Skip to main content

General Discussions

What your peers are saying about all things Apple

  • 10,000 Topics
  • 245,067 Replies
10000 Topics
R
Rich_CContributor
asked in General Discussions
Computer Extension for local group on mac and membership

Hi,  I am looking for some help to see if there is an existing JAMF Brand Computer Extension for reporting all local groups on a computer and\\or a particular group name.  I would also like it to report all of its membership.  ANy help is appreciated.  Thanks!!

40
A_Collins
B
BrandonMaherNew Contributor
asked in General Discussions
Cannot Remove Profile

We had a device that was not able to be managed, so we tried to delete the device and remove the profile to re-enroll. We are not allowed to remove the MDM profile, and reinstalling the profile through self enrollment fails, stating "New profile does not meet criteria to replace existing profile". For additional info, this computer was part of a pre-stage enrollment originally. 

3530
D
J
jgwatsonContributor
asked in General Discussions
Mass delete all classes Imported with Apple School manager

We are after changing the naming convention for classes imported with ASM. Is there a way to mass delete the classes in there now? Thanks

280
R
N
nav360adminNew Contributor
asked in General Discussions
Solarwinds Discovery Agent

We use Solarwinds for asset tracking and internal support. The installation instructions have you running a command to silently install. How would that be done? I'm used to Intune allowing your to run an install command but not sure where to do that here. Thanks.

70
O
ianhansen
ianhansenCommunity Manager
asked in General Discussions
Jamf Pro 11.10.0 Beta is now available

Hello Jamf Nation! The Jamf Pro 11.10.0 Beta Release features several improvements including a new Self Service branding option, App Installers workflow enhancements and more. How to join the beta: Enroll in the Beta Program under Product Feedback at account.jamf.com. Once you enroll you'll receive an invitation to join the Beta Forum, click "Join this group Hub" to gain access. Email beta@jamf.com with questions. The beta program is covered by the Jamf non-disclosure agreement; please do not share any information regarding your testing on any public forum, including the non-beta areas of Jamf Nation. Use the Jamf Nation Beta Forum or contact Jamf via beta@jamf.com with any questions. Thank you to all who participate in this program!

340
ianhansen
T
tcannizzoNew Contributor
asked in General Discussions
Is There a Way to Add Apple Calculator to iPads?

I can find the Apple calculator app using New in the Mobile Device Apps.When added it shows Content not available to assign to mobile devices under Managed Distribution. Also, I am unable to find it when searching in Apps and Books in Apple School Manager. I assume these apps are NOT device assignable.  If that is correct then how do you get them onto a device? This only happens with Apple apps.  I have no issues with any 3rd party apps. Any help would be appreciated. Thanks! 

50
CSCC-JS
SteveWalker
SteveWalkerContributor
asked in General Discussions
Use authchanger to default login screen to 'local login'

Hi Jamfers!Is there a way I can use authchanger to force Jamf Connect to display the 'local login' screen by default as opposed to the 'Azure Login' (or whichever IdP screen you might use)I've managed to use 'sudo authchanger -reset' to switch the Jamf Connect login window off, and 'sudo authchanger -reset -JamfConnect' to turn it back on, but I'd like our users to have easy access to the Azure login option should they require it. The reason: our on-prem WiFi uses 802.1x security and doesn't play nice with Jamf Connect, so users will have to switch to local login when on-site anyway. I'd just like to save them all one less click in the morning :-)We've looked into workarounds for the WiFi security but local login seems like it is going to be our best course of action as the alternatives would be more hassle than it is worth. Thanks for your help and time! Steve.

620
S
Alex_Tatarinov
Alex_TatarinovNew Contributor
asked in General Discussions
ipad stuck on single app mode after changing the wifi password

Our infra team changed the wifi password for an SSID that was also being user for an iPad in our office, the iPad itself is in single app mode by a configuration profile.Problem is, it cannot access the internet anymore and obviously jamf commands do not work on it, apart from wiping the machine itself, are there any other options we can use?

160
A
J
Jonas_New Contributor
asked in General Discussions
automatic tickets for uncompliant Macs

Hello together,I am currently looking for a solution to automatically create tickets when a device becomes uncompliant. We check the compliants with JAMF.I can have emails sent automatically with Smart Groups, but only to my user.Would I have to create a service user for this or is there another way?Many thanks in advance!Regards,Jonas

80
jamf-42
howie_isaacks
howie_isaacksEsteemed Contributor
asked in General Discussions
Can we block specific sudo commands from being ran?

