Skip to main content

General Discussions

What your peers are saying about all things Apple

  • 10,000 Topics
  • 245,274 Replies
10000 Topics
glsmith
glsmithNew Contributor
asked in General Discussions
Return to Service 401 Unauthorized Error

Have one iPad that is getting a 401 Unauthorized Error when the Return to Service app is opened and tap Reset. 

140
glsmith
R
RilotNew Contributor
asked in General Discussions
All apps stuck on "Waiting for Licenses"

I just set up a new iPad for a teacher and after enrolment all apps that should be deployed are marked as Waiting for Licenses despite having hundreds available. Things I've tried to resolve: Restart iPad Refresh Apple VPP token Re-apply profiles Re-apply apps Reset iPad and re-enrol   Nothing works. Still stuck on "Waiting for Licenses". Does anyone have any ideas about what I should do to resolve this?

4560
R
R
ryan_wValued Contributor
asked in General Discussions
WiFi Profiles Reloading

Is anyone else seeing WiFi profiles reloading this morning in JAMF School?  We have a bunch of devices that seem to have lost their WiFi settings.  This is just a simple WPA2 PSK based profile.  On one device with the issue, in the middle of the night it shows the following in the activity log below.  Reinstalling the managed profile for the WiFi setting fixes the issue, but of course is a pain to do since you have to get them back on a working WiFi. Action: "Refresh profiles list" Status: "NotNow"  Target: "endusers ID" We have seen this happen at least one other time in the last year or so, but I don't recall exactly when.

00
R
J
JL85Contributor
asked in General Discussions
Can support EA for this script

Dear Team,I have a script to obtain all browsers extensions (Safari, Edge, Chrome and Firefox) the script is running well and I would like to use it as EA. Can any body give a hand? ThanksHere is the output [Warn] This script may not be able to access all user directories unless run as root. Safari Extensions: User: xxx, Name: com.adguard.safari.AdGuard.Extension, Id: TC3Q7MAJXF Chrome Extensions: User: xxx, Profile Name: Person 1, Name: Google Docs Offline, Id: ghbmnnjooekpmoecnnnilnnbdlolhkhi, Version: 1.78.1 Firefox Addons: User: xxx, Profile Name: default-release, Name: AdGuard AdBlocker, Id: adguardadblocker@adguard.com, Description: Unmatched adblock extension against advertising and pop-ups. Blocks ads on Facebook, Youtube and all other websites. Here is the scripts#!/usr/bin/env bash _arg_multilineField=$1 _arg_wysiwygField=$2 # Determines whether or not help text is necessary and routes the output to stderr die() { local _ret="${2:-1}" echo "$1" >&amp

160
shrisivakumaran
A
AMenard11Visitor
asked in General Discussions
dev-account-cdn.jamfnebula.com

I recently found traffic to dev-account-cdn.jamfnebula.com blocked by my firewall. Can anyone explain the purpose of this URL?  addr.dst in '3.166.192.91 is an AWS IP

00
agungsujiwo
Shwan
ShwanNew Contributor
asked in General Discussions
MACOS Sequoia BUGG~~

I have a script that worked before OS15. After updating to OS15, the script became abnormal. Even if it connected to the allowed SSID and obtained the IP address, it would turn off and on WIFI infinitely. The following is the script. Thank you for your help~~ #!/bin/bash# set the allowed SSID GUEST-VIPallowed_ssid1="GUEST-VIP"##Get the wireless port IDwifi_port=$(networksetup -listallhardwareports | awk '/Wi-Fi|AirPort/{getline; print $NF}')# current preferred SSID listssid_list=`networksetup -listpreferredwirelessnetworks $wifi_port | tail -n +2 | cut -c 2-`# current connected SSIDconnected_ssid=`networksetup -getairportnetwork $wifi_port | cut -c 24-`# clean up ssidIFS=$'\\n'for ssid in $ssid_listdoif [ "$ssid" != "$allowed_ssid1" ]thennetworksetup -removepreferredwirelessnetwork $wifi_port $ssidsecurity delete-generic-password -a $ssid -D "AirPort network password"#echo $ssid Not allowed, and removed#else#echo $ssid is allowedfidone if [ "$connected_ssid" != "$allowed_ssid1" ]thenne

250
Shwan
S
SchneabbyNew Contributor
asked in General Discussions
Deploying Office Apps via PKG file / policy

So I’m trying to install office apps and I tried going through the Mac Apps and it worked on all our test laptops but after that it was very very spotty and mostly unsuccessful so I’m trying to find ways around that now.  I then downloaded the pkg files for teams outlook and onedrive and applied them via a policy setting it to continually check in. So far nothing.  What am I doing wrong?

