Skip to main content

General Discussions

What your peers are saying about all things Apple

  • 10,000 Topics
  • 245,059 Replies
10000 Topics
K
KarlifryNew Contributor
asked in General Discussions
MacOS Sanoma Remote Desktop

Hey everyone, new to Jamf here. We have a remote desktop app that requires us to allow access via the remote desktop setting in privacy and security (shown below). We have many remote machines and are trying not to have to enable it one by one. Anyone know if it's possible to set this in Jamf? I looked in the PPPC on our config profile but I don't see this "Remote Desktop" setting.   

920
J
A
abigailharry86
asked in General Discussions
How do I add custom fonts to Google Docs?

Upload the custom font to your Google Drive by opening Google Drive, clicking the “New” button, and selecting “File Upload.” Choose the font file from your computer to upload it to Google Drive. Once the font is uploaded, right-click on the font file, select “Open with,” and then choose “Google Docs.” 

8360
_Daley
M
mwu1876Valued Contributor
asked in General Discussions
Getting the username that's assigned in Jamf

Aside from getting the logged on user, what'a a way to get the username that's assigned to the computer in Jamf? I would like to use it for a policy script.

500
M
A
Anonymous
asked in General Discussions
Extension Attribute for Team Viewer.

With Justin Rummel (and other's help) Hear it is in simple form: #!/bin/sh result=/usr/libexec/PlistBuddy -c "Print :ClientID" ~/Library/Preferences/com.TeamViewer.Settings.plist echo "<result>$result</result>" Major caveat, it will only work with the full Teamviewer App or theirSHost Module, not the QS app (It doesn't make a plist) --Doug Hanley doug at mac-tek.com - 702-396-0697 Apple Certified Systems Administrator - Apple Certified Trainer Apple Certified Support Professional - Apple Certified Technical CoordinatorMacTEK Consulting & Training - http://www.Mac-TEK.com Apple Authorized Training Center (IT & Pro Apps) - Adobe Authorized Training CenterApple Consultants Network Member - Apple Authorized Service Provider

20
J
J
jacksont123
asked in General Discussions
DisplayLink Permission for Screen Recording

Hey All,  We have a logi swytch and it needs DisplayLink app to make it work. I'm trying to make DisplayLink available on Self Service. But when I tried to create a configuration policy to allow screen recording for DisplayLink, it doesn't work at all. Anyone has any idea to make it work. Please see my PPPC configuration below  

370
B
Y
yjianContributor
asked in General Discussions
Managed Dock for Adobe Apps

Hi, I am trying to manage the dock apps via profile. However, I don't seem to be able to do it for any apps which is in the sub folder.How can I add Adobe Photoshop for example.I have tried copying /Applications/Adobe\\ Photoshop\\ 2024/Adobe\\ Photoshop\\ 2024.app but it shows a question mark.Thank you 

90
Y
E
etmekNew Contributor
asked in General Discussions
Jamf Compliance Editor 1.4 cant seem to create a project folder

Hi all,I've tried to install JCE 1.4 on a fresh laptop => selected macos => clicked on create new project => selected sequoia => clicked create => selected the folder => clicked save.Next step would be to be prompted for a security standard, but nothing happens.I tried it on 2 different laptops with the following OS:Sonoma 14.7Sequoia 15.0I also tried selecting the following OSs for the projects:SonomaSequoiaWith the same results.Can someone please confirm that its also happening for them? Thx! 

50
H
C
changskNew Contributor
asked in General Discussions
How do I setup predicate for "Download" event in Jamf Protect?

Dear all,I'm attempting to configure a "Download" event in Jamf Protect's Analytics, but I seem to be having trouble with the predicate. The one I've used is ( ProcessName == "mdworker" CONTAINS FilePath ENDSWITH ".download" ), but it doesn't seem to be triggering the "Download" event in the Alerts as expected. I'm pretty sure I've set it up incorrectly.&#x1f605Could anyone suggest the right predicate to use for a "Download" event?Thank you. 

