Skip to main content

General Discussions

What your peers are saying about all things Apple

  • 10,000 Topics
  • 245,057 Replies
10000 Topics
L
longianNew Contributor
asked in General Discussions
Adding mobile device app through VPP creates duplicate entries

We have one VPP account hooked into our jamf pro cloud install. We did originally have an additional site set up which would create an global entry and an additional entry for the second site, but that was an inherited mistake which was since fixed. A couple of weeks ago I went through and started removing old apps or apps with no scope. Once there were fewer entries, I noticed that every time I added a new app to the Mobile Device Apps list, it would create an extra duplicate entry with the default options. We normally only do auto-install, but there's always a duplicate entry for the same app set to Make Available in Self Service with no scope. Why is this happening and how can I fix it?

220
D
M
mouse0318
asked in General Discussions
jamf2snipe: where to find personal recovery key subset

Hey, We need to upload the personal recovery key from jamf to snipe using the jamf2snipe script. Any idea where i can find the subset to this? Thank you!

20
Shyamsundar
mosermat
mosermatContributor
asked in General Discussions
Build a Custom MacOS Dock

Hey Jamf Nation!Do you need to create a custom MacOS Dock for your users?I created a guide for the Jamf community, complete with scripts and packages, to help you do that.After struggling to find a current, working solution I decided to build one myself. Since it took some time to make, I thought I'd share it with others that are looking to do the same thing. Hope it's helpful!GitHub Repo with Full Guide Here: https://github.com/bluemoosegoose/Build-a-Custom-MacOS-Dock Some info about it:This Guide allows you to craft a custom MacOS dock for your environment, written specifically for Jamf Pro Admins.Verified working on Monterey 12.3.1 and should be backwards compatible.The custom dock will be built once, on first login, for any user that logs in to the Mac.After the dock has been built once, it will not run again automatically, which is the intended behavior because we want our users to have our custom dock during onboarding and then give them the ability to make ch

1070
T
U
user-WLU
asked in General Discussions
Jamf Pro Inventory preload

Hi everyone, I have a question about removing a device from inventory preload. for example, there are 10 devices in preload. I selected one of them and click delete it, will this action will delete the rest of 9 devices? just wanted to make sure the action only remove the devices I selectedBest Regards

80
Shyamsundar
D
darshanhira
asked in General Discussions
Darshan Hiranandani : can I use grep to find a profile with a name that consists of multiple words?

I’m currently developing a remediation policy for Self Service that triggers the uninstall and reinstall of a profile. While I can successfully remove and reinstall the profile, I need a verification step to check if the profile was reinstalled. I'm using the following command:bashprofiles show -o stdout | grep "ProfileDisplayName = "$profileName"" | /usr/bin/awk '{print $3}' | sed 's/[[:punct:]]//g'This works perfectly for single-word profile names, like "Zoom," but fails with multi-word names, such as "Zoom Profile," resulting in "no such file or directory." I’ve tried enclosing the profile name in both single and double quotes, and using "${profileName}", but nothing seems to work.Could anyone suggest how to modify the command so it successfully handles profile names with more than one word? Here’s the function I created for verification:bashfunction checkInstall() {installed=$(profiles show -o stdout | grep "ProfileDisplayName = "$profileName"" | /usr/bin/awk '{print $3}' | sed 's/

80
Shyamsundar
PPAict
PPAictContributor
asked in General Discussions
App Installers + Installomator policies: Self Service redundandcy issue

Hi, as was suggested to me, I'm trying to use a hybrid solution to take advantage of App Installers with regards to the management of updates, and the installomator policies for initial provisioning, as Mac Apps have an important delay for installations when executed in Self Service.However, I have a simple but annoying issue in the Store, as in the "All" category, I see both installation options, even if I clearly deactivated all the Self Service Categories on Mac Apps Self Service tab. How can I handle this? The "All" category doesn't seem to be removable, so I ask those who make these two options coexist how they handle this annoying redundancy on self service.

210
PPAict
Asifahmed
AsifahmedContributor
asked in General Discussions
Mac devices are not speaking to Jamf after re-enrollment by UIE and mail invitation

Hello Team, I reenrolled few macs in Jamf using by user initiated enrollment and mail invitation to end users but before going to re-enroll l those macs I never deleted their devices entry from Jamf console, I just ran "sudo jamf removeframework" on those macs and did clear all existing profiles and then did hit the URL of Jamf and followed by /enroll and provided by credential and downloaded CA certificate and MDM profile and installed those two. I can see all applicable configuration profiles are deployed but device are not speaking to Jamf console, if I run the command "sudo jamf recon" then it is saying command not found. What is the solution here I dont want to reenroll those macs back again to Jamf.

