Is anyone having issues packaging the additional content for Logic Pro X 11?I've tried twice, and my normal method isn't playing ball.In short, 'Composer' a whole installation, Also move related receipts to /Library/Receipts and add that to Composer. Build the PKG, PKGchunk up the 60-80GB file, upload and test deploy.If I remember correctly, the Logic Pro X 10 receipts used to appear in the users library and had to be moved. Now they're arriving in /Library/Apple/System/Library/Receipts - this seems to be a protected location. Any sudo ditto commands to that location result in 'Operation not permitted'.Anyone had any success getting Logic to register all the installed content?

Hi,I'm wondering if iBeacons are still a thing as they don't appear to have any effect on devices, no matter what policy is set.Documentation refers to Location Services and the Self Service app but the Jamf Self Service app doesn't appear to have any hooks in to Location Services and permissions can't be set for it.Were iBeacons something that Apple created but are now deprecated? Is anyone actually using them in 2024? If so, how did you manage that?!

Hello friends,I have recently deployed Forticlient version 7 through a package and then a policy, however, it is installed on the computers but appears blank. Does anyone have a solution? 

Hello, I would like to know if you've encountered the following issue with the (Flat) Adobe packages generated via the Adobe Admin Console. When we generate an Adobe flat package and upload it to the JSS to make it available via self-service, during installation, it shows as "completed" in the self-service, even though it is still being installed. Therefore, if we create a JSS policy with multiple product packages, preferences, and scripts, including Adobe products, it considers the Adobe application installed and moves on to the next item. This poses a problem because often these are Adobe plugins or preferences that need to be installed after the Adobe product. We experience the same behavior if we incorporate the flat pkg into a package generated with Composer, along with a post script to install the flat package. We don't have this issue with non-flat Adobe pkgs, but apparently, it's become mandatory for Sequoia. Additionally, the installation of Adobe flat packages is much slower

Hi all, I was wondering if I'm the only one no longer able to load the https://macadmins.software/ site that was previously hosted by Microsoft? When I go there now from any device I get a GoDaddy page, so it looks like they didn't renew the site hosting perhaps? I used this site all the time to get the most recent packages for Microsoft software. Is everyone else seeing the same thing as me? If so, has anyone heard anything about this, if this will be coming back or if that's it? I know for a while now while the links all pointed to the most recent versions of software, the version numbers listed on the site were stuck on some old version from many months back, but it was still working to download the most current releases as early as this month.

Hi!First of all I know close to nothing about MDM..I work at a school in Sweden where our students have managed Apple IDs on their iPads.The thing is that when they try to log in to Game Center they get the message that the managed Apple ID won’t allow this.is there any way to turn this feature on? I looked at the profile for our devices and the box that said “allow Game Center” is checked but it won’t work.. it it that our devices allows Game Center but the Apple IDs don’t? If that’s the case how do I change it..?(if you have an answer please explain it to me like I was 5 years old because I’m very new to all of this)Thank you.

hi does any one know how to force safe search in google for ios. ie automate the ticking of the safe search box in google settings on the ipads? or is a one by one process, i have a fleet of 500 and need to do it by the end of the day..yay

Hello,Need to force some extensions on our fleet via MDM. I've already done so with most of our enabled browsers but can't find anything on Safari on how to do that.Is there any way to force them on it?

I remember from the 2024 JNUC, there was commentary about Apple allowing users to continue using their purchased software with their managed Apple IDs, rather than forcing *everything* to personal (for situations in which a user has already purchased company software using their company email address as their Apple ID). Is there any documentation on that somewhere, particularly a timeline on when that's supposed to be implemented? I've been dragging my feet on implementing Managed Apple IDs in the meantime, and leadership wants to know the holdup. 

