - From what I read that does cause the wifi to shut off. I have downloaded Apple Configurator however, the computer does not see the iPad when it plugged into it. Any help would be much appreciated in this problem. Thanks! 

Hello community,My organization has recently rolled out the latest version of Jamf Connect and when some user's sign out, and they are on Wi-Fi only, they are getting the error that you can't sign in to Jamf Connect because computer is offline. Is there a way to make sure the wireless connection always stays on for Macs when logging off? Can we update our Jamf Connect configuration profile to do so? Or could this just be the way our Wi-Fi cert for our network works? Any insight is appreciated and I'm sorry if I didn't make this question too clear.

We are starting to use Apple Classroom for one of our grades to test.We are manually rostering classes is Jamf Pro (10.39.1).  Every time I try to create a 16th class, it overwrites the 15th class.  We need to roster 20 classes.  Does anyone know if there is a limit to the number of classes we can manually create in Jamf Pro?We are trying to avoid having to use Apple School Manager because we use Veracross as our SIS and moving data between the two is nearly impossible.Any insight is appreciated!

Hi all, just a quick question for anyone who uses Keyserver. I am in the process of rolling out a new version of the KeyAccess client (v6.2.0.2) and would like to be able to use the .mpkg that is provided directly by Keyserver as it can be customized for our environment using the k2clientconfig command line options. The issue that I am running into is that if I set a policy to install the .mpkg on a machine the package is installed incorrectly (the installer logs show permissions errors). I checked out the JAMF Knowledge base and found this article (http://jamfsoftware.com/kb/article.php?id=157) which I assume is the problem that I am experiencing: "The MPKG file format may not always work natively with Casper Remote or Policy deployments. This is because embedded permissions on the files within the mpkg may conflict with the privileges used by the Distribution Point read/write user. It is suggested that you first try using the .mpkg file on a test machine. If the deployment

Hi All,Any ideas on how we can deploy Google Chat App via Jamf Pro for Mac devices? New to Jamf,Tem

Hi all,I need bit of guidance and suggestions here. I've been using Jamf for a few months now and would like to push out an update to all enrolled Mac devices for 12.6. What is the best way to push this out that doesn't restart the computer for the end user. I want them to be able to download the update in the background but restart upon confirmation of the user.  Thanks for all the help in advance!

Back in January we had a discussion here about finding the uptime of amachine and displaying a message to users to reboot their machines. I justwanted to follow up on that and hand out what I've done here to implementthat. First of all, the reason I want to implement this (because I know that was aquestion) is because my users have a tendency to not restart for over 7days, some up to a month or longer. And, I get calls about performancedegradation or strange things happening. They don't even restart when Idisplay a message that says "Software updates have been installed, pleasereboot as soon as possible." So, here's what I've done: Create the following script, named it uptoolong.sh: #!/bin/sh # Name: uptoolong.sh# Date: 3 March 2010# Author: Steve Wood (swood at integer.com)# Purpose: this script will check how long a machine has been up and displaya notification# using Growl and Growl Notify. # set some variables and grab the timedays=uptime |

I've done simple Jamf Now Auto-enrollment and have stupidly changed my User accounts to standard users using a terminal command I thought I could revert back to as and when needed. But I can't seem to revert the terminal command. Learnt my lesson is always have an extra admin account when using terminal commands.Will I be able to boot into recovery mode on these Macs and removed the setup file, which allows the macOS setup assistant to run again? Or will the Jamf Now Auto-enrollment stop me from doing this?Basically I want to do this: https://osxdaily.com/2022/03/25/no-admin-account-mac-fix-macos/ The terminal command I used was: sudo dseditgroup -o edit -d UserName -t user admin

Hi all,As we know that Apple changed the iPhone sync method to using finder as their option.https://support.apple.com/en-sg/HT210598my question now is if anyone know how to block the data transfer for iPhones on the mac via Finder?