Today we released Jamf Connect 2.12.0 for general availability; this release includes the below details. Key Feature ContentLogin window enhancements which include: ​​​[PI109797] When the ​Use Local Authentication by Default​ (​OIDCDefaultLocal​) login window preference is set to true, the ​Shutdown​ and ​Restart​ buttons now display at the button of the screen when Jamf Connect first loads. ​​​[JC-3808] When the ​Use Passthrough Authentication​ (​OIDCUsePassthroughAuth​) login window preference is set to true, the login window no longer displays a step indicator if there is only one step required. Key Technical Content[PI109860] If your IdP is Azure or a hybrid integration and you configure the ​Discovery URL​ (OIDCDiscoveryURL​) login window preference or the ​Discovery URL​ (​Discovery URL​) menu bar app preference, ROPG now works, and you no longer get an error message. ​​​[PI109787] Password synchronization no longer fails when a user connects their mobile acti

I've created a Jamf Connect configuration profile using Jamf Connect Configuration and i'm trying to upload it into Jamf Pro as a configuration policy. when I upload the .mobileconfig file into Jamf Pro Cloud. it doesn't create any payloads.  is this correct?

Hi all, I am currently having a problem with deploying SCEP payload for a Wifi Profile. The profile failed with this error OSS Error 67701 points to An invalid record was encountered. My SCEP Payload I have uploaded the SCEP signing Cert under the external CA PKI Certificate setting by following this article link Any feedback would be greatly appreciated. Thanks

Today we released Jamf Connect 2.13.0 for general availability; this release includes the below details. Key NotesMicrosoft Azure AD Change Required: If Microsoft Azure AD is your IdP, upcoming changes to Microsoft Authentication Library (MSAL) require changes to your Jamf Connect configuration. Existing applications remain functional, but in December 2022 Microsoft will discontinue security updates for Azure Active Directory Authentication Library (ADAL), deprecating the use of common endpoints.To align with these changes in Jamf Connect, you must include organization-specific tenant information for your registered authentication applications in your configuration using the OIDC Tenant login window preference or the Tenant menu bar app preference. The information entered applies to all Jamf Connect products and is required to use ROPG test in Jamf Connect Configuration. If both of these fields are left blank, you will now receive an alert that a required field is missing. This he

Hey All,i just received six new MacBooks and I want to add them to our existing prestage-Enrollment.The Devices were assigned to Jamf Pro in our Apple Business Manager.The devices now appear in the prestage enrollment, next to the other devices that are already working.The problem is that when I set up the Macbook, no local administrator is created and I am prompted to create a user manually.Does anyone have an idea why the devices do not create a local administrator despite prestage enrollment and connection to the network?Thanks for the help!

Hi Guys, I am trying to workout ADE (First time) but i keep getting an error on my brand new Macbook Air M1 saying "Enrolling with Management Server Failed. The Server certificate chain for your organisation's MDM server was not properly set up." I have deleted the old ADE connection in JAMF and ABM, recreated a new one with the public key and token, however its still doing it. Any ideas ? I have opened a support case however it looks like its just taking time, so thought maybe I'd ask you guys for some ideas while waiting.

Hey,Im learning about system extensions and trying to manage a certain system extension from Avid NEXIS. I have this config profile in Jamf. Iv'e double checked that the team identifier is correct.  And I get this message when I log into the machine with the config profile and the Avid Nexis Client installed on: Am I missing something?  

Does anyone have a script that they use to reset Google Chrome user data? I found something similar for Safari at:https://github.com/palantir/jamf-pro-scripts/blob/master/scripts/Reset%20Safari.sh But couldn't find anything similar for Google Chrome. I found a thread about this on Jamf Nation here but since the script would run with Casper admin I'm not sure that would work for me. I imagine I could probably adapt the Safari script for Google Chrome as well... I plan to distribute via a Self Serve policy with Jamf Pro.

We are currently running a pilot of jamf Pro in a large AD environment and use AD certificates for authentication to our internal wifi network. I have successfully used a configuration profile with an AD Certificate payload to deliver the certificate to our macOS devices. Works well. We are testing the ADCS connector using a Citrix Netscaler as a reverse proxy, and can't get it to work. Question: Does anyone have any experience using a Netscaler as a reverse proxy for the ADCS connector? I've read all of KMerendaTFMC's great posts on using the F% just need some more specifics on the Netscaler. If you do, I would to chat ;-)

My question may have a ridiculously easy answer, but here goes. We have a lab environment with a teacher who works with grades Pre-K, K, 1, 2, 3.We have user accounts (standard user accounts in AD for these grades). The teacher wanted to have a specific dock configuration for these standard user accounts. After looking at a bunch of options I went with Dockutil. A friend of mine with considerably more scripting experience helped me create a single script that used case to configure the dock for those specific user accounts.The trouble is that script was made before Dockutil was rebuilt using Swift. How do I adapt the script to work now without Python??The script is below:#!/bin/bash #We need to wait for the dock to actually start until [[ $(pgrep Dock) ]]; do wait done #Get the current logged in user that we'll be modifying if [ ! -z "$3" ]; then user=$3 else user=$(python -c 'from SystemConfiguration import SCDynamicStoreCopyConsoleUser; import sys; username = (SCDyn

Currently we have either Preview or Acrobat opening pdf documents by default.I'm trying to see what I can do to automatically associate pdf documents with a new app called Nitro on the command line.   Can anyone point me in the direction?

