I manage a Web Clip for a team of engineers who use a CMDB solution (ServiceNow) for checking industrial & scientific equipment in the field. They do this on iPads using Safari. The CMDB solution is a cloud-based web interface, no third-party apps are required. Basically, I use MDM to push-out a Web Clip that tells Safari to open a specific private URL on the engineers iPads. We have realized that Safari renders the ServiceNow web interface incorrectly at times. Engineers are complaining of horizontal scrolling issues, zombied drop-down menus, etc. As of iOS 8.1.3, the issues are still not resolved. Both Apple and ServiceNow are aware of my issues. The good news is that we have discover that Google Chrome on iOS doe not exhibit the rendering issues. Thus, there has been discussion to pull the Safari Web Clip via MDM and push-out a new Web Clip that will force the engineers to use Google Chrome instead. Google Chrome is a managed app, so pushing our Chrome will be easy. I was tol

Hi, Are there best practices for manually removing JAMF from OS X? I have already attempted "sudo jamf -removeFramework". But it appears that the uninstall didn't complete cleanly. There are still left over components. If I attempt "sudo jamf -removeFramework" again it results in a "sudo: jamf: command not found". Anybody have any ideas? All are appreciated. -Geoff

Hey. I have been working as a Mac engineer in a JAMF environment (no certs though) for many years, but when the pandemic hit us a couple of years ago I needed to change my job and found one in IT Security.Now I want to go back to being a Mac engineer badly, unfortunately, it's not that easy after over two years of break. In fact, I recently had an interview for an interesting position, and while somehow I managed to perform all the technical tasks during the interview, at the end of the day they've chosen a guy who was "more confident" in the JAMF environment. My question is - is it possible to somehow set up a JAMF Pro training/lab env without having access to an enterprise license to refresh my memory and keep myself "in shape" until i find a Mac engineering job again?

Hello all,How do we get a vat receipt for the jamf100 course?

I need to run a Powserhell script on the Mac fleet. The outcome is a json file created on a share.The script requirements to ran:  mount the share, sign in with user credentials in order to create the file .I need to run shell script prior running the Powserhell Any idea how to mount the share bypassing credentials ?I tried below line without success.

Good day all,A little background: I had Parallels Desktop 17 deployed for a few months with no issues installing it on many client's machines. Suddenly about 2 weeks ago it failed to install on any new machines. I kept getting an error messaging when installing that said "Parallels Desktop.app" can't be opened because Apple cannot check it for malicious software. Now I know how to get this working on a per machine basis if I install it manually but how would I give the app permission to install via Jamf? I tried setting Gatekeeper to allow App store apps and trusted developers but this did not change anything.Any advice?

Has anyone implemented Recovery Lock on M1 devices using the API successfully ? Could someone share their script if so?

Trying to get users upgraded to the latest Big Sur. Software Update shows a red button indicator, but on opening it never finishes looking for updates. The softwareupdate -l command shows a similar result... it just sits until it's cancelled.I thought it was a configuration profile, but I excluded my test machines from any OS deferral.Next I thought that it was because we had been using the --ignore-update switch in softwareupdate command to ignore OS updates in Catalina or earlier. But if that carried over I can't undo it (--reset-ignored is no longer a switch) and it probably wouldn't even try to look for Big Sur updates if it was still applied.Looking into a way to upgrade the OS to Monterey and the erase-install project isn't immediately possible because softwareupdate --fetch-full-installer just seems to spin its wheels as well.I guess I can download Monterey, and push it up to our Jamf server, and deploy that down to the clients when they're ready to upgrade.No alternative s

Hey all, I'm a volunteer IT admin for a very small non-profit. We had an iPad donated to us, and I'd like to set it up properly so we don't run into any issues down the road.We run exclusively Windows machines (mostly Thinkpad laptops, but some custom-built desktops), and while I personally use an iPhone I have no experience with an MDM. I have set up our Apple Business Manager, purchased the required apps and licenced them to the device, and (after borrowing a Macbook) managed to get Supervision enabled on the iPad. Jamf Now has configured the iPad based on the blueprint, and the device is running pretty well. The final perfect piece would be the Guest mode (preferably ONLY Guest mode) as the device is going to be shared between different volunteers from week to week. I cannot seem to find anything about Shared iPad for Business under Jamf Now. Is it not supported and I'd have to upgrade to Jamf Pro to get that feature? With this being our only Apple device currently (a

