Can anyone explain why do some computers in Jamf drops the minor Operating System Version.ie.  If I have two M3 computers with macOS 14.7.0 build (23H124)One show in Jamf as 14.7 and the other shows as 14.7.0 We have seen this for many minor releases and help in fixing this anomaly would be appreciated as it messes up our reporting. 

Hi All,   Has anyone got the script enable the migrating local account with cloud identify (Azure), Pleas see link for more information:  https://learn.jamf.com/en-US/bundle/jamf-connect-documentation-current/page/Existing_Local_Account_Migrations.html Kind Regards

 Hi Jamf Nation, Is there a remote lock script that someone can recommend for a Mac in Jamf Pro that not managed? (Can only be deploy by Jamf Pro)Also is there a script to turn Mac's from unmanaged to Managed in Jamf Pro? Thanks in Advance Nation!

Hey. Im trying to upgrade GoodNotes for Institutions into GoodNotes for Business. There is only an instruction how to install a license key for iPad/iPhone (https://support.goodnotes.com/hc/en-us/articles/7568710302607-Installing-Goodnotes-for-Business-Enterprise-via-Jamf-Pro?source=search&auth_token=eyJhbGciOiJIUzI1NiJ9.eyJhY2NvdW50X2lkIjoyNTM0NzUsInVzZXJfaWQiOjc3MDkxMDA4MjcwMjMsInRpY2tldF9pZCI6MjMzMjk5LCJjaGFubmVsX2lkIjo2MywidHlwZSI6IlNFQVJDSCIsImV4cCI6MTY5NTIyMjU1OX0.MN6d_0tdipaCu0_cJb_fbyPYt1kHRPpY9l69iLvegXo). Does someone know how I can install a license on MacBook via JamfPro? 

so a s test with my lab systems i tried to re-enroll it to my admin account in JAMF to see if we can just hand over a system with out a re-images  and now it's hung trying to install the JAMF profile will not let me delete the old one or over ride it. how should i have done this.It seem to cause other problem the systems show up in inventory but not when i try to add it to a policy.Any uninstall scripted that i should have used  or is re-image the only option?     

HI, we need to package Avaya Agent with specify config.xml that has the necessary settings. The Config.xml will need to be placed into User/username/ Library/Preferences/Avaya-Agent/ folder which only gets created after the app is opened the first time after installation. Has anyone had the same scenario and found a workaround / solution. Placing files into an user profile could be done with a postflight script but the folder does not exist yet and has a lot more then just that config.xml that is being created. Thanks in advance

Hello, I need to figure out how to run a policy to check screen saver time settings so we can force a set time if it doesn't match. I'd assume that you could check against a value in the "~/Library/Preferences/com.apple.screensaver.plist" but not sure. Any ideas? I see a lot of older posts floating around about forcing a screen saver time in various ways. I need to check the time first before doing that. Thanks!

HiWe are facing an issue where ex-employees have signed in with personal accounts on icloud on corporate devices. Its been a pain while re-purposing the device where find my mac cannot be removed . I know we can restrict signing in to personal accounds via configuration policy but management dont want to take that route at this point of time . 1. is there a way other than contacting apple support to remove find my mac from the computer while wiping it ?2. if we enable activation lock , will that help to erase or disable find my mac for users  Any help would be appreciated, Thanks,

Our staff now has the error message " This provider is unavailable due to a device management profile" If we disable defender then they get access again. I cannot find any setting in the profiles that would be blocking OneDrive.

We have one VPP account hooked into our jamf pro cloud install. We did originally have an additional site set up which would create an global entry and an additional entry for the second site, but that was an inherited mistake which was since fixed. A couple of weeks ago I went through and started removing old apps or apps with no scope. Once there were fewer entries, I noticed that every time I added a new app to the Mobile Device Apps list, it would create an extra duplicate entry with the default options. We normally only do auto-install, but there's always a duplicate entry for the same app set to Make Available in Self Service with no scope. Why is this happening and how can I fix it?

