I created 6 smart groups for devices missing specific software. I then created 6 Policies and set the scrope to the smart groups. These are all updating via Installomator script. We have an office in San Diego and Fort Mill, SC. I set the client side limitation to not install from 5am-8pm and checked the days I don't want the software to install hoping the deployments would kickoff after 8pm local time. Prior to that, all of my testing with client-side worked with individual devices. Is it possible, I had too many deployments set? It was 6 updates on 21 Mac's. I just did a test with just deploying to one smart group with client side configured and it went through.

New user - I'm not sure why this seems so obtuse/non-intuitive in all this searching.I'm trying to have a single text file be added to every Mac in a specific place( ~/.config). The file is not dependent on anything weird, it's simply a .JSON file.I tried doing this through composer but I am so confused. Do I have to make the file a DMG to drop it on all the computers or is there another way? Should I even be using Composer? I have tried asking others with them simply responding with vague, non-helpful responses that avoid the question. Can anyone help? Happy to expound upon anything else, but it's honestly as simple as that.

How are folks handling activation lock on ARM based macs with Monterey?I turn on Activation lock and find my mac.  It asks me "Enter your Mac password".  So, I enter my account password.  It works and I'm n ow activation locked with find my mac.I then boot the ARM computer into Options.I go into Disk Utility and I erase the Volume.Before the computer is activated, it finds my icloud information and tells me my icloud email address with the astericks (which I've removed from the attached screenshot).   It then wants me to enter my email Apple ID and password. But in this case, I'm testing that hey, I don't know this information.  Say the Mac has been handed back to the department and the person who turned this activation lock isn't available.So, I click Use Device Password.From there, I'm told to Enter the Password that was previously used to unlock this Mac.The only password it will take will be the initial password I entered earlier when setting it u

Hello, We are using Apple Managed ID's on our iPads and this is working great.  This gives us great control on how the device is used.  However, I'm not finding a way to allow users to modify the dock or even move icons around to different locations.   I tried creating a configuration profile without the dock settings configured, but this didn't change anything (I guess I was thinking that maybe I needed SOME kind of configuration profile to override the default behavior of locking everything down).  Is there really no way to allow users to have some level of configuration ability when using Managed Apple ID's on iPads?  Or am I missing something obvious?  Thanks

As far as I have been able to tell this has been a known issue since iBooks was released for iPad. What I am having an issue with is I have teachers creating iBooks in iBooks Author and releasing the books to students, these teachers want to update their iBooks as they make revisions.Unfortunately the iBooks app caches some or all parts of an iBook, so when attempting to deploy a new version the changes do not appear. I've been attempting to research this, but I haven't been able to find anything since iBooks Author made the move to .ibooks files from .epubPrevious solutions I have seen that I have been unable to get working are:Deleting and reinstalling the iBookChanging the title of the iBookChanging the metadata/css inside the ibook for title None of these fixes seem to work for me.I expect others will have seen this issue before, has anyone found a way to deal with this? Excerpt from an article I have read on the issue: http://www.pigsgourdsandwikis.com/2012/09/book-p

Hello, I would like to change computer host and localhost name to specific values after enrollment.I need:computer name to be  "name.surname"localhost name to be  "name-surname.local"host name to be "name-surname"With this script I managed to change computer to correct value but localhost name is not changing. Can somebody help me finding out where is a mistake please?#gets current logged in user getUser=$(ls -l /dev/console | awk '{ print $3 }') #gets named firstName=$(finger -s $getUser | head -2 | tail -n 1 | awk '{print tolower($2)}') lastName=$(finger -s $getUser | head -2 | tail -n 1 | awk '{print tolower($3)}') computerName=$firstName.$lastName hostName=$firstName"-"$lastName #set all the names in all the places scutil --set ComputerName "$computerName" scutil --set HostName "$hostName" scutil --set LocalHostName "$hostName" sudo jamf recon  

