Hey Everyone, hoping someone can help. we're getting all kinds of crazy errors in JAMF when trying to remove a dock item using Dockutil. Everything from root access to dock item not found, to argument not supported. It can't be this hard, is it? Trying to do this in Monterey on the M1 MBPs. Here's what i've been trying to push out. A simple script. Running it locally works. Am i doing something wrong here:  #!/bin/zsh loggedInUser=$( scutil <<< "show State:/Users/ConsoleUser" | awk '/Name :/ && ! /loginwindow/ { print $3 }' ) dockutilbin="/usr/local/bin/dockutil" loggedInUserPlist="/Users/$loggedInUser/Library/Preferences/com.apple.dock.plist" $dockutilbin --remove file:///Applications/BarcodeForVerification2021/Barcode\\ x14.app --restart $loggedInUserPlist exit 0    

We have iPad minis for a series of public meetings starting soon. They need to display a large PDF file for folks to browse. How easy would it be to create a single app mode "kiosk mode" that locks the app in JAMF Pro?  

Why this is important:Our Macs use Jamf Connect Sync & sync Kerberos tickets to obtain the expiration date of their password. Now that everyone is perma. working from home, the computers are never touching the network and not updating their Kerb tickets and therefore not updating the expiration of the password resulting in poor behavior such as continuing on the current countdown of days left till expiration even after a PW is changed or worse, after it expires, it starts to count up in negative days (i.e. -10 days) since their previous password expired. We do not want to remove this functionality all together as there is about half the workforce who will still VPN into our CORP domain and are correctly retrieving tickets and we want that functionality to exist either way as it's a vital piece of information with as short as our PW policy is. What I wanted to accomplishHave a script that runs on password change that sets the

Help your users easily provide Microsoft Support their Office configuration files while maintaining user privacyBackgroundAfter implementing Microsoft’s recommended macro security in Office for Mac settings via a Configuration Profile, then having affected users run Paul’s Office-Reset packages via Jamf Pro’s Self Service, some users are still observing the dreaded Run-time error 32815 triple-prompts for Visual Basic for Applications when opening blank documents in Word, Excel or PowerPoint.

Hello There, I am wondering if there is anyone using Cisco VPN Any-connect 4.9 in macOS Big sur Beta? I installed it but it is giving me error right from start and I can't even launch it. Please see the attached screenshot for the error. Any help appreciated. Thanks.

Can anyone help me with the script for removing SEP in JAMF? My script skills are not that good. I'm more of a copy and paste guy. This link seems to have the best info.https://knowledge.broadcom.com/external/article?legacyId=TECH103489 I have downloaded the SymantecRemovalTool modification zip provided at the bottom of the page. I then view the command via Xcode copy and paste it into a new script create in Jamf. Next, I create a Policy including the script. The policy fails with a script exit code:4 The below step I don't follow. Is anyone willing to share their Policy? (Pics of Policy would be awesome so I know what is meant by a dummy script) **Symantec provides support for SymantecRemovalTool/RemoveSymantecMacFiles only when running them locally; it is the customer's responsibility to integrate SymantecRemovalTool with Apple Remote Desktop or other remote deployment tools. Both of these tools require no a

Every time I try and play an embedded YouTube video on my powerpoint it keeps saying "This experience is unavailable, Your organization's admin has turned off the service required to use this experience." I have looked through all of our configuration profiles and policies and see nothing related to restrictions on the powerpoint application. Could it be a problem with the package itself that we have on the Jamf Cloud Server or could it be a setting in Security & Privacy?

