We're currently working on bringing macOS users that are on version 13 to macOS 14. We want to restrict users from upgrading on their own to macOS 15 until it is fully vetted out. The question here is, if we were to enable this would it also impact our users that are trying to get to version 14 from lower versions?

Hello, I'm trying to get into the App Installers settings page -- Settings -> Computer Management -> App InstallersBut each time I go there I get a '404 Page Not Found' message.Is it not available because we are hosting jamf on our premises? or is there something else wrong?We our Jamf Pro version is 11.9.1-t1726060704

I'm trying to find out if it's possible to retrieve Apple Push Notification emails from the Jamf database. We're unsure about the specific Apple ID that was used for the APNs, and we need to figure out if there's a way to locate this information.

I'm relatively new to using JAMF and I've looking around at the community posts but I haven't found an existing post that answers this. I'm trying to create a search criteria using the Extension Attribute function which would work for an Advanced Computer Search that'd allow me to check if a Local User Account on a MacBook has admin rights or not.When I check an individual device I can see a field under Local User Accounts that has a Yes or No to indicate if the local account has admin rights or not but I'm not having any luck with trying to create a filter for this so I can see which devices have admin accounts.Any assistance with this would be appreciated.

Hi, I am trying to install Cisco Any Connect through jamf pro and facing a weird situation here , the logs of policies and configuration profiles show successfully installed but the app is not found anywhere on the laptop . i am sharing the install.log here for reference ""./postinstall" in /private/tmp/PKInstallSandbox.GRMsQD/Scripts/anyconnect-4.10.5cspVc2023-11-17 11:08:12-05 MacBook-Pro package_script_service[1309]: PackageKit: Preparing to execute script "postinstall" in /tmp/PKInstallSandbox.GRMsQD/Scripts/anyconnect-4.10.5cspVc2023-11-17 11:08:12-05 MacBook-Pro package_script_service[1309]: Set responsibility to pid: 1174, responsible_path: /System/Applications/Utilities/Terminal.app/Contents/MacOS/Terminal2023-11-17 11:08:12-05 MacBook-Pro package_script_service[1309]: PackageKit: Executing script "postinstall" in /tmp/PKInstallSandbox.GRMsQD/Scripts/anyconnect-4.10.5cspVc2023-11-17 11:08:12-05 MacBook-Pro installer[2294]: PFPkg: No file found at path: /private/tmp/An

Hi Jamf Team, I am encountering an issue with a script that I am using in a Jamf extension attribute. The script is not returning output always “No_Certificate_Found”  when processed through Jamf. I need assistance to validate the issue and understand why it is not picking up the results properly. When I trigger an inventory update through Jamf's built-in functun, no results are returned. However, when I manually run the command via Jamf using “sudo jamf recon”, I am able to retrieve the expected results. Similarly, the script works when executed via Self Service. It seems that the script is not functioning properly when built in inventory option is enabled and not running as user in Jamf. Could you please assit this issue? I have attached the script. Thank you for your assistance.   #!/bin/bash # Expiry Date | Certificate Name | SHA-256 Hash | Keychain Path #20-Jan-2024 | Manikandan R | 40C6326E5B3458F07A1D2E4DDBEF59728A425C92612FA022263C73BA51FEB8E | "/Users/test/Library/K

Hi all, Starting a few weeks ago, our Google Chrome pkg has been failing.  It's strange, it's a simple policy, it's been working for years.  I even created a new policy and downloaded the newest package from Google.  The policy log says it's installed successfully on the MacBook.  It even logs an appropriate amount of time in the policy log.  But the app does not get added to the application folder.  Anyone have an ideas or ways to diagnose this?

One thing that wasn't made clear before we purchased Jamf Connect is that according to the guide (and so far, from our testing) that in order to use Jamf Connect AND FileVault there's essentially at least 3 login prompts. 4 if you include an MFA prompt.https://docs.jamf.com/jamf-connect/2.1.3/administrator-guide/FileVault_Enablement_with_Jamf_Connect.htmlIs there any way around this? We need to have our Macs encrypted, but 3 prompts for password is quite excessive.

After the prestage enrollment process, is there a method to utilize the SecureToken or Mobile account user for escrow?

We have been trying to track how big of an issue iCPR is (scope-wise), but have not been able to get an extension attribute working properly to show who has it on. How are you all handling this?

I have recently taken responsibility of jamf pro from a previous employee and have never really used it before so this is a learning experience. I have a Macbook Pro on Ventura OS in a computer group with a Staff Restrictions profile applied. This profile is somehow completely disabling Control Center and the ability to set a Screen Saver with the message "Control Center settings are not available. These settings are controlled by a profile." I can exclude the device from the profile and gain access to the Control Center and Screen Saver settings but not when it's applied. I figured these settings would be located under the Restrictions payload under Preferences but I see no such setting specifically targeting these. Does anyone know where / what is the setting that controls these? Is it another name or in another location? What am I missing? I see no specific setting to enable / disable. Thanks in advance

Hello folks,I know that there are already a few threads about reading out local admins. Either I didn't understand what was available or what I needed wasn't there. We would like to read out on all devices where local admins exist. with the exception of three admin users from IT. On the one hand, it would be if the admins were listed in the computer object under User and Location. and on the other hand, if we had a smartgroup where all computers are available with local admins (except for the three admins users from IT).Cheers

I'm looking to run msupdate in my build script so I always have the latest Office products on devices before users get the device. I've noticed in the past that even running the GUI, it doesn't actually update any apps until you've been using them for a while.  Has anyone had luck using MAU (msupdate in particular) prior to the first run?

