A question was asked of me recently and I didn't have an answer so I pose the question here:Can we manage fonts via version numbers using JamfPro?To clarify: Our graphic designers make numerous in-house fonts and they do update them from time to time. If we installed v1.0 of a font via Self Service or Config Profile, could we have smart groups to scope v2.0 of that font installation?  I see that jamf DOES display a column for font versions, 100% of them say "n/a". We are collecting font info in the inventory, but none of them display versions. I have verified by random selections that OS, 3rd party, and in-house fonts DO have versions in the Get Info window.  Is this a function that's broken in JamfPro?

Hi All, I am trying to build a dmg package using Jamf Composer 10.36 on an Apple M1 Silicon device with a normal snapshot. The macOS version is Monterey 12.2.1. Snapshot B has the correct changes, however when I click "Build dmg package" the application crashes.Is anyone else experiencing this issue?

I'm running into issues deploying some (google chrome) packages from the Jamf App Catalog (https://community.jamf.com/t5/jamf-pro/jamf-app-catalog-mac-apps-not-installing/td-p/268719)As a fallback after nothing worked I decided to deploy with a package deployment but I left the Application Deployment in as well hoping it will overwrite the package eventually so I don't have to deal with updates. After a week, for one of the users the package appeared deleted (? in docker and on open it returns "application is not supported on this mac"). I could not find any logs on deletion, showed up as installed in inventory. After another manual deployment of package it worked again (with the state retained) Any idea what could be causing this?  

Hallo everyoneI have a launchagent which works perfectly on macOS Big Sur but not on macOS Monterey. This Launchagent should trigger a script  every 10 sec. Very strange. Tried everything but still no luck :-(Here is the launchagent:<?xml version="1.0" encoding="UTF-8"?><!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"><plist version="1.0"><dict><key>Label</key><string>com.company.kerberos</string><key>ProgramArguments</key><array><string>/bin/bash</string><string>/Library/Application Support/company/Tools/RefreshKerborosTicket.sh</string></array><key>WatchPaths</key><array><string>/etc/resolv.conf</string><string>/var/run/resolv.conf</string><string>/private/var/run/resolv.conf</string></array><key>StandardOutPath</key><string>/var/log/kerborostgt.log</st

Hi, I have problem with Installomator as the application did not install to the computer instead it just mounted itself. Here is the details of the error if anyone can help me. Really appreciate it. Script result: 2022-04-26 11:23:44 : REQ : : shifting arguments for Jamf2022-04-26 11:23:44 : REQ : anydesk : ################## Start Installomator v. 9.1, date 2022-03-18 2022-04-26 11:23:44 : INFO : anydesk : ################## Version: 9.1 2022-04-26 11:23:45 : INFO : anydesk : ################## Date: 2022-03-18 2022-04-26 11:23:45 : INFO : anydesk : ################## anydesk 2022-04-26 11:23:45 : INFO : anydesk : BLOCKING_PROCESS_ACTION=prompt_user 2022-04-26 11:23:45 : INFO : anydesk : NOTIFY=silent 2022-04-26 11:23:45 : INFO : anydesk : LOGGING=INFO 2022-04-26 11:23:45 : INFO : anydesk : LOGO=/System/Applications/App Store.app/Contents/Resources/AppIcon.icns 2022-04-26 11:23:45 : INFO : anydesk : Label type: dmg 2022-04-26 11:23:45 : INFO : anydesk : archiveName: AnyDesk.dmg 2

Hello, I have 2 questions regarding JAMF Connect Unlock. Does the iOS device running the Unlock App count against your licensed device count for Jamf Connect?Is there a way with JAMF Pro to allow the Jamf Connect pairing with a standard account? I've been unable to resolve how to do this, and would like to know if its possible. I receive this prompt and am unable to use the app unless my account is a local administrator. Thanks for any help!

I followed the directions athttp://www.jamfsoftware.com/kb/article.php?id=059 to create a hidden adminaccount for use with the JSS. It worked great, but I also want to be ableto set that account as the only account with access to Remote Login andRemote Management in the Sharing preference pane. The Remote Login servicecan see the hidden account, but the Remote Management service cannot. Itonly shows the (non-hidden) local accounts on the machine. Is there any way around this? Can I script it in Terminal? Tatian Tatian GreenleafAssociate Director of TechnologySaint Mark's School(415) 472-8000 x1014