New to Jamf Connect, what are the best practices to deploy Jamf Connect Updates?Should we do it automatically with Jamf Pro? And do you also let the minor updates install automatically?

Hey all, I took some time off during the summer and completed a tool that I have been thinking about for some time. I’ve fully tested it with Jamf Pro. Hope it helps! https://office-reset.com

We are currently using Jamf Pro and Apple School Manager. Our SIS exports rostering to ASM, and we do not have Apple Education Support turned on in Jamf.With federated Apple IDs (Azure,) we are noticing that iPads frequently prompt for reauthentication (Apple Support has informed us that this is caused by reauth intervals set by Microsoft.) If a student hits cancel, or an iPad has been offline for a long period of time, Apple Classroom will not show the student as online until we either reauthenticate when prompted or unlock the account (we have restricted student iPads from signing out of Apple IDs,) sign out of the Apple ID, and sign back in. This can happen on both student and teacher devices.Do admins with Apple Education Support turned on experience these issues with federated accounts, or will students show as online with the classes being pushed from Jamf? For admins without Apple Education Support turned on, how do you manage reauthentication of federated Apple IDs at scale?Als

I have been pushing out updates from the remote commands with our iPads. I remove them from single app mode and have them do the updates. Once the updates are complete, I put them back in Single app mode, but they are stuck on the "Hello" screen and need me to select a wireless network. They are connected POE so we dont need the wifi.Anyone have an idea how to skip these or have a better way of getting updates through on iOS?

How do I tell which policies and configuration profiles are relevant and okay?  There are 8-9 different polices for Nomad in  my environment left by previous admins and I cant decipher them to figure out which ones are safe, or which ones are causing problems.  I want to get rid of Nomad for Jamf Connect, but I can't even tell if it safe! also, when I push out Mac OS upgrades and updates, the nomad window goes away and then users can't sign into their machines!  HELP!

Hey there, we are looking to get more aggressive about installing OS updates.  I was curious to hear any feedback on what method might be better:  Nudge or Apple MDM commands.  Environment is around ~8000 Macs, most of which are DEP enrolled and should have bootstrap tokens.  Historically MDM commands have been pretty hit or miss in terms of reliability.  Any thoughts?  Thanks!

We have Yubikeys paired keys with MacOS. I have to export Yubikey Cert infos to shared smb.Solution: I have a Powershell script to deploy on admin and non admin users.Requirements:  Brew /bin/bash -c "$(curl -fsSL https://raw.githubusercontent.com/Homebrew/install/HEAD/install.sh)"  Powershell  brew install --cask powershell brew install ykmanpws script.ps1These commands are working just fine locally. Am not able to write these commands using a script  to be deployed as Jamf Policy. Any idea?

We are running a network build and the policies start to install correctly. Then all of a sudden the policies will only execute without verifying or installing and then just scrolls through the policies until it then all of a sudden it starts to Execute, Verify and Install policies again.To get it to work once I see the policies are just Executing I open terminal and kill the Jamf process. killall jamf, then jamf manage then jamf flushpolicyhistory then jamf policy and everything installs correctly.Has anyone else seen this behavior?

Hi All,We are getting flagged by Okta for devices exceeding the rate limit. over 60 per min coming from Jamf. We are having trouble tracking down where this is coming from or why its happening. Does anyone else have this issue or know anything about it?

Hi,The below script measures uptime in days.The result of the script looks like this in Jamf (for a Mac that been up between 5 and 6 days)Script result: <result>5</result>I need to amend the script  so if the Script Result is more than 21  it triggers a jamf policy using events(jamf policy -event eventname).but I don't know how to write that script. Any help would be appreciated. Thanks.#!/bin/shdayCount=$( uptime | awk -F "(up | days)" '{ print $2 }' )if ! [ "$dayCount" -eq "$dayCount" ] 2> /dev/null ; thendayCount="0"fiecho "<result>$dayCount</result>"exit 0

Is there a way to set up a notification for a device in lost mode so when something changes/updates it will send an email that its been active.  We currently have a few devices "missing" and would like some way to find out if it gets on a network, gets a push update, anything really, instead of having to manually check each device in Jamf or wait for it to show up at a pawn shop.  Just looking for a way to be a bit more proactive about it but also not having to have someone constantly check a list of devices.

Hi everyone, Has anyone had success with using the Powerbi Connector?  I've managed to pull all data in, created a couple of small dashboards, but it never seems to refresh.  Even a manual or scheduled refresh ends up timing out after a few hours.I've also shrunk the data set to one table, and removed some of the unwanted columns.Any thoughts or suggestions would be grateful received! 

Hi folks,I needed a regex for the devices that are supported by iOS/iPadOS/tvOS 15 and couldn't find one. Therefore I built a regex myself and want to share it with you. If you find errors or improvements please let me know.^iPhone(1[0-5]|8|9)|iPad(1[0-5]|[5-9])|AppleTV([5-9]) 

Hi All,I am having hard time finding a solution to something that should be easy thing to do.More details: I am working on a script that will change the status of a computer that is inactive longer then X days. I am using smart group for the filter and policy to deploy it.The problem is to run a policy you need a trigger from the computer which is impossible given that the script and policy is for inactive computers to run and it will do the changes from the Jamf server side nothing on the local machine.Is there a way how I can do this?