Skip to main content

General Discussions

What your peers are saying about all things Apple

  • 10,000 Topics
  • 245,059 Replies
10000 Topics
I
iVoidWarrantiezContributor
asked in General Discussions
ASM Apple ID's

I am just now starting to deploy mobile devices so forgive me for any lack of basic knowledge. I am assigning users in my domain a Managed Apple ID so we can manage and regulate purchases and such. But my users have reported not being able to use the AppStore. I read online this is not allowed for Managed Apple ID's. Am I going about this wrong because at this point I don't think I even need to use them as I can do most of everything in Jamf. Wipe, release activation locks etc. Should I just drop them and use personal ID's? My ORG wants managed for purchases. Am I going about this incorrectly? Any advice is welcomed and thanks in advance. Also, JNUC 19 around the corner!!

70
C
E
evanadley
asked in General Discussions
How to Deploy Packages using Jamf Pro?

At present I am facing difficulties in deploying packages using Jamf Pro and I'm unsure of where I might be making mistakes. If anyone has experience with this and could provide some insight, I would greatly appreciate it. 

1030
H
L
lcsantos
asked in General Discussions
Block YouTube but make it possible to open some videos (iPads)

Good morning,I hope you can help me, I know it is possible to block YouTube on Safari using the blacklist settings to block the site (YouTube). The problem is that we have some teachers who use Google Classroom and who send some links (Youtube) so the students can do their work.The problem starts there, YouTube being blocked, it is not possible to open the links that teachers send to YouTube, does anyone know a solution for this?Make it possible to just open the links that the teachers send.This is happening with iPad profiles.Thank you very much

20
AJPinto
dan-snelson
dan-snelsonHonored Contributor
asked in General Discussions
Microsoft 365 Reset (2.0.0b1) via Jamf Pro Self Service

A quick-and-dirty Jamf Pro Policy hack for testing Microsoft_Office_Reset_2.0.0.pkg Introduction Office-Reset is a free downloadable tool from @pbowden that Mac Admins can use to fix problems and errors encountered with Microsoft Office for Mac apps and version 2.0 Beta 1 includes more than two dozen changes. The following quick-and-dirty hack will allow Jamf Pro admins to easy deploy the entire Microsoft_Office_Reset_2.0.0.pkg during the beta phase before the app-specific .PKGs are available. Continue reading …

210
dubel
JamFm
JamFmContributor
asked in General Discussions
I miss at Match all Rules „manage App (not installed)"

Hi AllDoes anyone know how I could create a group to filter out and display iPads that do not have an app installed? For example, because one or the other iPad was offline during distribution or does not communicate with the Jamf.Thanks Peter

70
L
R
RyanKNew Contributor
asked in General Discussions
Updating local user account after employment change

Hello, During Auto Device Enrollment the users local accounts are created using either E# (employee) or LC# (contractor). On occasion we have LC's come on as employees and switch from LC# to E#. So, the local user account stays as LC# and then all sorts of issues start to occur on the Mac. In the past we have just wiped the mac and enrolled it again so it grabs their new E# account and leaves no trace of the LC#.If I recall I've been told that running "sudo profiles renew -type enrollment" should fix it but I have not had that work for me.Is there some way we can get the local user account to change from LC# to E# without erasing the Mac? PS. I do go into our jamf instance and change the account there from LC# to E# by searching in our user database in jamf but this obviously does not correct the issue on the Mac.

160
A
T
tutan999New Contributor
asked in General Discussions
Shared Ipads without Gast-Mode

I am currently experiencing issues with our Shared iPads. In Shared Mode, it is no longer possible to log in with a guest account. The button and the option on the lock screen no longer appear. This affects both previously configured iPads and newly set up devices.I found a temporary solution by enabling "Allow only temporary sessions" in the Shared profile. However, this prevents users from signing in with an Apple ID, which limits the usefulness of this fix.Initially, we suspected the issue was related to the iOS 18 update. However, the same problem occurs on iPads running iOS versions 17.5.1 and 17.6.1, indicating that the issue is not specific to iOS 18.