A while back I posted very excitedly about an update to the du binary:https://community.jamf.com/t5/jamf-pro/gnu-new-du-binary-option-in-macos-12-monterey/td-p/252266I forgot to post that I actually used it for something... We pushed Druva into production earlier this year for all clients (macOS & Windows).  uses Druva internally & in my opinion it is the gold standard for cloud backup: https://www.druva.comBefore doing so, however, we wanted to figure out how much data lived in everyone's home folder & the sub-folders, so, of course I made a multi-line Jamf Pro extension attribute... #!/bin/sh # macOS version check if [ "$(/usr/bin/sw_vers -productVersion | /usr/bin/awk -F '.' '{print $1}')" -ge 12 ] then byteblk='--si' else byteblk='-h' fi # collect home folder size (collects size of dot files but excludes from display) crntusr="$(/usr/bin/stat -f %Su /dev/console)" dscldir="$(/usr/bin/dscl -plist . read /Users/"$crntusr" NFSHomeDirectory)" homedir=

If I've uploaded a pkg or dmg file to Settings > Computer Management > Packages, then change the display name of that item, will it cause a script that references the original name of the pkg or dmg to fail?  In other words does the original file name remain somewhere, or will my script need to be updated along with the pkg or dmg display name?

Is it possible to flush the policy history of a particular policy from the client? Something like [code]jamf flushPolicyHistory -id 217[/code] ? Just wondering, and thinking it might be handy when testing...

Hey Jamf Nation,We're pleased to announce Jamf Pro 10.40, which has a huge amount of enhancements and fixes we think you're going to love! Deployment status is now viewable for App Installers, removing the need to create a patch report. Additionally, there are major improvements in Healthcare patient workflows, major Self Service for iOS improvements, and more.How to join the beta: Please enroll in the Beta Program under Product Feedback at account.jamf.com. Once you’re enrolled you’ll receive an invitation to the Beta Forum in your Jamf ID email. Once you receive the invitation click on "Join this group Hub" to access the forum.   If you have any questions please email beta@jamf.com. As always, the beta program is operated under non-disclosure, so please do not share any information regarding your testing on any public forum, including the non-beta sections of Jamf Nation. Use the Jamf Nation beta discussion area or contact Jamf via beta@ja

Hi All, I'm looking for steps/scripts to block the unmanaged printer.

I can't seem to get my push certificate updated. I follow the wizard for JAMF Pro, download the signed certificate, but when I try and upload to apple it tells me it is an invalid type or size. I followed the guide, video, and wizard and everything looks the same as what I am doing.

Hi Community,we are facing a strange issue that out of sudden our Jamf PRO integration with Intune does not work anymore. We get this error here: Could not retrieve the access token for Microsoft Graph API. Check the configuration for macOS Intune Integration. 2022-04-05 08:37:15,496 [WARN ] [Thread-3 ] [itionalAccessHTMLResponse] - Could not handle provisioningorg.springframework.web.client.HttpClientErrorException$Forbidden: 403 Forbidden: "{"odata.error":{"code":"Authorization_RequestDenied","message":{"lang":"en","value":"Insufficient privileges to complete the operation."},"requestId":"d123ebf4-3431-46ae-ac79-90bfc10c4052","date":"2022-04-05T06:37:15"}} "From Azure AD App Registration I have set all required API Permissions.Any Idea? BR Tim

Hello Jamf Nation,Today we are releasing Jamf Pro 10.39.1. To learn more about this release and the product issues it addresses, please read the Jamf Pro 10.39.1 release notes here. Cloud Upgrade ScheduleYour Jamf Pro server, including any free sandbox environments, will be updated to Jamf Pro 10.39.1 based on your hosted data region below.Need assistance identifying the Hosted Data Region of your Jamf Cloud instance? Check out this guide to find out how. Hosted RegionBeginsEndsap-southeast-2June 25th 1400 UTCJune 25th 2300 UTCap-northeast-1June 25th 1500 UTCJune 26th 0000 UTCeu-central-1June 25th 2200 UTCJune 26th  0800 UTCeu-west-2June 25th 2300 UTCJune 26th  0600 UTCus-east-1 sandbox/us-west-2-sandboxJune 26th 0000 UTCJune 26th  0900 UTCus-east-1 June 26th  0400 UTCJune 26th  1700 UTCus-west-2June 26th  0700 UTCJune 26th  2000 UTC Next StepsFor real-time messages about your upgrade, subscribe t

SetupiMac M1 or MB Pro, mainly iMacsOkta is the IDPJamf Connect was deployed using FV, but we learned the limited scope of users1. Created Smart Group for these iMacs and added my one test unit to it2. Excluded the Smart Group from anything to do with Jamf Connect + File Vault3. Cloned the Config profile for Login, removed File Vault4. Removed the FV Escrow Key 5. Reviewed all profiles/policies assigned to these devices. NOTHING has FV enabled6. Wiped the drive7. Rebooted, Okta login. Log in with User 1, who happens to be an admin upon log in (Based on my department, Engineering.)8. Rebooted, Logged in as user 29  Rebooted, logged in as user 310. Rebooted. still no FV login screen ONLY Okta login screen. Logged in as user 411. Rebooted, logged in as user 5. Verified FV is off in the system preferences 12. Pulled up the device in Jamf Pro, noticed it says FileVault 2 Enabled Users: User113. That is strange....   also noticed there is a  Device Recovery