I'm working a customer setting up macOS Onboarding and we had it going, then at the end of the for some reason they started getting this message: " Cannot reach a Jamf MDM Server" after Device Enrolment, when the desktop came up, and SelfService Opens to start installing policies as per onboarding setup. At this point the onboarding froze of course as it cannot connect to mdm... -Jamf Pro is On PRem in this installation: - Only change the local tech made was in the prestage, setup assistant.   Originally they left unchecked the location services, so on enrolment the user would select their location... He remove this in setup assistant and then all of sudden this message started coming up.-Server Reboot was done - no change-Ticket has been logged with Jamf - still waiting on resolution -We were able to get it going again by once again removing the check on the setup assistant skip, so no again the user selects the location services.- we also saw once the checkbox was removed, that

I am attempting to set up pre-stage enrollments for Jamf, but am running into some issues:I manually assigned a device to our business manager account for testing purposes. When I sign into the account, everything looks like it works correctly, but the device isn't assigned to any user. Is there a way that it can be automatically assigned?I would love to get Google SSO set up for creating the local user account. Would I need Jamf Connect to accomplish this?Thank you in advance!

A follow-up to this ticket, but different enough I wanted to start anew.Essentially, we're trying to do zero-touch with our next batch of MacBooks, so I've been working on a new Enrollment Profile. We want to primary account information (name and username) to be filled-in and locked during setup. Initially we tried to pull the data via prestage (see prior ticket), but since that isn't working, we tried via Google SSO and Secure LDAP:I followed these directions for the Google SSO:https://docs.jamf.com/technical-articles/Configuring_Single_Sign-On-with_Google_Workspace.htmlAlong with adding the SSO pane to the prestage. The pane seemed to work fine — asked for login, went through two-factor authentication, continued the setup afterword — but it never passed the variables to the Create a Computer Account screen, so the name and the username were still blank. I tried both Custom Details and Device Owner's Details in the Pre-fill Primary Account Information, neither worked.So

Running a long standing (and working) script to do updates on Macs and got this error today with a Jamf cloud client:   Install action:Download and schedule to install (2025-01-15T15:00:00) Update action:Specific version (15.2) Current state:PlanFailed Error reasons:SpecificVersionUnavailableForDeviceModel   Part of my script verifies that the Jamf Cloud client recognizes the requested version (like sometimes the trailing ".0" is not recognized). So that shouldn't be it.   The plan is actually created but is "immediately" rejected:{ "events" : [ { "type" : ".PlanCreatedEvent", "managementUUID" : "e163182f-ea49-440e-967c-b5840bcf0366", "processManagerUUID" : "85980caf-557a-411e-99b9-94a07a478ead", "id" : 2469, "deviceObjectId" : 1, "eventReceivedEpoch" : 1736956458301 },   { "type" : ".PlanRejectedEvent", "managementUUID" : "e163182f-ea49-440e-967c-b5840bcf0366", "processManagerUUID" : "85980caf-557a-411e-99b9-94a07a478ead", "id" : 2470, "deviceObjectId" : 1, "event

Following the use of JAMF Mac Apps to update Chrome, some users have reported an issue where they are unable to access any internet or intranet sites from Chrome. The browser becomes unresponsive, and the issue is resolved only after a device restart. Has anyone else encountered this issue, and are there any insights or suggestions available?

Help! I have been trying to endlessly to get this to work...what am I doing wrong? I know for a fact that the logged in user has the workplace join key in their keychain but for some reason, when trying to run this for an EA it doesn't report correctly.  I know the jamf runs with elevated privileges, but should it be able to run this without prompt for user credentials (like root), or is this not going to be possible?   #!/bin/zsh currentUser=$( echo "show State:/Users/ConsoleUser" | scutil | awk '/Name :/ { print $3 }' ) uid=$(id -u "$currentUser") haswpjkey="No" wpjkey=$(launchctl asuser "$uid" sudo -iu "$currentUser" security dump-keychain | grep "Workplace Join Key" | xargs) [[ "${wpjkey}" == *"Microsoft Workplace Join Key"* ]] && haswpjkey="Yes" echo "<result>$haswpjkey</result>"  

If I wanted to test a script locally on my mac before deploying it out - how would i go about doing it?Do I open my terminal and drag the".sh" file in there?

