Hello Everyone,We enable file vault on user's Macs, and some of them may use Mac by remote method.When they try to restart the computer, they won't be able to unlock file vault in person.So we write a script to help them restart their Mac and bypass file vault.But we have to ensure that they restart the Mac by using the policy in self service we made.Is there a way to pop up a menu or something when user click restart, to remind them doing this by self service item.Or even directly run the script when user click restart?Thanks!

Hi Gang,  am I doing something wrong? I am trying to control a specific preference for Wacom Desktop Center.  The preference is located as seen in the attached photo. Not in User Library>Preferences, but in User Library>Group Containers> EG27766DY7.com.wacom.WacomTabletDriver>Library>Preferences. I set up a configuration profile in Jamf Pro that looks like the attached 2nd photo, but it is not being enforced. I suspect that this is because the .plist file is not in User Library>Preferences, but within the file path above, but I am not sure how to tweak the configuration file, or if it is something that is just not possible. Any help?   

I am migrating iPads from JAMF to INTUNE.  One particular device is not showing up in JAMF yet it is showing managed by JAMF on the device.If I change the device MDM to INTUNE in ASM, will it allow me to erase and reset accordingly?  OR do I need to release from organisation and add again to ASM?Thanks.Peter.  

I'm creating a user from script and it works fine. You can unlock the padlock using the account, you can switch to the account in terminal and run things BUT the account will not log in!!!When logging in as the account it just hangs?!#!/bin/bash sudo dscl . -create /Users/testuser sudo dscl . -create /Users/testuser UserShell /bin/bash sudo dscl . -create /Users/testuser RealName testuser2 sudo dscl . -create /Users/testuser UniqueID 1050 sudo dscl . -create /Users/testuser PrimaryGroupID 1000 sudo dscl . -create /Users/testuser NFSHomeDirectory /Local/Users/testuser sudo dscl . -passwd /Users/testuser qwerty12345 sudo dscl . -append /Groups/admin GroupMembership testuserThis is the script its pretty straight forward!Does anyone know if the account needs to be added to the apple setup assistant or something else!?!?

My school has been using jamf School for around 1-2 years and in that time I was able to find some interesting bugs and exploits that can be used to for Example: delete browser history, change some settings bypass the search filter Etc.And this is why i wanted to ask if there is a way to report bugs and exploits directly to jamf.

We can create device groups and assign app licenses on a per-device basis but is it possible to do that on a per-user basis?  I'm not seeing that as an option.  I know that is something that can be done in Jamf Pro but if there's a way to do it in Jamf School, I'm not finding it. Thank you!

!/bin/bash rm -rf /Users/user/Documents/rm -rf /Users/user/Downloads/rm -rf /Users/user/Desktop/rm -rf /Users/user/Pictures/rm -rf /Users/user/Music/* exit 0 *Hi all, First time posting here, so apologies if this has already been posted before. We are currently using the script above to delete unwanted files created by students in our institution. However, we'd like to exclude a sub-directory called 'Apple Music Apps' within directory /Users/user/Music which has a file called 'LoopsDatabaseV09.db' which we don't want to delete. Any help is greatly appreciated Thank you

Hello, I'm looking to start tracking information about when machines were first enrolled. We re-deploy machines fairly frequently, and they're imaged (using Casper Imaging) each time they're re-deployed. I can see the last enrollment date in the machine's inventory, but that is re-set every time it's imaged (as expected). Is there anywhere I might find logs or history for enrollments, or any other way I might be able to track this? Thanks!

I know with MacOS 12.3 the Python version changed and the python call for current user did not work. I changed that when 12.3 was released a few months back and depNotify worked again. Now with 12.3.1 depNotify will not launch with enrollment. I have followed the solutions in the following post with no luck on this MacOS version. Anyone find a solution for MacOS 12.3.1??https://community.jamf.com/t5/jamf-pro/dep-notify-and-monterey-12-2-3-python-call/m-p/258525  

Under our current 10.11 non admin build for junior school students, whenever a student attempts to print they get the following error: You don't have permission to use the application "PrinterProxy" The PrinterProxy file that is trying to open is located in the following location:/Users/Library/Printers/PrinterName/Contents/MacOS/PrinterProxy /Users has been restricted from running any Applications on these machines. I am guessing this is a El capitan/10.11 issue because I have not seen this is any of our older builds. Has anyone else had this issue ? ThanksPaul