Hey, We need to upload the personal recovery key from jamf to snipe using the jamf2snipe script. Any idea where i can find the subset to this? Thank you!

Hey Jamf Nation!Do you need to create a custom MacOS Dock for your users?I created a guide for the Jamf community, complete with scripts and packages, to help you do that.After struggling to find a current, working solution I decided to build one myself. Since it took some time to make, I thought I'd share it with others that are looking to do the same thing. Hope it's helpful!GitHub Repo with Full Guide Here: https://github.com/bluemoosegoose/Build-a-Custom-MacOS-Dock Some info about it:This Guide allows you to craft a custom MacOS dock for your environment, written specifically for Jamf Pro Admins.Verified working on Monterey 12.3.1 and should be backwards compatible.The custom dock will be built once, on first login, for any user that logs in to the Mac.After the dock has been built once, it will not run again automatically, which is the intended behavior because we want our users to have our custom dock during onboarding and then give them the ability to make ch

Hi everyone, I have a question about removing a device from inventory preload. for example, there are 10 devices in preload. I selected one of them and click delete it, will this action will delete the rest of 9 devices? just wanted to make sure the action only remove the devices I selectedBest Regards

I’m currently developing a remediation policy for Self Service that triggers the uninstall and reinstall of a profile. While I can successfully remove and reinstall the profile, I need a verification step to check if the profile was reinstalled. I'm using the following command:bashprofiles show -o stdout | grep "ProfileDisplayName = "$profileName"" | /usr/bin/awk '{print $3}' | sed 's/[[:punct:]]//g'This works perfectly for single-word profile names, like "Zoom," but fails with multi-word names, such as "Zoom Profile," resulting in "no such file or directory." I’ve tried enclosing the profile name in both single and double quotes, and using "${profileName}", but nothing seems to work.Could anyone suggest how to modify the command so it successfully handles profile names with more than one word? Here’s the function I created for verification:bashfunction checkInstall() {installed=$(profiles show -o stdout | grep "ProfileDisplayName = "$profileName"" | /usr/bin/awk '{print $3}' | sed 's/

Hi, as was suggested to me, I'm trying to use a hybrid solution to take advantage of App Installers with regards to the management of updates, and the installomator policies for initial provisioning, as Mac Apps have an important delay for installations when executed in Self Service.However, I have a simple but annoying issue in the Store, as in the "All" category, I see both installation options, even if I clearly deactivated all the Self Service Categories on Mac Apps Self Service tab. How can I handle this? The "All" category doesn't seem to be removable, so I ask those who make these two options coexist how they handle this annoying redundancy on self service.

Hello Team, I reenrolled few macs in Jamf using by user initiated enrollment and mail invitation to end users but before going to re-enroll l those macs I never deleted their devices entry from Jamf console, I just ran "sudo jamf removeframework" on those macs and did clear all existing profiles and then did hit the URL of Jamf and followed by /enroll and provided by credential and downloaded CA certificate and MDM profile and installed those two. I can see all applicable configuration profiles are deployed but device are not speaking to Jamf console, if I run the command "sudo jamf recon" then it is saying command not found. What is the solution here I dont want to reenroll those macs back again to Jamf.

Right. Where do I begin.... I am going to try and be as constructive as possible rather than just complaining. We've been running Jamf Pro (currently 11.4.2) for almost two years. Since day one we had issues with out of the box or EACAS Macs fully completing enrolment. The usual state they would end up in was for the profiles to install fine, VPP apps to install, etc, but for no policies to run nor for Self Service to install. When I looked on Jamf Nation and other sources I saw that this can sometimes happen and so because I'm a scripting god I came up with an amazingly complex script that is installed as part of an PreStage Profile's enrolment package workflow. The script does the following:/usr/local/bin/jamf policyThis immediately caused enrolment to complete, the Self Service app appeared in /Applications and everything was once more right in the world. A reboot would achieve the same, but we didn't want to randomly reboot the Mac halfway through enrolment or ask the user to