200
Bol
R
rhooperValued Contributor
asked in General Discussions
Restrict Multiple apps with one Policy

Hey all,A non-scripter, knows just enough to be dangerous, tech here with a question.I have attempted a search for over three hours for a method to restrict multiple applications using one Restriction policy.We need to block Chrome, Firefox, Opera, Chromium Browsers on multiple devices. I tried adding in each of these apps in the 'Process Name' box separated by Semi-colons, Colons, Comma's and it does not work. As seen in the attached image.Besides adding 25 devices into a separate restriction policy, I see no means of performing a mass restriction. These separate restrictions are going to have to suffice for now, but what an administrative nightmare it is causing. Any help is appreciated.Maybe a feature request is in order with multiple add lines?

110
PRanxter
M
Mouthbaten_1911Contributor
asked in General Discussions
How to prevent users from signing in downloading from App Store.

Hello, I am looking for a way for users not to sign in to the App store and download any apps. Is that possible via Jamf?

210
agungsujiwo
S
sekwila
asked in General Discussions
iOS DEP Enrollment: "Unable to Download Profile Configuration" error

We have this bug for over a week, Jamf Support couldn't solve it yet.We could enroll around 40 iPads without any problems, but suddenly, this error "Unable to Download Profile Configuration" pops up after continuing the DEP Enrollment process on every iPad. We tried our school wifi and multiple mobile hotspots.We tried renewing the DEP token, ASM connection, unassigned the devices from MDM and reassigned them in Apple School Manager, but no luck yet.See the attached screenshot:It says: "An internet connection is required to download the configuration for this profile. To continue, you can try again or choose a Wi-Fi network. Options: Try Again or Choose Wi-Fi NetworkUsing the latest Jamf (hosted) 10.47.0.Any help is greatly appreciated.

3720
agungsujiwo
A
alexjdaleContributor
asked in General Discussions
Get JSS ID locally via script?

Is there a way to get the JSS ID of a system locally via script (is it stored anywhere on the client)? I am working on some API data upload scripts and want to get the JSS ID of a system locally, since that is the best unique identifier for the JSS DB and every system has one. I don't really trust serial number or name 100%.

410
Bretterson
M
MCfreizNew Contributor
asked in General Discussions
stuck on "Upgrading Self Service.app..."

i have a client thats not checking in so i ran a jamf policy from terminal and its stuck on "Upgrading Self Service.app..." any way around this?

20
mattjerome
emadams
emadamsContributor
asked in General Discussions
I need a a way to automatically log out users

I have a large number of labs in our district and students will either walk away from their workstations at the end of class and rely on another student switch users or just lock their account and leave.  Both scenarios leave the student logged in.  This can create some issues when attempting to use remote commands so I am looking for a configuration or script that I can deploy that will log users out.  I would think the easiest way to do this is deploy something at the end of the day.  Just wondering if anyone has something they are using that they like.

1490
emadams
C
cyberotterNew Contributor
asked in General Discussions
Using API to Unmange Computers and Remove MDM Profile

Hi there! I'm tasked with migrating our devices from Jamf to WorkspaceONE. Working on a migration script to unmange computers automatically and have the user install an MDM profile for automated enrollment.  My issue is the JamfPro API Command to UnmanageDevice. Its just not going through. Here is the command I am using:  curl -X POST --header "Authorization: Bearer $bearer_token" "$JamfProURL/JSSResource/computercommands/command/UnmanageDevice/id/$DeviceID" The variables are working for everything else so it can authenticate into jamf and pull the device ID using the computers serial number, but this is the main blocker. Below is the response I get: <html> <head> <title>Status page</title> </head> <body style="font-family: sans-serif;"> <p style="font-size: 1.2em;font-weight: bold;margin: 1em 0px;">Not Found</p> <p>The server has not found anything matching the request URI</p> <p>You can get technical detai