80
T
M
mbischoNew Contributor
asked in General Discussions
Uninstall/Install of Restriction Profiles Based on Regions Determined by Public IP Fails

Greetings!I currently work at a school which manages students' iPads through Jamf School, which works really well in most cases.We have configured a dynamic group whose member scope is based on a region which is determined by the school's public IP which is fixed. In most cases this setup works flawlessly.However, with some devices this does not work, which means that upon returning home and even rebooting their devices students' iPads are still treated as if they were on campus. I can only undo this by manually refreshing the device status/network details. Even when the iPads receive a new IP, Gateway etc. from their home dhcp server, the public IP is unaltered and thus the restriction profile is not removed. This can not be explained by a flawed configuration of the private networks either, since in case of siblings one iPad uninstalls the restriction profile as expected, whereas the other does not.This also "works" the other way around: When students arrive on campus and connect to

110
N
dletkeman
dletkemanJamf Heroes
asked in General Discussions
Why the change for Device Inventory in Jamf School?

Can someone explain why the Device Inventory user interface in Jamf School has changed from the previous (legacy) version? I see from this post on Jamf Nation: This change doesn’t just offer a new look but improved speed when loading devices. For schools with large deployments, this means you can manage your Apple devices in an even faster and improved manner with quicker  loading and bulk commands. We manage almost 5200 iPads, and while I’ve noticed more success with bulk operations, the need to constantly deselect before selecting a new set of 500 iPads is time-consuming. I would prefer a slower interface if it meant avoiding accidental bulk operations. For instance, I accidentally erased 20 Apple TVs before fully understanding the new system. There have also been instances where I refreshed unintended devices because I forgot to deselect them. I appreciate that the new interface shows the storage of each iPad, not just the remaining storage (though this feature works inconsiste

210
hank
T
TonyChengNew Contributor
asked in General Discussions
iOS apps Can not install through self service

I have completed the vpp configuration of the app and put it in selfservice. The problem is that some ipads will prompt when downloading: the certificate of the App "com.apple.Keynote" cannot be found. As a result, normal installation cannot be achievedHow can I do next.

50
T
J
jloeschNew Contributor
asked in General Discussions
Issue getting Nudge 2.0 to prompt for an update

HelloI am having an issue getting Nudge to prompt for an update.I have installed the configuration profile & the latest nudge suite via policy to a test mac.The only 2 values i have set are requiredMinimumOSVersion & requiredInstallationDateI've confirmed that nudge can see the profile by running /Applications/Utilities/Nudge.app/Contents/MacOS/Nudge -print-profile-config<?xml version="1.0" encoding="UTF-8"?><!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"><plist version="1.0"><dict><key>osVersionRequirements</key><array><dict><key>requiredMinimumOSVersion</key><string>15</string></dict><dict><key>requiredInstallationDate</key><string>2024-09-25T00:00:00Z</string></dict></array></dict></plist>But, if i check library/preferences and look at the nudge plist via xcodeIt does not have the same values

300
J
K
KbrooksNew Contributor
asked in General Discussions
Permission Denied on Configuration profile iOS

I have a simple content filtering configuration profile we use for ipads that is failing now with "permission denied" Any thoughts?

90
CSCC-JS
rcondon
rcondonNew Contributor
asked in General Discussions
Sharing a Lesson

I'm an instructional coach trying to support teachers with using JAMF teacher more in their classrooms. I was hoping I could create lessons and then share them with teachers to take some of the time off their plate. Is there a way to do this? I can't seem to find a way, but maybe I'm missing something!

