Hi We are running into issues installing app store apps and I think it's because our VPP server token has been revoked. I believe this token was set up in an old employee's account and I can't find where to get a new token to upload. I have checked our abm account and can't find it anywhere. I read on a Jamf post that VPP is no longer supported after January 2021? Is this the case? How can I go about installing app store apps with Jamf pro if so?

hey all, I have been tasked with Blocking all extensions in Safari, sans the approved list. can anyone point me in the right direction? Thanks

Hey there,we're trying to set some advanced settings in Microsoft Outlook. We want to tick the red outlined box and enable SSL.Right now we're using this script, which work's, but throws an error. I'm not really into scripting but i tried a little bit on my own and came out with the following:osascript <<END tell application "Microsoft Outlook" set ldap server of exchange account 1 to "XXX" set ldap use ssl of exchange account 1 to yes set ldap port of exchange account 1 to 6666 end tell END It throws no error, but it won't enable SSL either. I think it's because I don't define the default exchange account and I don't really know how to do it. Shouldn't it be just "exchange account 1"? I tried many things out but I can't get it to work...Thanks for any help!

We are using Jamf Pro, without Jamf Connect.Now we are looking to take away admin rights from our users (insert evil laugh here) and let them request temporary admin access via Self Service.But is it possible to migrate their current accounts to a standard account or is that not possible and do we have to reinstall those Macs?

Greetings all,It is documented in the Jamf Connect manual that Jamf Connect will lose its control over the login process after a system upgrade.  It shows issuing the authchanger command to re-establish the control.  We don't have control (at this point) over when people run system upgrades, so we would like to automate this process so that any time that linkage to Jamf Connect is broken it gets reconnected.  Does anyone already have this process set up and working?  It was suggested to use a script in Self Service, but we do not want to leave this step to the tender mercies of our end users.  We want this to be as unobtrusive (invisible) and bullet-proof as possible.  We're looking at the authchanger -print output and grepping for pertinent information, but we are hoping that somebody has run into this already. Thank you for any suggestions!

Never mind, issue solved.

Hi guys,We are currently in the process of upgrading our Mac's to Monterey. Unfortunately after completing the first time setup for our Mac's, some of our macs are still attempting to retry the first time setup when we return the next day or sometimes even after a few hours. We are prominently upgrading through software updates. My colleague believes that it could perhaps be the Mac's not being able to cache the *apple.complete* files which are read upon boot. Please could someone help. Many Thanks, Alexander 

Hello Everyone,Does anyone have a method of using an extension attribute to get a list of all casks and formulae installed in our environment?

Hey Jamf Nation!We've just released Jamf Pro 10.41.0 Beta 2. This is our compatibility release with the new operating systems coming from Apple this fall. There are a number of updated or new keys, a GSX Update, and updates to the Azure AD migration assistant. For full information, please see the release notes linked in Jamf Account.How to join the beta: We’ve also made some changes to the Beta enrollment process with our new Jamf Nation platform. Please enroll in the Beta Program under Product Feedback at account.jamf.com. Once you’re enrolled you’ll see a link to the Beta Forum. Check your email (including Spam folder) - you will receive an email with a link to click to get Jamf Nation beta forum access. Once you receive the email, click on "Join this group Hub" to access the forum.   If you have any questions please email beta@jamf.com. As always, the beta program is operated under non-disclosure, so please do not share any information regardi

Hi Jamf Nation,  In our continued effort to support you in keeping your student safe and secure online, we are pleased to announce that Jamf Safe Internet has today received new functionality. Google SafeSearch and YouTube Restricted Mode will now be available for you to configure in the Jamf Safe Internet portal.To turn on Google SafeSearch and YouTube Restricted Mode, you will need navigate to Policies  within Jamf Safe Internet portal, click the Search rules tab and click the relevant boxes for Google SafeSearch and YouTube Restricted Mode. Detailed documentation can be be found on our Jamf Safe Internet Support Documentation.   This new functionality brings added layer of security to your school through our Jamf Safe Internet content filtering and network threat prevention offering; Google SafeSearch: Google SafeSearch helps hide explicit content from Google search results. YouTube Restricted Mode:  YouTube Restricted Mode helps hide mature c

Hi,I am new in Jamf and getting an error when I'm resetting the local admin password via scriptError:Script result: 2022-04-26 08:31:18.383 sysadminctl[6358:54084] resetting password for Admin. (Keychain will not be updated!)2022-04-26 08:31:18.415 sysadminctl[6358:54084] SystemConfiguration commitChanges failed. Command use#!/bin/shsudo sysadminctl -adminUser adminUserHere -adminPassword adminPasswordHere -resetPasswordFor userToBeResetHere -newPassword newUserPasswordHereexit 0 

I found a few posts asking about a regex for iOS 16, iPadOS 16, and tvOS 16 and figured I post this. I included iPhone15,[0-9], anticipating the next iPhone release this fall. Let me know if I missed something.iPhone1[0-5],[0-9]iPad((1[1-4])|[6-8]),[0-9]AppleTV(11|[5-6]),[0-9](iPhone1[0-5],[0-9])|(iPad((1[1-4])|[6-8]),[0-9])|(AppleTV(11|[5-6]),[0-9])Here's a link to the complete regex with all the iPhone, iPad, and Apple TV model identifiers.https://regex101.com/r/4VsaTp

Hi All,looking for any tips to get past apps not completing the install on iPads.Most are brand new, prepped over summer.I waited to shut down until all apps were installed.Now, of course there are App Updates, and the ipads are in the schools.These iPads ar for Grk-4 andthey do not have delete apps permission so ding aytihng requires mulitiple movesMy normal process when I see this is to remove the partials and reveal the app store and that usually unsticks them, but that is not practiccal if it is MANY ipads in and  school starting on Tuesday...  

