I have a problem with Self Service policies scoped to all computers, but limited to certain LDAP groups / users, with no other triggers except the Custom trigger. Self Service is enabled for these policies. When I initiate a policy via Self Service, the little window displays "Gathering Information..." for a few seconds, then the progress bar rapidly fills up and the message disappears. The policy says it "Succeeded," but nothing actually happened. In /var/log/jamf.log, it says "Checking for policy ID 12345..." and nothing else. So I start debugging on the command line: If I run jamf policy -event awesomeapp then it says "No policies were found for the "awesomeapp" trigger." (Update: thank you @PeterClarke for the correction. This is my mistake.) If I run jamf policy -trigger awesomeapp then the policy runs and completes as expected. If I run jamf policy -id 12345 then the policy runs and completes as expected. wtf...? Conf

Seeing an issue when clients with ADCS generated certs update to 12.4 or 12.5, their wifi connection breaks, prompting them to select a certificate. Even if they select the correct cert it doesn't connect to the wireless. The only fix is to unscope and rescope them into the configuration policy. Anyone out there running into this?

I'm trying to script a way to disable the Automatic Run Of Safe Files In Safari for a CIS Benchmark across our deployment. While we have a few versions of the OS in the wild, I'm mostly focused on Catalina. I tried the following, but it doesn't seem to change the preference. defaults write com.apple.Safari AutoOpenSafeDownloads -boolean false

i want to enable an alternate language keyboard on my ipad. if you know please hlep me

Hello friends: One of our clients (a K-12) is asking for some of their iPads to have a second, foreign language keyboard. I know how to do this manually in Settings > General > Keyboard > Keyboards, but I can’t figure out how to add a second keyboard through Jamf Configuration Profile payloads. Does anyone have any thoughts about pushing out an additional keyboard?

Looking for some insight on how to deploy a config profile that restricts AirDrop to Contacts Only. Any help is greatly appreciated!

Hi all - I'm looking for clarification on how the macOS Software update deferments work in relation to the Jamf software update MDM commands.Jamf states that “macOS can still be updated via an MDM command even if updates are deferred.” See Not clear on what this actually means. (See https://shrtm.nu/GQCu) Can someone add insight to this simple example scenario:-Let’s pretend a Mac has a deferment for the new macOS 12.5 minor update (deferred for 30 days in this example).-The Mac in question is currently running 12.3.-The Mac can see that 12.4 is available in software update (its been available for more than 30 days) but can’t see 12.5 yet (only been available for a week).Q: Given this scenario above, If I locate the example Mac in my JSS and issue the ‘download and install software updates’ command via MDM, what OS version will the Mac install? 12.4 (not deferred) or 12.5 (deferred)? Or none?

Hello, We just setup Jamf Connect on Friday. I pushed it out to one of my test machines and I cannot get it to merge with my local account. It pulls up the Azure Microsoft login page, I type in my email address, then it takes me to our Okta MFA page and I sign in there, the push is sent out and I tell Okta that it is me. Then it looks like it is going to log me in, but it doesn't. The next screen I get is to reenter my cloud password  to setup my new local account. I have tried every password for my iCloud, my AAD password, and my local Mac account password. Nothing will let me in. I have reached out to Jamf Support, but I am starting my Jamf 200 course on Monday and would like to have my MacBook working by then. Any suggestions or ideas on how to get passed that screen would be helpful.  Note: Yes I have typed my password in correctly and my account is not locked in AD or AAD.  Thanks!

HI,Users unable to change the notification option in system preferences its grayed out only for Microsoft outlook app. for rest of the apps its workingAny idea how to make it enable. 

Does anyone have tips for creating some sort of on going report or saved advanced search for computers where their Hard Drive is nearing capacity? Ideally I would like to limit this to a specific computer lab we have on campus. Just wondering if this is possible.

Hi there - new to JAMF pro and going through the inevitable.. how do i.. process. So far I have managed to sort most issues but two somewhat avoiding closure are How do I... organise Launchpad Applications into virtual folders across a specific scope ?How do I .. disable access to all Utilities for a specific scope  grateful for a steer ?

Hi All,I'm currently trying to migrate all our users from Airwatch (old MDM) to JAMF. First step is to remove the MDM from the device and any old apps then perform the time machine backup. Some users are on Catalina or Mojave so remove old apps that need to be updated. After TMB is complete I wipe the disk and re-install macOS to latest version. When I enroll via DEP + Okta i get the option to restore data from Time Machine (other way is using Druva after config is complete). Once everything is configured I update the apps and sign the user in. Everything looks fine but when the user changes their password JAMF connect does not allow it to sync to the newly set password. I restart the device have the user log in with the last local password then get taken to the the JAMF connect Okta login screen. I connect successfully through okta with the new password but then when asked to enter last local password it says "Invalid". I suspect something in the keychain from the TMB so i reset defau

My searches have turned up nothing. Just looking for gotchas, do's and don'ts, etc.

Hello everyone, I need to en-masse change the membership of devices from their many pre-stages into one. All of these devices are in a single smart group.  I’ve downloaded MUT, but this doesn’t seem to be able to do what I need to achieve, unless you know the existing pre-stage ID, (unless I’ve got that wrong!) I guess that i could download all the serials from the smart group, remove them via DEP and then assign them back to the new pre-stage, but that seems clunky to me. Has anyone managed to script this using the API?