Hello JAMF/Mac Admins, We are having a tough time with Netskope deployment. There is a template.plist which is deployed to Managed Preferences and should read and populate user's email based on string "$EMAIL". This is failing to happen due to which the next steps for JAMFScript and Netskope installer fail as well. We are using Netskope Non AD joined mode that leverage the JAMFScript to run before Installer - NSClient is run. Any help would be highly appreciate. Template.plist looks like:<?xml version="1.0" encoding="UTF-8"?><!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"><plist version="1.0"><dict><key>email</key><string>$EMAIL</string></dict></plist>------ When this is deployed, it comes down with any string present which should be user's email address read from JAMF. ThanksPaul

Hello,I'm trying my first go with pushing apps to iOS managed devices that are enrolled in ABM.   The device shows up fine there, and I see the device managed properly in Jamf.   I'm trying to automatically install Jamf Self Service app to all mobile devices so users can install apps themselves after I make them available, and I followed the instructions here:https://docs.jamf.com/10.25.0/jamf-pro/administrator-guide/Jamf_Self_Service_for_iOS.htmlWhen I check the device install status, I'm seeing  the failed install with "The MDM request is invalid". It provides me no other details.  Feels like I"m missing a step or something.  Can anyone point me in the right directly?

Hey Nation, we try to setup jamf2snipe (https://marketplace.jamf.com/details/snipe-it/) for our Snipe-IT Instance and ran in some issues with it. When we doing a dry run in our testenviroment we alway get this Errormessage: When we tried to retreive a list of models, Snipe-IT responded with error status code:404 - b'<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"> <html><head> <title>404 Not Found</title> </head><body> <h1>Not Found</h1> <p>The requested URL /api/v1/models was not found on this server.</p> </body></html> ' Snipe models API endpoint failed. I have no clue about API's so may someone of you can help?

Hey folks,My org used to use Windows Defender AntiVirus on our macs (we trialled it for a short time but eventually moved to Jamf Protect instead). A System Extension configuration profile was required to deploy WDAV onto our devices. When we moved on from WDAV, we de-scoped the configuration profile from devices, but the network profile remains on our older devices.This hasn't been a problem until recently. We're now trialling Jamf Network Threat Protection, but the configuration profile to deploy NTP conflicts with the WDAV network profile/sysext. This has been confirmed by Jamf Support (conflicts with DNS settings), as well as proven on my own device - With the com.microsoft.wdav network profile enrolled, my device is not manageable/visible in Jamf NTP/Radar. Once I manually removed the wdav profile and re-pushed the Jamf NTP config profile to my device, it was now manageable/visible in the NTP portal. I now want to force-remove the com.microsoft.wdav profile from our devices,

I would like to disable the macOS Monterey "Tips" notifications (which display on first time logon) using a script. Anyone know the com.* name and/or location of the file? I have 200+ users who don't need the hassle of clicking thru the Tips (until exhausted) or manually disabling in System Preferences | Notifications. Thanks

I have been getting JAMF Pro deployed to some machines, many are via user initiated. Out of 20 of them we have one that I sent him the download link, installed it find, and on his machine it says managed by our company, and the profile is verified, but in the JAMF Pro portal it says unmanaged.  I had him reboot, reinstall, and still no dice. He is installing it from his home network so I dont think he would have ports closed off as he didnt even know what I was talking about when I asked if he had any port rules or any network ACLs. 

Is anyone deploying Xcode component through the 'Self Services' option with any success?or how to automate the "install additional component" without Admin i have try this... but no success , always asking admin authority #!/bin/bash if [[ -d /Applications/Xcode.app ]]; then echo "Xcode installed" /Applications/Xcode.app/Contents/Developer/usr/bin/xcodebuild -license accept /Applications/Xcode.app/Contents/Developer/usr/bin/xcodebuild -runFirstLaunch #This installs the Additional Components /usr/sbin/DevToolsSecurity -enable dseditgroup -o add everyone -t group _developer else echo "Xcode not installed" exit 1 fi

Hi All, We are finding some ISP's are setting Search Domains on their wifi and this is interfering with access to sites like gitlab.com Is there any way we can remove this? Looks like its greyed out and cannot remove.