Hello, I'm having a weird network account issue. When I bind to our active directory server and have "create mobile account" selected network accounts will not work. However, when I bind to our active servers without "create mobile account" selected it works just fine.  This happens both when I use our jamf policy or when I just manually bind the computer right from the mac. OS is 12.4

Someone accidentally scoped an expensive app that we had 10 licenses for to 4000 iPads. They reversed the scope almost immediately, but now we have a pending command on 3990 iPads that's never going to go through. I have some experience with the API and shell scripting, so I thought I could grab a list of commands' UUIDs and delete the ones that meet my criteria, but I don't see a way to flush commands with any precision. Under commandflush, it looks like all I can do is delete all the pending commands on a particular mobile device, which for various reasons we don't want to do — just this one command. Any ideas? 

First a bit of background:We are a higher-ed institution that has a small cohort of international students.We deploy a purchased book from ASM to all incoming freshmen that our board wants them to have when they leave (we allow personal Apple IDs on our devices since they pay for them and they are theirs to keep, so when the VPP invite happens, their personal Apple IDs are linked to their Jamf user account on the backend)In previous years we used VPP codes and registration email invites; it was troublesome at times, to say the least.This year, to make it easier, we are deploying through Self Service and VPP registration invites through notifications. For 90% of our users, the process works perfectly if they followed directions. We already know the issues that arise with what region the Apple ID was created in, and we know the fix for this - US based Apple ID, or we give them access to the library's copy (we only have 10 concur

Hello Jamf Nation, I am excited to introduce the Jamf 100 training course. The Jamf 100 is an online, self-paced course that combines video lecture from Jamf instructors with direct links to relevant documentation and resources alongside practical examples. The Jamf 100 serves as a foundational component to our core Jamf courses. We think this course is a fantastic building block for anyone beginning their journey as an Apple device administrator or advancing down that path and bringing Jamf products into the fold. We believe this course material can serve many different functions; an introduction into iOS and MacOS use and management for those new to the Jamf Nation, preparation for future Jamf course enrollments or a tool to help already established organizations familiarize more staff with the tools already in place. The 100 course is broken down into six sections. Sections two and three focus on core competencies of iOS with an eye to it’s relationship

I have a Policy set to run first after Macs enroll in JamfPro that only contains the following in "Files and Processes"softwareupdate --install-rosetta --agree-to-licenseAnd for the most part it works great. The problem is that I have seen a lot of M1 Macs unable to install some packages because they are missing Rosetta. When I check the Policy log for installing Rosetta, the command does run, but it seems to successfully fail. There appears to be an issue with getting the Rosetta installer from Apple at that particular moment the command was run. Usually there will be a line that says "Rosetta is unavailable" or other messages about the server isn't available. I've been trying to find a fleshed-out script that can check for errors while executing that one-liner and tell Jamf that it failed so it shows as an actual failure. Does anyone have a script that takes these server-side failures into account?I've already tried obtaining the Rosetta pkg via instruct

Hi We are running into issues installing app store apps and I think it's because our VPP server token has been revoked. I believe this token was set up in an old employee's account and I can't find where to get a new token to upload. I have checked our abm account and can't find it anywhere. I read on a Jamf post that VPP is no longer supported after January 2021? Is this the case? How can I go about installing app store apps with Jamf pro if so?

hey all, I have been tasked with Blocking all extensions in Safari, sans the approved list. can anyone point me in the right direction? Thanks

Hey there,we're trying to set some advanced settings in Microsoft Outlook. We want to tick the red outlined box and enable SSL.Right now we're using this script, which work's, but throws an error. I'm not really into scripting but i tried a little bit on my own and came out with the following:osascript <<END tell application "Microsoft Outlook" set ldap server of exchange account 1 to "XXX" set ldap use ssl of exchange account 1 to yes set ldap port of exchange account 1 to 6666 end tell END It throws no error, but it won't enable SSL either. I think it's because I don't define the default exchange account and I don't really know how to do it. Shouldn't it be just "exchan

We are using Jamf Pro, without Jamf Connect.Now we are looking to take away admin rights from our users (insert evil laugh here) and let them request temporary admin access via Self Service.But is it possible to migrate their current accounts to a standard account or is that not possible and do we have to reinstall those Macs?

