I am newbie to JAMF and its my first time using it to enroll MacOS devices into the environment. I wanted to take a couple of weeks to learn from the free JAMF 100 course and knock out the exam within that timeframe. Does this sound reasonable if I spend a couple of hours learning the material? I was curious if I could pass the exam strictly on the course material or its best to have hands on experience first. Thanks!

When we run brew install --cask i am getting this errorsudo: unknown user: brewsudo: error initializing audit plugin sudoers_auditError: Running Homebrew as root is extremely dangerous and no longer supported.As Homebrew does not drop privileges on installation you would be giving allbuild scripts full access to your system.

I am looking for a simple way to delete specific files from all users documents.  I would expect the following would work, but it does not seem to.  Am I missing something here? #!/bin/shrm -rf "/Users/*/Documents/Power Point Files/ppt1.potx"rm -rf "/Users/*/Documents/Power Point Files/ppt2.potx"

Looking to get some advice on how to deploy DUO device health via JAMF DEP. I added the package to pre-stage but when DEP completes it never launches the app or installs it. Anyone have any advice on how to deploy to new machines?

Enhance your Jamf Pro policies with six granular log out, restart or shut down optionsTested with macOS Big Sur, macOS Monterey and macOS Ventura (Beta 3)BackgroundThe built-in Jamf Pro Restart Options Policy Payload was meeting all of our use-cases, until our support representatives asked for a dismissible restart prompt.Continue reading …

Hey all, Hoping to get pointed in the right direction here since I can't seem to figure it out after reading through documentations and opening a help ticket.I am currently trying to get my Enrollment customization working with Okta. I have Okta set up in SSO and Azure AD is set up as my cloud identity provider and both seem to function properly. The issue is when using Enrollment customization it is not autofilling my user info on the computer record. I am trying to not have to manually assign a user to device if possible. Does anyone have any recommendations on what to try?Worth noting I have tested the fill last logged in user and that seemed to place the user ID in the username field but it didnt allow it to auto query Azure AD for the remaining info (email, Department, phone number, etc...)

Hello,  We have an issue where some users are signing into their personal onedrive on their macs. Does anyone know how i can restrict the emails that are able to sign into one drive or that there buisness accounts only 

Does anyone know how to disable Firefox from saving passwords?

In prepping for a new school year we're setting up new macs for staff and we've noticed that Nomad Login stops working after upgrading the OS from Big Sue To Monterey. It's still showing as an installed package and if we reinstall the package it works fine again. Has anyone else come across this, and more importantly how did you fix it so you didn't need to reinstall nomad login? 

Hello Jamf Nation!We are excited to announce that Jamf Pro 10.40 Beta 2 is available!  Jamf Pro 10.40 includes new features and enhancements such as: a new deployment status tab for App Installers, major improvements in Healthcare patient workflows, major Self Service for iOS improvements, and more. Join the Beta program to test out these new features and get a preview of what's to come in 10.40!How to join the beta: Please enroll in the Beta Program under Product Feedback at account.jamf.com. Once you’re enrolled you’ll receive an invitation to the Beta Forum in your Jamf ID email. Once you receive the invitation click on "Join this group Hub" to access the forum.   If you have any questions please email beta@jamf.com. As always, the beta program is operated under non-disclosure, so please do not share any information regarding your testing on any public forum, including the non-beta sections of Jamf Nation. Use the Jamf Nation beta discuss

Just an FYI - I see Mosyle introduced a new feature "Admin On-Demand".https://9to5mac.com/2022/01/31/mosyle-debuts-admin-on-demand-as-a-new-way-for-it-team-to-manage-local-admin-rights-on-macos/ This might be a compelling solution. Wonder in Jamf has a similar tool in the works?

I have scoured the forums and cannot find an exact process to removing an iPad that will no longer be used from Apple School Manager and JAMF Pro.  It appears that the release action in Apple School Manager and removal from JAMF Pro (via deleting at management tab after it's wiped) is inconsistent and doesn't seem to always work and the device does not release the used license in JAMF Pro.  Thank you, anyone, for your assistance.

Hello everyone! I am reaching out again. The community has always been helpful!  If possible I could use a little more helpError creating recipe override file/Users/macadmin/Library/AutoPkg/RecipeRepos/com.github.autopkg.jss•recipes/Google Drive/GoogleDrive.jss recipe or one of its parents is deprecated.Will not make a override.Use -Ignore-deprecation to make anoverride regardless of deprecationstatus. 

Hello, I have a question regarding the file sharing distribution point. If I put my file server on the local network as the main distribution point, will the cloud distribution take over if my local server is not reachable?