I have created a script to check for Architecture and snag the correct installer for Chrome. This is currently working, hope this helps others.There is a similar Topic here: https://community.jamf.com/t5/jamf-pro/install-latest-version-of-google-chrome-without-re-packaging/m-p/156742/page/2Wanted to start a new one with the focus on Intel and M1Thanks to @cbrewer for the solution I did not need to choose between and intel and an M1 installer, I also Changed the .dmg to a .pkg with the extra bit of agreeing to the license etc, with the appended URL. #!/bin/zsh # Changed the installer from .dmg to .pkg and took out the bit for choosing an architecture. # make temp folder for downloads mkdir "/tmp/googlechrome" # change working directory cd "/tmp/googlechrome" # Download Google Chrome curl -L -o "/tmp/googlechrome/googlechrome.pkg" "https://dl.google.com/chrome/mac/stable/accept_tos%3Dhttps%253A%252F%252Fwww.google.com%252Fintl%252Fen_ph%252Fchrome%252Fterms%252

We've recently gone through an internal business merger (and cull) and the groups in use for profiles, builds, configurations... is a mess.We have 600 devices. No mobile devices. 250+ Smart Groups and over 90 static groups.I'm hoping there is a tool that shows dependant profiles or policies so we can clean up without clicking around too much.

Here is the issue. We have MS Teams set in our Self-Service. I uninstall it by just dragging it to the trash and deleting it. When I go back in to self-service and run it again, I get the successful prompt that we setup and it adds the ? to the dock, but it's not installed. 

Is it me, or are the Patch Management Statuses actually organized alphabetically?! Patches policies are collected at the end.It's better on the eyes after refreshing the browser many times during the day.Thanks, Jamf. The little things...

we cant access jamf or jamfcloud from APAC at the moment, all our MDM have stopped working 

I want to use the following adminguide to uninstall Adobe Acrobat XI Pro with a script, but can't seem to get it to work. The command line command is located at the just about the bottom of the following link. Does anyone know how to make this command run using a simple script #!/bin.sh ????? http://www.adobe.com/devnet-docs/acrobatetk/tools/AdminGuide/mac.html#what-s-new-for-11-x this is the command being performed via youtube video (substitue XI for the applications folder name) https://www.youtube.com/watch?v=Knvf7WZdP5w

I'm running this script from a policy in Jamf. #!/bin/sh defaults write com.apple.Dock contents-immutable -bool true; killall Dock It does not do anything. However, if I run it locally from Terminal, works like a charm. Any thoughts? What I am doing wrong or forgetting?

Hi all, Anyone know a way to install cached packages one by one? Not using a policy per package or install all cached.

  臺北市教育博覽會時間：8.17(三)- 8.20(六)地點：臺北南港展覽館二館地址：臺北市南港區經貿二路 2 號 展位：iPad 教育館 歡迎蒞臨 iPad 教育館，一起關心孩子的數位教育。iPad 已經問世 12 年，它不只走進各種工作和生活的場域，更是數位學習的要角。隨著教育部「中小學數位學習精進方案」的推展，iPad 就如同學生的鉛筆盒一樣，是課堂不可或缺的學習利器。Jamf 致力於協助學校和企業成功使用蘋果裝置，我們相信，當學習載具受到完善的管理時，家長與老師都能放心的讓學生自主學習。我們在 iPad 教育館 準備了一系列 iPad 如何走入教育的主題，透過多元的視角切入，帶您體驗數位學習的風景，每日在攤位皆有 30 分鐘至 1 小時不等的主題講座，歡迎參加！講座主題及時間如下，請至以下網址報名 https://jamf.kktix.cc/events/jamfedu8/17（三）13:00 - 13:30｜Apple x Jamf 接軌全球數位學習14:00 - 15:00｜Apple Teacher 教學分享15:30 - 16:00｜資訊組長如何推動行動學習8/18（四）10:30 - 11:30｜Apple Teacher 教學分享14:00 - 14:30｜從 MDM 走進 iPad 課堂教學15:30 - 16:00｜Apple x Jamf 的教育現場科技8/19（五）10:30 - 11:00｜再多的 iPad，你也能輕鬆管理13:00 - 13:30｜安心學習組合：Jamf Parent + Safe Internet14:00 - 15:00｜Apple Teacher 教學分享8/20（六）10:30 - 11:00｜資訊組長怎麼看 BYOD 計畫13:00 - 13:30｜安心學習組合：Jamf Parent + Safe Internet14:00 - 15:00｜Apple Teacher 教學分享備註：本活動僅供預約 Jamf iPad 教育館 攤位 (主舞台對面) 解說。

I'm a new Jamf Pro admin.  The previous admin set things up to run the following script when we re-provision a Mac.  It puts a full-screen splashscreen up that lets the user know that the computer shouldn't be used because software is being installed (a process that takes around an hour in a college computer lab).  The script runs on our Apple Silicon Macs but not our Intel Macs.  I'm new to scripting.  Can anyone see why this script won't work correctly on an Intel Mac?  Thanks.  --Jeff ================================= #!/bin/bash# Variables# Set these for your environmentjamfHelperHeading='Macalester College'jamfHelperIconPath='/Library/Application\\ Support/JAMF/extras/mac_logo.png'launchAgentName='org.macalester.jamfHelperSplashScreen'# You probably don't need to change theselaunchAgentPath="/Library/LaunchAgents/${launchAgentName}.plist"jamfHelperPath='/Library/Application\\ Support/JAMF/bin/jamfHelper.app/Contents/MacOS/jamfHelper'# F

HelloI'm new with Jamf so I'm sorry if my question is stupid.I need to deploy unique certificates to every MacOS user managed by my Jamf.What is the most optimal method to do that? I read something about an ADCS connector but I'm not sure if it is what I looking for.