I am working on implementing Jamf Protect at my new employer. I am running a test machine and scoped Jamf Protect to the endpoint, we got a good read on our current insight failures.As a test I added a config profile to disable AirDrop from Jamf pro - Restrictions, and successfully confirmed that AirDrop is now disabled. Jamf Protect is still showing an insight failure for Airdrop for this endpoint and will not switch to compliant.I have manually updated insights and forced protect checkins with no change.

We're trying to manage Chrome with a Config Profile, because it's way easier than with the master preferences file. So far the config profile works as intended, but Google Chrome won't update. It keeps saying "Google Chrome may not be able to keep itself updated", even though it also says "Automatic Updates are enabled". The keystone Agent and Daemon are both included in the Package, as is "Google Software Update" in /Library/Google/. The only time I get Google to update is with 777 permissions, which we would rather avoid. I noticed some people on here using a script to auto update Chrome, which we would also rather avoid due to the sheer amount of clients we manage. Does anyone know how to make Chrome update itself with the setup we're trying to use? Thanks!

We are looking for a script that we can run to check to see if our local admin account is already setup in OSX. If it is, exit. If it is not, then create the local admin account. Does any one have a script that currently does that? I know we can use the JAMF binary as well as smartgroups with a policy, but it this situation, we would like to do it via a script. Most script I find only create an account but not check to see if it exists first. Thanks in advance for any guidance you can offer.

Hi all,We have four Jamf Pro servers (on premise) configured behind a reverse proxy. The proxy has an SSL and we configured it to terminate SSL and I reflected those changes in the Apache Tomcat Settings.The proxy has trusted 3rd party certificate however, I get a message on Jamf saying that "Tomcat SSL Certificate Expiring in X days". I've never configured the certificate on the Jamf Pro nodes themselves, I believe they're using the self-signed certificate.Will changing the self-signed certificate to a trusted 3rd party cert for the Jamf Pro nodes under the Apache Tomcat Settings cause any problems between them and proxy or them and the clients?  Thanks in advance!

Hi all!We have been having a very strange problem for a while, the iphones without touching the buttons or starting the recovery mode are formatted from the factory. It does not happen to us in all the iphones devices that we have in Jamf but we have reported more than 15 cases with this problem, we reviewed the configuration and we did not find anything strange. We have configured the installation of updates if the user has not applied the update after 90 days, but these cases occur with all the updates made.Do you know what could be due?

Hi  I am trying to set up Apple Configurator 2 so I can enrol some iPads into our apple school manager and jamfIn the configurator set up I am being asked for the MDM servers name and host name or IP address.Can anyone tell me where to find it?? I have looked through school manager and also Jamf and can't find anything thanks Ian

Team, Need script to disable screensaver.Thanks in Advance.

Hi Team, Can anybody help to share the advantage and disadvantages of the next coming update of SSO?  

We have a EA script pulling in a value that we would then like to use in a script.The script is currently set with a $4 value so it uses the Parameter Value set in the first field when adding the script as payload to a policy, anyway to allow this $4 value to be the EA value?

Just looking to ensure I'm covering my bases here. We have a lab of old iMacs that we are retiring as we are replacing them all with M1 iMacs.My current process is to run a fresh install policy that includes the --eraseinstall option to wipe the machine. Once this is completed, I go in and remove the machine from Jamf Pro. My intention is to wipe these computers remotely and have little need to touch them beyond that before retiring them. I don't have them scoped to any pre-stage enrollments that they'd latch onto when they reconnect or anything.Is this sufficient or am I missing something? Anything else I should consider?

I am doing FileVault policy testing, as part of my testing i did following but not working as expected.1) I configured Disk Encryption Policy with in JAMF and set the scope for our test devices --> Worked great.2) As part of my negative testing, i turned off the encryption with MAC manually and waiting for the JAMF to repush the policy but not happening --> Need some help on how to achieve this scenario.3) Also, after my test laptop received a Disk Encryption Policy, my device started showing up a message after i login "Your Administrator required that you enable FileVault" --> Can we suppress this end user message while they login and enable FileVault silently ? Thank you.

Hello All, I'm having a issue with deploying the SuccessFactors iPad app to a set of managed devices.  At first everything worked great during the POC, app was deployed to the devices. Users could open the app and sign in through Azure Auth and get access to the content in the app.  But after the app updated recently, users can't sign in anymore.  All that gets displayed is "Something Went Wrong" when entering in the company ID for the app.  Reaching out to see if anyone has recently had the same issue. Cheers,Joe

Correct me if I am wrong but Jamf does not have any way of enforcing software updates anymore correct? For example on my specific Test mac I have a couple available updates. An update to 11.6.7 and then a Safari update.From what I heard Jamf cannot enforce a user to install these, I was recommended to use Nudge but from my understanding Nudge is designed to take care of the security updates and macOS minor and major updates but does not tackle other updates like in my case, safari? I know nudge doesn't really auto enforce these besides gently nudging all the way to annoyingly nudge the user but will it also look and nudge based off other software updates like Safari?Thanks! 