Dear all, I have a rather specific issue with the aggressive PPPC since macOS Catalina. Currently I'm testing on 11.3 (Beta). Since network homes are not possible anymore I have a more local approach running in our lab. However to allow at least a little user configuration I was planning on creating a LaunchAgent copying e.g. Safari Bookmarks and Applications plists to the network home mounted via SMB and sync them back on relogging. I'm pretty sure this will work fine, however I'm fighting with the aggressive PPPC now. If executing the script manually the system asks if "terminal" may access network volumes. Fine! But if executing the script via the launchagent I always get a permission denied. I red only that a workaround would be to create an App and put the script in there and then whitelist the app with a PPPC profile via JAMF. I already tried this with several solutions, Script Editor, Platypus, manually created and so on. I codesigned the App but I stil

No text available

Hey everyone, Before I get started, I just want to say that I am taking over our macOS environment as a primary Windows admin. With that said, I have pretty good knowledge about JAMF and the macOS ecosystem. Now that we have that cleared up, any help going forward, I truly appreciate it. Whenever I had to deploy software in the past, I would use the free Packages app from WhiteBox by installing my application as is, and then simply dragging the .app file from /Applications to the Packages icon in the dock. From there, Packages would create the .pkg file, and I upload that file via JAMF admin to create a policy in JAMF Pro. Pretty straightforward. We are getting ready to deploy MATLAB, and we've done the same thing for 2020 and 2021. However, for 2022, that process is not working. I have the full 12GB .dmg installer. I install MATLAB using their native GUI, enter in my FIK,  select all of the toolboxes, and then install it. The final .app file size is 22GB. I tr

This might be something simple that I am not seeing, I apologize for it if it is. We deploy the slack and zoom client installer policy to everyone upon enrollment which has been working just fine but when doing remote troubleshooting with employees via slack or zoom, we are having the individual go into their system preferences and checking the box within Accessibility and Screen Recording under security and privacy. Is there a way to enable these options automatically after the clients are installed? 

now a year into my Jamf pro experience (so still relatively newb) .. but one thing I have not been able to figure out is I have not been able to successfully use Jamf to pull down a cert for our wireless. Same configurations built from apple configurator work with a manual install, but when deploying the same from Jamf it does not pull down the cert. Originally was pulling directly from AD (so had to be on internal network via LAN for this to work) and now we are attempting a SCEP proxy connected to Jamf. In the original the config would install, just with out the proper cert being acquired, but the SCEP profile looks like its just stuck attempting to install. SCEP maybe a different issue as the server logs show this:  "[CEPChallengeConfiguration] - $MSSCEPCHALLENGE found for a challenge password but no event listeners returned a challenge. Setting to a blank string.2022-03-09 14:52:47,105 [ERROR] [ina-exec-48] [InstallProfile ] - Error getting SCEP challenge response from se

In our infrastructure every user has a picture saved in AD, which is then used for different purposes. Obviously it would be nice to be able to use this picture also as the user pic for the local account. The basic part of setting the picture is well documented here:https://scriptingosx.com/2018/10/changing-a-users-login-picture/ The thing where i struggle is the extraction of the user pic from AD via cli. Can someone point me in the correct direction or has someone already solved this / a similar problem?

I have a lot of unused computer groups that I would like to delete from our Jamf instance. I generated a list of their IDs and modified a script I used to delete devices to delete the groups en mass. However, I always receive a 400 Bad Request error when attempting to delete a computer group with an API request. I know that the URL is good because I get a response when sending a GET request. Here is the CURL request I am using: curl -fku $user:$password -H "Accept: text/xml" $server/JSSResource/computergroups/id/$i -X DELETEI also tried using the group name instead of the id with the same result.  

I have a supervised iPhone enrolled with a blueprint that has "Prevent Changes to Bluetooth" checked. Bluetooth was ON when settings were applied and I can see the Bluetooth option greyed out with the text "some restrictions are enforced by admin" in Settings > Bluetooth. This is the expected behavior but the issue is I can still turn on/off Bluetooth via the control center. Is there a way to restrict this?

Google released another update for Chrome. I've put together a REGEx string to match Chrome version 103.0.5060.114 or higher and is only 165 characters long. Fit's those 255 max character limits in the Smart groups and Advanced searches. In the criteria of a Smart group or Advanced computer search, select "Application Title". For the operator select "has" and for the value type in "Google Chrome". Add another search criteria and use the "Application Version" while selecting "does not match regex" for the operator and paste in the following string;(^103\\.0\\.5060\\.11[4-9]|^103\\.0\\.5060\\.(1[2-9]\\d|[2-9]\\d\\d)|^103\\.0\\.50(6[0-9]|[7-9]\\d)|^103\\.0\\.(5[1-9]\\d\\d|[6-9]\\d\\d\\d)|^103\\.[1-9]|^10[4-9]|^1[1-9]\\d|^[2-9]\\d\\d) without line returns. Since you'll want both of these criteria, make it a "and" behavior not an "or" and Voilà! The results should be Macs running an earlier version of Chrome.Hope it's helpful. 

This is just a curiosity post, I’m just wondering how people setup their computers after enrollment. What we do currently is enroll through a prestage and then login as our admin and run two Self Service policies that install everything that is needed. It runs fine but is a bit of a bottleneck. I’m curious what other people do to setup their machines.  Our policies do the following:Installs our filter utility agentSets the network/time zonePops up a computer rename scriptInstalls DyKnow (computer monitoring software)Installs ChromeThen the second policy:Bind the computer to our Active DirectoryInstalls the filter This seems a bit rudimentary but I’m still kind of new to this so hearing other peoples processes might help me make mine a little easier for our other techs. 

Hi AllIs anybody using Endpoint Protector in the macOS space for Data Loss Prevention? If so, are you using Jamf Connect / Directory Services?We're currently running a POC of the product, and have found we're unable to map the locally created macOS account onto the user in Azure AD, so therefor cant apply policy groups via Azure.Curious to know if anybody else is in the same boat and how you've overcome / worked around the issues.Many ThanksAndy