We have a Configuration Profile restriction set up for Macbook Air M1 devices (MacBookAir10,1) to limit student access to entries in the System Preferences pane. One of the new options in Big Sur is the "Battery" entry (see bottom left in the attached screenshot). In Jamf's Restrictions screen, there is no equivalent to this panel to enable access to the Battery settings if the "Enable Selected Items" option is checked. The previous "Energy Saver" toggle being allowed does not render the "Battery" option accessible, and there is no "Battery" entry in the list (see screenshot below). Could this be added in a future Jamf release? We're currently on self-hosted 10.26.0. I imagine we can work around this using the "Disable selected items" option instead, but that would involve restructuring the entire Configuration Profile. Thank you!

A function for your ~/.zshrc to self-heal the jamf binary via the Jamf Pro API Background We’ve had one too many Macs with sideways configurations lately, which we’ve attempted to resolve by various re-enrollment strategies. After reviewing Emily’s Jamf binary self-heal with the Jamf API post, we wanted to easily issue the redeploy command via macOS Terminal. Continue reading …

Hi.Now that we have a MDM command to set the time zone on iOS Devices, this is a feature request :- In the Enrollment settings on one location, option to "Automatically Set Time Zone" and a menu to select a time zone- At enrollment, the MDM command is applied automatically.And so you can eliminate the Services Location pane in most contexts.See you.

I want to push a Yubikey Manager.pkg through Jamf.The package was downloaded from https://www.yubico.com/support/download/yubikey-manager/  and packed using Composer.Installation through Jamf Pro: okIssue: when the app is opened locally user see this msg: "YubikeyManager" app is downloaded from internet ....- How to make the pkg trusted when pushed to the MacOS?Your's

Are anyone in here using Cloud App security for Mac, with device certificate together with conditional access?Overall it works much better then the "nightmare" company portal registration, but MCAS of course also is a bit different using certificate instead of azure registration.Only issue we see if a lot of rapporting bugs from MCAS, where clients seems to rapport certificate is missing , but only in the log this is happening - on the user device there is nothing noted. Sometimes however, it it seems to block on clients, so all microsoft apps must be closed down and restartet before device certificate will working. The reason for this, is as far I have known, if the device has been opened up sessions on different network and then come back to company network.Would like to know if other experience the same ?

We are testing the viability of replacing our current VPN with a L2TP VPN handled through the network settings of the Mac, dropping the need for a software client. Everything is up and running and works wonderfully, deploying the VPN setup via a configuration profile. However, I am having trouble figuring out how to change two settings (short of doing it through the GUI) - System Preferences->Network->Select VPN, Advanced Settings->Options Tab, Session Options I would like to uncheck the "Disconnect when switching user accounts" and "Disconnect when user logs out" settings. I do not see anything in the configuration profile to accomplish this. I found the settings in /Library/Preferences/com.apple.networkextension.plist, but cannot figure out how to change them there either. Additionally, it might be nice for users to be able to toggle "Send all traffic over VPN connection" depending on where they are - but users cannot access this advanced menu - so if it might be cool t

I see this question has was asked a few years ago, but there was no answer. Now I'm facing the same issue, so I thought I would reach out again to see if anyone else has found the answer.Why can't you turn on Activation Lock for Shared iPads? Even though you are given the option to enable it, as soon as you save the PreStage, the option is unselected. This appears to only be a problem when also selecting "Enable Shared iPad". As we're only using guest accounts, we really need the iPads to be locked to the organisation's Apple ID.Is this a bug or a feature?

Is there a script that would retire the device from JAMF Pro, and then do a "sudo profiles renew -type enrollment" command after JAMF has been removed? We have about 300 laptops left in our environment that were enrolled manually before ABM was setup, so we want to covert them to supervised to be able to better manage them. Has anyone done this before? 

