Just wondered if anyone knows of any way to get reports (that could be used in an audit for example) to verify MacOS device wipes initiated from within JAMF Pro? It doesn't look like this functionality exists within the product but wanted to check.We also tested device wipe using a solution from Blancco, however, while it does generate comprehensive reports, it does so prior to the wipe actually executing, meaning the report cannot be relied upon. It wasn't worth the additional effort to deploy a separate solution in that case. Many thanks.  

Does anyone have any tricks or scripts to take a Jamf Summary and put it into a spreadsheet?  The inconsistent formatting (inconsistent spaces or periods) makes it hard to just import it.  There are a number of long standing feature requests to clean up the output but those have not been addressed yet.

Hi friends,I'm working on a new first boot sequence for our org; in the past, I've used dockutil and duti to set the appropriate dock and UTI's for calendars/email. They're both getting long in the tooth, though, and I seem to recall there was a Swift app out there to do the same thing as dockutil. Could anyone remind me what the name of the dockutil replacement was, or suggest more modern replacements? 

I have been using dockutil for years without issue. I have historically been putting the shell script in the Users/Shared/bin folder and the plist in the user LaunchAgent folder. Like I said, years have been working...Now that Python is not installed by default and using the newest version of Dockutil, I cannot get it to run. I have tried to get this to run via Jamf. I have used Jamf to dump the two files into their respective homes on the endpoint. Heck, I have even manually added the files to a target computer just for testing. All I get is an "unable to execute (path to .sh file) Operation not permitted. I don't know what I am doing wrong, but it's making my hair fall out.Here are my scripts...#!/bin/zsh dockutilbin=$(/usr/local/bin/dockutil) loggedInUser=$( echo "show State:/Users/ConsoleUser" | scutil | awk '/Name :/ && ! /loginwindow/ { print $3 }' ) loggedInUserPlist="/Users/$loggedInUser/Library/Preferences/com.apple.dock.plist" $dockutilbin

I' am the only one unable to use the chat support? It says "routing you to a live agent" indefinitely. I tried with different internet connections, different devices (event on mobile!) and different browsers... with no luck

Hi everyone,i'm trying to setup Synology C2 Identity as our SSO provider for JAMF. I set up everything and i can actually authenticate an user during the enrollment. The problem is that the next step (local account creation) is pre-filled not with the username but with the email address as the local account name. This is strange because in that way the user home folder will be something like name@domain. Not really user-friendly.Is it something related to variable mapping? 

Hey Does anyone use Anyone use JumpCloud and Jamf Now?We have Jamf fundamentals setup and some of the features JumpCloud offers look useful.We don't use the Jamf Connect part of Fundamentals as yet. JumpCloud looks far easier to deploy to manage user accounts and passwords on 35ish devices.Any thoughts.

I manage a Web Clip for a team of engineers who use a CMDB solution (ServiceNow) for checking industrial & scientific equipment in the field. They do this on iPads using Safari. The CMDB solution is a cloud-based web interface, no third-party apps are required. Basically, I use MDM to push-out a Web Clip that tells Safari to open a specific private URL on the engineers iPads. We have realized that Safari renders the ServiceNow web interface incorrectly at times. Engineers are complaining of horizontal scrolling issues, zombied drop-down menus, etc. As of iOS 8.1.3, the issues are still not resolved. Both Apple and ServiceNow are aware of my issues. The good news is that we have discover that Google Chrome on iOS doe not exhibit the rendering issues. Thus, there has been discussion to pull the Safari Web Clip via MDM and push-out a new Web Clip that will force the engineers to use Google Chrome instead. Google Chrome is a managed app, so pushing our Chrome will be

Hi, Are there best practices for manually removing JAMF from OS X? I have already attempted "sudo jamf -removeFramework". But it appears that the uninstall didn't complete cleanly. There are still left over components. If I attempt "sudo jamf -removeFramework" again it results in a "sudo: jamf: command not found". Anybody have any ideas? All are appreciated. -Geoff

We're looking into cloud-based DPs and our relationship with MS makes Azure the first option everyone suggests. I know it is not a native cloud option, but I assume it's possible to set it up as an https DP? Is this possible, and has anyone done it?

Hey. I have been working as a Mac engineer in a JAMF environment (no certs though) for many years, but when the pandemic hit us a couple of years ago I needed to change my job and found one in IT Security.Now I want to go back to being a Mac engineer badly, unfortunately, it's not that easy after over two years of break. In fact, I recently had an interview for an interesting position, and while somehow I managed to perform all the technical tasks during the interview, at the end of the day they've chosen a guy who was "more confident" in the JAMF environment. My question is - is it possible to somehow set up a JAMF Pro training/lab env without having access to an enterprise license to refresh my memory and keep myself "in shape" until i find a Mac engineering job again?

Hello all,How do we get a vat receipt for the jamf100 course?

I need to run a Powserhell script on the Mac fleet. The outcome is a json file created on a share.The script requirements to ran:  mount the share, sign in with user credentials in order to create the file .I need to run shell script prior running the Powserhell Any idea how to mount the share bypassing credentials ?I tried below line without success.

Good day all,A little background: I had Parallels Desktop 17 deployed for a few months with no issues installing it on many client's machines. Suddenly about 2 weeks ago it failed to install on any new machines. I kept getting an error messaging when installing that said "Parallels Desktop.app" can't be opened because Apple cannot check it for malicious software. Now I know how to get this working on a per machine basis if I install it manually but how would I give the app permission to install via Jamf? I tried setting Gatekeeper to allow App store apps and trusted developers but this did not change anything.Any advice?

