Hello Jamf Nation, Not sure if there is a fix for this or not.  It seems as if JAMF is reporting incorrect, or different version numbers for a few applications in different areas. For example, Google Drive is reporting in JAMF Patch Management as 5.9.03 but when you check a computer's Application inventory it's reporting as 59.0.Is this a bug? Any way to correct it? 

Anyone out there have any luck pushing Desktop Central agent via Jamf? I get the error below trying to push the client I download from Desktop Central.Installation failed. The installer reported: installer: Package name is ManageEngine DesktopCentral Agentinstaller: Installing at base path /installer: The install failed. (The Installer encountered an error that caused the installation to fail. Contact the software manufacturer for assistance. An error occurred while running scripts from the package “DesktopCentral_MacAgent.pkg”.)

Has anyone implemented PingFederate SSO with single logout in JAMF Pro.I am currently facing a challenge with following scenario.PingFederate SSO is enabled for Management Access, SelfService and Enrollment URL. However we are seeing a challenge with Single Logout function as it is applicable only for enrollment function.Since management access doesn't call PingFederate during logout, ( these calls are local logout calls)  sessions remains active in PingFederate and if admin user hits back button in the browser window then the user will get the session back since the login window again calls SSO which is still active. Self service also shows the local logout call however since the app doesn't have back button for login windows, it's not noticeable. Only way to address this is to close the browser completely and try new session again or use another browser app.As of now it seems Bypassing SSO for management access is the only option so that login and logout both calls will be handl

Hi everyonei'm trying to understand the best way to configure Jamf Protect with our jamf instance. I set up a smart group in jamf to alert users about security issues and that works fine.Unfortunately the jamf protect documentation is a bit incomplete imho. What are the next steps i need to follow? Any suggestion or guide to suggest?Do i need to manually remove the mac from the smart group?Jamf Protect has some removing capabilities or i need to clean the mac manually?

Hi,When we reimage a MacBook, it then goes through pre-stage enrollment where it joins our Active directory domain.  After that initial setup continues and we're asked to create a local account.Is there a way to skip the creating of a local account and log in with an AD account?

Does anyone know of a way to turn on lost mode for a large number of iPads without going to each iPad in the JSS? We are thinking of turning on lost mode for a large number of our iPads over the summer so that it would be easy to see if an iPad was stolen or missing but it probably won't be practical if we have to go into each iPad in the JSS to turn it on.

I recently started at a new college and am finally settled in and working on Jamf/Mac related items.  One of the things that was brought up was having user profiles stored externally on hard drive.  It was explained to me that students had external hard drives (used for storing photos/videos for use with Adobe CC) and when a student went to a different iMac all their preferences were already ready to go on the new iMac, even if they'd never logged into that iMac before.  I know how to do this manually and then restrict the student to a specfic iMac.  I'm curious if anyone has ever done something like this before.

I have a pkg that I need to install, however, it must be installed from a specific location:/Library/Application\\ Support/TheApp/installer.pkg (not the real name)If I run sudo installer -pkg /Library/Application\\ Support/TheApp/installer.pkg -target / the script ends and I get a return code, 125, 160, whatever, not just 0 or 1. I need to get the same result from from log of the installer.So I have a DMG that delivers the pkg to the proper location.I then have a script that runs last:sudo installer -pkg /Library/Application\\ Support/TheApp/installer.pkg -target /pkgexitcode=$?echo $pkgexitcode > /Users/Shared/AppExitCode.logecho $pkgexitcodeexit $pkgexitcodeIt will only return 0 in JAMF, and the log file also returns 0, though I know it is not (based off other log files that are generated)

After working on the problem a while, I've found a way to repackage Matlab 2011b with Composer for my worksite's needs. I've documented the process I'm using and posted it here: http://derflounder.wordpress.com/2011/12/11/repackaging-matlab-2011b-with-composer/

Today we released Jamf Connect 2.9.0 for general availability; this release includes the below details.Key Feature ContentAbility to Uninstall Jamf Connect from Jamf Now: The Jamf Connect DMG now contains a package for uninstalling Jamf Connect from the Jamf Now interface. To uninstall Jamf Connect, run the package on the intended user's machine.Installer Changes: This update allows users to install Jamf Connect menu bar after an update by closing the window and reopening menu bar.Jamf Connect now automatically opens upon first installation. Additionally, when Jamf Connect is upgraded by an administrator, the app now automatically quits and then relaunches as the updated version. This ensures that older versions are not concurrently running.Resolved Issues[JC-3204] The Jamf Connect menu bar app is now able to retrieve custom Azure ShortName attributes.[JC-3247] The Jamf Connect login window message that appears when signing in as a new user, "Creating your account on this Mac

Hello all, Does anyone know of a way to assign an LDAP user to multiple devices via the API or GUI?  I need a add a service account to a bunch of Apple TV, so that I can get them connected to wireless via radius auth.Thanks in advance!