Hi all,I'm new to JAMF Pro and just wanted to confirm what I think I am seeing.That  there is no api for creating smart mobile device groups, only static. Can anyone confirm that my understanding is correct. ThanksSteven

User working from wework and they have a wifi authentication with username and password. Jamf connect blocking wifi access and therefore user is not able to sign in to the device. As an admin I cannot push any command remotely such as to remove the Jamf profile. What options do we have? How can I get the local account credentials for local account login?

Due to Product Issues with Notifications in macOS, JAMF Patch Management is not fully functional. This is a real blocker.

Since I don't have a blog (yet) thought I'd share a working method. Genuitec's MyEclipse IDE is a paid Java development tool that I was recently asked to deploy.  It is not available in any standard .PKG formats, though there is an additional tool (SDC) that can be used to both deploy and license the application.The developers determined there was a bug in version 2022.1.0 which prevented successful unattended deployment on Arm64, and have recently released version 2022.1.0a which resolved this issue (though not silently).On macOS Monterey 12.4, calling MyEclipse 2022.1.0a Installer.app/Contents/MacOS/standard-install triggered a Gatekeeper error on a test device set to allow MAS and identified developers.  On Big Sur 11.6.6 with the same Security payload delivered via configuration profile, a Gatekeeper warning was generated, but installation proceeding normally.I converted the original .DMG to a read-write .sparsebundle and then ran xattr -dr on the standard-

User got logged out of everything, even Jamf connect. But was able to login with domain password. Keychain was reset.As a precaution we have removed Jamf connect from user's MacBook Pro (M1 Max) and unscoped the device from related profiles. We have only one user affected by such bug.We have backup of the login keychain (with old password) how can we restore it on the place of empty login keychain?

I'm new to Jamf, and I've recently inherited a Jamf network of about 200 Macs. My current task is to get Zero Touch Deployment fully functional, so we don't have to do any manual staging on Macs before they are handed to the users. (We are part of Apple's DEP/VPP, and that much works fine.) tldr; What is the best way to enable FileVault 2 so it deploys automatically, as silently as possible, as soon after initial enrollment as possible? My goal is to have all of the Macs have FileVault 2 enabled, with the individual encryption recover keys redirected to Jamf server. I've experimented with both a Configuration Profile, assigned to the PreStage Enrollment, and with a Policy, and both have rough edges that I'm not sure how to smooth out. There are two specific things that I'd like to remedy: 1) It always pops up and tells the user their recovery key, and cautions them to keep it in a safe place. Is there any way to hide this without resorting to an Institutional Recovery Key? I don

The Jamf Pro 10.39.0 cloud upgrade previously scheduled to begin on June 24th has been delayed by one day. The new dates and times are reflected in the following table. Cloud Upgrade ScheduleYour Jamf Pro server, including any free sandbox environments, will be updated to Jamf Pro 10.39 based on your hosted data region below.Need assistance identifying the Hosted Data Region of your Jamf Cloud instance? Check out this guide to find out how.Hosted RegionStart Date/TimeEnd Date/Timeap-southeast-2June 25th 1400 UTCJune 25th 2300 UTCap-northeast-1June 25th 1500 UTCJune 26th 0000 UTCeu-central-1June 25th 2200 UTCJune 26th  0800 UTCeu-west-2June 25th 2300 UTCJune 26th  0600 UTCus-east-1-sandbox/us-west-2-sandboxJune 26th 0000 UTCJune 26th  0900 UTCus-east-1June 26th  0400 UTCJune 26th  1700 UTCus-west-2June 26th  0700 UTCJune 26th  2000 UTC

Hi: I'm trying to setup some iPad minis (Gen 2) in Single App Mode utilizing Apple Configurator 2 and CasperSuite 9.91. After getting everything working and the correct app in Single App Mode I've found that you can't power the iPads down. You can restart, reset volume, etc. But if you hold down the power button nothing happens. My Single App Mode profile doesn't have the Sleep/Wake Button option checked (I think all options are disable?). iOS version is 9.3.1

I want my users to acknowledge that an update to Citrix Workspace i'm pushing will potentially kick them out and lose their work.Would it be possible to use something likeosascript -e 'tell app "System Events" to display dialog "Hello World"'AS PART OF THE SAME POLICY that is doing the update?  How do i get the message to pop up before the update fires?