1130
C
A
AN_MNew Contributor
asked in General Discussions
Unmanaging Macs via Script

Hi All, I just need some assistance with unmanaging Macs through a script which is ran using a policy via Self Service. Our goal is for end-users to run this script themselves to unmanage the device (and lifting all the restrictions) without erasing the device. We have a mix of MacOS Monterey, Venutra and Sonoma. We have noticed that removeMDMProfile no longer works for MacOS Venutra and higher (I think because of Apple's updated security) but it has been working for MacOS Monterey. This is the script we are using at the moment:     #Remove JAMF echo "Deleting JAMF..." 2>>$Result_path 1>>$Result_path sudo /usr/local/bin/jamf removeMdmProfile 2>>$Result_path 1>>$Result_path sudo /usr/local/bin/jamf removeFramework 2>>$Result_path 1>>$Result_path sudo /usr/local/bin/jamf -removeFramework 2>>$Result_path 1>>$Result_path MDM_UUID=$(sudo profiles -Lv | awk '/attribute: name: MDM/,/attribute: profileUUID:/' | awk '/attribute: profileU

280
karthikeyan_mac
mbayhylle
mbayhylleContributor
asked in General Discussions
Enable Location Services on a per App Basis Without Admin Privileges

Any MacOS device that's released into our production environment has location services enabled in the operating system. However, there has been a request to enable location services in Apps such as Chrome and Siri, which require admin privileges to unlock the Privacy settings. Is there any way this can be done via configuration profile or script? If this has already been answered, I apologize. I can't find anything on doing this on a per app basis though.

1740
L
L
liubkkkk0New Contributor
asked in General Discussions
Configuration Profile status "Cancelled", what does it mean?

I'm distributing a configuration profile to users with rules for their password and I'm seeing a "Cancelled" status on some of them, about 7%. At first, I thought that it was something similar to the alternative status "Pending" and among the list of those with such a status are devices that have access to the Internet. After that, I tried to redistribute the profile again and one of the devices instantly got the "Cancelled" status, even though it doesn't have internet access at the time of getting that status.What does it mean? is there any way i can fix this?

920
SMR1
M
mpittcasdContributor
asked in General Discussions
The Configuration for your iPad could not be downloaded

Seeing this message on an old iPad Air so I'm not sure if that's the problem. User installed some kind of update but it's stuck at the Remote Management screen when connecting to JAMF. The error message continues "The configuration is not available".    Reading through a lot of the other posts with a similar message when enrolling. I've so far tried removing it from pre-stage and adding back then waiting, I renewed the token from ASM as well as uploaded a new token from JAMF back into ASM. Our pre-stages don't have any certificates with them that would need updated like what fixed some others. I also erased it completely with a restore and update but still get stuck. Is this iPad too old? Maybe it's a different issue? I haven't seen this before but none of our other iPads are having problems.

430
L
N
nguyenhungNew Contributor
asked in General Discussions
Lock device to one specific app

Hi, i am locking my device to a specific app over time, but when the lock time expires the device is still locked to that app without exiting that app. Does anyone in the group have this problem, can you tell me how to handle it?

80
agungsujiwo
BrandonAmos
BrandonAmosContributor
asked in General Discussions
Slack and Jamf Pro

I am trying to follow the HCS guide to allowing Jamf Pro to send notifications for Slack, but under the channel, there is no "send emails to channel" under the integrations tab. Is there something that needs to be set up first? I have the Pro plan; does it have to be a higher plan?HCS Guide

40
hüseyinusta12
C
chadlawsonContributor
asked in General Discussions
Long Shot: Fixing a macOS Push Cert Issue

I recently took a full-time position with a company for whom I used to consult on their Jamf instance. It had been a little over a year since I was on the system and in the meantime there had been a few other people with their hands inside it though it was mostly perceived as stable and left alone.But I recently discovered that in the intervening year, the APNS cert had expired. A new certificate was created (with a different AppleID) and the handful of iOS devices were re-enrolled. Since the Macs were still checking in, it was assumed that nothing needed to be done.I managed to find the original AppleID and found the cert under that login had been renewed at the same time. But it was the cert with the new login was uploaded to Jamf instead.I have both certs downloaded and I created an extension attribute to determine which computers have which cert topic. Of the computers that have reported in, it's almost 50/50!So I have a large number of computers that are still checking in but not

130
agungsujiwo
Shwan
ShwanNew Contributor
asked in General Discussions
macOS15 Sequoia BUGGGG!!!

