We are trying to set up 34 iPads we have a smart mobile device group that has all the devices within it and the config is set to use that list. However they all all getting an error saying "The data couldn't be read it isn't in the correct format" I tried looking it up but we can't really find anything on what could be causing the issue

Hey fellow Jamf users, This is probably a very easy question, however its pulling my hair out, Running the below command for instance to add an alias for Python works when ran us the user in terminal. alias python='/usr/bin/python3' Running this same command within Jamf as a script fails to change anything, I believe this is because it needs to be run as the logged in user, To accomplish this I have the following which doesn't seem to do anything as well.loggedInUser=$(stat -f%Su /dev/console)su "$loggedInUser" -c 'alias python=/usr/local/bin/python3' Any help will be great appreciated !

After a clean install of macOS Catalina, the device does not recognise that it is remotely managed. Instead after connecting to wifi (corporate or hotspot) it takes you to the usual setup steps for a brand new device, Transfer data, created local account etc... I checked the status of the device in DEP assignments, it was still marked as "Assigned" I then deleted the computer record from JAMF, no change on device however the DEP assignments table now reports "Unassigned" Logged into Apple Business Manager and assigned device to JAMF MDM, no affect on device. The device is essentially a new device and has no connection to our MDM, this is concerning because if the device was stolen we would have no way to track or manage the device and the thief could set the device up as their own. Even though the serial number is assigned to our MDM in Apple Business Manager and it appears as "Unassigned" in the prestage enrolments.

Hello all, we are currently working on getting Jamf Connect up and running in our higher ed ecosystem using Azure AD. We have pretty much everything successfully running, however we have quite a puzzler: we have users that require admin access to their specific computer, however the way Azure AD works, a user can only be assigned as a Standard or Admin user. The issue with that is, if we assign an account as Admin, it will allow them to administer every computer in our Jamf ecosystem. Does anybody happen to know of any way to automate local admin accounts to be device specific? Any help is appreciated!

My company has decided to use jamf pro to manage the small set of Apple users. One of the goals is sync apple users passwords with AAD. Currently I am trying to configure jamf connect, while the basic configuration works, the jamf authentication and local account migration is very inconsistent from Mac to Mac. The configuration would has users login through an azure login window instead of the normal apple login window then creates a new account or connects the existing account. However either the local account I configured in jamf doesn't work (it freezes the mac) or the migration doesn't apply at all.Have anyone had these issues? If so any advice? Or should I do basic setup with the jamf connect app to sync the passwords and avoid the migration issues.

Hi allWe're experiencing an odd issue whereby running a mixture of Kitcast and Youtube appears to freeze on all of our AppleTV devices at approximately 13:56 BST.  The devices have to be either manually power cycled or remotely rebooted from the Jamf Pro Console.  This occurs every day around that time with nothing observed to be odd about the infrastructure such as maintenance windows or an increase in traffic.I've tried both wired and wireless connections with no resolve.What's odd is if the device is rebooted at some point in the morning in advance of 2PM the device does not freeze again until 13:56 BST the next day.  It almost seems as if the freezing occurs 24 hours after the launching of Kitcast but evidently this isn't the case.The only thing I haven't tried is using the apps without MDM management which would be a pain so before I resort to trying that I wanted to rule out whether anyone has experienced this or not.Kitcast are at a loss as this hasn't been report

i see these pending commands on bunch of computers, what is going on?Can someone explain whats happening or not happening?These are on iMacs that are currently not being used since we are working remotely.

Hi,I was just wondering if anyone has had any experience with this and would be able to guide me in the right direction to deploy this.  Any help would be appreciated. https://chromeenterprise.google/policies/#CertificateTransparencyEnforcementDisabledForUrls

Hi All, We're currently setting up a new mac suite and the school have asked for the student AD home folders to be mapped. I have ticked the box so i get the globe symbol at the bottom to map it, but only when i set the share one folder up from where it needs to be and i get the whole share with all student folders in on the desktop.  The path we need is \\\\servername\\studentmydocs$\\%username%\\My DocumentsIf i map \\\\servername\\studentmydocs$\\%username% as their home folder in AD, i get the globe but it connects one folder too high and creates the home directory folders in a separate folder (not the end of the world but would be nice to get it working how they want).  Is there an easy fix im missing? New to Jamf, its my first setup so probably missing something surely!If i map \\\\servername\\studentmydocs$\\%username%\\My Documents then i dont get the globe symbol and the only item i see is a mapped drive on the desktop to studentmydocs$ share which has all

Hi Jamf -Can you please update Incremental Upgrade Scenarios for Jamf Pro 10.0.0 or Later ?It was last updated June 25 2022 & Jamf Pro version 10.40.0 was released July 26 2022. Thanks!

