I work in a High School where we are currently moving to a full Mac platform for both staff and students.  We are installing Apple TVs in every classroom as well for teachers to wirelessly project more easily.  The issue we are having is students in or out of the classroom will attempt to connect to the Apple TV during class which brings up the pin code.  The teacher is then stuck waiting for the code to time out before they can move on.  Just to note I have require passcode on for every connection to prevent previously connected students form highjacking the Apple TV as well.So I guess my question is, does JAMF Pro provide a way to prevent connections to an Apple TV if it is in use?  We are using JAMF 10.42.1 if that matters.  We are also using 4th gen Apple TVs

Forgive me if this has been posted and I've missed it. I've found similar issues but all were a few years old. I'm on Jamf Pro 10.25.1-t1602899070. We have seemingly lost our ability to name mobile devices. Specifically Apple TV's in this case though when I checked on an iPad that didn't work either. We still have access to the same steps. Inventory Tab - General - Edit - Enforce Mobile Device Name - change name - Save. All of that goes normally, however if we then look at the history tab we don't see the name change command in pending, completed, or failed. It's like it just disappeared. All other management commands are working normally. I've confirmed with my administrator (whom seems to be the only one that still can name them) that none of our team's rights have been changed. We first noticed it after going to the version we are on now but we don't know for sure if that's ultimately related or not. Any ideas?

So I think I have found a bug which affects Jamf Connect Login products from at least 2.29 and above. It seems that when the disable button for the Wifi is used on the Login screen it doesn't actually disable the Wifi.  The icon still shows blue and we have issues with users logging in as we have it set to only fallback to local for users when there is no network connection.  However, this doesn't turn off the Wifi and the user is stuck when attached to open Wifi points that require things like captive portals and such (not pure password logins.).  So if they reboot at some location like an airport or hotel where they have been using the wifi but not authenticated to pass traffic it will just hang and not validate with our IdP nor locally. We would like to keep policy so that when an active Wifi is there but also have the ability for users to turn off wifi completely if they have to authenticate locally. Anyone else seeing this problem too?

Hello,Not sure if anyone is experiencing the same issue as I but I am having inconsistent results when attempting to change a devices name, being the S/N when enrolled, to a more suitable "Room Name" - Inventory > General > Mobile Device Name. The Asset Tag seems to be the only name that sticks consistently. Some ways we have found to force the name change is to manually reset the device (a few times) and or push a remote reset, this option rarely works. However, I would say 70% of the time, neither option works. Just curious if this is a bug or if there is a sure way to have the name change stick. 

Has anyone figured out a way to remotely restart a managed Apple TV regularly or on a schedule?

I'm looking for any whitepapers or guidelines for deploying Apple TVs. I already have MacBook and iPads in my environment. Looking to add Apple TVs. Any information is greatly appreciated.

Have one iPad that is getting a 401 Unauthorized Error when the Return to Service app is opened and tap Reset. 

Is anyone else seeing WiFi profiles reloading this morning in JAMF School?  We have a bunch of devices that seem to have lost their WiFi settings.  This is just a simple WPA2 PSK based profile.  On one device with the issue, in the middle of the night it shows the following in the activity log below.  Reinstalling the managed profile for the WiFi setting fixes the issue, but of course is a pain to do since you have to get them back on a working WiFi. Action: "Refresh profiles list" Status: "NotNow"  Target: "endusers ID" We have seen this happen at least one other time in the last year or so, but I don't recall exactly when.