Hi all,Is it normal to the see this in the Jamf  Serve Logs?2022-07-13 14:18:03,271 [INFO ] [Thread-5 ] [Enrollment ] - Fetching Enrollment Access Groups2022-07-13 14:18:03,287 [INFO ] [Thread-5 ] [Enrollment ] - Fetching Enrollment Access Groups2022-07-13 14:18:03,318 [INFO ] [Thread-5 ] [Enrollment ] - Fetching Enrollment Access Groups2022-07-13 14:18:03,318 [INFO ] [Thread-5 ] [Enrollment ] - Fetching Enrollment Access Groups2022-07-13 14:18:03,333 [INFO ] [Thread-5 ] [Enrollment ] - Fetching Enrollment Access Groups2022-07-13 14:18:03,349 [INFO ] [Thread-5 ] [Enrollment ] - Fetching Enrollment Access Groups2022-07-13 14:18:08,234 [INFO ] [Thread-3 ] [Enrollment ] - Fetching Enrollment Access Groups2022-07-13 14:18:08,234 [INFO ] [Thread-3 ] [Enrollment ] - Fetching Enrollment Access Groups2022-07-13 14:18:08,750 [INFO ] [Thread-5 ] [Enrollment ] - Fetching Enrollment Access Groups2022-07-13 14:18:08,765 [INFO ] [Thread-5 ] [Enrollment ] - Fetching Enrollment Access Groups2022-

Hello Friends,We need a custom solution to pull browser information on Mac.We need to know % of people who have a homepage URL set to anything but default across Firefox, Chrome and Safari. We don't need to know what it's set to, just that it is configured to something custom.Any script and solution is really appreciated!Regards,Ajay 

Hi there,Trying to investigate an issue with our intel MacBooks all of a sudden crashing lately, the fans will go off like crazy and then freeze, machine then reboots- this has happened on 3 separate occasions to one end user- the log file showsNot sure if Jamf-Connect has anything to do with it? I've attached the log file below.Any assistance is appreciated!  Process: SecurityAgentHelper-x86_64 [411] Path: /System/Library/Frameworks/Security.framework/Versions/A/MachServices/SecurityAgent.bundle/Contents/XPCServices/SecurityAgentHelper-x86_64.xpc/Contents/MacOS/SecurityAgentHelper-x86_64 Identifier: com.apple.SecurityAgentHelper.x86_64 Version: 1.0 (1) Build Info: SecurityAgentHelper-55467140002000000~1 Code Type: X86-64 (Native) Parent Process: launchd [1] Responsible: SecurityAgent [404] User ID: 92 PlugIn Path: /Library/Security/SecurityAgentPlugins/J

Hi,Does anyone have a workflow on how to deploy the chrome LastPass extension? Is there any other way than packaging a custom chrome?

I need to replicate a single file to our Cloud DP. I see there is a "specific files" option which check boxes next to [all] items (with no way to uncheck all btw). If I uncheck everything except that one pkg will replication remove the unchecked items that already exist on the Cloud DP?The "Admin" application really needs a way to select a single file and replicate it. Thanks in advance.

HelloIs there a way to clear the cache and password saved in Chrome and Firefox browsers ?   

Hi all,We are using deep freeze to protect the Mac and now start to use Jamf Pro to manage our Mac. We found a issue is how to thaws the deep freeze partition and run Software update , after that freeze it again.I want to try thawTargetPartition.sh , but will planning the policy, I think it will need to reboot few times , will it break the policy running?

I am seeing issues with Jamf Pro 10.26 and new Big Sur 11.0.1 Macs (Intel). The required 'Enrollment Complete' (enrollmentComplete) Trigger is ignored and thus my deployment policies never execute. Timeline: -Target Mac appears in Apple Business Manager and in Jamf PreStage scope.-Apple Device Activation (DEP) confirmation pane appears on target Mac.-My enrollment admin account lands on the target Mac (from PreStage).-Custom Apple Setup Assistant EULA panes appear (from PreStage).-New device record appears in Jamf JSS. ...But my Jamf deployment policies (DEPNotify 1.1.6 and related kickstart script) never start because the 'Enrollment Complete' trigger is never acknowledged. Is anyone else seeing this issue?

We are setting up new iPads for our elementary aged students. We have been 1 to 1 in Middle School for quite a while now, but I'm needing some recommendations on younger student restrictions. Can anyone share their Configuration Profile and recommended restrictions for students age 4-10? We are setting up individual grade level profiles, and want to be sure we don't miss anything.

Hello Jamf Nation! I am trying to update all of our Macbook OS to the latest version. We run a 24/7 operation so I don`t have a set time that I can push this out and not disrupt our business. So I send a remote mass command to a saved search with all the users that have outdated OS. I selected "download for user to install" so our users can update at their convenience. I am wondering once the OS is downloaded where do our users go to initiate the update? It might be a dumb question but a definitive answer would help a bunch. Thanks everyone!

Hello.I have 12 iPads that I want to remove all the apps from.I've created a new static device group in Jamf School which doesn't have any apps associated with it and have moved these 12 iPads into this new static group. I've also removed these devices from all previously assigned groups.Is there a way in which I can uninstall all apps off each device via Jamf OR will the apps self uninstall now the devices no longer are assigned to groups that have apps in them?I know I can uninstall each app individually, but I don't have time to do that. I'm hoping there is some way of selecting all apps and clicking on an 'uninstall apps' button.Thanks for any help.Thanks for any help.

Hello, when i try to start XAMPP 7.3.31 for the first time, it asks me to enter an admin account. As an administrator this causes me no problem, but standers users cannot start it, because they are not administrators of their computers. do you have any ideas how i can make the standard users as a admin only for this app so they can start it the first time. Thanks