I recently started a new job where the company had me install Jamf on a brand new MacBook and I am wondering what exactly hand logs, more precisely, if the websites I go to, how much time I spend on those, what softwares I download (if I download a VPN) and where I log in from

Hi All,We have a iMac mac lab for students.  Computers are running Monterey.  Is there a way I can allow plugging in an iPod with admin rights?  How bad could it be?

Does anybody use this software, or have any experience deploying it via Jamf? I'm particularly interested in automatically setting the user ID and company PIN etc., as well as disabling the 'Quit' button if possible.

I'm trying to install Barracuda Backup Agent via JAMF to my macs, but the only installation Barracuda provides is an .app file within a .dmg.  In the past, I'd just capture the installation in Composer and deploy. But now with the wonderful Read Only System volume, I get the error that the package is attempting to install content to the system volume.The installer places the app in the Applications folder, as well as some config settings in /Library/Application Support and a plist in LaunchDaemons.  I've tried modifying the permissions within Composer so they are all root/wheel and applying it to all enclosed items, but it still doesn't help.  Even manually running the package it creates gives the same error.  This is going to be a pain moving forward.  Does anyone have a solution?

 I'm completely lost here, I have tried PPPC utility  (downloaded from jamf github), manually creating PPPC in other tools and jamfcloud console, and even tried to edit tcc.db in /Library/Application Support/com.apple.TCC/TCC.db .I tested few apps among many packages i need to install with jamf, and had no luck with any of them. Any suggestions? Here's one thing i tried for Symantec Endpoint Protection    

Hello, I'm trying to comply with the 6.1.4 of the CIS Benchmark: Disable "Allow guests to connect to shared folders". I have created a Custom Configuration profile like this: I've upload the profile to Jamf Pro an the installation is OK but the option in System Preferences does not greyed out, and an administrator user can change it can anybody help me? Thank you very much

I know this has been resolved. But I'm looking for the best workflow for changing but now locking the wallpaper for my user's machines during the provisioning process

We use Meraki in our environment and have been able to deploy previous versions of the Systems Agent via Policy from Jamf without issue. With the current version 3.1.3 downloaded from our Meraki dashboard, the policy installation via Jamf fails. When installing manually directly on the computer, the installer requests our network identifier, which it didn't do before with versions of the agent downloaded directly from our Meraki dashboard. Any ideas how to bundle that into the installer or is there some file I can create pre agent instal that it will reference? Hopefully someone else uses Meraki and has run into this and resolved it. Also created a help ticket with Meraki but they are usually not so helpful. The only change to the policy that has been working for the past two years is the update of the package that is installed, which has not be a problem for previous versions.

How do we stop the macs from showing two Jamf Connect Icons in the menu bar? When running 2.8 no issues. After upgrading and/or downgrading (after uninstall / reinstall) the macs show two icons for Jamf Connect and we can't figure out why.Running Jamf Cloud.Running Mac OS Monterey 12.3 and 12.4 on test macs.

I have done my due diligence to find an answer to this across this forum and the internet as a whole and I am stumped. Basically, I want an out-of-box experience for the end user, and that's all working great. The problem is, since the user enables FileVault when they sign in, the local admin account is not FileVault enabled, meaning if a machine is powered off, I can't log in without the user being there to sign in. I know I could use the recovery key to get in, but I'd rather avoid that if possible.I considered using fdesetup, but given that it will be a different user setting up FileVault every time, there's no way to automate adding our local admin account as a FileVault approved user since fdesetup requires the password of an account that already has FileVault access.Basically, my end goal is 1. User logs in for the first time2. User is prompted to enable FileVault, and does so.3. Using current logged in user, add local admin as a FV2 enabled user Is this possible in any

I have a dmg to install the Check Point VPN package that has successfully installed, but the site information does not populate. Does anyone know where that file resides and how best to add it to my package so it installs on all machines?

Hello,I would like to know if any of you have configured Azure AD 'User Name' mapping (Cloud Identity Providers) with the onPremisesSamAccountName attribute (instead of userPrincipalName).Because it was working fine and since we are in Jamf 10.33 it doesn't seem to work anymore.When we try to search for a user, we get the following error in the logs:com.microsoft.graph.http.GraphServiceException: Error code: Request_UnsupportedQueryError message: Unsupported or invalid query filter clause specified for property 'onPremisesSamAccountName' of resource 'User'.GET https://graph.microsoft.com/v1.0/users?%24filter=startswith%28onPremisesSamAccountName%2C%27username%27%29&%24select=id%2ConPremisesSamAccountName%2CdisplayName%2Cmail%2Cdepartmentle%2CmobileTop=999Thank you

Is there a way to swap one configuration for another, depending on if a user is signed in or not?We have some laptops, and really want to set them up as multi user devices, which for us will mean signing in using NoMad. For this to work, we will need a WiFi configuration to give access to our network, so that the NoMad system can authenticate and log in the user account.Once the user is signed in, we want the WiFi configuration to switch over to using our main WiFi network. Then when the user logs out, we want the WiFi to switch back to the previous one, totally forgetting the user credentials.I guess a way to create a smart group based on if there is an account logged in or not will be a good place to start. Then all I would need to do is create the 2 configurations and set them to apply or exclude as required.But this would need to be done as the user logs in, or as they log out. And the configuration doesnt want to get caught in the middle - One WiFi configuration removed before the

Greetings - I've been tasked with researching setting up an externally accessible Tomcat server for each of our JSS servers. This is so our current JSS servers don't need to be externally accessible from our networks. As there already exists standard documentation for setting this up on separate servers, no need to re-direct me towards those documents. BUT, my superiors would like to setup multiple instances of Tomcat on a single server. 2 options I have been tasked to research -1 - Setup an additional Tomcat on each of our JSS servers  - the new Tomcat would be "clustered" to the existing JSS Tomcat, with the new Tomcat being externally visible.2 - Setup a single VM, with multiple Tomcats, with each being "clustered" to a different JSS server. The new VM's Tomcats would become the externally visible point for each of the JSS's.Is either a viable option - I've noted to them it's unwise, but I have been tasked with finding out for sure.Thank you in advance for any assistance.

