HI,I'm currently setting up the configuration profiles for our iPads and am trying to figure out if there is a way to have bookmarks preconfigured on the iPad for regular sites.At this stage I have some webclips set up, but I'm trying to avoid having too many tiles on the iPad and would prefer them in bookmark form in either Chrome or Safari.Any help would be greatly appreciated. 

Hello Jamf Nation!Our Art program recently purchased some Epson SureColor P900 printers.  They have a long history of purchasing Epson 3800, 3880, and P800 printers, so it wasn't surprising they purchased this model to replacing some worn out printers that couldn't be repaired any longer.  All of them had a standard Apple Installer .pkg file available for download from the Epson.com support site.  I go to the Epson site for the P900 drivers and all that's available is a small download - "SCP900_Lite_64NR2_NA.dmg" which inside of it has the "Epson Installer" application.  No package file. I attempted to capture the Epson software and driver install using Jamf Composer, but printing fails on the captured package no matter how I manipulate it - "Software is missing.  Contact the manufacturer for the latest printer software."  Opened a support ticket and the first reply back from them was to go to Epson.com and select the OS and download the driver for the mod

I'm running an on-prem instance of Jamf Pro 11.5.1 and still testing getting packages uploaded to our File Share distribution points before jumping to the next version. When we upload packages using either Jamf Sync or Directly to the SMB share, they only install/download the package with a VERY low success rate (10 percent or so). The Policy will complete without any issue, but it won't run the package the vast majority of the time. Screenshot included showing what I am talking about.     If we upload the package using Jamf Admin, we have 0 issues with packages associating with the policy. Is there some way to tell the jamf pro instance that the package exists, it seems like there is something that runs with jamf admin that just doesn't run with Jamf sync or when manually uploading to the smb share.     

We have created a configuration profile to block/Defer macOS Sequoia but it is currently pending for 500 of our machines. I know some of these machines are still in use and checking in. Currently it has completed on 1700 machines. I am trying to figure out what could be stopping it from successfully completing on these last 500 machines as I know some of them are actively being used. 

We have a Mac Studio running macOS Ventura. it's connected to a Studio Display via Thunderbolt, and to a Crestron system via HDMI, which feeds two large displays at the front of the classroom. The problem is that on power-on, the login screen defaults to the large displays, which are to the instructors' backs. We'd like to either force the login screen to be on the Studio Display, or if that's not possible, at least have the displays mirrored at startup so the instructors can see where they're typing (and hopefully avoid typing their password into the username field for all to see!). I read that if an admin set the primary display to be the Studio Display, that it should respect that setting on future reboots, including for the login screen, but that doesn't seem to be the case.We're looking for a solution that "just works," i.e. doesn't involve instructors having to disconnect cables before login, etc. We didn't seem to have this problem last year when we were running macOS Monte

I'm trying to script the removal and re-adding of SecureTokens. We have run into an issue where the users have changed their passwords outside of macOS and now the accounts with SecureTokens are not able to install macOS updates.    Can this be done, anyone have any examples?   When I try to do it manually, I get a  Operation is not permitted without secure token unlock.

Notability has announced changes to their Education license model, info found Here.I ran into an issue deploying the license key to macOS devices following their instructions Here.The sample XML for macOS deployment file doesn't indicate what the "Preference Domain" should be set when deploying via Configuration Profile in Jamf.You should enter com.gingerlabs.Notability for the Preference Domain field.Here's an example of my PLIST file:<?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>com.apple.configuration.managed</key> <dict> <key>License Key</key> <string>YOUR_LICENSE_KEY</string> <key>iCloud Allowed</key> <true/> <key>Link Sharing Allowed</key> <true/> <key>Note Gallery Allowed</key> <true/> <key>GIF Library All

