A function for your ~/.zshrc to self-heal the jamf binary via the Jamf Pro API Background We’ve had one too many Macs with sideways configurations lately, which we’ve attempted to resolve by various re-enrollment strategies. After reviewing Emily’s Jamf binary self-heal with the Jamf API post, we wanted to easily issue the redeploy command via macOS Terminal. Continue reading …

Hi.Now that we have a MDM command to set the time zone on iOS Devices, this is a feature request :- In the Enrollment settings on one location, option to "Automatically Set Time Zone" and a menu to select a time zone- At enrollment, the MDM command is applied automatically.And so you can eliminate the Services Location pane in most contexts.See you.

I want to push a Yubikey Manager.pkg through Jamf.The package was downloaded from https://www.yubico.com/support/download/yubikey-manager/  and packed using Composer.Installation through Jamf Pro: okIssue: when the app is opened locally user see this msg: "YubikeyManager" app is downloaded from internet ....- How to make the pkg trusted when pushed to the MacOS?Your's

Are anyone in here using Cloud App security for Mac, with device certificate together with conditional access?Overall it works much better then the "nightmare" company portal registration, but MCAS of course also is a bit different using certificate instead of azure registration.Only issue we see if a lot of rapporting bugs from MCAS, where clients seems to rapport certificate is missing , but only in the log this is happening - on the user device there is nothing noted. Sometimes however, it it seems to block on clients, so all microsoft apps must be closed down and restartet before device certificate will working. The reason for this, is as far I have known, if the device has been opened up sessions on different network and then come back to company network.Would like to know if other experience the same ?

We are testing the viability of replacing our current VPN with a L2TP VPN handled through the network settings of the Mac, dropping the need for a software client. Everything is up and running and works wonderfully, deploying the VPN setup via a configuration profile. However, I am having trouble figuring out how to change two settings (short of doing it through the GUI) - System Preferences->Network->Select VPN, Advanced Settings->Options Tab, Session Options I would like to uncheck the "Disconnect when switching user accounts" and "Disconnect when user logs out" settings. I do not see anything in the configuration profile to accomplish this. I found the settings in /Library/Preferences/com.apple.networkextension.plist, but cannot figure out how to change them there either. Additionally, it might be nice for users to be able to toggle "Send all traffic over VPN connection" depending on where they are - but users cannot access this advanced menu - so if it might be cool t

I see this question has was asked a few years ago, but there was no answer. Now I'm facing the same issue, so I thought I would reach out again to see if anyone else has found the answer.Why can't you turn on Activation Lock for Shared iPads? Even though you are given the option to enable it, as soon as you save the PreStage, the option is unselected. This appears to only be a problem when also selecting "Enable Shared iPad". As we're only using guest accounts, we really need the iPads to be locked to the organisation's Apple ID.Is this a bug or a feature?

Is there a script that would retire the device from JAMF Pro, and then do a "sudo profiles renew -type enrollment" command after JAMF has been removed? We have about 300 laptops left in our environment that were enrolled manually before ABM was setup, so we want to covert them to supervised to be able to better manage them. Has anyone done this before? 

Good afternoon!I've got a new Macbook Pro and when attempting to login to the Self Service app I am getting a generic SSO error.It states:Single Sign-On ErrorAn Error occurred while processing your Single Sign-On request. Contact your administrator for assistance.I've tried dumping the Public and Private keys from the Keychain, removing the App for forcing the Jamf Policy to bring it down again. I did read something about a possible SSO token that might need to be addressed, but am not sure where that is located or managed. Can anyone shed any light on that? We nuke MS365 tokens all the time so I am familiar with the concept but is there a similar process for Jamf?Thank you!Derek

Hi guys,I have two seperate pre-stage enrollments. One onboards lab Macs that don't currently use Jamf Connect at all. Those Macs also have a Config Profile applied to them to set their Login Window settings (which shows the username and password fields) and this generally works fine.Totally unrelated to these macs, I have another prestage enrollment that onboards staff macbooks which use Jamf Connect and should have the Jamf Connect login window which is set by another Config Profile.Immediately after DEP enrollment I login with Jamf Connect for the first time and everything is working, on subseuqent boots, these Macbooks show our lab Login Window settings, despite nothing related to that Config Profile being scoped to these Macbooks in any way. I can manually sign in using my Jamf connect details by typing them into the username and password fields. Once I'm in, I can then subsequently Log Out from the Apple menu and I'm greeted with the full Jamf Connect login window experience I wo

Hey all :).I'm new to the Jamf world and I can use your help please,I have some Mac's that Find My Mac enabled on the system and I would like to remove and disable it. I add a configure profile to greyed out the option that once users sign in to appleID the find my mac will be auto disabled.But i do have some user/laptop that Find my is already set, do I have a way to remove and then greyed the option remotely?  (without using the NVRAM, from that I could find on the web that is the only option)Thanks in advice for the people that answers back.