Posting here, as well as in the VMware boards, in the hopes that someone can help me out.---Anyone having this issue? I'm using the latest CBC sensor (3.7.1.12) & using JAMF for deployment.I've followed all of VMware's help documentation for deployment via MDM to the letter: https://docs.vmware.com/en/VMware-Carbon-Black-Cloud-on-VMware-Cloud-Services-Platform/services/carb...For now, I've changed the Policy Trigger to "Enrollment Complete" & Execution Frequency to "Once per computer", in the hopes that that will stop the CBC Sensor from triggering a re-install & pestering my end users.Any advice would be appreciated. It's happening on Big Sur (macOS 11) & Monterey (macOS 12) machines, Intel & Apple Silicon processors.Stay safe & take care.---Richard "RJ" LaHue (he/him)

I have a package named PreSonus-Studio-One-5.3.0.dmg - I ended up doing a capture because the app wants to grab about 20 gigs of sample files 😞 - its a large package at around 26 gigs.During install I get this error:Error: An error occurred attempting to mount the package "PreSonus-Studio-One-5.3.0.dmg".If I just double click on the dmg the OS validates the dmg and mounts it no problem.I'm using JAMF Pro 10.31.0 and I'm testing on 11.x (I've tested this problem on 3 separate machines - including physical machines).Anyone run into this and have a solution?Edit: I ran the policy in debug mode:Downloading https://edu/JamfShareDAV/Packages/PreSonus-Studio-One-5.3.0.dmg...Verifying DMG...Verifying package integrity...verbose: Determining package type...verbose: This is a standard DMG package...Installing PreSonus-Studio-One-5.3.0.dmg...verbose: Mounting DMG PreSonus-Studio-One-5.3.0.dmg as Shadow file...verbose: Result of hdiutil mount: hdiutil: mount failed - File to

I am having a hard time configuring the settings for iOffice Visitor for iPad distribution. I have reached out to their tech support, but they have no idea what I'm talking about even though their website explicitly says appconfig can be applied to their app. (they also seem to have never heard of Jamf)  https://support.iofficecorp.com/iOFFICE/Integration/MDM%2F%2FEMM_Integration tells me the key, type, and value I need. I started off by manually adding the following text in the AppConfig field for the app in JamfPro<dict> <key>ioffice.url</key> <string>mycompany.iofficeconnect.com</string> </dict>It is a very similar format that I successfully use for configuring Zoom, but this does not work for iOffice. When the app installs, it still prompts us to enter the site url.  When I told tech support that it doesn't work, they sent me to https://www.appconfig.org/www/appconfigspeccreator/ and told me to enter the BundleID as&nb

Hello,My company just recently switched over to Jamf and we have a mix of Intel Macs and M1 Macs.  We are having an issue with the Externel Kernel for Crowdstrike installing on our M1 machines.  They install perfectly fine on our Intel Macs just not on the M1s.  Does anyone have any experience with this issue?  

Hi, I'm getting a whole lot of software ready for a new set of lab deployments. With Catalina I see this message Verifying "application name" with a progress bar. Looks like a reasonable thing but it happens every time the users log in and with an Application like Mathematica it's taken a really long time - at least 1/2 an hour Is there some way to approve these or disable this checking? I know it's a security feature but we can't have the students waiting that long in a lab.