90
Mitchell_Gordon
TonyNelson
TonyNelsonNew Contributor
asked in General Discussions
getting an error executing a bash script

I'm getting the following error when running my script "[student: command not found/Library/Application Support/JAMF/tmp/student profile". The script checks to see who is lpgged in, and if it is "student" it needs to change the user's profile pic". script below:"#!/bin/sh# determines current userconsoleUser=$( /usr/bin/stat -f%Su /dev/console )if [$consoleUser == "student"]; thendscl . create /Users/$consoleUser Picture "/Users/Shared/THS_Files/images/Howie.png"fiif [$consoleUser == "howardstudent"]; thendscl . create /Users/$consoleUser Picture "/Users/Shared/THS_Files/images/Howie.png"fi"

118
TonyNelson
J
jbestineContributor
asked in General Discussions
Invalid Message - The message could not be parsed.

I'm trying to re-enroll a device that has not checked in for some time due to the MDM Profile expiring on the device.  we've tried to do a sudo jamf recon and get the following:Retrieving inventory preferences from  (jamfserver)... Finding extension attributes... Locating accounts... Locating applications... Locating hard drive information... Searching path: /System/Applications Locating software updates... Locating printers... Searching path: /Applications Locating hardware information (macOS 13.6.0)... Submitting data to (jamf server)... There was an error. Invalid Message - The message could not be parsed.Looking at the log we are seeing:[ERROR] [502:CPPrefPaneExt] [CE] Profile installation (MDM Profile (00000000-0000-0000-A000-4A414D460003:00000000-0000-0000-A000-4A414D460003)) ==> New profile does not meet criteria to replace existing profile. <CPFAccess:102>Jamf is telling us that we need to re-image the machine, but it's really not acceptable for this u

420
H
S
SpraynardNew Contributor
asked in General Discussions
Create a folder, and name it based off of Current User?

Hi all, so, pretty new to Jamf, but I work at a school where lots of random softwares are used frequently in specific labs. One software we're using is OpenToonz, an animation software, and a FFmpeg plug in, which I have to point to a file path for OpenToonz to find the folder for. Problem is, this preference file is stored in /Applications/OpenToonz/OpenToonz_stuff/profiles/layouts, and generates a folder called "settings.usernamehere" So, I can create the preferences file and move it to a specific path on scoped computers, but what I can't seem to figure out is how to create a file based off the name of the current logged in user, and place it in that specific file path. (i.e settings.currentLoggedInUser) I assume a script is the way to go, but my googling has failed me this time around, and I'm a little out of my depth. Either way, appreciate any help you can give!    

20
S
G
GenesisMasterNew Contributor
asked in General Discussions
Patch Management - Microsoft OneDrive 1 Extension Attribute Error

The latest Microsoft OneDrive versions use a different Key for their Bundle Version in their Info.plist file and JAMFS Patch Management definition is generating an error.  The existing Attribute Extension jamf-patch-microsoft-onedrive searches for KEY="CFBundleVersion" in the Info.Plist of the /Applications/OneDrive.app/Contents folder. However, there is no such key. Looking in the Info.plist of my own installation I can find the key "Bundle Version" with version 23086.0423.0001 There is no way for me to Edit the AE to improve the results or redirect it to my own that's collecting the relevant information. Any ideas on how I could fix this?

100
E
F
folder0New Contributor
asked in General Discussions
Filevault with sso

HiI've set up sso connections to connect each time the mac is restarted.In my case, users always connect by sso. But I want users to be able to switch macs easily between each other.Except that once user A lends his Mac to user B, even if I've forced all connections to go through sso. it will ask me for user A password because filevault needs to unlock the disk before proposing a connection by sso.Do you have any idea how I can work filefault and sso together so that user B can connect without requiring user A password?Thanks 

