Howdy!I'm following the wizard to update my apple push certificate. I generate the CSR in JAMF, log into the apple certificate management portal, and upload the CSR. Then I get the error:You are not a member of the administrator group. Exception from DSAny idea how to resolve that?

Hi,Having trouble getting the users from Microsoft Azure AD to reflect on Apple School Manager. I have read through and followed all the instructions on Apple's website related to syncing users from Microsoft Azure AD. We are not getting any error messages but that everything shows that is successful/enabled despite no users in ASM. Anyone have a similar issue?

Hello, Is there a way to hide or remove Siri-Suggestions?  Somehow it is showing a lot of apps that are disabled on the iPad..And i disabled Notes, but i cant find a way to disable QuickNotes. Hope someone has an idea.iPad is running on iOS 15.6 Greetings.

I'd like to set a Configuration Profile or policy on my Macs to grey out or hide the Sleep on the Apple Menu. I've tried to disable it in a config profile with no luck. Is there a way to set this? it is for Mojave or Catalina. Thank you

Has anyone figured out how to use Erase All Content and Settings for computers running Monterey yet? Did they implement this feature yet? We have been wanting to test this on our computers running the beta, and now that the release is less than a week away and 10.33 just came out, we figured it would be in there, but all I'm seeing is the old Wipe Computer button requiring a six-digit code.

Does anyone have tips on how to roll out a simple .workflow file using Jamf Pro? I have a pretty simple Automator .workflow file I would like to deploy, but am not clear how to do this.I read this post:https://community.jamf.com/t5/jamf-pro/deploy-automator-workflow-file/m-p/147186#M136236...but it doesn't seem to have any answers except for this bit that is pretty old from @mm2270:Along with the above steps, you'd also of course need to deploy the .workflow file into the user's /Library/Services/ directory.If I recall when I had done this, I think a service or application needs to be restarted in order for the Finder to recognize the newly installed service and shortcut. I think actually its the Finder itself that needs the restart, but I'd need to go back and look again.Note that I haven't done this since around 10.9 and early 10.10, so I don't know if things have changed with 10.11 and 10.12 now.

Background: I am trying to setup an almost zero touch enrollment workflow for our environment. Using the typical Apple Business Manager/Automated Device Enrollment, PreStage Enrollment, and Jamf Connect method. Issue: After the remote management triggers, we progress through the SSO of Enrollment Customization, then the configuration profiles are installed, and I progress through the macOS setup screens, the next thing is the local login screen of Jamf Connect. The SSO/AD account is not created. I am able to login to the device using the pre-configured Admin account we setup during the Pre-Stage settings, but nothing else.I have checked the Users & Groups for what accounts are created and only the admin profile is shown. I have a feeling that our Enrollment Customization SSO pane settings for Identity Provider Attribute Mappings might be incorrect, but I am not sure what they should be. (Attached below is a screenshot of the current settings). I also have the PreStage Enrollme

I have a problem with Self Service policies scoped to all computers, but limited to certain LDAP groups / users, with no other triggers except the Custom trigger. Self Service is enabled for these policies. When I initiate a policy via Self Service, the little window displays "Gathering Information..." for a few seconds, then the progress bar rapidly fills up and the message disappears. The policy says it "Succeeded," but nothing actually happened. In /var/log/jamf.log, it says "Checking for policy ID 12345..." and nothing else. So I start debugging on the command line: If I run jamf policy -event awesomeapp then it says "No policies were found for the "awesomeapp" trigger." (Update: thank you @PeterClarke for the correction. This is my mistake.) If I run jamf policy -trigger awesomeapp then the policy runs and completes as expected. If I run jamf policy -id 12345 then the policy runs and completes as expected. wtf...? Conf

Seeing an issue when clients with ADCS generated certs update to 12.4 or 12.5, their wifi connection breaks, prompting them to select a certificate. Even if they select the correct cert it doesn't connect to the wireless. The only fix is to unscope and rescope them into the configuration policy. Anyone out there running into this?

I'm trying to script a way to disable the Automatic Run Of Safe Files In Safari for a CIS Benchmark across our deployment. While we have a few versions of the OS in the wild, I'm mostly focused on Catalina. I tried the following, but it doesn't seem to change the preference. defaults write com.apple.Safari AutoOpenSafeDownloads -boolean false

i want to enable an alternate language keyboard on my ipad. if you know please hlep me

Hello friends: One of our clients (a K-12) is asking for some of their iPads to have a second, foreign language keyboard. I know how to do this manually in Settings > General > Keyboard > Keyboards, but I can’t figure out how to add a second keyboard through Jamf Configuration Profile payloads. Does anyone have any thoughts about pushing out an additional keyboard?

Looking for some insight on how to deploy a config profile that restricts AirDrop to Contacts Only. Any help is greatly appreciated!