Is there a way to block specific sudo commands from being ran? Two specific commands that I have in mind are: sudo jamf removeFramework or sudo /usr/local/jamf/bin/jamf removeFramework sudo -s We don't want users with admin rights to be able to remove the Jamf framework, and we don't want them to be able to elevate their Terminal session to root. We use CyberArk EPM to allow non-admin users to run sudo commands that they need to run as part of their jobs. I recently discovered that non-admin users can run both of these commands with CyberArk installed. Both are very dangerous. We want to be able to allow legitimate admins to be able to run these commands. I sometimes have to run removeFramework to clear out issues with the Jamf agent or Jamf keychain issues. I also frequently elevate terminal sessions to root to be able to view the contents of certain directories where a normal sudo command won't do it. We just want our regular users to not be allowed to run these commands. I can't thi

990
H
O
omrifakrashNew Contributor
asked in General Discussions
classicApi pagination

I am trying to fetch all policies through an API call to endpoint `/JSSResource/policies`But I am getting only 25 policies, without any header of `next` `page` or something like this.How can I query for all policies and not just random 25 of them?Thanks in advance

10
Tangentism
donmontalvo
donmontalvoHall of Fame
asked in General Discussions
Jamf's implementation of Service Now for support tickets

Does anyone have an issue where Jamf's implementation of Service Now does not allow you to see tickets opened by others on your team? I opened a ticket to ask if this is on their radar and can we expect a fix. I got the usual boilerplate response (for this issue; second time opening a ticket):To confirm, the way our ServiceNow support portal is setup, admins can only see tickets in their portal that they have submitted under their Jamf ID.Service Now is highly configurable and customizable. Yes we know the ability to see each others' tickets is not currently possible. That was not our question.We want to know if the team that is responsible for the development of Jamf's Service Now implementation is aware of the issue/impact, and do they plan to fix it?I will not be submitting a Feature Request, because this is not a Jamf product issue. This is a Service Now implementation issue.Thoughts?

110
donmontalvo
K
k3vmoValued Contributor
asked in General Discussions
How do you brew?

Will be getting a large end user department who got approved for Macs to use NPM/homebrew/Git, etc I know how to gather what's installed - but how do ya'll patch that stuff? Assuming you have a company policy that *any* install needs to be current - how would one approach that via Jamf? Sure, there are exceptions where a dev needs a certain build but how does one accomplish patching those packs via Jamf?

680
AJPinto
C
cpominvilleContributor
asked in General Discussions
Enable Lost mode!!! Don't turn iPad OFF!! and iPad code enabled. Lethal!

Our Jamf version 10.16.1-t1572055156iPad in discussion, 13.2.3Mac version 10.15.1 I had a situation Friday where I had to put an iPad in Enable Lost Mode. I have played with this before, with iOS 12, and Mac 10.14.x last year. Turn it on, turn it off, just easy peasy. Today Monday, YOU CAN NEVER TURN ENABLED MODE OFF!! I even plugged the iPad into an ethernet adapter we have for this very thing, as in the past if a user turned off the 1-1 iPad, it would never connect to wifi until you get passed the iPad code. Can't get past the iPad code, can't connect to wifi. Can't connect to wifi, no command from Jamf is gonna hit the iPad. So we got an ethernet adapter, so we could get Jamf commands to hit the iPad through an ethernet connection. I MUST MENTION THAT THE IPAD WAS TURNED OFF when enable lost mode was on, because the beep beep sound from enabling lost mode, was driving the person crazy. Turning off the iPad when in Lost mode, BIG NONO!! After that....Turning off th

120
Mark_Leitch
M
Matt11Valued Contributor
asked in General Discussions
Keeping Log Files for X days

I am trying to figure out how to allow the computers to keep the system.log, install.log, and a few other logs for 90 days. Apple's newsyslog.conf man is gone and I've searched and haven't had much luck. Can someone point me to the direction on how we can set this value, to keep certain logs for 90 days?

100
GoodS
G
GabePPSEsteemed Contributor
asked in General Discussions
Setting Safari Defaults to show favorites toolbar on login per user

I've been trying to script a plist change to com.Safari.plist that sets the value for the favorites toolbar show to true. Here is what i'm running, and what it returns: #!/bin/sh defaults write /Users/$3/Library/Preferences/com.apple.Safari.plist ShowFavoritesBar-v2 -bool true defaults read com.apple.Safari exit 0 Script result: {"ShowFavoritesBar-v2" = 1;} I think I'm missing that step that tells the OS to ignore the cashed version of this file and use the modified one. Gabe ShackneyPrinceton Public Schools

120
L
H
hcgtexasContributor
asked in General Discussions
Jamf Connect Sync Negative Password Expiration Time

I have had a few users where after they change their password with Jamf Connect, the password expiration countdown time turns into a negative number. For one user in particular, we have tried re-logging into Jamf Connect, clearing the Kerberos tickets, killing the service and restarting the app, and nothing has updated the date to the correct time. Instead of saying "Password Expires: 55 days" it counts backwards to his old expiration date with "Password Expires: -4 Days" Does anyone know where Jamf Connect Sync v1 gets this date from/how to fix this issue?

880
jocbaz
T
TahoeNew Contributor
asked in General Discussions
Jamf Protect Network Threat Prevention DNS Settings Disabled

I'm working to push out network threat prevention in Jamf Protect as described here: https://learn.jamf.com/bundle/jamf-protect-documentation/page/Configuring_Network_Threat_Prevention.htmlUsing Jamf Pro, We have successfully deployed the configuration profile to 4 pilot machines, however, the DNS Settings are disabled and the option to enable them is greyed out.  As a result, Network Threat Prevention is not working on these machines.  My guess is a previous admin changed a setting in Jamf Pro that disables DNS settings, but I feel like I'm running around in circles trying to find it.  I apologize for the wildly open ended question, but I'm curious if anyone has any ideas on how I could enable these DNS settings?  Appreciate any help!  Thank you!