Dear Team,I have a script to obtain all browsers extensions (Safari, Edge, Chrome and Firefox) the script is running well and I would like to use it as EA. Can any body give a hand? ThanksHere is the output [Warn] This script may not be able to access all user directories unless run as root. Safari Extensions: User: xxx, Name: com.adguard.safari.AdGuard.Extension, Id: TC3Q7MAJXF Chrome Extensions: User: xxx, Profile Name: Person 1, Name: Google Docs Offline, Id: ghbmnnjooekpmoecnnnilnnbdlolhkhi, Version: 1.78.1 Firefox Addons: User: xxx, Profile Name: default-release, Name: AdGuard AdBlocker, Id: adguardadblocker@adguard.com, Description: Unmatched adblock extension against advertising and pop-ups. Blocks ads on Facebook, Youtube and all other websites. Here is the scripts#!/usr/bin/env bash _arg_multilineField=$1 _arg_wysiwygField=$2 # Determines whether or not help text is necessary and routes the output to stderr die() { local _ret="${2:-1}" echo "$1" >&amp

I recently found traffic to dev-account-cdn.jamfnebula.com blocked by my firewall. Can anyone explain the purpose of this URL?  addr.dst in '3.166.192.91 is an AWS IP

I have a script that worked before OS15. After updating to OS15, the script became abnormal. Even if it connected to the allowed SSID and obtained the IP address, it would turn off and on WIFI infinitely. The following is the script. Thank you for your help~~ #!/bin/bash# set the allowed SSID GUEST-VIPallowed_ssid1="GUEST-VIP"##Get the wireless port IDwifi_port=$(networksetup -listallhardwareports | awk '/Wi-Fi|AirPort/{getline; print $NF}')# current preferred SSID listssid_list=`networksetup -listpreferredwirelessnetworks $wifi_port | tail -n +2 | cut -c 2-`# current connected SSIDconnected_ssid=`networksetup -getairportnetwork $wifi_port | cut -c 24-`# clean up ssidIFS=$'\\n'for ssid in $ssid_listdoif [ "$ssid" != "$allowed_ssid1" ]thennetworksetup -removepreferredwirelessnetwork $wifi_port $ssidsecurity delete-generic-password -a $ssid -D "AirPort network password"#echo $ssid Not allowed, and removed#else#echo $ssid is allowedfidone if [ "$connected_ssid" != "$allowed_ssid1" ]thenne

So I’m trying to install office apps and I tried going through the Mac Apps and it worked on all our test laptops but after that it was very very spotty and mostly unsuccessful so I’m trying to find ways around that now.  I then downloaded the pkg files for teams outlook and onedrive and applied them via a policy setting it to continually check in. So far nothing.  What am I doing wrong?

Hey all,A non-scripter, knows just enough to be dangerous, tech here with a question.I have attempted a search for over three hours for a method to restrict multiple applications using one Restriction policy.We need to block Chrome, Firefox, Opera, Chromium Browsers on multiple devices. I tried adding in each of these apps in the 'Process Name' box separated by Semi-colons, Colons, Comma's and it does not work. As seen in the attached image.Besides adding 25 devices into a separate restriction policy, I see no means of performing a mass restriction. These separate restrictions are going to have to suffice for now, but what an administrative nightmare it is causing. Any help is appreciated.Maybe a feature request is in order with multiple add lines?

Hello, I am looking for a way for users not to sign in to the App store and download any apps. Is that possible via Jamf?

We have this bug for over a week, Jamf Support couldn't solve it yet.We could enroll around 40 iPads without any problems, but suddenly, this error "Unable to Download Profile Configuration" pops up after continuing the DEP Enrollment process on every iPad. We tried our school wifi and multiple mobile hotspots.We tried renewing the DEP token, ASM connection, unassigned the devices from MDM and reassigned them in Apple School Manager, but no luck yet.See the attached screenshot:It says: "An internet connection is required to download the configuration for this profile. To continue, you can try again or choose a Wi-Fi network. Options: Try Again or Choose Wi-Fi NetworkUsing the latest Jamf (hosted) 10.47.0.Any help is greatly appreciated.

Is there a way to get the JSS ID of a system locally via script (is it stored anywhere on the client)? I am working on some API data upload scripts and want to get the JSS ID of a system locally, since that is the best unique identifier for the JSS DB and every system has one. I don't really trust serial number or name 100%.

i have a client thats not checking in so i ran a jamf policy from terminal and its stuck on "Upgrading Self Service.app..." any way around this?