Hello everyone, I am leveraging DEPNotify to 'image' our school's devices and I am running into an issue where my DEPNotify script tries to use 'sudo jamf policy' only to find that it is already run by root and the script moves on. I am looking for a way to test to see if jamf policy is already being run by root before continuing with the script. Has anyone been able to create such test expression? 

Hi,I've got issues with Apple TV 4k, I've enrolled 20 of them with Apple Configurator 2 to our ABM and assigned the MDM Server.Back to Jamf Pro (up to date), I can see the Apple TV's showing up and I can assign them a PreStage Profile, after few seconds it shows that its properly "assigned".Back to the Apple TV, It says that its under supervision from my MDM and ask to continue, after that screen, it says after few seconds that It was not able to download it.Second issue (which is I'm pretty sure is linked), is I cant seems to assign AppleTV's to any configuration Profile, its not showing up in the list.Any help or leads welcome !

Hello, We are blocking some Apple standard apps on our iPads. So we also disabled Notes (com.apple.mobilenotes)I don't see the app, i can search it at Siri-Suggestions or Spotlight not sure how its called but cannot open it.But sometimes when i touching the right side of the screen, im getting a popup of quicknotes or fastnotes....Is there a way to remove that one too? I thought it was part of com.apple.mobilenotes but its not.. And is there a way to disable spotlight? Since it showing all apps but most of them are removed...

I'm just taking a shot in the dark here as we have been working with Jamf Support as well. Has anyone got Intune integration to work correctly? We've been trying since last October and even with latest update we're still having the following issue. When we try the enroll it logs into Microsoft and we end up getting Registration with Intune failed userid@macname ~ % log stream --predicate 'subsystem CONTAINS "jamfAAD"' --info --debugFiltering the log data using "subsystem CONTAINS "jamfAAD""Timestamp Thread Type Activity PID TTL 2021-06-15 10:46:07.530148-0400 0x75eec6 Default 0x0 84912 0 JamfAAD: (JamfLogging) [com.jamf.management.jamfAAD:workflow] Launching Company Portal2021-06-15 10:46:28.564382-0400 0x75eec6 Default 0x0 84912 0 JamfAAD: (JamfLogging) [com.jamf.management.jamfAAD:workflow] Collecting Azure Active Directory ID2021-06-15 10:46:28.564428-0400 0x75eec6 Info

In my config,Device Restriction Profile Payload- Apple store is enabled but device it gives and Error on device that Apple Store is not available. From profile deployment status it does say that profile is applied to device. Before the apple store was blocked & now I want to enable it? Any idea? Thanks

I have a couple of macbooks not showing the bypass key, They are supervised and syncing fine. I have tried to turn activation on and off to test but that doesn't work either  They are m1 macs on 12.1, I have other macbooks that are the same showing the key

We currently are trying to setup Crowdstrike Falcon to deploy to all of our end users. We are running into an issue with the Configuration profile we setup for falcon (guide provided by CS) where it's not providing FDA access to the Agent. It places the Agent in the FDA area in System Prefs -> Security & Privacy -> Privacy -> Full Disk Access but it leaves it unchecked.  Does anyone know a solution to getting this checked with JAMF? Here is a screenshot of what  I'm referring to:  Please find screenshots of our current config profile for Falcon in JAMF below:     

Hello everyone, We are trying to get the Crowdstrike mobile rollout working on iOS and ran into issues. The deployment itself will be handled outside of JAMF via the Crowdstrike managed self enrollment feature and worked without issues in our testing. As expected we are getting 'waiting for corporate policy' without a matching configuration via JAMF. This is where our problem is. The support documentation doesn't cover JAMF. Has anyone here successfully done this using JAMF? The documentation outlines two different paths. One 'supervised' via a plugin and one 'unsupervised' via a 'per app VPN profile'. Our preference would be the supvervised path but we don't even know where to start with this in JAMF? Any takers? The other option is setting up the VPN payload but in this case JAMF has options that aren't covered in the support documentation. Anyone mind sharing their settings?

I would like to start binding machines using a config profile. Are any of you using it with DEPNotify? Currently I have AD binding done with a script that DEPNotify runs after setting the machine's name. How do you 'trigger' the config profile with a script? Looking for ideas.

Is anyone able to login to JAMF Admin with JAMF being cloud hosted?I keep trying but each time I login to the JAMF Admin application and enter my username/password and click OK, the login box disappears and reappears again for me to enter password again. This just continues on and on.So instead I login to JAMF Pro from browser.What could be the problem with JAMF Admin? I'm using the same https://*********.*********.******:8443 when logging into JAMF Admin like I do with using JAMF Pro from browser!!

Is it possible to have a default name scheme so all our newly deployed Macs will have the same kind of name?Maybe something with numbering? MAC-01, MAC-02 etc.