Is anyone using Lumu Defender as an addition to your security stack? They are trying to integrate with Jamf Protect at the moment but thats not why I'm asking for help. I am trying to automate the install process, and get as far as getting to the point where it wants an activation code to tie it back to our cloud instance for definitions/signatures etc with out having to have our end users (student or staff) copy paste it into the pop up box. At the moment its a rather somewhat complicated Automator workflow as when I tried doing the install with Composer, I cant seem to get it to install properly. Looking for ideas if anyone is using them. Thanks

This is under duress and pressure seeing that they need the ipad ASAP.And since I do not do this often, last time was 2022 when I installed an ipad, and since there are many ways to add a device to Jamf, on top of the fact that our Jamf account was created in haste back in 2019 and then handed to me, it has many variations of managed devices.I was handed a new ipad bought from Verizon, not apple which is the easiest i know.I tried using Configurator by adding an mdm, but it was not valid and deleted it. I used a different MDM profile in the configurator and it wants to erase the ipad as does the prepare process. Is there a way to add the device to JAMf Pro and be managed without erasing it? - gerald

Hey everyone, new to Jamf here. We have a remote desktop app that requires us to allow access via the remote desktop setting in privacy and security (shown below). We have many remote machines and are trying not to have to enable it one by one. Anyone know if it's possible to set this in Jamf? I looked in the PPPC on our config profile but I don't see this "Remote Desktop" setting.   

Upload the custom font to your Google Drive by opening Google Drive, clicking the “New” button, and selecting “File Upload.” Choose the font file from your computer to upload it to Google Drive. Once the font is uploaded, right-click on the font file, select “Open with,” and then choose “Google Docs.” 

Aside from getting the logged on user, what'a a way to get the username that's assigned to the computer in Jamf? I would like to use it for a policy script.

With Justin Rummel (and other's help) Hear it is in simple form: #!/bin/sh result=/usr/libexec/PlistBuddy -c "Print :ClientID" ~/Library/Preferences/com.TeamViewer.Settings.plist echo "<result>$result</result>" Major caveat, it will only work with the full Teamviewer App or theirSHost Module, not the QS app (It doesn't make a plist) --Doug Hanley doug at mac-tek.com - 702-396-0697 Apple Certified Systems Administrator - Apple Certified Trainer Apple Certified Support Professional - Apple Certified Technical CoordinatorMacTEK Consulting & Training - http://www.Mac-TEK.com Apple Authorized Training Center (IT & Pro Apps) - Adobe Authorized Training CenterApple Consultants Network Member - Apple Authorized Service Provider

Hey All,  We have a logi swytch and it needs DisplayLink app to make it work. I'm trying to make DisplayLink available on Self Service. But when I tried to create a configuration policy to allow screen recording for DisplayLink, it doesn't work at all. Anyone has any idea to make it work. Please see my PPPC configuration below  

Hi, I am trying to manage the dock apps via profile. However, I don't seem to be able to do it for any apps which is in the sub folder.How can I add Adobe Photoshop for example.I have tried copying /Applications/Adobe\\ Photoshop\\ 2024/Adobe\\ Photoshop\\ 2024.app but it shows a question mark.Thank you 

Hi all,I've tried to install JCE 1.4 on a fresh laptop => selected macos => clicked on create new project => selected sequoia => clicked create => selected the folder => clicked save.Next step would be to be prompted for a security standard, but nothing happens.I tried it on 2 different laptops with the following OS:Sonoma 14.7Sequoia 15.0I also tried selecting the following OSs for the projects:SonomaSequoiaWith the same results.Can someone please confirm that its also happening for them? Thx! 

Dear all,I'm attempting to configure a "Download" event in Jamf Protect's Analytics, but I seem to be having trouble with the predicate. The one I've used is ( ProcessName == "mdworker" CONTAINS FilePath ENDSWITH ".download" ), but it doesn't seem to be triggering the "Download" event in the Alerts as expected. I'm pretty sure I've set it up incorrectly.&#x1f605Could anyone suggest the right predicate to use for a "Download" event?Thank you. 

