How do I tell which policies and configuration profiles are relevant and okay?  There are 8-9 different polices for Nomad in  my environment left by previous admins and I cant decipher them to figure out which ones are safe, or which ones are causing problems.  I want to get rid of Nomad for Jamf Connect, but I can't even tell if it safe! also, when I push out Mac OS upgrades and updates, the nomad window goes away and then users can't sign into their machines!  HELP!

Hey there, we are looking to get more aggressive about installing OS updates.  I was curious to hear any feedback on what method might be better:  Nudge or Apple MDM commands.  Environment is around ~8000 Macs, most of which are DEP enrolled and should have bootstrap tokens.  Historically MDM commands have been pretty hit or miss in terms of reliability.  Any thoughts?  Thanks!

We have Yubikeys paired keys with MacOS. I have to export Yubikey Cert infos to shared smb.Solution: I have a Powershell script to deploy on admin and non admin users.Requirements:  Brew /bin/bash -c "$(curl -fsSL https://raw.githubusercontent.com/Homebrew/install/HEAD/install.sh)"  Powershell  brew install --cask powershell brew install ykmanpws script.ps1These commands are working just fine locally. Am not able to write these commands using a script  to be deployed as Jamf Policy. Any idea?

We are running a network build and the policies start to install correctly. Then all of a sudden the policies will only execute without verifying or installing and then just scrolls through the policies until it then all of a sudden it starts to Execute, Verify and Install policies again.To get it to work once I see the policies are just Executing I open terminal and kill the Jamf process. killall jamf, then jamf manage then jamf flushpolicyhistory then jamf policy and everything installs correctly.Has anyone else seen this behavior?

Hi All,We are getting flagged by Okta for devices exceeding the rate limit. over 60 per min coming from Jamf. We are having trouble tracking down where this is coming from or why its happening. Does anyone else have this issue or know anything about it?

Hi,The below script measures uptime in days.The result of the script looks like this in Jamf (for a Mac that been up between 5 and 6 days)Script result: <result>5</result>I need to amend the script  so if the Script Result is more than 21  it triggers a jamf policy using events(jamf policy -event eventname).but I don't know how to write that script. Any help would be appreciated. Thanks.#!/bin/shdayCount=$( uptime | awk -F "(up | days)" '{ print $2 }' )if ! [ "$dayCount" -eq "$dayCount" ] 2> /dev/null ; thendayCount="0"fiecho "<result>$dayCount</result>"exit 0

Is there a way to set up a notification for a device in lost mode so when something changes/updates it will send an email that its been active.  We currently have a few devices "missing" and would like some way to find out if it gets on a network, gets a push update, anything really, instead of having to manually check each device in Jamf or wait for it to show up at a pawn shop.  Just looking for a way to be a bit more proactive about it but also not having to have someone constantly check a list of devices.

Hi everyone, Has anyone had success with using the Powerbi Connector?  I've managed to pull all data in, created a couple of small dashboards, but it never seems to refresh.  Even a manual or scheduled refresh ends up timing out after a few hours.I've also shrunk the data set to one table, and removed some of the unwanted columns.Any thoughts or suggestions would be grateful received! 

Hi folks,I needed a regex for the devices that are supported by iOS/iPadOS/tvOS 15 and couldn't find one. Therefore I built a regex myself and want to share it with you. If you find errors or improvements please let me know.^iPhone(1[0-5]|8|9)|iPad(1[0-5]|[5-9])|AppleTV([5-9]) 

Hi All,I am having hard time finding a solution to something that should be easy thing to do.More details: I am working on a script that will change the status of a computer that is inactive longer then X days. I am using smart group for the filter and policy to deploy it.The problem is to run a policy you need a trigger from the computer which is impossible given that the script and policy is for inactive computers to run and it will do the changes from the Jamf server side nothing on the local machine.Is there a way how I can do this? 

Howdy!I'm following the wizard to update my apple push certificate. I generate the CSR in JAMF, log into the apple certificate management portal, and upload the CSR. Then I get the error:You are not a member of the administrator group. Exception from DSAny idea how to resolve that?

Hi,Having trouble getting the users from Microsoft Azure AD to reflect on Apple School Manager. I have read through and followed all the instructions on Apple's website related to syncing users from Microsoft Azure AD. We are not getting any error messages but that everything shows that is successful/enabled despite no users in ASM. Anyone have a similar issue?

Hello, Is there a way to hide or remove Siri-Suggestions?  Somehow it is showing a lot of apps that are disabled on the iPad..And i disabled Notes, but i cant find a way to disable QuickNotes. Hope someone has an idea.iPad is running on iOS 15.6 Greetings.

I'd like to set a Configuration Profile or policy on my Macs to grey out or hide the Sleep on the Apple Menu. I've tried to disable it in a config profile with no luck. Is there a way to set this? it is for Mojave or Catalina. Thank you

Has anyone figured out how to use Erase All Content and Settings for computers running Monterey yet? Did they implement this feature yet? We have been wanting to test this on our computers running the beta, and now that the release is less than a week away and 10.33 just came out, we figured it would be in there, but all I'm seeing is the old Wipe Computer button requiring a six-digit code.

