Hello, We are using Apple School Manager with a direct integration with JAMF. We have seen an issue where we have some duplicate students; all the information looks the same except that one will have a roster associated from ASM and one does not. Is there a way to run a search query against this and just delete any user not associated with a roster?

Hi everyone,We're currently evaluating Jamf Connect to use with our Okta instance. Currently at the stage where we want to set up the Okta configuration profile for Jamf Connect. Using the Jamf Connect Configuration tool, I'm curious to learn which fields those of you who have the same combo (Connect + Okta) have you filled out?Thanks!

Hi,I just deployed Safe Internet on a test student iPad.  So far so good, configuration and deployment was straight forward and everything seems to be working properly.  One thing I cannot find is the ability to see an individual device or a users browsing history of blocks and allows.  I didn't see a way to see it in the GUI or in a generated report.  Anyone how how to access that data?

Hey guys, I was recently shifted into the role of Sys Engineer after tackling some MDM projects. A new project I am tackling is setting up Jamf in Okta so that our users can enroll their apple devices in Jamf via Okta.Does anyone have experience with this? I of course scoured the internet for guides and documentation but there is nothing notable.This is utilizing Jamf Pro.

Before I posted this I did search for this issue both here and google. The issue I am seeing is with 10.13.4 systems. After the upgrade my users are being prompted that a system with the same name exists on the network. I have checked DNS and DHCP for duplicate systems and none exist. The wildcard here is the number after the computer name increments up really high and really fast. The number also only seems to only append the computer name not the local host name or dns name. Has anyone else seen this or similar and if you have is it fixed?

Hi JAMF Nation,is there a way to restrict all AppleID domains to login to App Store and allow specific domain like mycompanyAppleID.com?is there a plist item string that we can edit to get this configured? thank you for the assistance :)

Hi,What is the current billing status of our Makalapa Elementary School Jamf Pro account?Lloyd Take**bleep**a4435 Salt Lake Blvd.Honolulu, HI  96818

I'm reconfiguring Jamf Connect and am a little confused by the overlap of the com.jamf.connect and com.jamf.connect.verify application domains. It seems like you have to use both to fully customize the menu bar and password syncing functionality of Jamf Connect, but the existence of the same settings in both domains is stressing me out.Are they actually configuring the same thing? Does one take precedence over the other? Is there a set of best practices to follow? The Jamf Connect documentation isn't clear on this, and it doesn't even seem to reference the fact that you can configure it at the com.jamf.connect level.Long story short, I’ve got things working, but "A," I’m not sure I did it “right,” and "B," there’s no way anyone who looks at these configs after me is not going to have the same exact questions.Thanks, Matt

We have 10 iPads we bought from a local store to beat a budget deadline, and I'm having issues enrolling them to our jamf pro (cloud), and getting similar results. Using a URL/QR code for self enrollement, only pushing a wifi config. When I install (from app store or from tethered connection and apple configurator) self service, it loads but says "This app must be associated with a jamf pro server. One of the 10, works, and under Settings>General>VPN&MDM, it shows Apps and in it is Self Service.I've tried transferring settings from a working iPad over after a wipe, fresh wipe + custom settings, apple configurator with manual enrollment, apple configurator with automatic enrollment. I keep getting the same outcome of Self Service not being associated and my jamf only being able to lock screen to its current screen pin.  I've followed this documentation: https://docs.jamf.com/10.27.0/jamf-pro/administrator-guide/Self_Service_Web_Clip.html I would love a good best

Hello,we try to update our Mobile devices via the API.https://developer.jamf.com/jamf-pro/reference/createmobilescheduleosupdatecommandurlhttps://yourServer.jamfcloud.com/JSSResource/mobiledevicecommands/command/ScheduleOSUpdate/{install_action}/id/{id_list} nor  https://yourServer.jamfcloud.com/JSSResource/mobiledevicecommands/command/ScheduleOSUpdate/{install_action}/{product_version}/id/{id_list} are working. We get a 401 with a restricted user or a full admin Response:HTTP/2 401 date: Thu, 01 Sep 2022 15:12:24 GMTcontent-type: text/html;charset=UTF-8content-length: 424set-cookie: XYZ; Expires=Thu, 08 Sep 2022 15:12:24 GMT; Path=/set-cookie: XYZ; Expires=Thu, 08 Sep 2022 15:12:24 GMT; Path=/; SameSite=None; Secureserver: Jamf Cloud Nodestrict-transport-security: max-age=31536000; includeSubdomains;x-frame-options: DENYcache-control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0accept-ranges: bytesx-xss-protection: 1; mode=blo

Question regarding the software update notification. It might be to late, so our Macs got the software update prompt for 12.5.1 today and we thought we had the notifications turned off. I went in to our restriction profile and unchecked it. After I uncheck it, should the notification go away, or will it only affect the Mac's that haven't got the prompt yet? Thanks,

Hi,Google Drive File Stream has become Google Drive and all the scripts out there for installing are now defunct. Does anyone want to take a crack at updating the Script out there? I'd love one that works! DL location is now https://dl.google.com/drive-file-stream/GoogleDrive.dmgand the DMG opens to create GoogleDrive.pkg Note, this still does not run on M1 processor.

Hi guys, I'm trying to push a configuration profile to allow Google Chrome notifications, but I seem to be running into some issues. I've created a profile with the Bundle ID: com.google.Chrome but it seems like I need to add in a separate bundle ID since I see two instances of Chrome in the Notifications System Preferences. Is there an easy way to find out what bundle ID I need to allow?