Hi wondering if anyone has any tips on installing Adobe Plug-ins that are serialized so the plug in will work for all users. 

Hey there - does anyone else use CyberArk EPM (end point management) to manage admin rights and third party app installations more easily? We're beginning to roll out a test bed in my company, and I'm working on the mac deployment. CyberArk provides some instructions for deploying here, but I'm struggling with them. It seems to want the zip file deployed as the package, and there is no pkg, but I've never used a zip file as an installer through Jamf. Anyone got this deployed? Or have any insight on using zip files to deploy apps?

our packager is using the official documentation and asked a specialist with help see below but no luck seems to get stuck, epm is fully removed from the MAC, it was even rebuilt to insure this. Any ideas why we can't seem to package it? https://community.cyberark.com/s/article/Deploying-EPM-Agents-on-macOS-with-Jamf-Pro https://community.cyberark.com/s/article/EPM-How-to-configure-JAMF-for-EPM-Agent-distribution Send over an example of the command being usedThe user is an admin with sudo - Try running sudo ls / if it prompts for credentials then the user has sudo rights.Try putting the files on the Desktop. Then confirm they are not quarantined by gatekeeper xattr -l /path/to/your/file if it returns com.apple.quarantine you need to run xattr -d com.apple.quarantine /path/to/your/file to fix.Confirm these first... if no luck, we can isolate further by creating a mac VM. It only takes a few minutes using Orka Desktop. The VM will be clean and try again there.  &

Hello Everyone, I'm sure this has been covered but I'm trying to upload SentinelOne install as a package in Self-Service in Jamf but I keep getting "Availability Pending" and the install displays Error when I try to install in Self-Service. I was wondering if the Availability Pending error is the root cause? Please help. The file size is 65.3MB Thanks.

Work being carried out with a new VPN implementation, we've identified that macOS users with iCPR enabled causes problems, I was hoping to setup an EA to bring inventory the current status of Private Relay On or Off.  I found this page Determining “iCloud Private Relay” and “Limit IP tracking” status in macOS – brunerd.Which I thought with some tweaking would do the trick, however during testing the status is always Off.  I believe the issue is with this line. childData=$(/usr/libexec/PlistBuddy -c "print :" /dev/stdin 2>/dev/null <<< $(plutil -extract "${key}" xml1 -o - /dev/stdin <<< "${parentData}" | xmllint --xpath "string(//data)" - | base64 --decode | plutil -convert xml1 - -o -))  

Going over Jamf nation posts the past few weeks, and it seems like there is an uptick in posts and comments that look very much to be made by chat bots. I have also seen more people marking their own comments as solutions to their own posts and such. Has anyone else noticed this trend or is it just me? 

This appears to been touched based on in the past, but appears to of died once catcher was put into place for check coverage.apple.com however, I noticed in Monterey and possibly big sur, you can see applcare+ status, under >Apple Logo > About my Mac > SupportAnd was wondering, if this can be added to an extension attribute, as like the ability to get the battery condition of a MacBook, and if so where on earth is the information stored.

Devices are connected to pro and are showing managed and are showing correct profiles, etc.We get two different error messages:Self serv is a component of jamf pro developed by jamf, this app must be associated with a jamf pro serverandProfile installation failed. the SCEP server returned an invalid response  

I'm working on a new .mobileconfig file to distribute 802.1x settings. I can make this work in a file built by ProfileManager, but when I build what appears to be the same thing on my JSS and load it on a test box, I'm getting "Acquired: cannot prompt for missing user name" from eapolclient in console.app. I want to compare the two mobileconfig files, so I converted the PM file with plutil: >>plutil -convert xml1 PMFile.mobileconfig When I try to convert the JSS-generated file: >>plutil -convert xml1 JSSFile.mobileconfig JSSFile.mobileconfig: Property List error: Unexpected character 0 at line 1 / JSON error: JSON text did not start with array or object and option to allow fragments not set. Is there a way to get a standard Property List file from the JSS? (I can't convert to JSON either).

I am looking to implement CIS Benchmark on macOS Sonoma devices and we have Jamf Pro as an MDM.Can someone help here for scripts and configuration profiles for macOS Sonoma Compatible ?I found the old one which we had used for Catalina https://github.com/jamf/CIS-for-macOS-Catalina-CP is this still eligible for macOS Sonoma ?Thanks & RegardsJaved Khan

I'm wondering if there's a way to restore a delete config profile within Jamf.I found an article that basically said to change the ID number in the URL until you find the profile that you need, click Download, and then when you upload the mobileconfig it should use the same ID number.This doesn't seem to work anymore. I can find the profile, and I can download it just fine, but re-uploading it gives it a different ID number. I'm not certain this is a problem, but I don't want to be messing with things until they break further.We had a WiFi configuration profile we want to restore as we think it got deleted before it got removed from devices, and suspect it's now causing us trouble.On a related note, if anyone knows how to configure PEAP to use individual logins from the network, without having the Macbooks actually connected to the domain, please let me know as that would also solve the problem. We can just not push a profile, but then we can't get the certificates assigned to the netw

In lab or shared Mac, we have 802.1X profile, running the latest Jamf Connect, and Sonoma. All users first login through Jamf Connect to create their account, and the "Select Your Wi-Fi Network" screen comes up. We can skip it by clicking Continue because it already having Wi-Fi. Then goes to the desktop.  It never does that in any macOS version except Sonoma. Not sure what causes that. Anyone has any ideas? Thanks