340
Shyamsundar
S
sramNew Contributor
asked in General Discussions
Macs not fully enrolling / self service not installing / management framework missing

Right. Where do I begin.... I am going to try and be as constructive as possible rather than just complaining. We've been running Jamf Pro (currently 11.4.2) for almost two years. Since day one we had issues with out of the box or EACAS Macs fully completing enrolment. The usual state they would end up in was for the profiles to install fine, VPP apps to install, etc, but for no policies to run nor for Self Service to install. When I looked on Jamf Nation and other sources I saw that this can sometimes happen and so because I'm a scripting god I came up with an amazingly complex script that is installed as part of an PreStage Profile's enrolment package workflow. The script does the following:/usr/local/bin/jamf policyThis immediately caused enrolment to complete, the Self Service app appeared in /Applications and everything was once more right in the world. A reboot would achieve the same, but we didn't want to randomly reboot the Mac halfway through enrolment or ask the user to

1960
FutureFacinLuke
K
Karl941Contributor
asked in General Discussions
Another way to change and deploy Desktop background

Hi Community,I am just sharing here another way of deploying silently a new Desktop Background to Mac computers without using Script install, Desktoppr or a Configuration Profile. This workflow is compatible from Catalina to Monterey Beta.Place your_image.png into /Users/SharedOpen Automator app on macOS Big SurCreate New application projectChoose in Library 'Get Specified Finder Items" and select your_image.png (located in /Users/Shared)Add "Set Desktop Picture" in Automator libraryExport your Automator project > Save (ideally sign it) into /Users/SharedOpen Composer appDrag and Drop your Automator.app in it (from /Users/Shared)Add from Users/Shared folder in Composer your_image.pngSelect Script and Post-InstallCopy paste this simple script belowBuild and sign your packageCreate your Jamf Policy to deploy it  #!/bin/bash open /Users/Shared/Your_Automator.app sleep 10 rm -R /Users/Shared/Your_Automator.app rm -rf /Users/Shared/Your_Image.png  

210
K
BrandonAmos
BrandonAmosContributor
asked in General Discussions
Jamf Return to Service Problems

When I run the application on the iPad, it will wipe and reconfigure itself fine with all of the applications but does not retain the name or the username/email. How do I get the username/email and the device name to stay the same on enrollment?Ex. Name: iPad 1username: name@yourcompany.comWhen it wipes, the information above will be removed from Jamf Pro. How can I make it stay? 

200
aderrick
T
TWFContributor
asked in General Discussions
Disable Data Collection Features in Firefox

Hello fellow Jamf Admins,I have a request in from our InfoSec team to disable the data collection features within Firefox. I have tried pushed config profiles with custom settings to turn them off. Here's the output:<key>DataCollection</key><dict><key>Experimentation</key><false/><key>HealthReport</key><false/><key>Submission</key><false/><key>Telemetry</key><false/></dict> Firefox is not changing the settings though. It seems to not care about the plist at all. Has anyone run into an issue like this and if so, how did you get Firefox to behave? Thanks in advance!

120
T
M
mrrobertbussContributor
asked in General Discussions
Forcing updates using the new Software Update feature

Is it just me or is this forced update feature not working for you too? NothIs it just my system or is this not working for you too? Updates do not get forced and we are all on Sonoma.  

1060
mvu
A
Anonymous
asked in General Discussions
Need API Help - Return to Service

Hello,I have extensive experience with Jamf Pro but one area I've never touched is the API. But now with the release of Return to Service (via the API) I want to at the very least script something so that I can use this feature to eliminate some of the tedious work.I work at a school and as such have hundreds of devices to erase every school year and its very time consuming to manually enter Wifi credentials on all of them after wiping to re-enroll with Jamf Pro. Can someone help me with a script that will automate this process using the Return to Service API??? It would be much appreciated. Thanks!

320
Ecco_Luke
M
mmobinNew Contributor
asked in General Discussions
Darktrace cSensor Extention Attribute

We have had the Darktrace cSensor running on our macs for months. I am currently tasked with creating a report that pulls in all machines with DT sensor and its running. I found a script that I could use with extension attributes to report that the sensor is installed and running, but it does not pull any data once it's set up as the exention attribute. I can run this script in a local bash environment on my mac and it seems to report that sensor is running on my mac. #!/bin/bash# check for processPROCESS=$( pgrep Darktrace\\ cSensor )#see if process is runningif [[ -z "$PROCESS" ]]; thenRESULT="Not Running"elseRESULT="Running"fi#report resultsecho "<result>${RESULT}</result>"

60
M
D
dhausmanValued Contributor
asked in General Discussions
Jamf Server logs issue on windows server

Is anyone having trouble with the Jamf Server logs not actually logging?   I have a support ticket open (CS0951135) for this because I think the log4j2.xml file is not setup correct, it was broken before in 10.45, but stuff has changed in that configuration file and it is even more broken in 10.46. I am in a windows server environment, and installed using the jamf windows installer. I am installing it on the D drive on my Jamf server and not on my C drive, but I am using the installer to do all of this, so not doing anything special.  Is there anyone else out there with windows using not the c drive for Jamf with this issue?

