Cannot arrive at the desktop. After entering okta credentials and selecting MFA type (push), once I approve the notification, the Mac goes black full screen momentarily, then returns to the login prompt. Okta mobile app prompts that authentication was successful, however no local account creation or login.

Hi all,T2 laptop, staff member left and Activation lock was enabled. Contact user and he removed the device from his Find My/iCLoud.I am able to wipe and restore the device now, but it will not go back into DEP, either during setup or after setup with: sudo profiles renew -type enrollment.I have tried both With Prevent Activation lock checked and unchecked in my prestage. So now this one is enrolled, not in DEP, not supervised. in Jamf, record shows Activation Lock Not Enabled. Also, I have smart groups: 1 for Activation lock Enabled (thankfully only 8) and 1 for not enabled. When I send either option to either group, I get Command Failed to Send I am Jamf ProCloud 10.29.2

Hi Everyone, I feel bad making this post as its been hashed over quite a few times but I cant seem to get what was working, working again now. I am seeing an issue with freshly imaged laptops on 12.4 running the latest Teams version 1.5.00.17261 where the app does not seem to respect the allowed screen recording permission. We've had a pppc in place for some time now and to my knowledge its been working. I recreated the PPPC, with various combinations of settings, downloaded the all apps PPC from github and also had the same behavior. Teams prompts for permission, but when system prefs is viewed its already set. You can toggle it off and on, reopening the app but we are still seeing the prompt. Is there something that's recently changed I'm missing here? No change with restarting nor reinstalling teams.   Profile 1: Profile 2, with the same behavior as above. 

Has anyone got the Cisco Webex Meeting configuration profile working to allow users to enable screen sharing without admin access? I've tried the step in here but none worked for me.Jamf 10.30.3

Good Morning, I am trying to decrypt the ASM token so we can use the information inside the token for use with ASM's API for automation purposes. I have the public key, the token downloaded from ASM but it's encrypted. OpenSSL is looking for the private key. I tried using the CA Backup from the PKI Certificates page in Jamf Pro and extracted the private key but it's failing to decrypt the token downloaded from ASM. Has anyone else done this or have any other suggestions?  

Hey guys,I'm horrible at scripting and I was wondering if I could get some help setting the homepage on Firefox with a Configuration Profile. The XML comes back with no errors but it still doesn't seem to work. Do you see what I'm missing or doing wrong?Thanks!

We're testing out the patching for our Mac's. I created policies for a few of application updates and scheduled the apps using the client-side limitation and set them all for the same time. 2 out of the 3 installed and the 3rd one failed, so I'm curious if I need to stager the times, so each application has to time to install so the others don't interfere. The one that fails, worked after I resent it.

I'm trying to deploy a package via jamf cloud to install the Symantec Management Agent on machines. This is not SEP The file from the server downloads as a zip, with a .pkg and additional resources folder I understand these need to be put into a DMG in composer and then a script needs to run after to install. Does anyone have a walkthrough of this?

With all the issues that seem to be revolving around the printing eco-system these days, I thought I would ask if anyone has any insights on where the industry is heading in the near future. For years we had Windows print queues that worked just fine with either Mac or PC clients. We have Papercut which is a wonderful piece of software too. iOS has Airprint and, again, Papercut was able to rescue us with their Mobility Print server. Now, Print Nightmare almost killed SMB printing and CUPS is killing PPD and lpadmin for printer management in Linux and MacOS. Or at least they keep saying it will go away. We use lpadmin in scripts to deploy printers to MacOS. It worked, but now in MacOS 12, it doesn't work so well. PPDs don't get installed correctly and print jobs to the Windows servers seem to just hang and not go anywhere. Not to mention the vendors were slow getting MacOS 12 drivers out too. Where to go from here? Its seems CUPS wants us to all go driver-less and Wi

Hi there,Up until recently we were able to input company branding on the Management Notification for policy pop ups. Based on the process discussed here we would just change the icon for the application, then push it to all machines. However it seems that the application is reset after reboot and the company branding no longer remains consistently.Has anyone found a more up to date process for changing these icons?Thanks

Is it possible to have NOMAD Login to use e-mail address vs username for authentication. Currently our environment is Azure AD and we have users sign in via e-mail address. we would like to have that same experience in our mac environment

Hi I am deploying some mac minis using Jamf school,I am trying to disable some system preferences but it is not working,none of the system preferences get disabled, i have tried importing a mobile config file from Jamf pro and profile creator still not working the os version is 12.4any ideas

Hi All, We've packaged numerous applications which have a dependency on other packages. I'm just wondering how you might handle this easily? I could resort to scripting, but that adds another dimension of complexity. example: numerous applications are dependent upon the JRE or VirtualBox. At the moment I simply have these available as a package which is working for most people, but I'd like to streamline the installation of some applications that require these prerequisites to be installed. Thanks, James.

I am hoping to help my IT Department roll out JAMF in the next week or two (and for the users to be able to set up devices for themselves as much as possible).One enourmous hurdle for our users will be the fact Outlook Contact sync has be enabled manuallySettings (inside Outlook) > Office 365 > Save ContactsIs there any way that this can be scripted by JAMF to be in the 'on' position automatically?The iOS version on the devices will be 15.3.1 (at the very least).Regards,William  

I got a shiny MacBook Pro from my company and since I wanted to get a new private MacBook anyways I got permission for using it with a second macOS Partition.So its essentially:macOS Work, FileVault, JAMF Pro MDM profiles installed.macOS Private, FileVaultDo I need to worry about my personal data being accessed, even if FileVault is enabled? I don't know how deep these management profiles go.