Hi Community,I am just sharing here another way of deploying silently a new Desktop Background to Mac computers without using Script install, Desktoppr or a Configuration Profile. This workflow is compatible from Catalina to Monterey Beta.Place your_image.png into /Users/SharedOpen Automator app on macOS Big SurCreate New application projectChoose in Library 'Get Specified Finder Items" and select your_image.png (located in /Users/Shared)Add "Set Desktop Picture" in Automator libraryExport your Automator project > Save (ideally sign it) into /Users/SharedOpen Composer appDrag and Drop your Automator.app in it (from /Users/Shared)Add from Users/Shared folder in Composer your_image.pngSelect Script and Post-InstallCopy paste this simple script belowBuild and sign your packageCreate your Jamf Policy to deploy it  #!/bin/bash open /Users/Shared/Your_Automator.app sleep 10 rm -R /Users/Shared/Your_Automator.app rm -rf /Users/Shared/Your_Image.png  

When I run the application on the iPad, it will wipe and reconfigure itself fine with all of the applications but does not retain the name or the username/email. How do I get the username/email and the device name to stay the same on enrollment?Ex. Name: iPad 1username: name@yourcompany.comWhen it wipes, the information above will be removed from Jamf Pro. How can I make it stay? 

Hello fellow Jamf Admins,I have a request in from our InfoSec team to disable the data collection features within Firefox. I have tried pushed config profiles with custom settings to turn them off. Here's the output:<key>DataCollection</key><dict><key>Experimentation</key><false/><key>HealthReport</key><false/><key>Submission</key><false/><key>Telemetry</key><false/></dict> Firefox is not changing the settings though. It seems to not care about the plist at all. Has anyone run into an issue like this and if so, how did you get Firefox to behave? Thanks in advance!

Is it just me or is this forced update feature not working for you too? NothIs it just my system or is this not working for you too? Updates do not get forced and we are all on Sonoma.  

Hello,I have extensive experience with Jamf Pro but one area I've never touched is the API. But now with the release of Return to Service (via the API) I want to at the very least script something so that I can use this feature to eliminate some of the tedious work.I work at a school and as such have hundreds of devices to erase every school year and its very time consuming to manually enter Wifi credentials on all of them after wiping to re-enroll with Jamf Pro. Can someone help me with a script that will automate this process using the Return to Service API??? It would be much appreciated. Thanks!

We have had the Darktrace cSensor running on our macs for months. I am currently tasked with creating a report that pulls in all machines with DT sensor and its running. I found a script that I could use with extension attributes to report that the sensor is installed and running, but it does not pull any data once it's set up as the exention attribute. I can run this script in a local bash environment on my mac and it seems to report that sensor is running on my mac. #!/bin/bash# check for processPROCESS=$( pgrep Darktrace\\ cSensor )#see if process is runningif [[ -z "$PROCESS" ]]; thenRESULT="Not Running"elseRESULT="Running"fi#report resultsecho "<result>${RESULT}</result>"

Is anyone having trouble with the Jamf Server logs not actually logging?   I have a support ticket open (CS0951135) for this because I think the log4j2.xml file is not setup correct, it was broken before in 10.45, but stuff has changed in that configuration file and it is even more broken in 10.46. I am in a windows server environment, and installed using the jamf windows installer. I am installing it on the D drive on my Jamf server and not on my C drive, but I am using the installer to do all of this, so not doing anything special.  Is there anyone else out there with windows using not the c drive for Jamf with this issue?

Hello Jamf Community, We are currently in the process of setting up an on-premises Jamf server but have encountered an error. The computer begins to enroll with the MDM after entering the user credentials in Remote Management, then retrieves enrollment profile, begins to install enrollment profile, then gives an error. The error: Enrolling with management server failed. Unable to contact the SCEP server at https://our-server-domain.local:8443//CA/SCEP  Has anyone experienced this issue, or know what is causing it and how to fix it? Also, I am not sure why it is inserting two forward slashes after the port and before CA: 8443//CA. Any and all help is greatly appreciated. Thank you.