40
C
J
jd3000New Contributor
asked in General Discussions
macOS 15 and Jamf Connect 2.39

I am doing some testing with macOS 15 before any widespread deployment.I use Jamf Pro polices and packages to update Jamf Connect to the newest version (currently 2.39).On macOS 13.6.7 and 14.6.1 the policy runs fine without any issues however on macOS 15 it is giving me an integrity error:Verifying package integrity...Installation failed. The package could not be verified.I can install Jamf Connect 2.39 directly via the dmg file and JamfConnect.pkg file on macOS 15, however this is not practical as most of the managed computers are offsite.This seems to be an Apple integrity check issue. Any thoughts on how to work around this issue.Thanks

110
V
U
user-sCWTLzSiNnNew Contributor
asked in General Discussions
OneDrive Configuration Profile

I am able to successfully build & deploy custom preferences using the Application and Custom Settings on Configuration Profiles. What's not working is just the AllowTenantList setting. I think it's a syntax problem so any help would be greatly appreciated. M$ website to deploy & configure on macOS says: The example for this setting in the .plist file is:<key>AllowTenantList</key><array><dict><key>TenantId1</key><Bool>True</Bool><key>TenantId2</key><Bool>True</Bool></dict></array> We only have the one tenant ID so this looks like:<key>AllowTenantList</key><array><dict><key>My_Company's_Key</key><Bool>True</Bool></dict></array> Before I save the config profile, Jamf shows a summary of the settings. All the boolean keys are showing their correct true/false, but this string just says " AllowTenantList=[{}] " inst

1870
wakco11
N
NickKovalEmployee
asked in General Discussions
Deploying Managed Bookmarks to Google Chrome using a plist and configuration profiles with custom payloads

OverviewDeploying bookmarks as an admin is deeply off putting. Every web browser does it differently, files change often and if you do it wrong, your users lose 100's of saved websites that they have accumulated over the years. Using a configuration profile to toggle a setting enforces that setting on a device when the profile installed. By pushing bookmarks into Google Chrome in this fashion, they end up in a managed bookmarks folder that:- the user is not able to change.- has no effect on the user's existing bookmarks.I have not found a great step-by-step guide to perform this task online so here's my attempt at this. Feedback is not only welcome but encouraged.You will need the following:1. A macOS device2. Basic knowledge of the Terminal application (or Xterm or similar)3. The ability to create, read & update a computer configuration profile in the JSS.Part 1: Use Terminal to create a basic .plist file1. Open Applications > Utilities > Terminal.app2. Run the following com

840
J
J
JMac12New Contributor
asked in General Discussions
802.1x certificate trust and configuration + MAC address randomization.

Ok, to start I'm brand new to JAMF and Mac management in general, so please bear with me. This post is kind of two-fold. I'm trying to figure out expected behavior and possibly some guidance on whether or not what we have in place is the best way to do this kind of thing. Basically, we have Network configurations that set up our Wired and Wifi Network connections and configure for 802.1x authentication. We have some expired certs to servers that no longer exist that I've been asked to remove, and I also have been asked to "fix" the connection to handle the MAC address randomization that is turned on by default for MacOS Sequoia. The profiles (wired and wifi) both have a certificate chain, a network connection and a SCEP cert that is used for user auth.In order to test, I've made a copy of the existing profile, and moved a few devices over to it.As soon as the test profile hits, the devices are disconnected from the network, because it appears it removes the existing network connection

210
J
C
CaptainamericaContributor
asked in General Discussions
802.1x - eapolclient popup issue

Our 802.1x network has been working for more then a years, but again and again I have seen the isse, where users first time they connect got the attached image. The user certificate is located in the users login keychain - I don´t know if that has anything to do with it We use network payload - and just asking me if this somehow can be stopped so this popup will not appear anymore.

1710
A
JPTomberlin
JPTomberlin
asked in General Discussions
Need to change a user's username/home folder name to mirror their username in Active Directory

Our current environment uses the user name to inject credentials in kerberos for use with Okta. I'm trying to create a script to change the user name / home folder name to mirror their user name in our Active Directory environment.

130
Tangentism
S
sdunbarValued Contributor
asked in General Discussions
Menu bar disappears, and cannot type or select apps.

We are having an odd issue on a couple of our macs (both iMac and MacBook).The menu bar disappears, and you then cannot type, you can see apps in Applications but not select them, you can get Spotlight up but you cannot type into it. Not happening to many but quite an odd issue with no pattern that I can discern.Having Googled it and tried the suggestions of Disk 1st Aid and starting in Safe Mode, neither worked. Also tried reinstall of the OS which worked for a while but the issue came back. Tried user profile removal and then adding back in which seemed to work for a few weeks but the issue has just returned for the same user. So wondering if anybody else has had this issue, and has anyone got any solution/suggestions?Many thanks

230
R
R
R205New Contributor
asked in General Discussions
The time range filter cannot be applied Message in Dashboard of Jamf Safe Internet

While rolling out Jamf safe internet we see this message in the dashboard for active devices.    

