Hello everyone, I am fairly new to Jamf so I hope you can point me in the right direction. We currently have JSS setup as an SSO app in Okta for our IT admins to access. We do not however have Jamf Connect set up within our Jamf Pro environment from what I can tell by going to settings > Jamf Applications > Jamf connect ("Cloud Services Connection Required").  We would love to integrate Okta further with Jamf to perform things such as: changing computer name, adding onto the department and building fields, location to users, creating static groups based on these fields and so on. So my question to you is, could you link me some documents on how to correctly integrate Okta with Jamf . From what I have been reading on some of the forums, you must use Jamf connect to do so but I also saw a youtube video where Okta workflow has been used to automate processes. What are your recommendations on this and how is yours setup?

We're beginning to rollout ZScaler in our environment with Strict Enforcement enabled.  I'm curious how others have integrated that with your provisioning process?  If we deploy Zscaler with SE enabled, then it locks down the network connectivity and the software loads don't complete until a user signs into ZScaler.  Any recommendations?  I was thinking just maintaining a 2nd install pkg that doesn't incl strict enforcement, but then we're relying on the deployment team and/or user to 'remember' to enable it. Thanks! 

I found where to change the timezone to EST, under my preferences, but if I change it will it change it for the server or just under my account? Trying to deploy 3rd party updates and want to use server-side limitations and it would easier if it was EST.

Hi,I'm looking for the best process in retiring a Mac device. For example we get a four to five year old computer or iOS device in ASM and Jamf that will be donated or given to a retiree (I'm in Higher Ed). What is the process that folks use to accomplish this? Is there a way to bulk remove devices from ASM, Jamf, DEP, etc...?

Hi,Curious for recommendations for our fleet of ~50 Mac devices.We're currently using Jamf Now which is great for enforcing basic security policies, but we are staring to outgrow it. Specifically in terms of what we are looking for:Support for Apple VPP. We are using that now via. Jamf, I noticed Fleetsmith surprisingly does not support this - this is probably a dealbreaker unless there are workarounds?Better security features, including ability to automate/enforce OS and software updates, logging/alerting on security events (authentication etc.). We are already doing malware detection so that is not necessary.Ability to deploy custom packages, scripts & resources (fonts come to mind here) as necessary.Reporting/Alerting/Automation - we don't have an IT team, I'd love a simplified view of which machines are in compliance and which need follow-ups, in addition to anything else which makes administration easier. Any integration with email/slack for messaging users would be a positive

HI All,We are moving across from Lightspeed next year and am wondering what would be the best setup for a 1-2-1 iPad deployment for staff and students on JAMF.With regards to our current Lightspeed setup every summer we would pull our student and staff details and classes from our SIS and spent some time formatting csv files before importing them into Apple School Manager. Then we would sync lightspeed to ASM to pull the classes across. This isn't ideal as when staff and students leave/arrive they would have to be created manually, and their class information wouldn't be created. We also couldn't manage to pull second/third teachers from our SIS, so they would have to be added manually. We would put restrictions on the iPads via year group, where we would block the App store and certain other apps.Ideally we would like to get our user accounts from either Google Workspace, or our AD accounts. With new users and leavers automatically created or deleted. I've noticed that JAMF can sync b

I have a teacher retiring and they want to take the MAID data from their school iPad with them. They bought a new iPad, they backed up the school iPad to their MAID, we logged in with the MAID, restored the MAID backup to the new iPad. I was going to have them logout of the MAID on the new iPad, login with their personal AppleID and do a backup. When they were going to logout with the MAID, it did not ask about leaving a copies of data on the iPad, but said it would remove the data, but it would be available in iCloud. I would have sworn I've been asked to select what data I wanted to keep on an iPad, with the green switches, when logging out with a MAID. Normally, I don't want to retain the data, so never selected the switches. Maybe I'm going about this wrong? Any suggestions migrate and keep the MAID data on the new iPad, and start using only the personal AppleID?