Good afternoon!I've got a new Macbook Pro and when attempting to login to the Self Service app I am getting a generic SSO error.It states:Single Sign-On ErrorAn Error occurred while processing your Single Sign-On request. Contact your administrator for assistance.I've tried dumping the Public and Private keys from the Keychain, removing the App for forcing the Jamf Policy to bring it down again. I did read something about a possible SSO token that might need to be addressed, but am not sure where that is located or managed. Can anyone shed any light on that? We nuke MS365 tokens all the time so I am familiar with the concept but is there a similar process for Jamf?Thank you!Derek

Hi guys,I have two seperate pre-stage enrollments. One onboards lab Macs that don't currently use Jamf Connect at all. Those Macs also have a Config Profile applied to them to set their Login Window settings (which shows the username and password fields) and this generally works fine.Totally unrelated to these macs, I have another prestage enrollment that onboards staff macbooks which use Jamf Connect and should have the Jamf Connect login window which is set by another Config Profile.Immediately after DEP enrollment I login with Jamf Connect for the first time and everything is working, on subseuqent boots, these Macbooks show our lab Login Window settings, despite nothing related to that Config Profile being scoped to these Macbooks in any way. I can manually sign in using my Jamf connect details by typing them into the username and password fields. Once I'm in, I can then subsequently Log Out from the Apple menu and I'm greeted with the full Jamf Connect login window experience I wo

Hey all :).I'm new to the Jamf world and I can use your help please,I have some Mac's that Find My Mac enabled on the system and I would like to remove and disable it. I add a configure profile to greyed out the option that once users sign in to appleID the find my mac will be auto disabled.But i do have some user/laptop that Find my is already set, do I have a way to remove and then greyed the option remotely?  (without using the NVRAM, from that I could find on the web that is the only option)Thanks in advice for the people that answers back.

Good morning Jamf Nation!Today we released Jamf Pro 10.39 which includes the Healthcare Listener App Refresh, enhancements to App Installers within the Jamf App Catalog and additional language support. Enabled/disabled indicator for apps distributed from the Mac App Store or Jamf App CatalogApp Installers continues to receive enhancements to monitoring and performance. Within Jamf Pro, admins will see a clear indicator to determine if a Mac App – from the Jamf App Catalog or the Mac App Store – is enabled. Installation now supports a minimum supported macOS version before installing software and more frequent checks occur when monitoring for the progress of app installation. Healthcare Listener App RefreshFor Pro organizations that use Healthcare Listener, Jamf Pro 10.39 brings new options to refresh iOS and tvOS devices between patients. App Refresh uninstalls and reinstalls managed apps and in-house books. This provides a wireless way to refresh app content, without re

Hey, so we have the following scenario:We had to push a wipe command and we confirmed the wipe appeared as complete on our end. However, the user has not input the wipe code and they really need to recover information off the computer. If the device is not yet wiped and we can still push commands remotely via our RMM. Will removing JAMF off the device cancel it out or will still require the wipe to go through? Thanks in advance!

Hi all,Curious if anyone would know how to auto-fill the "Email Address" field under the "User and Location" tab with the data from an extension attribute we have?For example if the extension attribute is pulling an email address from a computer XXXX.XXXX@somecompany.com, can I then have that data plopped into the "Email Address" field under the "User and Location" tab? Or is this simply not possible?Thanks in advance!

When enrolling certain devices, they're becoming caffeinated and I have no idea what is causing it. Obviously, it's preventing our devices from ever going to sleep or having their screensaver kick on. I have gone through every script and app install (including their pre and post install scripts) that we deploy and have not been able to come across a single caffeination command. Anyone know how to tell exactly what is causing the caffeination? I have the command to fix it, but I want to prevent it from happening in the first place.

Good Afternoon,I've looked under Config Profiles > Restrictions, but can't find it.  Is there a way to disable AppleID Sign in in settings?  We don't use managed apple ID's and don't want the students logging on to the devices.Thanks for your help