Hi everyone,I'm a quite new mac System admin. We would like to manage properly identity on Apple devices. Because bind mac to AD bring some hassles and some are out of our network (don't reach AD).So we're looking a product that provides identity from our hybrid environment (Active Directory + Azure Active Directory). Most of our environment is Microsoft but some VIP and departments ( Graphic Designer ) use Mac. We saw that one of last version of Jamf Connect can manage hybrid identity.I found some feedback but not enough with hybrid environment. What do you think about this product ? Do you know an alternative because it's a bit pricey 2$ / month / Device. Our environment:- Hybrid (Active Directory + Azure Active Directory)- Office 365- Adfs 3.0 will upgrade 5.0 soon (may be not possible with 3)- MFA Azure- Active directory authority for local resources (Printers, file servers, wifi,...)- Intune- Apple Business Manager (just few Macs)- Couple Macs bound to AD others are "Free"I a

Fairly new to Jamf Connect, but can someone explain in real life scenario's what the benefits are by using Passthrough Authentication with Jamf Connect?I'm reading the product documentation, but it won't land...

I'm hoping that someone can confirm what I'm seeing. We were hoping to set the safari homepage on our macs through Jamf Pro. But it appears that in Mojave (earlier?), Safari has been containerized so the plist that has the homepage is now under /users/*/library/containers/.... There doesn't appear to be anyway to modify the setting(not via script or configuration profile) unless you turn off SIP first. Is that correct? Or is there something I'm missing?

Doesn't work, never has. Change my mind.

MorningMinor detail but as I sit as batches of devices update I thought I'd explore this.On the "Remote Management" screen, it says "your organization" can automatically configure your computer. Where is the variable stored that displays here? I've look through so many setting groups I've lost count trying to find it. Thanks!Peter

Say I have a config profile for com.apple.loginwindow that enforces the value DisableFDEAutoLogin (which disables the automatic login option when using FileVault).If I had a completely separate config profile, also using com.apple.loginwindow, that enforces SleepDisabled (which disables the sleep buttton), will both of these values be enforced? Or does one profile override the other?  

Our client want to us to start using the US NIST GOV / macos_security / baseline / all rules.yaml in our environment.  Until recently I have never heard of YAML.How can I configure the .YAML file to work with JAMF Pro They have sent an example of what they wantAny help will be greatly appreciated 

Ipad gets resetstart the setup process.On the home screen I can see the self service portal start to install then it disappearsIf I open up settings, I can see it installed on the left side at the very bottom. Shows me what version is installedIf I open the device in Jamf Pro and look at the profiles, apps installed, and management command historyIt shows our profile as successful and it shows Jamf Self Service is installed, but it's not.verified the self service app and distribution -- scoped to all mobile devices, no exclusions, 1000 licenses, 508 in use.Here's the strange part. If I move the device to a different site with the exact same setup the app shows up; move the device back to the original site with the same config profile, the self service app disappears. any ideas?

I'm currently testing out a Jamf Now (Fundamentals) deployment for a couple of Macs we have. I haven't used Jamf before so not too sure how Jamf connect should work, but have a feeling mines not correct.I have setup the setting "Enable password sync with Jamf Connect" and done the setup in Azure for it. When a user first logs on it asks to type in both password (microsoft & then local password) so it could sync.Then we changed the password in Microsoft to see if it worked but on the macbook we have to login with the old local password and then in Jamf connect enter the email and the new microsoft password and it says they are out of sync and input the local password.I assume this should be a bit easier as its not exactly syncing the passwords currently?

Trialling Jamf Pro to manage a small number of iOS devices. We are setting up Jamf to work with Intune per setup guides. We have some support from Jamf but struggling to get a solution to this one. Currently waiting on a response so thought worth asking community.We see an issue with Device Registration where we do the "Register with Microsoft" link, we get notification to say "You are now registered with Microsoft" but then it just takes us back to Register with Microsoft link again. No error messages or logs we can find.We're using Edge on the device with iOS 15.4.1 (iPad). We do have some 365 Conditional Access policies in place but Jamf support have checked and believe they are not causing any issues.We have no Jamf experience and just evaluating at present but somewhat stuck getting test device added in.Any common causes of this?  

We want to install the LastPAss extension for Safari on our iMacs. First the LastPass app has to be installed on the iMac. Then, and this is the tricky part, the LastPass extension is available in Safari > Preferences > Extensions, but its unchecked by default. Is there a way to check the the LastPass extension in Safari with Jamf (plist, script)?

Our risk/vulnerability software kept flagging my Macs server with a low risk "SSH Weak Message Authentication Code Algorithms". I didn't see any Mac specific articles out there. Posting the "fix" that worked for my environment here.  By default macOS sshd includes the following "insecure" Message Authentication Code (MAC) algorithms for SSH:umac-64-etm@openssh.comhmac-sha1-etm@openssh.comumac-64@openssh.comhmac-sha1 The fix is to set /etc/ssh/sshd_config to use the secure MAC Algorithms. Appending to the end of the file worked in macOS 12 and 13. echo "MACS umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512" >> /etc/ssh/sshd_configMy Mac servers reboot nightly I did not need to worry about registering SSH/Remote Login.    Related Query/Commands:List all MAC address algorithms available in the local systemssh -Q mac The sshd config file has