Hi all - I'm looking for clarification on how the macOS Software update deferments work in relation to the Jamf software update MDM commands.Jamf states that “macOS can still be updated via an MDM command even if updates are deferred.” See Not clear on what this actually means. (See https://shrtm.nu/GQCu) Can someone add insight to this simple example scenario:-Let’s pretend a Mac has a deferment for the new macOS 12.5 minor update (deferred for 30 days in this example).-The Mac in question is currently running 12.3.-The Mac can see that 12.4 is available in software update (its been available for more than 30 days) but can’t see 12.5 yet (only been available for a week).Q: Given this scenario above, If I locate the example Mac in my JSS and issue the ‘download and install software updates’ command via MDM, what OS version will the Mac install? 12.4 (not deferred) or 12.5 (deferred)? Or none?

Hello, We just setup Jamf Connect on Friday. I pushed it out to one of my test machines and I cannot get it to merge with my local account. It pulls up the Azure Microsoft login page, I type in my email address, then it takes me to our Okta MFA page and I sign in there, the push is sent out and I tell Okta that it is me. Then it looks like it is going to log me in, but it doesn't. The next screen I get is to reenter my cloud password  to setup my new local account. I have tried every password for my iCloud, my AAD password, and my local Mac account password. Nothing will let me in. I have reached out to Jamf Support, but I am starting my Jamf 200 course on Monday and would like to have my MacBook working by then. Any suggestions or ideas on how to get passed that screen would be helpful.  Note: Yes I have typed my password in correctly and my account is not locked in AD or AAD.  Thanks!

HI,Users unable to change the notification option in system preferences its grayed out only for Microsoft outlook app. for rest of the apps its workingAny idea how to make it enable. 

Does anyone have tips for creating some sort of on going report or saved advanced search for computers where their Hard Drive is nearing capacity? Ideally I would like to limit this to a specific computer lab we have on campus. Just wondering if this is possible.

Hi there - new to JAMF pro and going through the inevitable.. how do i.. process. So far I have managed to sort most issues but two somewhat avoiding closure are How do I... organise Launchpad Applications into virtual folders across a specific scope ?How do I .. disable access to all Utilities for a specific scope  grateful for a steer ?

Hi All,I'm currently trying to migrate all our users from Airwatch (old MDM) to JAMF. First step is to remove the MDM from the device and any old apps then perform the time machine backup. Some users are on Catalina or Mojave so remove old apps that need to be updated. After TMB is complete I wipe the disk and re-install macOS to latest version. When I enroll via DEP + Okta i get the option to restore data from Time Machine (other way is using Druva after config is complete). Once everything is configured I update the apps and sign the user in. Everything looks fine but when the user changes their password JAMF connect does not allow it to sync to the newly set password. I restart the device have the user log in with the last local password then get taken to the the JAMF connect Okta login screen. I connect successfully through okta with the new password but then when asked to enter last local password it says "Invalid". I suspect something in the keychain from the TMB so i reset defau

My searches have turned up nothing. Just looking for gotchas, do's and don'ts, etc.

Hello everyone, I need to en-masse change the membership of devices from their many pre-stages into one. All of these devices are in a single smart group.  I’ve downloaded MUT, but this doesn’t seem to be able to do what I need to achieve, unless you know the existing pre-stage ID, (unless I’ve got that wrong!) I guess that i could download all the serials from the smart group, remove them via DEP and then assign them back to the new pre-stage, but that seems clunky to me. Has anyone managed to script this using the API?

I have created a script to check for Architecture and snag the correct installer for Chrome. This is currently working, hope this helps others.There is a similar Topic here: https://community.jamf.com/t5/jamf-pro/install-latest-version-of-google-chrome-without-re-packaging/m-p/156742/page/2Wanted to start a new one with the focus on Intel and M1Thanks to @cbrewer for the solution I did not need to choose between and intel and an M1 installer, I also Changed the .dmg to a .pkg with the extra bit of agreeing to the license etc, with the appended URL. #!/bin/zsh # Changed the installer from .dmg to .pkg and took out the bit for choosing an architecture. # make temp folder for downloads mkdir "/tmp/googlechrome" # change working directory cd "/tmp/googlechrome" # Download Google Chrome curl -L -o "/tmp/googlechrome/googlechrome.pkg" "https://dl.google.com/chrome/mac/stable/accept_tos%3Dhttps%253A%252F%252Fwww.google.com%252Fintl%252Fen_ph%252Fchrome%252Fterms%252

We've recently gone through an internal business merger (and cull) and the groups in use for profiles, builds, configurations... is a mess.We have 600 devices. No mobile devices. 250+ Smart Groups and over 90 static groups.I'm hoping there is a tool that shows dependant profiles or policies so we can clean up without clicking around too much.

Here is the issue. We have MS Teams set in our Self-Service. I uninstall it by just dragging it to the trash and deleting it. When I go back in to self-service and run it again, I get the successful prompt that we setup and it adds the ? to the dock, but it's not installed. 

Is it me, or are the Patch Management Statuses actually organized alphabetically?! Patches policies are collected at the end.It's better on the eyes after refreshing the browser many times during the day.Thanks, Jamf. The little things...