90
Davidmenk3
K
Knight_OwlNew Contributor
asked in General Discussions
Enrolling with Management Server Failed

Hello Jamf Community, We are currently in the process of setting up an on-premises Jamf server but have encountered an error. The computer begins to enroll with the MDM after entering the user credentials in Remote Management, then retrieves enrollment profile, begins to install enrollment profile, then gives an error. The error: Enrolling with management server failed. Unable to contact the SCEP server at https://our-server-domain.local:8443//CA/SCEP  Has anyone experienced this issue, or know what is causing it and how to fix it? Also, I am not sure why it is inserting two forward slashes after the port and before CA: 8443//CA. Any and all help is greatly appreciated. Thank you.

390
Davidmenk3
P
paddersNew Contributor
asked in General Discussions
Is there a way to prevent users from changing the private IP address setting on MacOS 15?

Hi all, we're looking into managed Wi-Fi network settings for our MacOS 15 devices when users begin upgrading (deferred for the full 90 days), but within the network payload settings or the restrictions settings there is no way to disallow the users ability to change the private IP address back to fixed or rotating. The "Disable MAC Address Randomization" works when we deploy a network to machines, but users can still just go into settings and enable this. Any ideas or have I just missed a simple setting somewhere? This is early days and we still have until December before our users start upgrading.

510
P
N
nick_preskoNew Contributor
asked in General Discussions
Content filter or Jamf Safe Internet or both

Cannot find this answer anywhere. We currently have Jamf Safe Internet but prior to that we utilized the content filter in Jamf Pro via configuration profile. When we implemented JSI I was never told I had needed to, or if was recommended to, disable the JAMF Pro content filter. So now when I am making changes to the allow/block list I am not sure if one is interfering with the other. What is best practice?

60
M
M
mathewsl05New Contributor
asked in General Discussions
Login Items- Allow in Background toggles

We want these to NOT be able to be toggled off, even by an admin - ideas?

210
dlondon
L
lfriedoNew Contributor
asked in General Discussions
Report or List of all failed commands

Is there a way to get a report or list of all failed commands for our mobile devices in Jamf Pro.  Whenever I go to a device for any reason I often find failed commands from several months ago and manually clear those.  But it would be nice to be able to know all the devices with failed commands so I can look at what failed without having to go to each device individually.

450
J
JamfAdmin2
JamfAdmin2Contributor
asked in General Discussions
Passwords

Hello, Is it possible to block the passwords app within Mac OS Sequioa I tried to block it through a config profile and also a policy but I’ve had no luck is this an app that can be blocked or no? 

170
os-tech_r828
C
cgalikContributor
asked in General Discussions
Removing App Library icon from dock in iOS 15

Does anyone know if there is a configuration profile I can use to turn off Settings -> Home Screen & Dock -> Show App Library in Dock?  I see iPadOS 15 decided to add this "super helpful feature" for us and defaulted it to on, of course.  It ignores my Home Screen Layout profile and puts it in the dock anyway.

410
I
AndrewWilliamso
AndrewWilliamsoNew Contributor
asked in General Discussions
AirDrop not working on MacOS 14 Sonoma

Hey folks,Since updating our inventory of MacBooks to MacOS 14 Sonoma, users have noticed weird behaviour with Airdrop that was working correctly on MacOS 13.x. From the jamf-managed MacOS 14 MacBook, users can:Airdrop TO Jamf-managed iPad (iPadOS 17.0.3)Airdrop TO non-managed personal iPhone (iOS 16.7.1) However, airdrop is not working in the other direction. If the other devices are not signed into the same iCloud account, the MacOS device is not even visible as an available device to airdrop to (visible to everyone settings are enabled). If the devices are signed into the same icloud account, the MacOS device will be visible as an Airdrop target, but actually sharing a file will timeout and fail. All of these devices (including jamf-managed MacOS) are able to Airdrop TO a personal non-managed MacOS 13.4 device We have no Configuration Profiles restricting use/access to Airdrop. Airdrop settings are set to 'visible to everyone' on all devices. The issue only

930
DimitriK
B
blackholemacValued Contributor
asked in General Discussions
Math Notes Calculator app iOS 18 Jamf Pro

This is going to sound lame, but how do I turn off this new feature using a Jamf Pro config file? We are Jamf Cloud hosted so we currently have the newest shipping version of Pro. Given that we are in a school setting, our teachers don't want a student using the new functionality on an iPad to get things done for them on say a math test. I'm told that Jamf Teacher might offer this capability, but I want to know all the ways to possibly control this including from the centrally-set side.

170
B
M
myuContributor
asked in General Discussions
Jamf App Catalog Apps installation delay

I've tried moving all of the apps that use Policies to install to use Jamf App Catalog instead (if they are present). What I noticed is that the apps take a long time to install when re-provisioning a Macbook. Sometimes it would take 3 days before the apps would show up as installed on the Macbook. Is this delay normal? Is there a setting to force it to install immediately after enrolment just like it did with Policies?

1060
PPAict

Want to write for Tech Thoughts?

Earn a cool badge and Jamf Nation Reward Bytes for your published articles. We’re looking forward to your submissions!

Submit A Blog Post
Terms & ConditionsCookie settings