Greetings all,It is documented in the Jamf Connect manual that Jamf Connect will lose its control over the login process after a system upgrade.  It shows issuing the authchanger command to re-establish the control.  We don't have control (at this point) over when people run system upgrades, so we would like to automate this process so that any time that linkage to Jamf Connect is broken it gets reconnected.  Does anyone already have this process set up and working?  It was suggested to use a script in Self Service, but we do not want to leave this step to the tender mercies of our end users.  We want this to be as unobtrusive (invisible) and bullet-proof as possible.  We're looking at the authchanger -print output and grepping for pertinent information, but we are hoping that somebody has run into this already. Thank you for any suggestions!

Never mind, issue solved.

Hi guys,We are currently in the process of upgrading our Mac's to Monterey. Unfortunately after completing the first time setup for our Mac's, some of our macs are still attempting to retry the first time setup when we return the next day or sometimes even after a few hours. We are prominently upgrading through software updates. My colleague believes that it could perhaps be the Mac's not being able to cache the *apple.complete* files which are read upon boot. Please could someone help. Many Thanks, Alexander 

Hello Everyone,Does anyone have a method of using an extension attribute to get a list of all casks and formulae installed in our environment?

Hey Jamf Nation!We've just released Jamf Pro 10.41.0 Beta 2. This is our compatibility release with the new operating systems coming from Apple this fall. There are a number of updated or new keys, a GSX Update, and updates to the Azure AD migration assistant. For full information, please see the release notes linked in Jamf Account.How to join the beta: We’ve also made some changes to the Beta enrollment process with our new Jamf Nation platform. Please enroll in the Beta Program under Product Feedback at account.jamf.com. Once you’re enrolled you’ll see a link to the Beta Forum. Check your email (including Spam folder) - you will receive an email with a link to click to get Jamf Nation beta forum access. Once you receive the email, click on "Join this group Hub" to access the forum.   I

Hi Jamf Nation,  In our continued effort to support you in keeping your student safe and secure online, we are pleased to announce that Jamf Safe Internet has today received new functionality. Google SafeSearch and YouTube Restricted Mode will now be available for you to configure in the Jamf Safe Internet portal.To turn on Google SafeSearch and YouTube Restricted Mode, you will need navigate to Policies  within Jamf S

Hi,I am new in Jamf and getting an error when I'm resetting the local admin password via scriptError:Script result: 2022-04-26 08:31:18.383 sysadminctl[6358:54084] resetting password for Admin. (Keychain will not be updated!)2022-04-26 08:31:18.415 sysadminctl[6358:54084] SystemConfiguration commitChanges failed. Command use#!/bin/shsudo sysadminctl -adminUser adminUserHere -adminPassword adminPasswordHere -resetPasswordFor userToBeResetHere -newPassword newUserPasswordHereexit 0 

I found a few posts asking about a regex for iOS 16, iPadOS 16, and tvOS 16 and figured I post this. I included iPhone15,[0-9], anticipating the next iPhone release this fall. Let me know if I missed something.iPhone1[0-5],[0-9]iPad((1[1-4])|[6-8]),[0-9]AppleTV(11|[5-6]),[0-9](iPhone1[0-5],[0-9])|(iPad((1[1-4])|[6-8]),[0-9])|(AppleTV(11|[5-6]),[0-9])Here's a link to the complete regex with all the iPhone, iPad, and Apple TV model identifiers.https://regex101.com/r/4VsaTp

Hi All,looking for any tips to get past apps not completing the install on iPads.Most are brand new, prepped over summer.I waited to shut down until all apps were installed.Now, of course there are App Updates, and the ipads are in the schools.These iPads ar for Grk-4 andthey do not have delete apps permission so ding aytihng requires mulitiple movesMy normal process when I see this is to remove the partials and reveal the app store and that usually unsticks them, but that is not practiccal if it is MANY ipads in and  school starting on Tuesday...