Tart is now available as a signed, notarized, versioned .PKG for easier deploymentBackgroundOn 20-Jul-2022, Richard opened Issue No. 153, requesting an Apple installer package and today Cirrus Labs delivered.Continue reading …

Is there a way to enable notifications for applications without locking the user out from changing what the notification settings are? Right now, I have a test profile that only has "NotificationsEnabled" set to true:But when the profile installs, the user is locked out of any other changes:If there is no profile and the user enables notifications themselves, they can make changes to their hearts delight:

Hi All,Just wondering if there is a easy way to upgrade Jamf Connect without any user interaction or prompts to the user?so far in testing I have had to trigger a post script to kill Jamf Connect after I upgrade but.. this will temp launch the app and then kill it..Any input would be great! rk

We have a requirement where the onboarded users are needed to install and uninstall applications from their devices without having to put admin’s intervention. Also, with that kind of access, we don’t want them to be able to uninstall certain essential applications. How can we achieve it, please suggest.

Is there a way to put a macOS device into Lost Mode so it can provide the location of the device?  Similar to what is available for iOS devices within Management. I do not see that feature under Management for macOS devices.

forgive me if im going mad but im sure someone told me there was a trick to send a link via email which ill open the Self Service.app on the machine. Does anyone know of this?

I have an iPad that we are removing from the fleet and I did not do the remote wipe first before I removed it from Jamf and School Manager. When I connect it to the internet it shows up in Jamf as "mobile device" but none of the commands are available. I cannot remove the MDM profile and it will not let me "erase all content and settings". I have tried to re-enroll it but it will not let me since there is already a profile installed.  Any help is appreciated

We are about to roll out OKTA integration in Self Service for all our users.  In my testing phase, I am finding each time Self Service is closed, we have to re-login to OKTA.   I think this can have an impact how end users leverage Self Service and would like to keep them signed in.JAMF support says it's an OKTA setting.Our OKTA admin gave me a very vague answer and doesn't think it's possible.  I am skeptical.  Does anyone else have OKTA integration into Self Service where it keeps your users signed in after closing the window?   Where is this setting located in OKTA?

Hi All,Has anyone seen where systems get stuck on a loading screen when either upgrading to macOS Monterey or installing the latest security update?I have seen in jamf connect documentation that there is a work around steps under - "Restoring the Authorization Database"Im wondering if this is caused by Jamf Connect 2.13 or any version lower that 2.14 ..ThanksRob

I just setup a new computer that's been setup with the local admin that we want on all Macs but the standard user that gets created through JAMF by asking for user verification during out of the box setup does not show up as an option for sharing. Can this not be granted to non-admin users instead of only seeing "Administrators" or local admins? In the screenshot "SysOp" is our local admin user for techs to use. My user is not seen here which is a standard user.

Hi,we have a network of many supporting admins, that all just have to access a few sites in one jamf Pro instance each. The Groups that give access to the sites are all LDAP groups from our AD, synced to jamf Pro, the users themselves were never synced to jamf Pro directly, they only existed on our AD and were nested in multiple groups there, which gave them access to all the sites they needed. This worked fine until maybe 2 weeks ago. Then some of my admins started reporting losing access to all sites but one. Which is problematic to say the least.I changed nothing and jamf support just told me that that never worked this way, but it definitely did until a few weeks ago. Has someone observed something like this as well? Is there a solution? Or is jamf just broken in that regard. Kind regards

I'm trying to write a generic script to set default app for a document type e.g. PDF using https://github.com/Lord-Kamina/SwiftDefaultApps/releasesThis works from a policy where $4 is set to: /Applications/Nitro\\ PDF\\ Pro.appand $5 is set to com.adobe.pdf - but in the script I explicitly ignore $4 and set application_name  #!/bin/bash # SetDefaultApplication.bash #application_name="$4" application_name=/Applications/Nitro\\ PDF\\ Pro.app echo $application_name # e.g. /Applications/Nitro\\ PDF\\ Pro.app uti_name="$5" # e.g. com.adobe.pdf currentUser=$(stat -f%Su /dev/console) # setHandler sudo -u $currentUser /usr/local/libexec/swda setHandler --application "$application_name" --UTI $uti_name   and in the policy I see the output as:Script result: /Applications/Nitro PDF Pro.appSwiftDefaultApps SUCCESS: Default handler has succesfully changed to com.gonitro.NitroPDFPro But, if I try and use $4  #!/bin/bash # SetDefaultApplication.bash applicat