Intro:Our organization uses Windows Server file shares (SMB) which are configured in Jamf Connect in a shares configuration profile. The shares are set to automount. Before implementing Jamf (Connect), users had to connect to the SMB shares with Finder CMD+K, typed the Server SMB path and authenticated with user and password of their local Active Directory Account. With Jamf Connect, this method is no longer used. Instead, Jamf Connect automatically mounts the SMB Shares using Kerberos authentication. All Macs are running macOS Monterey latest.Problem:When Macs are connected to SMB shares and lose network connectivity, either whenswitching from wired LAN on a docking station to Wifi or vice versaVPN disconnects (unexpected or willingly)the currently connected SMB shares *should* be disconnected, too.What happens instead is, shares somehow don't disconnect. Upon a connection to network/VPN is established again, Jamf Connect tries to mount these shares again, which results in the issue t

I'm not sure if this is the right place to ask, sorra if it breaks any subreddit rule.My company asked me to install Jamf mdm software to my laptop which was provided by the company. My boss said I could use that laptop for personal use but make sure to not do anything illegal.Now my question would be, what can the company see exactly in my laptop if I install it ?

If you apply the Software Update payload with what-ever options on / off as desired .. would you expect to see that in com.apple.softwareupdate.plist As I've applied this and the setting in the config profile is not reflected on the device plist I can of course defaults write the settings, but isn't that what the config profile should do? 

Hello everyone, I am accounting for lost/damaged/stolen devices with some extension attributes assigned to the device in inventory. Whilst I know that it's possible to populate a smart group with extension attribute criteria, does anyone know if it's possible to activate lost mode automatically from the smart group? Or would it have to be a bulk command to send the command to the members of the group? Many thanks!

Hey Team!I am trying to deploy an MDM for my company which only has about 60 ipads across the country, but with many more on the way.I am leaning towards JAMF now, as all I need to do is track, wipe, and push out Apple store apps. No 3rd party apps or anything fancy. We just use these Ipads with GoFormz to collect data in the field.Jamf now is $2 per iPad but the Threat Defense their sales team is trying to sell me is $4 per iPad.My question is how susceptible to viruses are iPads these days, because I'm pretty sure the risk is very low. No MacBooks, just iPads. No shared drive connections or VPNs on the iPads. We use MFA for our office 365 accounts. What's the risk of going without Threat Defense and just getting Jamf now for now?

Is there a specific format that the PO Date has to be in when submitting the CSV to MUT?Renaming devices and I've narrowed it down to that field causing an error. When I take that out the renaming is successful.

jamf Pro now makes available a section called "Mac Apps" with a huge catalogue of ready to use applications.This works really well - I can very quickly get new applications installed on machines.What I'd like to do is make some of the applications available via Self Service (not everyone needs the entire Adobe Creative Cloud suite) but I can't see how to do that. Am I just being really stupid or is it not possible to target Mac Apps for Self Service?

Does anyone here have experience with Check Point Endpoint Security on macOS? We are trying to deploy it on our macs but have some problems with it:1. We can't use kernel extensions since Jamf does not install them on M1 macs (or whatever the condition for that is)2. When running the uninstall script provided by Check Point, the user gets prompted to enter an admin password. Why does this happen? Shouldn't Jamf run scripts as admin? Would be nice if someone could share his experiences :-)

Hi to all,with catalina i used a python script to add favourite server under finder (command -k) now with monterey that has no python2 this script doesn't work. Here the script:#!/usr/bin/python """ Overwrites server favorites with servers. Run as root to update all users or as normal user to update just that user. """ import os import getpass import subprocess import uuid import Foundation favorites_path = "/Users/{user}/Library/Application Support/com.apple.sharedfilelist/com.apple.LSSharedFileList.FavoriteServers.sfl2" # Use a tuple: ("<name>", "<path>") to set a name for the favorite. # Otherwise just use a string and the path will be used as the name servers = (( "smb://server1"), "smb://server2","smb://server3","smb://server4" ) def get_users(): "Get users with a home directory in /Users" # get users from dscl dscl_users = subprocess.check_output(["/usr/bin/dscl", ".", "-list", "/Users"]).splitlines() # get home directories homedir_users =

We are pleased to announce we have a wealth of Jamf Teacher app updates for both macOS and iPadOS. Jamf Teacher has received a redesign user interface for both macOS and iPadOS that allows users to easily switch between sidebar sections and allows for notifications and status indicators to display on tabs. These navigation enhancements include;Settings, Messages, App Requests, Library, and Tests can now be accessed using the sidebarTeachers can switch between sidebar menu items without losing their progressJamf Pro now supports the navigation enhancementsImproved Traditional Chinese translationsIn addition to the navigation enhancements we have also added accessibility enhancements which include Voice Over, to take advantage of Apple’s built in screen reader to allow teachers to hear auditory descriptions of on-screen text and elements, plus Dynamic Type so Teachers can now choose the size of on-screen text.We haven’t stopped there. Teachers can now automatically create a Zoom mee

Greeting everyone,I am working on a custom jamf ios app. I don't know if it is okay to deploy to App Store or not. I am asking this because I want to see if anyone has already tried this or not?Thank you

Under contract with our cell carrier, we swap out the old iPhone with a new iPhone.  We keep the old iPhone and reuse those iPhones as a WiFi only device.  The issue we're running into is the old iPhone are still showing the phone number under the Network tab in Jamf Pro mobile devices.There are way to remove the phone number from the old iPhones in Network tab in Jamf Pro?

We've disabled all iCloud settings for all Macs.Restrictions > Functionality > All Allow ICloud are unchecked.On the Mac we're still seeing access to Photos.  How is Photos access disabled?