Does anyone have tips on how to roll out a simple .workflow file using Jamf Pro? I have a pretty simple Automator .workflow file I would like to deploy, but am not clear how to do this.I read this post:https://community.jamf.com/t5/jamf-pro/deploy-automator-workflow-file/m-p/147186#M136236...but it doesn't seem to have any answers except for this bit that is pretty old from @mm2270:Along with the above steps, you'd also of course need to deploy the .workflow file into the user's /Library/Services/ directory.If I recall when I had done this, I think a service or application needs to be restarted in order for the Finder to recognize the newly installed service and shortcut. I think actually its the Finder itself that needs the restart, but I'd need to go back and look again.

Background: I am trying to setup an almost zero touch enrollment workflow for our environment. Using the typical Apple Business Manager/Automated Device Enrollment, PreStage Enrollment, and Jamf Connect method. Issue: After the remote management triggers, we progress through the SSO of Enrollment Customization, then the configuration profiles are installed, and I progress through the macOS setup screens, the next thing is the local login screen of Jamf Connect. The SSO/AD account is not created. I am able to login to the device using the pre-configured Admin account we setup during the Pre-Stage settings, but nothing else.I have checked the Users & Groups for what accounts are created and only the admin profile is shown. I have a feeling that our Enrollment Customization SSO pane settings for Identity Provider Attribute Mappings might be incorrect, but I am not sure what they should be. (Attached below is a screenshot of the current settings). I also ha

I have a problem with Self Service policies scoped to all computers, but limited to certain LDAP groups / users, with no other triggers except the Custom trigger. Self Service is enabled for these policies. When I initiate a policy via Self Service, the little window displays "Gathering Information..." for a few seconds, then the progress bar rapidly fills up and the message disappears. The policy says it "Succeeded," but nothing actually happened. In /var/log/jamf.log, it says "Checking for policy ID 12345..." and nothing else. So I start debugging on the command line: If I run jamf policy -event awesomeapp then it says "No policies were found for the "awesomeapp" trigger." (Update: thank you @PeterClarke for the correction. This is my m

Seeing an issue when clients with ADCS generated certs update to 12.4 or 12.5, their wifi connection breaks, prompting them to select a certificate. Even if they select the correct cert it doesn't connect to the wireless. The only fix is to unscope and rescope them into the configuration policy. Anyone out there running into this?

I'm trying to script a way to disable the Automatic Run Of Safe Files In Safari for a CIS Benchmark across our deployment. While we have a few versions of the OS in the wild, I'm mostly focused on Catalina. I tried the following, but it doesn't seem to change the preference. defaults write com.apple.Safari AutoOpenSafeDownloads -boolean false

i want to enable an alternate language keyboard on my ipad. if you know please hlep me

Hello friends: One of our clients (a K-12) is asking for some of their iPads to have a second, foreign language keyboard. I know how to do this manually in Settings > General > Keyboard > Keyboards, but I can’t figure out how to add a second keyboard through Jamf Configuration Profile payloads. Does anyone have any thoughts about pushing out an additional keyboard?

Looking for some insight on how to deploy a config profile that restricts AirDrop to Contacts Only. Any help is greatly appreciated!

Hi all - I'm looking for clarification on how the macOS Software update deferments work in relation to the Jamf software update MDM commands.Jamf states that “macOS can still be updated via an MDM command even if updates are deferred.” See Not clear on what this actually means. (See https://shrtm.nu/GQCu) Can someone add insight to this simple example scenario:-Let’s pretend a Mac has a deferment for the new macOS 12.5 minor update (deferred for 30 days in this example).-The Mac in question is currently running 12.3.-The Mac can see that 12.4 is available in software update (its been available for more than 30 days) but can’t see 12.5 yet (only been available for a week).Q: Given this scenario above, If I locate the example Mac in my JSS and issue the ‘download and install software updates’ command via MDM, what OS version will the Mac install? 12.4 (not deferre

Hello, We just setup Jamf Connect on Friday. I pushed it out to one of my test machines and I cannot get it to merge with my local account. It pulls up the Azure Microsoft login page, I type in my email address, then it takes me to our Okta MFA page and I sign in there, the push is sent out and I tell Okta that it is me. Then it looks like it is going to log me in, but it doesn't. The next screen I get is to reenter my cloud password  to setup my new local account. I have tried every password for my iCloud, my AAD password, and my local Mac account password. Nothing will let me in. I have reached out to Jamf Support, but I am starting my Jamf 200 course on Monday and would like to have my MacBook working by then. Any suggestions or ideas on how to get passed that screen would be helpful.  Note: Yes I have typed my password in correctly and my account is not locked in AD or AAD.  Thanks!