I have a large number of labs in our district and students will either walk away from their workstations at the end of class and rely on another student switch users or just lock their account and leave.  Both scenarios leave the student logged in.  This can create some issues when attempting to use remote commands so I am looking for a configuration or script that I can deploy that will log users out.  I would think the easiest way to do this is deploy something at the end of the day.  Just wondering if anyone has something they are using that they like.

Hi there! I'm tasked with migrating our devices from Jamf to WorkspaceONE. Working on a migration script to unmange computers automatically and have the user install an MDM profile for automated enrollment.  My issue is the JamfPro API Command to UnmanageDevice. Its just not going through. Here is the command I am using:  curl -X POST --header "Authorization: Bearer $bearer_token" "$JamfProURL/JSSResource/computercommands/command/UnmanageDevice/id/$DeviceID" The variables are working for everything else so it can authenticate into jamf and pull the device ID using the computers serial number, but this is the main blocker. Below is the response I get: <html> <head> <title>Status page</title> </head> <body style="font-family: sans-serif;"> <p style="font-size: 1.2em;font-weight: bold;margin: 1em 0px;">Not Found</p> <p>The server has not found anything matching the request URI</p> <p>You can get technical detai

Hi All, I just need some assistance with unmanaging Macs through a script which is ran using a policy via Self Service. Our goal is for end-users to run this script themselves to unmanage the device (and lifting all the restrictions) without erasing the device. We have a mix of MacOS Monterey, Venutra and Sonoma. We have noticed that removeMDMProfile no longer works for MacOS Venutra and higher (I think because of Apple's updated security) but it has been working for MacOS Monterey. This is the script we are using at the moment:     #Remove JAMF echo "Deleting JAMF..." 2>>$Result_path 1>>$Result_path sudo /usr/local/bin/jamf removeMdmProfile 2>>$Result_path 1>>$Result_path sudo /usr/local/bin/jamf removeFramework 2>>$Result_path 1>>$Result_path sudo /usr/local/bin/jamf -removeFramework 2>>$Result_path 1>>$Result_path MDM_UUID=$(sudo profiles -Lv | awk '/attribute: name: MDM/,/attribute: profileUUID:/' | awk '/attribute: profileU

Any MacOS device that's released into our production environment has location services enabled in the operating system. However, there has been a request to enable location services in Apps such as Chrome and Siri, which require admin privileges to unlock the Privacy settings. Is there any way this can be done via configuration profile or script? If this has already been answered, I apologize. I can't find anything on doing this on a per app basis though.

I'm distributing a configuration profile to users with rules for their password and I'm seeing a "Cancelled" status on some of them, about 7%. At first, I thought that it was something similar to the alternative status "Pending" and among the list of those with such a status are devices that have access to the Internet. After that, I tried to redistribute the profile again and one of the devices instantly got the "Cancelled" status, even though it doesn't have internet access at the time of getting that status.What does it mean? is there any way i can fix this?

Seeing this message on an old iPad Air so I'm not sure if that's the problem. User installed some kind of update but it's stuck at the Remote Management screen when connecting to JAMF. The error message continues "The configuration is not available".    Reading through a lot of the other posts with a similar message when enrolling. I've so far tried removing it from pre-stage and adding back then waiting, I renewed the token from ASM as well as uploaded a new token from JAMF back into ASM. Our pre-stages don't have any certificates with them that would need updated like what fixed some others. I also erased it completely with a restore and update but still get stuck. Is this iPad too old? Maybe it's a different issue? I haven't seen this before but none of our other iPads are having problems.

Hi, i am locking my device to a specific app over time, but when the lock time expires the device is still locked to that app without exiting that app. Does anyone in the group have this problem, can you tell me how to handle it?

I am trying to follow the HCS guide to allowing Jamf Pro to send notifications for Slack, but under the channel, there is no "send emails to channel" under the integrations tab. Is there something that needs to be set up first? I have the Pro plan; does it have to be a higher plan?HCS Guide