Is there a way to view the past names that have been assigned to a device? I have a few devices that were returned to me, but they were wiped and their name is now "iPad" in Jamf. If I could check logs to see what the name was before it was wiped it would save a lot of hassle trying to figure out where they came from. 

Has anyone successfully deployed Sophos Intercept X for Mobile to IOS devices through JAMF? I'm interested in doing this for web filtering. According to Sophos' documents you have to create a custom app in the 3rd part EMM but I see no way to do this in JAMF Pro. I believe this has to be done in the App Configuration for the Sophos Intercept X for Mobile app but I'm not sure of the syntax. Anyone have experience with this? https://docs.sophos.com/central/Mobile/help/en-us/esg/Sophos-Mobile/tasks/SMSec3rdPartyEMM.html

I am trying to log into my jamf now account and getting the following error. 403 ERRORThe request could not be satisfied.Request blocked. We can't connect to the server for this app or website at this time. There might be too much traffic or a configuration error. Try again later, or contact the app or website owner.If you provide content to customers through CloudFront, you can find steps to troubleshoot and help prevent this error by reviewing the CloudFront documentation. Any ideas?

I've been struggling a bit making sense and creating a workflow around the secure token change and user creation/FV2 enabling. The workflow in my environment traditionally uses a script using dscl commands or the createuser.py to create our local admin account. The local admin account initiates FV2, then AD users log in and we enable them for FV2. This workflow is now extinct. I'm creating a dummy account on the computer, then on enrollment a script runs using the sysadminctl commands to create my local account which prompts for gui authentication from my dummy account. This grants my local admin account a secure token and the ability to manage FV2. I can then delete the dummy account from the machine. I created another script to Self Service that assigns a secure token to a user and enables them to unlock FV2 utilizing some user input. I'm a very much a novice at bash, so my scripts are probably not the best, but with very little posted about secure tokens I figured I'd share and

Does anyone have a good way to monitor their JAMF Pro hosted environment? Some way to get alerted that a connection to the JSS is failing? This seems to be an ongoing issue for us lately (connection to the JSS is not available) and I was looking for a way to know about it before users start to complain.  Thanks,

Hi,I have a custom type access level for Jamf Pro and I would like to know how Can I access the personal Recovery key on a work station as the option is not available in the Inventory - > Disk encryption section. That option is available for our Jamf Admin and We are Trying to figure out if this is available for custom access for jamf. If it is possible, what access should our Jamf admin add on my profile?Thanks in advance guys!

I am trying to create a report for a security audit coming up. When looking at the filevault status on t2 computers its showing as not encrypted. However when you look at the computers it is showing filevault is enabled. From my understanding, computers with t2 chips are encrypted out of the box. Is there a way to include the t2 in a search or is there a way to make it report that it is encrypted?

Good day Jamf professionals! I pushed out the latest OS update to computers with old versions of Monterey. I sent a mass remote command to a simple search group and checked download and allow user to install later. However when we go into system preferences on the Macbooks the software update just spins forever and never completes. Is there an issue with remote commands I am unaware of? Is there anyway to unfreeze the software update in System Preferences? Thank you in advance! 

Hi,Looking for some help to help remove all users on our shared iPads without doing this manually.Currently i have to click on each individual device and then click the remove all users button which is taking forever with our estate having 5k plus iPads.Is there anyway this could be scripted to bulk remove all users from multiple iPadsany help would be greatly appreciated. ThanksPaul

We have been trying to get our users to upgrade to Catalina for several months. I have the installer pushed to their Applications and made a kickstart in Self Service that installs Catalina (agree to license, no interaction). Now the time has come where we are going to trigger the install next week. However, the better question is....What if the User closes the computer during install? Has anyone had this happen? Is it a messy reload?

It's been many years since I've used Composer and it was wonderful back in the day for imaging. Since imaging is dead, I'm wondering if creating Composer packages, say of Microsoft Office and/or Adobe Creative Cloud would result in a faster way to install those products on new computers? I'm in a very small environment, less than a dozen users, and new installs don't occur very often, but seems like adding all the apps takes about three hours. So, just wanting to understand if packaging those apps with Composer would shave some time off the installs?Thanks in advance.

Hello, today I updated the app jamf school student at version 6.0.0 on my iPad. After the update, the app logouts automatically and I need to login again but I don’t know credentials because it’s from my school. This issue happens since the first update of the app but it resolved by himself some time ago but now not. You should fix this bug…

Hello, I'm working with the API's and I'm trying to find out which configuration profiles have been assigned to a device. I would assume this would be a easy thing to get but I dont see an API for it. Is this possible? 

If I install Pulse Secure 9.1.15 version on mac manually it works, but when I am deploying via JAMF policy, it doesnt work, it is not picking up VPN URL and if I put the VPN URL and try to connect, it says failed to connect pulse service.  Any help will be appreciated.

Hello Jamf Community. Seeking Information for how can I get Enrolled for the training and Certification here in the Philippines please? 

I'm looking to configure Microsoft SCEP with our JSS environment. We are going to make our SCEP server externally available and would like to know if you have anyone has suggestions for securing the connection. To date, we've researched the following options:1. IP tunnel from our SCEP server to JAMF2. Proxy through our Web Application Proxy ADFS Proxy servers)3. Proxy through Azure AD Application Proxy Does anyone have experience with this or a recommendation on the best method?