I'm trying to configure my updates to run via S.U.P.E.R finally, and I keep running into the error: Warning: Inaccurate deferral found for macOS major upgrade 1 of 1 is: DeferredUntil:2025-01-10 00:00:00,Title:macOS Ventura 13.7.2,Build:22H313,Version:13.7.2 I have config profiles setup for Apple Software Updates and  SUPER the following: Apple Software Allow installation of macOS beta releases Automatically install macOS updates Automatically install app updates from the App Store Restrict software updates to administrator users only Automatically check for updates Automatically download new updates when available Automatically install configuration data Automatically install system data files and security updates   MacJutsu.Super <key>AuthJamfComputerID</key> <string>$JSSID</string> <key>InstallMacOSMajorUpgrades</key> <true/> <key>InstallMacOSMajorVersionTarget</key> <strin

Hello everyone. We recently setup Kerberos SSO and are having some issues with it syncing passwords after a password change. Upon initial setup it works as intended. User logs in with their AD credentials, it asks for their AD password and their Mac password, it then syncs the password to match the AD password. However, when a user changes their password, they are able to log into SSO with their new password, but it never prompts to sync the mismatched passwords, so their computer still uses their old password.  Has anyone run into this issue?  Password sync is enabled and the system currently running into this issue is running 10.15.2

Hello  We have a group of iPads which need to have their time zone moved forward one hour. I'm using Jamf Pro Cloud version 11.11.1-t1731016358 and I have administrator rights. I've checked the configuration profile for this group of iPads and can't find the correct setting to specify the correct time zone. There is only the setting Restrictions - Functionality - Automatic Date and Time setting, which doesn't allow me to set a specific time zone. Can you please tell me how to change the time zone setting in Jamf Pro Cloud interface? Thank you.

Has anyone had success setting up SMTP in JSS using Google's SMTP relay? We are struggling to find settings that work. This is the doc I'm referencing: https://support.google.com/a/answer/2956491?hl=en

Can anybody share what smart group criteria you're using to see what mobile devices in the environment are using eSIM? Or is eSIM compatible? 

Hi Nation,  We have an issue with keychain while we are trying to make google chrome as a default browser via our prestage script. So, basically we have two scripts: 1. PreStage script (trigger set to immediately after the enrollment) 2. Script 1 enables another trigger which sets google chrome as a default browser.  We are using Jamf setup manager to install chrome.  The first script looks like this   #!/bin/bash # Initial PreStage Script # This script runs a manual policy trigger to # allow the policy or policies associated with that # trigger to be executed. waitForSetupToFinish() { # Wait until setup is complete and the user is logged in. logToFile "Waiting for Setup to complete" currentUser=$( scutil <<< "show State:/Users/ConsoleUser" | awk '/Name :/ && ! /loginwindow/ { print $3 }' ) while ( [[ $currentUser == "_mbsetupuser" || $currentUser == "loginwindow" ]] || ! ( (pgrep -x "Dock") && (pgrep -x "Finder") ) ) ;

Hi, Can anyone please help me with this??We had a restriction payload to delay major macOS for 90 days, which is working fine even more than we wanted. Since it has been more than 90 days after the release of macOS 15, this should be available to update for every device. But macOS 15 is still not showing up when trying to update! I thing I did was, I modified the same profile but only disable ChatGpt integration didnt change macOS Settings and re-pushed the same profile couple of days ago. JAMF Support confirms that re-pushing the same profile for macOS restrictions doesnt restart the timer, as this timer is depend on the release date by Apple. Really lost in here! And btw we dont have any profile controlling the macOS except disabling the macOS betas.

Is there any way to detect if a computer was enrolled through User Initiated Enrolment? JAMF Pro Cloud 10.610.13.4 Clients the only way I can think of is to use exclusions for other enrolment methods i.e DEP but I am very reluctant to use Exclusions.

We would like to create a Smart Group for computers that has IP addresses within xx.xx.243.1 to xx.xx.255.254. From other posts, we have the condition as IP Address Like xx.xx.243.x. However, this doesn't include all the IP within this DHCP range. How should we create the condition so it captures all IP within xx.xx.243.x to xx.xx.255.254 without creating xx.xx.243.x, xx.xx.244.x,...? Thank you!