90
F
K
kevin_neelyContributor
asked in General Discussions
Set new computer Name and update in Jamf Pro

Small shop so there not much need to automate much but to Rename laptops we've been editing them in Jamf Pro and then running a Policy that connects script: !/bin/bash ComputerName="$4"scutil --set HostName $ComputerNamescutil --set LocalHostName $ComputerNamescutil --set ComputerName $ComputerName To an "App" made available via scoping in Self Service. It works but seems like I'm doubling my workload. I'd like to keep the Self Service app and initiate the naming from it using a script like: !/bin/bash newName=$( osascript -e 'text returned of (display dialog "Enter a new name for your Mac..." default answer "" with title "Name Your Computer" with icon file posix file "/System/Library/CoreServices/Finder.app/Contents/Resources/Finder.icns")' )scutil --set ComputerName "$newName"echo "Setting ComputerName to $newName"exit 0 This 2nd script works if I run it from Terminal on t

1060
M
T
ThrasherNew Contributor
asked in General Discussions
JAMF Connect Login window not displaying on a specific device

Hola, I have an iMac running MacOS Monterey 12.7.6 that I loaded onto Jamf, and I can't get the Jamf Connect Login window to pop up, leaving the default MacOS login screen for local users. The Jamf Connect Login window has no issues loading with any other devices. FileVault is not enabled.I saw this post and tried a couple different things from it but wasn't able to get far: https://community.jamf.com/t5/jamf-connect/jamf-connect-login-window-stopped-displaying-at-boot/m-p/292707I tried to run the command /usr/local/bin/authchanger -reset -jamfconnect but AuthChanger isn't being recognized as a command. I tried to go to /usr/local/bin/ & /usr/local/jamf/bin but neither of them had authchanger there. When I check the Profiles, It looks like Jamf connect Login successfully installed. I also tried making a new Configuration Profile to flip both the DenyLocal and LocalFallback, trying various different combinations, and that didn't help.  

1130
T
F
FrostyContributor
asked in General Discussions
Teamviewer HOST script

Hi I hope you can help, for a long time we have been using a Teamviewer custom branded Host package installer pkg which gets set up after initial enrolment. It goes into a single Teamviewer group and then we change the grouping depending on location in Teamviewer its worked well for us over the years.. We have had a company rebrand and so we updated the first install pkg. Now when the new pkg runs and installs the easy access is activated as intended but the check/tick box is still editable by a standard user whereas before it was locked (greyed out) and only editable by admin. Has anyone been able to work out how to disable the option to untick by a standard user please..This is the current script #!/bin/bashsudo launchctl load /Library/LaunchDaemons/com.teamviewer.teamviewer_service.plistsleep8APITOKEN= Goes herewhile true; doprocess=$(ps aux | grep TeamViewerHost | grep -v grep | wc -l)        echo "Process: $process"if [ $process -gt 2 ]; thenecho "Ass

200
F
macservit
macservitContributor
asked in General Discussions
Scheduling options for Smart group membership?

Has anyone ever had luck using a smart group to change a device state based on time of day?For example, create a smart group that has app restrictions and move devices in and out of that group based on a recurring schedule. 

90
macservit
T
Theworld
asked in General Discussions
License

How is upgrading License 

40
C
A
AndixonContributor
asked in General Discussions
PreStage Enrollment Setup Assistsant Options

Hi,if I do a PreStage Enrolment and select Setup Assistant Options to not be displayed during Setup Assistant. What Option will be selected? Yes or no or some preset from Apple?

70
AJPinto
dan-snelson
dan-snelsonHonored Contributor
asked in General Discussions
EDR Script Runner (0.0.5)

A proof-of-concept, caveat emptor workflow for securely executing a repository-hosted script Background While EDR tools can excel at running one-off code on a limited number of endpoints, device management solutions are often best suited for executing predefined policies at scale. EDR Script Runner strives to strike a balance between the immediate, dynamic needs of threat hunting teams and the reliability of a MDM server, by securely executing a repository-hosted script, only when necessary. Continue reading …

30
dan-snelson

Want to write for Tech Thoughts?

Earn a cool badge and Jamf Nation Reward Bytes for your published articles. We’re looking forward to your submissions!

Submit A Blog Post
Terms & ConditionsCookie settings