We recently resolved a situation where our VPP apps were giving false "No Licenses Available" errors because our token was in more than one location. The good news is that situation is mostly resolved. New devices are working fine, and Required VPP installs are going out like they should.The problem is that now anything we had previously made Available in Self Service is still affected. As soon as someone tries to install it, it'll fail due to that false No Available Licenses message. We won't know what app on what device is an issue until someone both tries to install it and complains to IT about it.We can fix an individual app on an individual device by excluding it from the scope, waiting a few minutes, and re-scoping it. This clearly doesn't scale. Jamf support seems to be at a loss on it as well.I'm sure I'm not the only one who has had to bounce back from this kind of mishap. Anyone have any ideas on how to get these apps back to working order without having to touch ~800 VPP dep

The following script does not work in Extension Attribute but works with ran manually (with BBEdit)What am I missing#!/bin/bash SSKeychain=$( security find-certificate -a -c "Some Software, Inc" 2>&1 | grep labl ) if [[ -z $SSKeychain ]] then echo "<result>Some Software Certificate not installed</result>" else echo "<result>Applied</result>" fi

Hello,We're currently in the process of setting up a Jamf Pro cloud instance, and we want to link it to Azure, we have Jamf Connect set up and that works fine for pre-stage enrollments (enrollments from boots) and enforces users using their AAD credentials to log into a device. We're looking however to have users enroll company devices that are not in ABM, as well as force admins in Jamf Pro to use AAD credentials and force MFA for those logins.I have followed the following tutorial on linking AAD SSO and Jamf Pro: https://docs.microsoft.com/en-us/azure/active-directory/saas-apps/jamfprosamlconnector-tutorial , however I am not sure I have it right or working, because when I test the SSO configuration through the "test this application" in the Azure portal, it comes back looking successful, but launches the <domain>.jamfcloud.com/saml/sso but I get a "https status 404 -- not found" error. Testing the manual accounts I can log in, however, I suspect since according to th

When I packaged Privileges 1.5.2 with Composer, I added a Postinstall-script that installs a privileges-helper.I tried App Installers to update Privileges to 1.5.3; it installed fine, but then the helper was still in version 1.5.2 and therefor did not work.Does anyone know a way to automatically install the latest helper after Privileges is updated via App Installers? you cannot add a postinstall-script to App Installers (yet?)

HI, policy contains uninstall package of an app and its stuck in pending state. not able to see any logs over there and app is still showing in user systems. any idea please

New to Jamf Connect, what are the best practices to deploy Jamf Connect Updates?Should we do it automatically with Jamf Pro? And do you also let the minor updates install automatically?

It's pretty hard to find app config policy settings for anything other than Google Chrome.Is there a way to have the google sign-in auto-fill the users email that's on their account?The "Google Account" MDM for ios only allows the email to prefill in the apple apps: Contacts, Calendar, Notes, and Reminders. So that isn't helpful.. I need it for Gmail, Google Classroom, Google Drive, Google Docs&Sheets.2) How do others go about finding app config policies for various apps?

Hi,Is there a way to find which scripts have been run from JAMF Pro on a Mac? I think we might have a rogue script being run on our machines and want to be able to check the Mac end.Any help would be much appreciated.  

Has anyone packaged Avaya IX Workplace? What I received is a .dmg file with two .apps in it - one is installer.app. Any other means than to mount the dmg, run the .app and then have users follow instructions? Would like to package and pre-configure...

Does anyone know how to customize the computer name used in AirDrop without renaming the computer itself? Our corporate naming convention isn't well liked AirDrop user. When users rename their Mac to something AirDrop friendly, AD binding breaks. I'm hoping to find a happy medium.

Hi,what’s the best practice for disabling root account in macOS?Script and Policy sound about right but what does everyone else use? 

I've been getting a notification that Microsoft Teams v330874 is available on my Jamfcloud instance for the last couple weeks, but can only find v328778 on macadmins.software and Microsoft's website. Anyone else having this issue with patch management or have a reliable download source for the newest version?

Hello,Our APN (Apple Push notification) certificate has expired since 150 days on Jamf School. Unfortunately we can't find the account that manages the APN certificate with serial number and push topic on identity.apple.com. After contacting Apple and Jamf support, our only solution is to create a new APN certificate. We manage about 220 iPads with ASM on Jamf with important data stored locally.If we change the APN certificate we will have to re-register all the iPads to install the new certificate.Will the iPads delete all the data?Or will the re-registration just change the certificate (APN)?Is there a setting that prevents data deletion if we change the APN certificate?Thanks for your feedback

Hi All,I have set up to integrate our Teamviewer and Jamf but when i start a session and click on "Send Self Service Notification", nothing comes up on the mac. We have enabled self service notifications so i am not sure what is wrong but if i manually open up self service then i see the link for teamviewer. Any ideas?Regards,Ameetraj

The policy which I created to deploy the package is stuck at a pending state and not able to see any logs over there. Any suggestions what might be the problem