I have been tasked with migrating computers off our onPrem JAMF Pro install to a cloud pro install.We had about 75 machines of varied OS versions (10.12.x up to 10.15.x) I have completed pretty much all of them. There were about 6 machines that i was unable to "enable remote desktop" that appeared linked to the OS version (sierra).I proceeded to push the migration script out to the sierra group (ReEnroller package) and they migrated and were checking in to cloud jamf. Part of the process is approving the new MDM profile which we were using remote desktop to click this. So, these 6 needed on site access to complete the task.When we went to the device, we noted the profiles system preference was absent/didn't have any profiles present. We then proceeded to reboot the device which then resulted in the lovely flashing question mark.I am at a loss as to what has happened here, why is the computer bricked?Apologies for the WoT..

We recently started deleting out old unused Sites in our Jamf instance as part of a routine cleanup. One of these sites happened to have set up some Managed Preference files back in the 10.9 days and deployed them to All Computers in the site. Once that site was deleted, the Managed Preferences Jamf stopped displaying 40 releases ago got dropped into the top level and kept its scope of "All Computers".We've unscoped the Managed Preferences using the API, but it looks like they're still applying to end user's machines. Does anyone have a good method for forcibly removing Managed Preferences from machines without affecting Configuration Profiles? The best thing I can come up with is runningrm -rf /Library/Managed Preferencesdscl . -delete /Computers/localhostdscl . -delete /Users/<<USERNAME HERE>> dsAttrTypeStandard:MCXSettingsand rebooting. This seems to work, but I'm not sure if this is the ideal way to handle this.  For one, it requires the end user to reboot to take

Hello everyone,We're trying to end the installations of a Jamf Pro server in Ubuntu, we're following the manual install guide, https://docs.jamf.com/10.40.0/jamf-pro/install-guide-linux/Manually_Installing_Jamf_Pro_Ubuntu.html,when arriving to this step Creating the Jamf Pro Database Using the Jamf Pro Server Tools Command-Line InterfaceStep 5: Restarting the ServicesWhen trying to restart, appears this error, and we don't know how to fix it. any help is welcome, Thank you 

hey folks! this works! (you can make it burn any text you want of course -- just change the source of the $TEXT variable)#!/bin/bash## A script to burn Mac computer name into desktop background## requires Imagemagick and Ghostscript which you can install with homebrew## ljaeger 2022-07-28 BKGD="/path/to/current/desktop/picture.png" ## if only there was a way to get this programmatically! There isn't, I looked.ORIG="$BKGD"_original.png ;## get the ComputerNameTEXT=$(/usr/sbin/scutil --get ComputerName) ;# make a backup of original desktop pic if none existsif [ ! -f "$ORIG" ] ; then/bin/cp "$BKGD" "$ORIG" ;fi# make a clean copy of desktop pic from backup/bin/cp "$ORIG" "$BKGD" ;# burn ComputerName into desktop pic with Imagemagick convert commandconvert "$ORIG" -fill white -stroke black -font Helvetica -gravity North -pointsize 100 -annotate +0+25 "$TEXT" "$BKGD" ;

Hello everyone, hope you’re well... I’ve almost finished the CIS Benchmark compliance but there is a little recalcitrant (CIS 5.9) that resets every time you change the value: sudo pmset -g | grep -e standby do you know if there is something to change in the Jamf or Mac configuration to maintain the values you want?

Every organization has different security requirements and depending on those requirements, you may find certain methods work better or worse than others. One of the things I've been tasked with is enforcing strong passwords on our macOS endpoints. I am currently required to adhere to CIS benchmarks as well as FedRAMP guidelines. The out of the box Jamf Pro MobileConfig does almost everything I need it to do - sans the ability to use mixed case (ie upper and lower case) values (unless I want to hack away on some plist files - which I don't want to do). The Jamf CIS scripts as hosted at https://github.com/jamf don't address the password enforcement - because Jamf Pro does the basics (CIS Layer 1) natively per the MobileConfig method previously mentioned. But what if you need something a bit more robust than just the basics? Something that uses Level 1, possibly Level 2, both scored and unscored? Well, I've seen a script floating about here in Jamf Nation and I tracked down the ori

Hello Mac-Admins :) I would like to install the Logitech Options software via Self Service. But what Logitech offers us is a disaster. :/ Does anyone of you use the software? How did you provide them? The software packed via the composer and installed via Self Service policy does not work. Logitech Options does not want to start.

Hi everyone, I figured out how to get EAP-TLS wireless authentication working for iPads using publicly signed certificates with the Client Authentication OID. Here’s the basic rundown: Import InCommon CAs into the NTAuth certstore of the radius servers https://support.microsoft.com/en-us/help/295663/how-to-import-third-party-certification-authority-ca-certificates-into certutil -enterprise -addstore NTAuth ./{Filename} This allows the radius server to check the validity of the certificate used for authentication, and trust them. Create Radius Connection Request Policy - Made a copy of the ‘Use Windows authentication for all users’ Added a User Name condition so it would only apply for my specific connection (the CN of the cert) Removed all authentication methods but ‘Microsoft: Smart Card or other certificate’ Added a Manipulation rule for User Name to transform ‘Sam Novak’ to ‘snovak@mydomain.edu’ I guess radius wants user principle name or something https://www.afp548.com/2012/11

Migrating from SimpleMDM.  This was easy to setup with a config profile. <key>LoginwindowText</key><string>Serial Number {{serial_number}} - Device Name {{device_name}}</string>Is there an equivalent in JAMF config profiles ?