90
F
M
macd909New Contributor
asked in General Discussions
ACDS error - unable to decrypt profile

We've been using an ACDS for several years to push certs to our devices now but in the last couple of weeks we're getting an error: "unable to decrypt profile".I can see the the ADCS server is receiving the request from Jamf Pro, the CA is creating the cert and we're getting a 200 response back on IIS when I look at the ADCS server but the ceritificate isn't added under the devices -> certificates and it fails to push out saying failed to decrypt profile.The Jamf server logs show the below:2024-09-23 19:33:01,274 [ERROR] [Pki-Pool-31] [ertificatePayloadInjector] - Failed to get pending PKI payload certificatecom.jamfsoftware.jss.core.service.certapi.CertificateRequestServiceException: Request has failed with status INTERNAL_ERROR. Initiate another request in the future.at com.jamfsoftware.jss.objects.pki.adcs.AdcsCertificatePayloadInjector.retrieveCertificate(AdcsCertificatePayloadInjector.java:151) ~[classes/:?]at com.jamfsoftware.jss.objects.pki.adcs.AdcsCertificatePayloadInjector

160
misveri
J
JMontey1Contributor
asked in General Discussions
Restricted Software Sequoia

Hey there,I am currently working to black Sequoia Beta and eventually the Public Release. At the time of this post, Beta 3 is available. I have been trying to find the right process name to use to block the app from installing in "Restricted Software". I've used "Sequoia" *Sequoia "Install macOS Sequoia Beta" "Install macOS Sequoia Beta.app"  Just wanted to share currently the one that works is "macOS Sequoia 15 Beta"

510
S
R
rhowardContributor
asked in General Discussions
Unable to decrypt encrypted profile - Configuration Profiles

Hello, We are having issues with Configuration Profiles. When we push out any configuration profile to machines, we often have this error "Unable to decrypt encrypted profile" when checking to see if it failed in the JSS. Usually if we use terminal and do either sudo jamf recon or sudo jamf manage commands it goes through, but it is not any more. We also just implemented more vLANs in our environment, but all of the other Casper functions like Remote, JSS Policies, Self Service, Managed Preferences, etc work normally. I checked the SSL and Tomcat tickets to make sure they were up to date and they are good. We are using Version 9.32. Any light on this would be great! Ryan

1110
misveri
K
KezioxNew Contributor
asked in General Discussions
Password for Pre-stage enrollment

Hello guys,I would like to set a password to pass the prestage enrollement page. I can't find anything on this topic. Do you have any ideas? Thanks.

30
AJPinto
J
JAMFuser395720pNew Contributor
asked in General Discussions
OneDrive unavailable due to device management profile

This happened across our org with no changes in azure or JAMF pro. Unsure of what is causing the issue. We've never had to set up a configuration profile for OneDrive prior to this.Has anyone seen this before?

340
EWiggins
lilteddy78
lilteddy78New Contributor
asked in General Discussions
Too many Safari tabs open on iPad

Hi All,We use iPads with our TK-2nd grade students. We are coming across an issue where they have lots of Safari tabs open. A co-worker found one with over 100 tabs open. Is there a way to have these close after so many days? I know it can be done manually on each device but we have over 2000 devices out and that would be insane to try and take care of individually.Thanks!

190
R
L
lkennedy
asked in General Discussions
MUT issue

I've tried importing the CSV file using the updated MUT format, however it isn't transferring to JAMF.

60
S
P
Peelz
asked in General Discussions
iPad Re-Enrolment Problems

Hello all, I've been having quite a frustrating time trying to re-enroll one of our iPads to Jamf Pro recently and I feel like I've run out of thing to try so I'm hoping someone can lead me in the right direction or inspire a new way to try and get this thing running again. Heres whats going on and ill try to keep it brief:- iPad at our organization was having trouble opening multiple apps (select app, would come up for a moment and crash).- Tried multiple things to fix but no luck so I resorted to un-enrolling the device, wiping it and start from scratch. - Tried to re-enroll the iPad via Apple Configurator 2 and have run into multiple errors Provisional enrollment failed. [MCCloudConfigErrorDomain - 0x80EF(33007)] being the most common.- I've managed to re-enroll the iPad on our ASM but I'm hit with other errors now: "The configuration for your iPad could not be downloaded from organization ... cancelled" or in some cases a popup stating the iPad is not "supervise

790
Q
D
dfarnworth_bContributor
asked in General Discussions
TouchID Extension Attribute

Hi, Has anyone yet figured a way to write an extension attribute to report whether a device is TouchID capable or not? bioutil does not seem to give any indication of capability regardless whether it's run on a TouchID capable device or not. There doesn't seem to be anything returned by system_profiler to indicate. Struggling to find anything that could be leveraged... CheersDan

780
J

Want to write for Tech Thoughts?

Earn a cool badge and Jamf Nation Reward Bytes for your published articles. We’re looking forward to your submissions!

Submit A Blog Post
Terms & ConditionsCookie settings