Might anyone have any tips on how to better handle some of our popular apps like MSFT Authenticator, Outlook, and Teams that were deployed with the Remove on Unenroll restriction set to on? With a migration coming up we would want these apps to remain on the device through a soft MDM wipe.  We may be looking at a complete removal/uninstall/reauthentication of the applications which is not a fun user experience. I will be testing a few more scenarios but want to make sure I’m not missing something.  Thanks in advance.

We seem to have Macs already enrolled being added again into Jamf somehow, but since the entry is already there it overwrites the original hostname and adds a () at the end. These Macs are not being enrolled a second time, this appears to be random duplicate entries. A fellow jamf/mac admin I work with had this happen to his mac today and he had done nothing out of the ordinary to it, so we searched and found several entries shown below. I did a search for (1) - (10) and found multiple for each. XXXXXXXXXXC32P (10) XXXXXXXXXXXJT4 (2) XXXXXXXX647 (2) XXXXXXXXYWP (2) XXXXXXXXXX9VH (2) XXXXXXXXXNL9 (2) XXXXXXXXGH5 (2) XXXXXXXW9QG (2)

I currently have the script to try and uninstall python3 in Homebrew:   sudo brew uninstall python3   and keep getting the error "sudo: brew: command not found". I've also tried the command /opt/homebrew/bin/brew uninstall python3 and run into the error "Running Homebrew as root is extremely dangerous and no longer supported.As Homebrew does not drop privileges on installation you would be giving all build scripts full access to your system." I'm certain that Homebrew and python3 (via Homebrew) is installed on the device I'm pushing this script to. Is there another way I should be running uninstall commands for Homebrew? 

Hello,I am getting this message when I attempt to uninstall or install Netskope from Jamf, which prompts me to elevate.I have given both the Netskope and the Remove Netskope Client full disk access.I am using the uninstall script for Jamf, provided by Netskope on their download page.I don't know what more I can do to prevent the pop-up. Help? 

Just wondering if anyone has some experience with Analog Lab Pro (formerly Analog Lab V).  It's for some fancy midi keyboards.  (https://www.arturia.com/store/hybrid-synths/keylabessential49mk3) There seems to be a serial number and activation code needed for the software but they want to use them in classrooms so I'm trying to understand how the activation works.  If they can all be activated through the same account, then that might work on multiple machines, just not sure.  I just don't want to blow a bunch of codes finding out how it works.I have emailed their support too but suspected someone here might have come across this already.

We have Jamf LAPS enabled for a PreStage account and a jamf binary account. For an unknown reason the PreStage account keeps getting locked out and requires a password change. When I run this command: usr/bin/pwpolicy -authentication-allowed -u prestageadminuser   I get this return:  User <prestageadminuser> is not be allowed to authenticate until password is changed: Credential verification failed because account is temporarily locked. Sometimes I get this return User <prestageadminuser> is not be allowed to authenticate until password is changed: Password change is required by authentication server. I've gotten this result with and without a config profile for passcode. From the terminal sometimes I am able use the command "login prestageadminuser" with theLAPS password and it will prompt me to change the password.  Sometimes it does not take the LAPS password at all.   I do not have any problems with the jamf binary account LAPS.

Has anyone recently packaged Nvivo 14.I have captured the application and sorted out the license side of things and the PPC config required.Have people come accross this issue  NVivo 14” cannot be opened because the developer cannot be verified.Appreciate this can normally be handled by excepting it from Privacy a security window. However this isn’t really workable for a full site deployment. Has anyone found a soultion to this I think it maybe how Im packaging it.ThanksTom

I just wanted to post this as it is an inconsistent issue I have come across. When a user changes their password using Jamf Connect, sometimes the 'New' Outlook for mac does not sync the change. I have found that if you toggle back to the 'Old' Outlook for mac it will restart and prompt Single Sign-On for the users password and then will begin to sync the inbox. You can then switch back to the 'New' Outlook if so desired. Hope this helps.

Hi all,  Has anyone attemped to push the ERB Secure Browser to MacBook Airs/Pros.  I am using Jamf Pro and have created a PKG through Composer.  I have successfully loaded it on to two computers. However, I get an error on other computers.  They are all from the Monterey to Sonoma OS. The error is as follows:  Attention Required Secure Browser may be running from the original file download location. This prevents certain functions, including automatic updates, from working properly.  Move Secure Browser to another location such as the Desktop or the Applications folder. Mind you, this lands in the Applications in Finder.  I had a faculty member also attempt to move it to the desktop but received the same error. Thoughts?

Hello community, Using Jamf Teacher I noticed a problem: Since all the management certificates have validation dates (for example until 2028), students can simply change the date on their iPads to 2029 and Jamf Teacher is unuseable, restrictions will not reach this iPad. (The student is also not able to use the internet oder other things, due to the wrong timestamp, but that‘s not the point) Reading a lot of threats here I noticed that I‘m not the only one with this problem, but I couldn‘t find my solution. Is there any way to set the time and date automatically on iPads? The best solution would be via a configuration profile, but I couldn‘t find any. I found some scripts for Macs, but do they also work for iPads (and how do I activate them for our iPads?   Thank you for your help 

Hiwe have recently pushed beyond trust jump clients to all our laptops via jamf . i can see the logs saying its successfully installed confirming from rep console establishing a remote session. however i am unable to see the app in the list of applications in jamf for any of the machines. , any idea why . Thanks

I'm testing scheduling OS updates in Jamf Pro 11.11.2. I have Software Updates setup to Download and Schedule to Install for the latest version based on device eligibility. I ensured that the bootstrap token is escrowed. On the target device I see a message that reads:Managed UpdatedAn update to macOS 15.2 is past due. You can install it now or it will be installed automatically 12/12/2024, 9:56am The issue is that the time keeps changing and it never get its installed. Any suggestions? 