We are using PaperCut to manage some printers. In short, it takes the print job from the computer, and passes it off to any printer that the user swipes their badge. You set up ONE printer on the Mac and it will let you print to any of the printers in the Building/Company.We have a building where they have printers of different makes (HP / Canon / Konica Minolta / Whatever). That requires the one printer setup to use the "Generic Postscript Driver" that is included in the Mac OS, rather than a printer/company specific driver. The idea being the generic driver is the lowest common denominator and should work across all devices.JAMF shows the way to add a printer is to set it up on a Mac like you normally would for a user, then import it into JAMF with JAMF Admin. Then create a policy to deploy that printer plus do an install of the driver for the printer and scope it out as normal.I did that - however there is no "Generic Postscript Driver" install .pkg to add to the policy. I figured i

Hi Everyone,Bit of a niche question here.  We are currently using DEPNotify to pre install applications and settings to Mac's which are company owned, as well as improve the end user onboarding experience. We currently also use Jamf Connect which gets the user to sign in using their AzureAD creds and sync a local password to the Mac.  Directly after that, DEPNotify kicks in and begins installing software, plists and configs.  The user is not prompted, to setup their Touch ID, or their iCloud account. Is there a way of getting DEPNotify to invoke this from Setup Assistant?  Or maybe doing a partial Setup Assistant with certain screens like the Touch ID, iCloud Setup, Apple Pay etc?  

HiInside ABM / ASM theres a tickbox called "Allow this MDM Server to release devices."With the setting turned on where / how does one trigger this release via jamf?note: not trying to do mass releases, am aware dumping csv contents into ABM/ASM search works really well for that :) Cheers

I have a bunch of apps for iPads that are deployed to devices in a specific site but the apps don't live in that site, they are top level. If I attempt to move the apps over to the designated site, they lose their licenses, likely because the purchasing account is only associated with full jamf pro. What would I need to do to have one purchasing account to purchase app licenses but make them available in a separate app?

.

Hello all,I currently have a support call open with JAMF about this and thought I'd put the feelers out to see if anyone else has encountered this problem.Essentially, after a period of time, part of our iMac fleet started falling out of touch with the JSS. I noticed that 'Inventory update' and the 'JAMF recon' commands were failing with an 'unknown error'. Further inspection of affected devices show that there's been some recursive duplication of 'services' and the device breaks connection with the server.To give you an idea, normally a device has around 300-400 services listed. I have devices with between 15000-20000 at their last point of communication.Curiously, running 'launchctl list' on affected device doesn't show the large list found on the JSS (maybe this isn't related). I haven't been able to catch a device as it's spiralling out of control.Anyone encountered this issue before?So far I've only witnessed it on Big Sur 11.4.0 - 11.6.1.Currently have a metric butt-tonne of uniq

Hi all,I have a need for a script that forces Macs to restart after 10 minutes of inactivity. There would need to be a warning that pops up as well, say after 8 minutes of inactivity to give a user a heads up that a restart is coming. Anyone know of such a script or way to provide such a feature that is already in existence?Thanks!

Hello,I am looking for solution to make Teams default chat client in Outlook. Can not ping it anywhere in Teams or Outlook settings. Wonder if there are proper plist file, key and value, and if possible to make config profile.Thanks!  

Hi all,I'm new to Jamf and want to make sure this is normal behavior.Every day and sometimes even more at the login to jamfcloud I get the Single Sign-On Error message.And I have to clear the history to get in.The sso is defined in azure and this behavior occurs only in jamf and not in any other application defined in azure and uses sso.And it also happens to those who go to jamfcloud.com/enroll.

Background: From what I can tell Jamf Cloud has two JSS web apps behind a load balancer. This is where the issue I'm about to describe lies. I'll spare you all the story of how my org has been through two different Jamf Cloud instances, and three terminations and reactivations of those instances. I've encountered this a few times now with Jamf Cloud where a new instance is created, the setup assistant completed, the GUI works fine but API calls fail hard. What I'm actually doing is I've a pre built JSS config stored as .xml files. I'm using my JSS Config in a Box project to migrate from a known good server to those .xml files then to upload to a blank JSS server. Instead what you actually get is this error: Processing ID list for sites -:1: parser error : Start tag expected, '<' not found [{"healthCode":2,"httpCode":503,"description":"SetupAssistant"}] ^ Now that's clearly an error that one of

Hello AllI successfully deployed the CrowdStrike with this instruction; however, the user has to manually allow the Full Disk Access in the Security & Privacy.https://supportportal.crowdstrike.com/s/article/ka16T000000wwxVQAQDoes anybody know how to do it or can lead me to the instruction?  I have read several articles and got confused.ThanksNam