I need to manage 2 macs, our Windows devices are in Azure / Intune. I'm looking at Jamf as I've heard its the best solution for macs.We only have 2 devices and a small business so was looking to use Jamf Now but have a few queries on this setup... Does Jamf Now work with Intune, all the documentation points to Jamf Pro?Why do you run Intune & Jamf? They both seem to be similar in what they do (encryption, policies, etc)Is it viable to just use Intune when its just a few macs? One key thing is we want them to sign into macs using AzureAD accounts?

We are currently moving all our Mac away from binding to use Nomad, the problem we are having is we having tested this on a test Mac server and when running nomad and sharing directories it does not seem possible to interrogate AD for users to set up directory permissions, when bound in the add users section of file sharing they are all there, but nothing with Nomad, has anyone done this and could give a pointer?

Googled.  Found this.  It doesnt reference anything like my Apple School Manager.Is there documentation for exactly how to do this now?Thanks for any help.

HI all, Im trying to implement a way of sending out a nofication (branded if possible, but not necessary) that says something like 'A new version of Firefox is available' that the users can then download from self service, in the same way Apple Software Updates or Jamf notifications appear As I said it would be nice if I can get my company logo (the same one I have used as the Logo for Self Service) in there somewhere, but if not that's fine Any help appreciated!

We just rolled out jamf connect to a test environment and we're noticing a few things.If you restart you don't get the jamf connect login window. It wants a user to login with their password. What is the workaround for this? Is there a way to force user log out after a restart or power outage?Also our file vault settings are set to personal (individual), but jamf is not recording the key. It says no key present. Any ideas?I saw a post on jamf Nation saying the only option is to disable file vault on computers running jamf connect. Is this true?

If we set a policy Execution Frequency to "OnGoing" will the script only apply the policy if there has been a change or not already applied to the computer? If we have software or a configuration in place and set it to ongoing at "Recurring Check-in" will it only apply the policy once and just check if there are changes? For example, I'd like to leave some of the software installs or preference policies available for Jamf Self Service in case they need to reinstall the option or if they make changes to something and they want the ability to re-apply the policy. Also maybe it's software we require to be installed and they remove it then the policy would kick in to re-install. Just curious if it will keep re-installing the same policy over and over if left to "OnGoing" with "Recurring Check-in"?

Hallo EveryoneOn one of our internal web tool, we receive the error: Your connection is not private.The same internal web tool works fine on Windows devices. We are told to solve the problem as it is a mac problem(?)I dont think that it is a mac problem or is it? Need some help to figure out what the problem is and how to solved it.I know about the SSL Certificate to be valid only for 1 year + Renew grace period which is issued on or after Sep 2020(https://support.apple.com/en-us/HT211025).But the SSL certificate of our internal web tool is issued on December 2019 and it valid for 3 years. Can it be that this certificate is also effected because fo Apple's validity period limitation?Here is the Behavior on different browser:Chrome: NET::ERR_CERT_VALIDITY_TOO_LONGEdge: NET::ERR_CERT_VALIDITY_TOO_LONGSafari: "x" certificate is not standarts compliantFirefox: it works without any issue or certificate errorAs I checked the certificate in chrome, I was only able to see the SS

First I had one mac with the issue - now few days later see a new mac with issueThe mac overall works fine, I can run all jamf commands, self service etc - I can see in the backend everything is fine, and machine is checking in, inventory - all fineBut when I go to system preferences, I have no "profiles" - I can open profiles through search, but it is just empty, no profiles AT ALL - and yes- jamf is still working ?!I tried an sudo profiles renew -type enrollment - nothing happens, no error no info - nothingHas anyone seen something similiar ? - Is is 12.5.1 monterey devices btw

Trying to get an EA to report if homebrew is installed so I can scope a GIT update. #!/bin/bash ## Work Area #################### which brew if [ $? = /usr/local/bin/brew ] then echo "<result>brew installed</result>" else echo "<result>brew not installed</result>" fi I only get "brew not installed" any ideas?

Hi all,Not sure why this is failing. I have an Extension Attribute that will simply not populate and I truly cannot figure out why. This EA runs a script that checks for the existence of a certificate on a custom keychain, then outputs either "Found" or "Not found" accordingly. I have removed proper names for privacy reasons:#!/bin/bash result=$(security find-certificate -a -c 'certificateName' keychainName.keychain) search='certificateName' if [[ "$result" == *"$search"* ]]; then echo "<result>Certificate Found</result>" else echo "<result>Not found</result>" fiRunning this script on a machine (outside of Jamf) returns the expected result. Once a device updates, the EA stays blank. Any help is super appreciated.

Has anyone had any experience with the new "self-heal" functionality in API? We've run into an issue with a bunch of devices lately that lose their device certificate, and need to be manually enrolled again.Wondering if I'd be able to script this out to a smart group I have set up for devices with no recent inventory.

For a few weeks now the Devices / Inventory page is often not loading. The menu is not showing at all and the frame for listing the devices is showing a loading circle. It happens as soon as you click on Inventory.This goes on and off. Some days we can access the devices, some days we can't. The computer we use to login doesn't matter (Windows, Mac, iPad, different browsers).Other pages like Automated Devices Enrollment are loading without problems.Any ideas?