As you might know, zoom works perfectly when doing media sharing while you have a web conference.Her now my issue: When I try screen sharing and select "Share computer sound" (on the picture, lower left corner), it will ask the very first when doing this for admin credentials. Do you know how can grant the app the respective permissions in order to have working right away without asking for admin rights? Thanks for your support.Thomas

I've created an EA with the script  #!/bin/bash echo "$(mdls "/System/Applications/Utilities/Terminal.app" -name kMDItemLastUsedDate | awk '{print $3}')" and running it on my device, it returns  2024-12-12 as expected. I then created a Smart Group with Criteria <Name of EA>, Operator 'after (yyyy-mm-dd)' and Value '2024-01-1'. Jamf returns a list of devices but I do not believe this list is accurate, as it does not include my device when I've been using Terminal all morning. Any suggestions on what could be happening or what I can do to improve its accuracy?  

Good morning!I did a search and couldn't find my exact question, so feel free to point me in the right direction if you know of anything...But I'm having an issue updating Jamf Connect in my environment. Because of the Launch Agent I'm running with it, it can't properly close and update and results in a very annoying, persistent pop-up asking to close the program that when followed, relaunches and pop-ups again until you restart the machine a few times.I'm reaching out because there has to be a better way. What's the easiest solution to ensure Jamf Connect is updated and not being disruptive to our users?Thanks!Joel

Hi Team, Apologies if this was ask before but I cannot find the proper process to unmanaged devices that are no longer on the network. A lot of conversation around using API and CURL command but as a none mac user, I cannot figure out how to use. I know it's not great to other people who work hard to post and reply to those query but i'm struggling to know what to use and how to use the API We use windows base system and servers and Jamf Pro cloud Can someone please help me? Thank you in advance Regards G_Man

Hey all,We have about 150 student iPads 9th gen that haven't updated to 18 because we used the schedule install command which requires at least 17 to be installed. What is the best course to get these iPads updated? Do I resend a plan in jamf to download and install and target just these iPads?Or does it make more sense to have out staff have the students update on device?

Is the calculator app new to ios 18? I never noticed it until I started updating ipads to ios18. Is there a way to remove/hide the calculator app with a configuration profile?   Thanks

Hi, Anyone using Jamf Protect to audit all file access (new/read/update/delete) on an attached storage device? If so, how are you setting that up?   Thanks

Hello,   We were trying to install iMovie to some laptops. We add the laptop to the scope of the imovie app catalog in jamf pro but nothing appears to happen. The app would not show up on the laptop after a few restarts and manual inventory updates. In jamf, the app shows in the scope of the computer but in the history tab there was no pending, failed or completed command that shows regarding the iMovie app. I went into this section in the image provided and in username box i typed in admin which is the local admin account we create on all managed laptops. After that the iMovie app downloaded on the laptop. Not sure if typing the admin account in the username was the solution but will   I have to do this to every laptop I assign the iMovie app? How can I avoid this and just make sure the app installs on all laptops in scope? Thanks  

Hi, I have quite a few macs with admin accounts on 10.13.6 that dont have a secure token (viewed by running sysadminctl command).I want to add the secure token silently without involving the user via ssh or someother tool, as i have seen the users of the machines have this secure token.I have tried sysadminctl -secureTokenOn "admin account" -password "password" but get Operation is not permitted without secure token unlock.i know that sysadminctl -adminUser user -adminPassword “password” -secureTokenOn "admin account" -password “password” Will probably do it but i cant go asking for the user password Does anyone know of another way?

looking for mac admins in the area to get together once in a while....let me know  if you are and we can set something up   Dan

Hello, Are there any alternatives to Apples Screen Time, more specifically the App & Website Activity section where we want to track data on how much time students are spending on apps. Not sure if Jamf Pro has any way to configure and collect the data or will we have to go through each students device and set it up and go to each device to collect the data?

We're looking into solutions for restricting users from download packages or software via Terminal. Just as an example, installing Homebrew via Terminal to install Python. Once users have access to Python, they are able to install and Python packages they please. It's been getting difficult to track who has Python installed and what sorts of packages installed as well. If a user installed Python via the Python website, we can see the installer listed in Jamf's app list for their device but found that if they installed it via Terminal, the only way to detect it is to run 'python3 --version' in Terminal to see if it returns a Python version. I'm exploring to see if we can restrict certain Terminal commands with an Admin password (such as restricting running the command that installs Homebrew). I'm open to seeing if Terminal can be completely locked down with an Admin password but would much like to explore other options first, if available. Has anyone else ran into something like this an

Hello We have started to enroll our macbooks for our employees without adminrights. Yes we have the privilege access configured in jamf connect, but don't want use it for everyone :) So i started to configure what is necessary for our employees that they can work without adminrights. So far so good. Now i am actually helpless with this one problem about creating a symlink via jamf pro policy after installation of Visual Studio code. What i need is: A symlink in the directory /usr/local/bin/code which points to /Applications/Visual Studio Code.app/Contents/Resources/app/bin/code   So i am able to create it, but it isnt working. Checking it on a testmachine the symlink shows me in the "get info" as "Original" the path /usr/local/bin/code  instead of /Applications/Visual Studio Code.app/Contents/Resources/app/bin/code   So its not the first symlink i create but its the first in this location /usr/local/bin/code so maybe i am doing something wrong. I am using this sho