Good morning Jamf Nation!Today we released Jamf Pro 10.39 which includes the Healthcare Listener App Refresh, enhancements to App Installers within the Jamf App Catalog and additional language support. Enabled/disabled indicator for apps distributed from the Mac App Store or Jamf App CatalogApp Installers continues to receive enhancements to monitoring and performance. Within Jamf Pro, admins will see a clear indicator to determine if a Mac App – from the Jamf App Catalog or the Mac App Store – is enabled. Installation now supports a minimum supported macOS version before installing software and more frequent checks occur when monitoring for the progress of app installation. Healthcare Listener App RefreshFor Pro organizations that use Healthcare Listener, Jamf Pro 10.39 brings new options to refresh iOS and tvOS devices between patients. App Refresh uninstalls and reinstalls managed apps and in-house books. This provides a wireless way to refresh app content, without re

IT Specialist, 25 years - I have taken a keen interest in the Apple side of this since I’ve taken this role. We have a fleet of iOS devices we manage through jamf pro - anyway I am looking for a career in MAC/jamf/iOS management/administration. Is their any path recommendations, I’ll be taking jamf 100 this year and later jamf 200.

Hey, so we have the following scenario:We had to push a wipe command and we confirmed the wipe appeared as complete on our end. However, the user has not input the wipe code and they really need to recover information off the computer. If the device is not yet wiped and we can still push commands remotely via our RMM. Will removing JAMF off the device cancel it out or will still require the wipe to go through? Thanks in advance!

Hi all,Curious if anyone would know how to auto-fill the "Email Address" field under the "User and Location" tab with the data from an extension attribute we have?For example if the extension attribute is pulling an email address from a computer XXXX.XXXX@somecompany.com, can I then have that data plopped into the "Email Address" field under the "User and Location" tab? Or is this simply not possible?Thanks in advance!

When enrolling certain devices, they're becoming caffeinated and I have no idea what is causing it. Obviously, it's preventing our devices from ever going to sleep or having their screensaver kick on. I have gone through every script and app install (including their pre and post install scripts) that we deploy and have not been able to come across a single caffeination command. Anyone know how to tell exactly what is causing the caffeination? I have the command to fix it, but I want to prevent it from happening in the first place.

Good Afternoon,I've looked under Config Profiles > Restrictions, but can't find it.  Is there a way to disable AppleID Sign in in settings?  We don't use managed apple ID's and don't want the students logging on to the devices.Thanks for your help

Hi All, Is it possible to call a script with a network state change locally. I have been looking for a .plist to do this, but I cannot find one. Jared

creating a policy for carbon black sensor. you need to modify the script to give it a path the the package. "CBD_INSTALLER="/Path/Where/PreinstallScript/Downloads/Installer.pkg" Jamf is running on a windows server and i tried the location "\\\\vsrvjamf\\jamfshare\\Packages\\CBCloud3.7.1.12 Install.pkg" and "D:\\jamfshare\\Packages\\CBCloud3.7.1.12 Install.pkg" but those didnt work. what should i put there?

I am experiencing an issue where users are able to disable filevault even though the "User Adjustment of FileVault options" is set to "Prevent FileVault from being disabled".  But at times users are then given the ability to disable filevault randomly until I distribute the profile again. I also have the setting "Require user to unlock FileVault After hibernation" set to disable in this profile. Could that setting be causing this issue? 

 Hello!  I want to start off saying I am new to the school world of IT. Been doing years of IT for dentists, and always for profit so its a change of pace for sure. So I took a new job and I have been tasked with moving everything over from eight mac mini servers and configurator / apple school manager information to Jamf. The outgoing IT person is not going to help, and it looks like whatever he setup stopped working over the summer, and wont be able to work since its " the old way of doing this" and likely no longer supported. We want to take away the eight mdm servers and just use Jamf.    I followed the JAMF setup assistant and things seemed to go well, I had to create eight tokens and imported all of that. Which brings me to my first question,  Apple school manager says we have 552 total apps but Jamf says 978 when i look in inventory, and the dashboard says 1038 apps synced.  I have no idea how Jamf is getting those numbers. Has anyone see this

Hi folks!I've posted a gist on GitHub that includes two regexes you can use to identify Monterey compatible Macs in your organization.It has two slightly different strings. You can use either regex in Jamf Pro in Advanced Computer Searches or Smart Computer Groups. Add the Model Identifier criterion to a new search or smart group, set the operator to "matches regex" and paste in one of the two regex strings.Which regex string should you use?The first string matches Mac models that are available today. It's more exact but won't match any new Mac models without updating it as new models are released. The second is more future-proof and will match future Mac models. However, when Apple releases the next major macOS version after Monterey and new Mac models in Fall 2022, this string will eventually become out-of-date and incorrect.If you'd like to see what Mac hardware models these regexes will match, have a look at this link: https://regex101.com/r/OozSRv/6.

Hi It looks like we need to deploy/upgrade our base sensor for Crowdstrike Falcon. It seems the previous script does not work and the sensor requires more permissions on Big Sur. Any help/insight would be greatly appreciated.

Hi all, Please can someone provide an example using the Jamf Pro API to change a drop down EA on a computer record?Im currently using this Solved: Updating Pop-Up Extension Attribute Value via API - Jamf Nation Community - 87213 for the classic api. Thanks

Hello All, Posted something about extensions a couple weeks ago. This request is specifically for Google Chrome extensions. Does anyone have a working EA script that can be used to generate a report on installed Chrome extensions? Sort of like from this request a couple years ago.- This one currently doesn't work. Tried all the different variations listed on this post.

Scenario - If user already has an app "xyz newer version" and we push app from jamf "xyz older version" then the app is getting downgraded. Instead can we have rules in Jamf or script which does not install app if it already exists or checks for version before installing ?