I am doing some testing with macOS 15 before any widespread deployment.I use Jamf Pro polices and packages to update Jamf Connect to the newest version (currently 2.39).On macOS 13.6.7 and 14.6.1 the policy runs fine without any issues however on macOS 15 it is giving me an integrity error:Verifying package integrity...Installation failed. The package could not be verified.I can install Jamf Connect 2.39 directly via the dmg file and JamfConnect.pkg file on macOS 15, however this is not practical as most of the managed computers are offsite.This seems to be an Apple integrity check issue. Any thoughts on how to work around this issue.Thanks

I am able to successfully build & deploy custom preferences using the Application and Custom Settings on Configuration Profiles. What's not working is just the AllowTenantList setting. I think it's a syntax problem so any help would be greatly appreciated. M$ website to deploy & configure on macOS says: The example for this setting in the .plist file is:<key>AllowTenantList</key><array><dict><key>TenantId1</key><Bool>True</Bool><key>TenantId2</key><Bool>True</Bool></dict></array> We only have the one tenant ID so this looks like:<key>AllowTenantList</key><array><dict><key>My_Company's_Key</key><Bool>True</Bool></dict></array> Before I save the config profile, Jamf shows a summary of the settings. All the boolean keys are showing their correct true/false, but this string just says " AllowTenantList=[{}] " inst

OverviewDeploying bookmarks as an admin is deeply off putting. Every web browser does it differently, files change often and if you do it wrong, your users lose 100's of saved websites that they have accumulated over the years. Using a configuration profile to toggle a setting enforces that setting on a device when the profile installed. By pushing bookmarks into Google Chrome in this fashion, they end up in a managed bookmarks folder that:- the user is not able to change.- has no effect on the user's existing bookmarks.I have not found a great step-by-step guide to perform this task online so here's my attempt at this. Feedback is not only welcome but encouraged.You will need the following:1. A macOS device2. Basic knowledge of the Terminal application (or Xterm or similar)3. The ability to create, read & update a computer configuration profile in the JSS.Part 1: Use Terminal to create a basic .plist file1. Open Applications > Utilities > Terminal.app2. Run the following com

Ok, to start I'm brand new to JAMF and Mac management in general, so please bear with me. This post is kind of two-fold. I'm trying to figure out expected behavior and possibly some guidance on whether or not what we have in place is the best way to do this kind of thing. Basically, we have Network configurations that set up our Wired and Wifi Network connections and configure for 802.1x authentication. We have some expired certs to servers that no longer exist that I've been asked to remove, and I also have been asked to "fix" the connection to handle the MAC address randomization that is turned on by default for MacOS Sequoia. The profiles (wired and wifi) both have a certificate chain, a network connection and a SCEP cert that is used for user auth.In order to test, I've made a copy of the existing profile, and moved a few devices over to it.As soon as the test profile hits, the devices are disconnected from the network, because it appears it removes the existing network connection

Our 802.1x network has been working for more then a years, but again and again I have seen the isse, where users first time they connect got the attached image. The user certificate is located in the users login keychain - I don´t know if that has anything to do with it We use network payload - and just asking me if this somehow can be stopped so this popup will not appear anymore.

Our current environment uses the user name to inject credentials in kerberos for use with Okta. I'm trying to create a script to change the user name / home folder name to mirror their user name in our Active Directory environment.

We are having an odd issue on a couple of our macs (both iMac and MacBook).The menu bar disappears, and you then cannot type, you can see apps in Applications but not select them, you can get Spotlight up but you cannot type into it. Not happening to many but quite an odd issue with no pattern that I can discern.Having Googled it and tried the suggestions of Disk 1st Aid and starting in Safe Mode, neither worked. Also tried reinstall of the OS which worked for a while but the issue came back. Tried user profile removal and then adding back in which seemed to work for a few weeks but the issue has just returned for the same user. So wondering if anybody else has had this issue, and has anyone got any solution/suggestions?Many thanks

While rolling out Jamf safe internet we see this message in the dashboard for active devices.