I have been erasing and re installing several Labs of Macs and I have run into a issue with it.The normal process would be to erase the Mac and reinstall Monterey. On first boot you get a few windows pop up for setting up services, then you get the Remote management one, on which I hit continue. The Mac will then find our Jamf server and connect ot it and download the configurations and enrol its self with the server. Then it will continue with its enrollment policies and so on.However, and this is really random, sometimes it appears to get to the end of the Remote Management section and then simply shuts down. The Mac appears in JAMF with a name starting with DEP-. But as far as I can tell it is not fully enrolled because I cant send policies, or use Remote to SSH in to it. The Jamf Admin account is set up on it as per the Pre-Stage set up.The only "Fix" I have found is to erase it and start again. Sometimes this will work and the Mac will complete, sometimes I have to repeat this aga

 Hello to all ;)I hope, someone can help me to find a solution for my question:We use an app, based on Java®. There are some settings for this app configured at ~/Library/Preferences/com.apple.java.util.prefs.plist.Now, we have to modify some settings. To do this, I wrote a small script, that works very well. The file is modified and stored with the new entries. BUT: If I start the app, the file will be reset to the old values.I have no idea, where the "old version" comes from. I guess, that there is a backup version somewhere, maybe in a cache and a system process restores the original version of the plist.Does anyone have an idea, how I could fix this?

Hey all,New to Jamf started helping out at work and I have run into an issue. We have an app for iPad that i have scoped to a static group. This app can be finicky and needs to be uninstalled and reinstalled fairly often.I am trying to set it up that the users can delete it themselves. I have made the app itself deletable in the app options, and also allowed apps to be deleted by users in the profile.The problem I am having is that when they go to delete the app either by holding their finger on the screen or by going into settings the option to delete is not there.Any ideas on what I could be missing? We are running JAMF Pro and ABM.

We have about 15 computers currently in JAMF Pro, we added JAMF Protect and set up a policy to push it out to the endpoints. That was a few days ago and pretty quickly 7 machines showed up in the JAMF protect portal.... but now a few days later its still just those 7, the others are not showing up. I looked at the logs in JAMF Pro and 14 out of the 15 show completed, and just one shows pending. Not sure where to go next as far as testing this and getting the others to show up. 

Greetings,  Below is a script I have been using with success on older versions of macOS however, it stopped working on monetary.  The script pulls the current username from "ls -l /dev/console | cut -d " " -f 4" and automatically sets the ComputerName, HostName, and LocalHostName as the current username.  Any thoughts on how to get this working again on this version of MacOS? Thanks, ~ B ##### Script  #!/bin/shusername=`ls -l /dev/console | cut -d " " -f 4`scutil --set ComputerName "$4""$username"scutil --set HostName "$4""$username".<domain>scutil --set LocalHostName "$4""$username"jamf recon###########  Script exit code: 2Script result: /Library/Application Support/JAMF/tmp/network name auto: line 8: syntax error near unexpected token `newline'/Library/Application Support/JAMF/tmp/network name auto: line 8: `scutil --set HostName "$4""$username".<domain>'Error running script: return code was 2.

Guten Tag, folgende IPAD-Apps werden von JAMF-School bei der Synchronisierung mit dem Apple School Manager nicht abgerufen:Collabora Office https://apps.apple.com/de/app/collabora-office/id1440482071?platform=ipadGeogebra Rechner Suite https://apps.apple.com/de/app/geogebra-rechner-suite/id1504416652?platform=ipadMit anderen MDMs klappt es fehlerfrei.Wie kann ich diese Apps trotzdem installieren?

A question was asked of me recently and I didn't have an answer so I pose the question here:Can we manage fonts via version numbers using JamfPro?To clarify: Our graphic designers make numerous in-house fonts and they do update them from time to time. If we installed v1.0 of a font via Self Service or Config Profile, could we have smart groups to scope v2.0 of that font installation?  I see that jamf DOES display a column for font versions, 100% of them say "n/a". We are collecting font info in the inventory, but none of them display versions. I have verified by random selections that OS, 3rd party, and in-house fonts DO have versions in the Get Info window.  Is this a function that's broken in JamfPro?