I am very new to managing apple computer, or even using them for that matter. We are running 32 IMAC's on a windows domain. I am still learning how to use Casper and have re imaged from an external hard drive. Until i learn Casper better its what I know how to do. The problem is my computers that I have imaged have lost their Binding with the domain every 30 days. I have noticed that All of the IMACs have the same NetBIOS name and I cant get them to change. Does anyone know how to fix this or if it's even the cause of the problem?

Hey All,How are we?Just fishing for some info .. Has anyone come across a issues with macOS Monterey where a system with restart ( triggered via jamf or manually) . The user will auto at the FV login page and then prompted at OS user level but instead of login them into the mac .. it will just sit on the white loading bar and only load about 15% and sit there for ever...so far the only fix i have is a wipe / re-image but thats not scalable ... Has anyone see this before?ThanksRob

Hi, We have deployed on our managed computer a configuration profile in order to pre-configure their WiFi connexion, which is a hidden SSID, with WPA/WPA2 encryption. But it has happened many time that some of these computers stopped connecting to the said WiFi even though the profile was still on the computer. Forcing to manually set up the Wifi. Any clues ?Thanks in advance.

Hello everyone, I'm trying to connect Jamf school to google LDAP. I've finally made a successful connection to the google secure LDAP, however it's still can't pull any OU or group information. Authentication is working, but while I can see the students I can't see which school/OU they come from. Has anyone done this before successfully? I think it has to be the base DC= setting, but I've tried a bunch of different iterations and nothing appears to work. Any help would be much appreciated!

Hello, I am new to jamf and api I am trying to understand jamf api. I am trying to update the information under ios device - user and location - department. add or remove the informationhere is the basic code i wrote from piece mealing from different place but no luck curl -s -k -u "username:password" -X PUT https://technicalitpro2.jamfcloud.com/JSSResource/mobiledevices/id/3/subset/location    -H "content-type: application/xml"    -H "accept: application/xml"    -d "<mobiledevices><location><department>Students</department></location></mobiledevices>"  

Hi everyone,Does anyone know why sometimes the local admin account wouldn't be set up during the Setup Assistant (as defined in the PreStage Enrolment)? At least it's not visible as one of the local accounts in Jamf Pro (but it actually might be present, but didn't check with a user yet).

When I look at our Patch Management dashboard, MS OneDrive shows a curiously low "Latest Version" count.The current version according to JAMF is 22.111.0522, issued on 06/06/2022. However the new releases page at https://macadmins.software/ and MAU list the latest version as 22099.0508.0001 for the same date. Fix, please?

Is there a way to get Software Vendor info for different App's installed?All I can think of is writing an extension attribute that checks the vendor for a particular App. Is there somewhere that this info is already being collected?

Upgraded from Casper 9.62 to 9.65, but started experiencing trouble when running recon via terminal. Anyone else run into this? "Device Signature Error - A Valid device signature is required to perform the action.

Hi, I was searching but couldn't find a good answer for this.Patch management has the deferral option so we can push out the updates to specific scopes x days later. What does it use to determine the starting point of this? I updated a policy to the latest version of Office the other day and it should have pushed it out around 1AM but instead it was pushing it to a user around 6PM?

First launch of VLC tosses up a dialog box to Enable Metadata Retrieval: Apparently our FOSS buddies decided it is a good idea to hide this setting in a User level non standard preference locations (ala our buddies at Adobe) /Users/username/Library/Preferences/org.videolan.vlc/vlcrc. If user selects No, Thanks, this value is set in the file: # Allow metadata network access (boolean) #metadata-network-access=0 If the user slects Enable Metadata Retrieval, this value is set in the file: # Allow metadata network access (boolean) metadata-network-access=1 Is there a programatic way to check/confirm this setting in /Users/username/Library/Preferences/org.videolan.vlc/vlcrc to ensure it is set to #metadata-network-access=0? We can loop whatever command works, through all user directories and the User Template, unfortunately since defaults isn't used, haven't had luck finding the right command. To tie loose ends, since I didn't find any other VLC discussions... The other standard s