Has anyone implemented Recovery Lock on M1 devices using the API successfully ? Could someone share their script if so?

Trying to get users upgraded to the latest Big Sur. Software Update shows a red button indicator, but on opening it never finishes looking for updates. The softwareupdate -l command shows a similar result... it just sits until it's cancelled.I thought it was a configuration profile, but I excluded my test machines from any OS deferral.Next I thought that it was because we had been using the --ignore-update switch in softwareupdate command to ignore OS updates in Catalina or earlier. But if that carried over I can't undo it (--reset-ignored is no longer a switch) and it probably wouldn't even try to look for Big Sur updates if it was still applied.Looking into a way to upgrade the OS to Monterey and the erase-install project isn't immediately possible because softwareupdate --fetch-full-installer just seems to spin its wheels as well.I guess I can download Monterey, and push it up to our Jamf server, and deploy that down to the clie

Hey all, I'm a volunteer IT admin for a very small non-profit. We had an iPad donated to us, and I'd like to set it up properly so we don't run into any issues down the road.We run exclusively Windows machines (mostly Thinkpad laptops, but some custom-built desktops), and while I personally use an iPhone I have no experience with an MDM. I have set up our Apple Business Manager, purchased the required apps and licenced them to the device, and (after borrowing a Macbook) managed to get Supervision enabled on the iPad. Jamf Now has configured the iPad based on the blueprint, and the device is running pretty well. The final perfect piece would be the Guest mode (preferably ONLY Guest mode) as the device is going to be shared between different volunteers from week to week. I cannot seem to find anything about Shared iPad for Business under Jamf Now. Is it not supported and I'd have to upgrade to Jamf Pro to get that feature

We have a Configuration Profile restriction set up for Macbook Air M1 devices (MacBookAir10,1) to limit student access to entries in the System Preferences pane. One of the new options in Big Sur is the "Battery" entry (see bottom left in the attached screenshot). In Jamf's Restrictions screen, there is no equivalent to this panel to enable access to the Battery settings if the "Enable Selected Items" option is checked. The previous "Energy Saver" toggle being allowed does not render the "Battery" option accessible, and there is no "Battery" entry in the list (see screenshot below). Could this be added in a future Jamf release? We're currently on self-hosted 10.26.0. I imagine we can work around this using the "Disable selected items" option instead, but that wou

A function for your ~/.zshrc to self-heal the jamf binary via the Jamf Pro API Background We’ve had one too many Macs with sideways configurations lately, which we’ve attempted to resolve by various re-enrollment strategies. After reviewing Emily’s Jamf binary self-heal with the Jamf API post, we wanted to easily issue the redeploy command via macOS Terminal. Continue reading …

Hi.Now that we have a MDM command to set the time zone on iOS Devices, this is a feature request :- In the Enrollment settings on one location, option to "Automatically Set Time Zone" and a menu to select a time zone- At enrollment, the MDM command is applied automatically.And so you can eliminate the Services Location pane in most contexts.See you.

I want to push a Yubikey Manager.pkg through Jamf.The package was downloaded from https://www.yubico.com/support/download/yubikey-manager/  and packed using Composer.Installation through Jamf Pro: okIssue: when the app is opened locally user see this msg: "YubikeyManager" app is downloaded from internet ....- How to make the pkg trusted when pushed to the MacOS?Your's

Are anyone in here using Cloud App security for Mac, with device certificate together with conditional access?Overall it works much better then the "nightmare" company portal registration, but MCAS of course also is a bit different using certificate instead of azure registration.Only issue we see if a lot of rapporting bugs from MCAS, where clients seems to rapport certificate is missing , but only in the log this is happening - on the user device there is nothing noted. Sometimes however, it it seems to block on clients, so all microsoft apps must be closed down and restartet before device certificate will working. The reason for this, is as far I have known, if the device has been opened up sessions on different network and then come back to company network.Would like to know if other experience the same ?

We are testing the viability of replacing our current VPN with a L2TP VPN handled through the network settings of the Mac, dropping the need for a software client. Everything is up and running and works wonderfully, deploying the VPN setup via a configuration profile. However, I am having trouble figuring out how to change two settings (short of doing it through the GUI) - System Preferences->Network->Select VPN, Advanced Settings->Options Tab, Session Options I would like to uncheck the "Disconnect when switching user accounts" and "Disconnect when user logs out" settings. I do not see anything in the configuration profile to accomplish this. I found the settings in /Library/Preferences/com.apple.networkextension.plist, but cannot figure out how to change them there either. Additionally, it might be nice for users to be able to toggle "Send all traffic over VPN connection" depending on where they are - but users cannot access this advanced menu -

I see this question has was asked a few years ago, but there was no answer. Now I'm facing the same issue, so I thought I would reach out again to see if anyone else has found the answer.Why can't you turn on Activation Lock for Shared iPads? Even though you are given the option to enable it, as soon as you save the PreStage, the option is unselected. This appears to only be a problem when also selecting "Enable Shared iPad". As we're only using guest accounts, we really need the iPads to be locked to the organisation's Apple ID.Is this a bug or a feature?

Is there a script that would retire the device from JAMF Pro, and then do a "sudo profiles renew -type enrollment" command after JAMF has been removed? We have about 300 laptops left in our environment that were enrolled manually before ABM was setup, so we want to covert them to supervised to be able to better manage them. Has anyone done this before?