Is there a script that can be pushed to a computer that will un-enroll it fully. I know that from the portal you can select 'remove from mdm' however I usually follow that up with going on the device and using the 'jamf removeFramework'. This will not be possible if the user is remote however? Thanks

I have a script that used to work that cleans up some common home folders on an auto-login account, but recently I have discovered that it no longer works. The script is very simple and I see no reason why it wouldn't work: # Fetch the target user if desired, otherwise use the currently logged in user. if [ "$4" != "" ]; then TargetUser=$4 else TargetUser=$3 fi echo "Target user is $TargetUser." # Delete common user spaces of the targetted user. rm -Rf /Users/$TargetUser/Desktop/* rm -Rf /Users/$TargetUser/Documents/* rm -Rf /Users/$TargetUser/Downloads/* rm -Rf /Users/$TargetUser/Applications/* rm -Rf /Users/$TargetUser/.Trash/* exit 0 The problems is the script doesn't actually do anything. The policy runs as scheduled, and reports no errors, but nothing is actually deleted from any of the designated spaces. The logs report back that the correct user was targeted, the policy runs at Checkin, so the computer is fully up and logged in, but nothing is deleted, as if

Hi all, I have a Mac that hasn't been checking in for a month or so and I've tracked it down to recon getting stuck at "Gatekeeper status".  Beyond unenrolling and re-enrolling (DEP mac), is there anything I should try?  Attached is the verbose output of the recon command.

Hey everyone - I'm very much a beginner when it comes to coding and I'm very confused as to how to utilise any that people have posted as answers to questions in Github? Most of the time someone posts a comment that has a nice script in it, but if I copy and paste that script into a notepad, save it as a .bash - do I still need to chmod it? Does doing that do something to the file itself? Previously I just pasted the code into a notepad ++, did an EOL conversion to mac and saved it but it still failed to run as a script in JAMF. Wondering if I still need to chmod the file?

I'm sure this has been asked before but is it possible to enable conference room display on all of our Apple TVs without locking each Apple TV in to conference mode? I want the conference room message enabled while retaining access to the menu and other apps via the remote. Without a way to push this, I'll have to visit each Apple TV separately and enable Conference Room Display.

Is anyone else out there having serious issues with JAMF support right now?I've had a case open since the 27th (I think anyway, who knows what day it is anymore)Aside from asking us for log files - Which as a hosted service they should have access to right?They haven't done anythingThe only thing we've heard from them has been in the form of the two "Emergency Maint" messages they sent out on the 30th of June and then last night.JAMF is one of two vendors I work with where I don't have an account rep's e-mail address and I don't know who my reps boss is (and his/her e-mail address)The only time we get e-mail from a person with a real e-mail address is when it's time to renew.I'm curious as to whether the rest of you long term JAMF customers are experiencing the same thing?

Anyone working with Nessus, here is a Nessus un-install script.Realized that as of Nessus version 10.2, Nessus is no longer called NessusAgent, just Nessus and the path location is: /Library/Nessus.Also, as is common with these security agents installer,s the PKG is lacking, and woefully in most cases, and a re-package in Composer is necessary... You have to grab the hidden file inside the DMG and drag into Composer and Convert to Source. I also removed the Preferences Pane, so a user cannot Stop/Start the agent.I have a before script that looks for /Library/NessusAgent and delete it if present as well as unload with launchctl. So, the installer is always re-installing onto a clean slate...#!/bin/sh# if /Library/Nessus directorty exists, stop Nessus agent and delete all of Nessus, if not ignore.if [ -d "/Library/Nessus" ]thenecho "Directory /Library/Nessus exists. Stopping Nessus and Removing it."/bin/launchctl stop com.tenablesecurity.nessus*sleep 1/bin/launchctl unload -w /Libra

I know a lot has changed in the last few years, but is there a way to enable and configure Remote Management without having to physically do this on each device?I know you can use ARD when you are physically at the device to configure the service, and Jamf Pro has a "Enable Remote Desktop" command. However the "Enable Remote Desktop" command does not allow for specifying a specific user and what permissions they have. What I would like to do is:- Enable Remote Management- Set "Only these users:"- Add our Management Account- Set the permissionsThanks!NOTE: We are currently doing User-Initiated Enrollments. We are hoping to have access to ABM in the near future.

When our users connect to our corporate Wi-Fi, they get prompted for credentials and then this eaptlstrust message appears after.  Is there a way to auto accept or make changes to this eaptlstrust certificate trust settings before hand? 

We are looking to upgrade our mac mini from intel to an m1 but not sure if there are any issues? Thank you in advance

Hi All, I am trying to update the new server address of Global Protect VPN. I have created a new plist with updated VPN address and uploaded it into a new configuration profile. Scoped it to my machine only. In logs, it says completed but I still see the old server address in the plist. Any suggestion?

Hi Everyone,I'm wondering how I can send logs (event logs and server logs) to a remote log host such as Datadog?I'm tasked with collecting logs from jamf-pro cloud into our centralized log server. We're evaluating datadog as our log tool but have flexibility to change this.I don't see any settings within the jamf-pro dashboard to send logs elsewhere and I'm unable to install the datadog log agent on the cloud server. Are there other options?It looks like I can create webhooks for each event type and send the data to datadog via a json payload. I wonder if the payload is formatted in a way datadog can receive it. Thank you!  

Hello, I work in K-12 schools. 150 of our original iPads were initially set up in Jamf Pro. Since then, we acquired Zuludesk/Jamf School. We have decided to move all iPad management from Jamf Pro over to Jamf School this summer and discontinue use of Jamf Pro (we are already using Jamf School with our newest devices). Has anyone done this before and have any best practices to share? Is it as simple as unenrolling the iPads from Jamf Pro then re-enrolling in Jamf School? Thanks!

Is anyone using Jamf Protect? it has the Insights piece that is great but what would be better is they provided some sort of integration with JSS for remediations. For example, they mark the sudo timeout as a risk. Ideally you could click a button to implement a configuration in JSS to address it.