I have a script that worked before OS15. After updating to OS15, the script became abnormal. Even if it connected to the allowed SSID and obtained the IP address, it would turn off and on WIFI infinitely. The following is the script. Thank you for your help~~我有一个在OS15之前运行正常的脚本。在升级到OS15之后，脚本变得异常。即使连接到允许的SSID并获取了IP地址，它也会无限循环地开启和关闭WiFi。以下是该脚本。谢谢您的帮助~~我有一个在OS15之前运行正常的脚本。在升级到OS15之后，脚本变得异常。即使连接到允许的SSID并获取了IP地址，它也会无限循环地开启和关闭WiFi。以下是该脚本。谢谢您的帮助~~我有一个在OS15之前运行正常的脚本。在升级到OS15之后，脚本变得异常。即使连接到允许的SSID并获取了IP地址，它也会无限循环地开启和关闭WiFi。以下是该脚本。谢谢您的帮助~~     #!/bin/bash #！/bin/bash #！/bin/bash #！/bin/bash #！/bin/bash#!`/bin/bash` 文件内容： ```bash #！/bin/bash #！/bin/bash #！/bin/bash #！/bin/bash ```#!`/bin/bash` 文件内容： ```bash #！/bin/bash #！/bin/bash #！/bin/bash #！/bin/bash ```#!`/bin/bash` 文件内容： ```bash #！/bin/bash #！/bin/bash #！/bin/bash #！/bin/bash ```         # set the allowed SSID GUEST-VIP设置允许连接的SSID为“GUEST-VIP”。设置允许连接的SSID为“GUEST-VIP”。设置允许连接的SSID为“GUEST-VIP”。     &nbsp

100
Shwan
W
WgphotoContributor
asked in General Discussions
Jamf Sync app

Hey, guys. Started testing Jamf Sync app, since Admin is going away (gone?). I was checking out the documentation and the latest bug fixes list that the upload timeout was changed to an hour to accommodate large uploads, but does not solve issue with files larger than 5GB on a JCDS2 distribution point. This concerns me as my most frequent uploads are Adobe apps and they typically are larger than 5GB. I have not had much success with the web upload of these installers in the past, which is why I continued to use Admin. I am attempting an upload now using Jamf Sync, but I suspect it may just fail as package is larger than 5GB. Progress bar isn't doing much either. What have your experiences been?Bug fixes• Changed the timeout for uploads to an hour to solve an issue with large uploads. This does not solve the issue with files > 5 GB that are uploaded to a JCDS2 DP. 

420
leslie_h
S
sharif_khanValued Contributor
asked in General Discussions
Cortex 7.7.2 Deploy via JAMF

Hi EveryoneI hope this document will help everyone who use Cortex in their environment for mac and manage via JAMF Pro. You can deploy cortex via Jamf. It is pretty simple and straight forward. All you need to follow PaloAlto Networks document: https://docs.paloaltonetworks.com/cortex/cortex-xdr/7-7/cortex-xdr-agent-admin/cortex-xdr-agent-for-mac/install-the-cortex-xdr-agent-for-macos. Here you will find they have already pre-configure MDM profile for Cortex one for M1 and another one for non M1. you will get all those here: https://docs.paloaltonetworks.com/cortex/cortex-xdr/7-7/cortex-xdr-agent-admin/cortex-xdr-agent-for-mac/install-the-cortex-xdr-agent-for-macos/install-the-cortex-xdr-agent-for-mac-using-unified-configuration-profile#id945ae538-41d5-4b65-ad37-233fd665e992. After download unsigned one upload to your Jamf pro and make some changes as required and follow the document if needed. After upload profile scope your machine to have them on endpoint before corte

560
A
T
TraianNiculaiContributor
asked in General Discussions
Intune integration stuck and require to register again

Hello, We just started to implement Jamf and we want to configure Jamf integration with Intune. All the policies are in place and we are using company portal to make the enrollment. The issue here is that, after we run the Microsoft Intune Integration from Self Service, we have to login in company portal, after finishing the Company portal the user is prompted with this:If you click continue, you will have to make one more Azure sign in, but the login screen will get stuck after entering your password. My guess is that it get stuck due to system asking you if you want to save the password. The only workaround I found is to close the screen, sign in to Jamf and redeploy the integration script. This time, the enrollment will be done because you are no longer prompted to save the credentials. My question is: Is there something we do wrong or can this be solved? Regards,Traian

60
T

Want to write for Tech Thoughts?

Earn a cool badge and Jamf Nation Reward Bytes for your published articles. We’re looking forward to your submissions!

Submit A Blog Post
Terms & ConditionsCookie settings