Hi, I'm having a problem with a simple script to force MS AutoUpdate to list and install any updates.Script works fine as me locally and via Jamf policy, but doesn't show all the results when pushed via policy to all users.This is the script:#!/bin/zshecho "Start:" $(date)#Get current logged on usercurrentUser=$( echo "show State:/Users/ConsoleUser" | scutil | awk '/Name :/ { print $3 }' )#currentUser=$3echo "User:" $currentUser#Set Application pathfile="/Library/Application Support/Microsoft/MAU2.0/Microsoft AutoUpdate.app/Contents/MacOS/msupdate"#if test -f "$FILE"; thenif [ -f "$file" ]; then  echo "Application: Exists"  pkill msupdate  #Use the currentUser to run Microsoft's Update application  list=$( sudo -u "$currentUser" "$file" --list | tail -1 )  echo "List:" $list  if [ "$list" != "No updates available" ]; then    install=$( sudo -u "$currentUser" "$file" --install | tail -1 )    echo "Installed:" $install  fifiecho "Fin

Hello, I'm currently using Jamf Pro, and I want to create a self service "Application" for example:If the user clicks on the Loom application, the specific group on okta will be added to the user.I got the provisioning already between the applications and Okta just looking for the store of Okta dashboard applications.I just wanted to know if it's possible and if you can give me a clue how to do that. (I know how to add applications with self service. I just never did that with Okta) Thanks!

Hi all,I am getting the typical 'Sync failed. Awaiting next sync.' message in the Automated Device Enrolment tab in JAMF Pro.I recently deleted the Apple ID in ASM that was used to generate the token, as it shows the email address of the account under the 'Admin ID' section.Could this be the reason why I am getting this error?If so, how do I go about rectifying it, do I need to create a new token?This might be a one-off fail, and this is the first time I've seen this, but just checking If I might have caused it.Cheers

Is there a way to view the past names that have been assigned to a device? I have a few devices that were returned to me, but they were wiped and their name is now "iPad" in Jamf. If I could check logs to see what the name was before it was wiped it would save a lot of hassle trying to figure out where they came from. 

Has anyone successfully deployed Sophos Intercept X for Mobile to IOS devices through JAMF? I'm interested in doing this for web filtering. According to Sophos' documents you have to create a custom app in the 3rd part EMM but I see no way to do this in JAMF Pro. I believe this has to be done in the App Configuration for the Sophos Intercept X for Mobile app but I'm not sure of the syntax. Anyone have experience with this? https://docs.sophos.com/central/Mobile/help/en-us/esg/Sophos-Mobile/tasks/SMSec3rdPartyEMM.html

I am trying to log into my jamf now account and getting the following error. 403 ERRORThe request could not be satisfied.Request blocked. We can't connect to the server for this app or website at this time. There might be too much traffic or a configuration error. Try again later, or contact the app or website owner.If you provide content to customers through CloudFront, you can find steps to troubleshoot and help prevent this error by reviewing the CloudFront documentation. Any ideas?

I've been struggling a bit making sense and creating a workflow around the secure token change and user creation/FV2 enabling. The workflow in my environment traditionally uses a script using dscl commands or the createuser.py to create our local admin account. The local admin account initiates FV2, then AD users log in and we enable them for FV2. This workflow is now extinct. I'm creating a dummy account on the computer, then on enrollment a script runs using the sysadminctl commands to create my local account which prompts for gui authentication from my dummy account. This grants my local admin account a secure token and the ability to manage FV2. I can then delete the dummy account from the machine. I created another script to Self Service that assigns a secure token to a user and enables them to unlock FV2 utilizing some user input. I'm a very much a novice at bash, so my scripts are probably not the best, but with very little posted about secure tokens I figured I'd share and

Does anyone have a good way to monitor their JAMF Pro hosted environment? Some way to get alerted that a connection to the JSS is failing? This seems to be an ongoing issue for us lately (connection to the JSS is not available) and I was looking for a way to know about it before users start to complain.  Thanks,

Hi,I have a custom type access level for Jamf Pro and I would like to know how Can I access the personal Recovery key on a work station as the option is not available in the Inventory - > Disk encryption section. That option is available for our Jamf Admin and We are Trying to figure out if this is available for custom access for jamf. If it is possible, what access should our Jamf admin add on my profile?Thanks in advance guys!

I am trying to create a report for a security audit coming up. When looking at the filevault status on t2 computers its showing as not encrypted. However when you look at the computers it is showing filevault is enabled. From my understanding, computers with t2 chips are encrypted out of the box. Is there a way to include the t2 in a search or is there a way to make it report that it is encrypted?