The env here requires a proxy for outbound traffic. I found an issue that if a user has an @ symbol in their password - it errors that it can't resolve the hostname.Is there a way I can wrap the password in something to ensure the credentials @ hostname are passed correctly?If you attempt anything outbound (curl, etc) it gives 'cannot resolve proxy: pass@proxy.host.combecause the pass has an @  only the end of the password is recognized.the password, in this case, ends in: @ homea generic password item is created in the keychain to hold the password.The setup in the .zshrc file is as such: # CONSTANTSexport PROXY_USER=$USERexport PROXY_PASS=$(security find-generic-password -a $USER -s PROXY_PASSWORD -$export PROXY_HOST=inetgate.highmark.comexport PROXY_PORT=9119# TERMINAL VARIABLESexport https_proxy=http://$PROXY_USER:$PROXY_PASS@$PROXY_HOST:$PROXY_PORTexport http_proxy=$https_proxy# GIT/usr/bin/git config --global http.proxy $https_proxy#/bin/echo "P

I have a test MacBook Pro that I issued a Wipe Computer Command to. The MacBook now starts up with the lock symbol, but the 6-digit code does not work. The code is correct as up until yesterday i could see it in the device's management history, and took a screen-shot. The situation I am now in is that the MacBook restarts at a logon screen, indicating that the Wipe command has been received but not started yet. If I attempt to login, it restarts with the lock symbol. Attempts to boot into Recovery also result in the lock symbol. Has anyone else experienced this? I re-iterate that the 6-digit code is 100% correct.

Hi,Apologies for the new question, but searching through previous posts, I can't seem to find anything this specific.I need to come up with a way of scheduling a one off reboot of our Student Lab Mac's.We've some work planned that mean the Mac's will lose their network connection for a while, after which they will need to be rebooted to pickup a new IP address. Ahead of this happening I need to pre configure on the Mac some mechanism that presets them all to reboot at a specific time on the given day, as a one off.I have come across this Reboot Scheduler - Jamf Nation Community - 244528 where @sgiesbrecht suggests configuring a Jamf Policy and the relevant restart options, but I'm not sure how, if this might be a way that would work, I could get this deployed to the Mac's and it sits ready and waiting for the specific day/time.Any advice would be most welcome and gratefully received. Thanks.

We have a couple of users where their logon isn't working when they're attempting to enroll their devices. We have it configured where once the user selects their wifi/lan connection, it'll prompt for their email and password and will continue and then prompt for their azure logon info. They can't get past the initial logon. They're setup like everybody else and we've actually reset the password for one of them I even typed it in, but it take it. For testing, we enrolled them with a different account just to make sure the Mac was good. Has anybody come across this before? Thanks in advance

We are switching from managing iPads through Jamf Pro to Jamf School, and I was wondering if there'd be a way to automate the re-enrollment without wiping and re-enrolling through DEP?I'd definitely want it as a supervised enrollment, but not the end of the world to have to just push out a wipe and re-enroll with DEP :)

Inherited a fleet of iOS devices that didn't have "Prevent Unenrollment" checked in the pre-stage enrollment. Have several hundred devices that have the ability to remove the MDM Profile. Is there a way to create a configuration profile to block users from having the ability to remove the MDM? I'm not seeing anything in the Configuration Profile settings to do that. Don't want to have to manually re-enroll the entire fleet. 

Hi, I came across this link JAMF 100 Lesson 16: Introduction to Scripting"https://docs.jamf.com/education-services/jamf-100-course/4.1/Lesson_16__Introduction_to_Scripting.html"I follow the video and it show it show Resource > Script and he downloaded some script from the Jamfnation. but I cannot find it in the script tab to download any script. I wonder where it moved??? or is it no longer existed?where can I download the list of script ?thank

Hi I am deploying some mac minis using Jamf school,I am trying to disable some system preferences but it is not working,none of the system preferences get disabled, i have tried importing a mobile config file from Jamf pro and profile creator still not working the os version is 12.4any ideas

Im trying to create a script to add to policy to do a mass deletion of UIE admins left on computers but to leave the standard account and jamf installed admin accounts, put together this scrip but it doesnt work, could someone please take a look and see where im going wrong. #!/bin/bash adminUsers=( $(dscacheutil -q group -a name admin  | awk '/users:/ { $1=""; print $0 }' ) )users=( $( dscl . ls /Users | grep -v '_' | grep -v 'root' | grep -v 'daemon' | grep -v 'nobody' | grep -v 'padmin' | grep -v 'aadmin'| grep -v '_padmin' | grep -v '@pcompany.com') ) for i in "${adminUsers[@]}"; dofor j in "${users[@]}"; doif [[ $i == $j ]]; then # delete user/usr/bin/dscl . delete /Users/"$a" > /dev/null 2>&1 # delete home folder/bin/rm -rf /Users/"$a"continue echo "Users accounts removed!"exit 0fidonedone 

Hello, I have already set up Azure SSO for Jamf Pro and I'm trying to configuring Enrollment Customization -> Azure SSO with Jamf Connect Logic. The reason why I would choose this option is because I like the way the users are able to sign in just once for the whole enrollment process. Provided that I used the option "Enable Jamf Pro to pass user information to Jamf Connect Allow Jamf Pro to pass the Account Name and the Account Full Name to Jamf Connect" . When I’m using this option, I haven’t user information in jamf pro or to handle my permissions for the local admin with my specific groups via jamf connect login plist file. (like if you use the other way jamf connect login with Enrollment Customization -> Azure LDAP) Little bit more background about my configuration. I already tested the way just with LDAP and it works fine but there I've the problem the users have two different login windows. Firstly for LDAP authentication to enroll the device and secondly to sign in w