130
U
M
MKronerAOS
asked in General Discussions
Guided Access is not available. Please contact your admin.

Hello, I have a problem with the managed iPads at my JAMF School.In fact, many of the devices were previously shown to me as inactive. I have now fixed this problem, but now I can no longer upload new profiles to the devices. Or rather manage them.When I reset one of the devices, I get the message: "Guided Access is not available. Please contact your admin."So I can no longer do anything with the device.Thank you for help.   Hallo, ich habe ein Problem mit den verwalteten iPads bei meinem JAMF School.Undzwar, wurden mir bisher viele der Geräte als inaktiv angezeigt, diese Problem habe ich nun behoben, aber nun kann ich keine neuen Profile mehr auf die Geräte aufspielen. Beziehungsweise diese verwalten.Wenn ich eines der Geräte zurücksetzt wird, bekomme ich die Nachricht: "Der geführte Zugriff ist nicht verfügbar. Bitte wende dich an deinen Admin."Somit kann ich mit dem Gerät nichts mehr machen. Danke für die Hilfe.  MfG.: M.K.

50
M
J
jonrosContributor
asked in General Discussions
Print function in Office-menu (M365) - iPad

Can't quite figure out an issue with Office (M365) for iPad, accessing the print function in the menu on some iPads but not others. The one on the left is my own iPad and the one on the right is an extra one I work with.The one on the left is an iPad Pro and the one on the right is an iPad 8, they're running the same iPadOS (17.6.1), they have the same version of Office, and they're signed in with the same Microsoft account.However, they do not use the same LDAP account and they are located in two different sites in Jamf. That is the only difference. Neither device has any restrictions whatsoever in Jamf. The only profiles of importance are MDM Profile and Passcode.Anyone who has experienced something similar and who possibly knows what could be the cause and possibly has a solution to the problem?I am absolutely not sure if the problem has a relation to Jamf, our LDAP or something else.

10
J
Quillathe
QuillatheNew Contributor
asked in General Discussions
Jamf Connect 2.38.0 - Why is the grey box so big?

I pushed out the 2.38.0 version, and the grey box around the Entra ID/Microsoft login is very, very big.It's not breaking anything, but it just looks weird.   I even had some staff working the desk ask if the Macs had been hacked or something, as it looked like an opened webpage window to them.  I guess in some manner it is a "webage", but I told them no, it's not hacked.Any solution to make it look like this again?

80
Quillathe
M
mrrobertbussContributor
asked in General Discussions
Remotely wiping a Mac

Hello to all, Sometimes I remotely wipe my test macs for various reasons. Is the best practice that after the wipe command is sent, and it begins to wipe, should I also delete the device from JAMF inventory or leave it in JAMF inventory? 

270
AJPinto
Q
quinteroaNew Contributor
asked in General Discussions
Device phone number not displaying?

When i look into inventory I have several devices that are not displaying the device phone number. If the device phone number isn't displaying does this cause any issues with apps? For us it seems that we have issues with the device not getting self service or able to install apps that we push to the device if the device phone number isn't pulling into inventory. Is there a way to force inventory to get the device phone number? I have tried to do an inventory update and it still does not pull in the device phone number.

110
J
JustinC
JustinCEmployee
asked in General Discussions
Upcoming changes to Adobe Creative Cloud apps in App Installers

If you are an admin that has access to the Adobe Admin Console, you can control what services and apps are available to users via the Creative Cloud desktop app. The following Adobe support articles document what customization options are availablehttps://helpx.adobe.com/enterprise/using/customize-creative-cloud-app.html The settings are controlled on the end user machine by the ServiceConfig.xml file that is installed alongside the Adobe application withing the following location /Library/Application Support/Adobe/OOBE/Configs/Since the launch of App Installers in Jamf Pro 10.37, the ServiceConfig.xml that App Installers installed alongside any Adobe deployments had the following settings configured: Adobe Admin Console optionAdobe Admin Console valueServiceConfig.xml keyServiceConfig.xml valueEnable self-service installNoAppsPanelfalseAllow non-admins to update and install appsNoSelfServeInstallsfalseDisable auto-update for end-usersYesAppsAutoUpdatefalseEnable self-se

730
D
Ecco_Luke
Ecco_LukeValued Contributor
asked in General Discussions
Jamf App Installers - Adobe CC Shared Device Licence

Hi All,Does anyone know if it's possible to deploy the Adobe CC apps via Jamf App Installers (awesome feature, by the way!) and then issue just the Shared Device licence from the Adobe Admin Console to licence them? It sounds logically possible, since you can just deploy the Shared Device licence file and the Adobe menu bar app without any other apps in the Admin Console... basically, I'd far rather deploy the Jamf packages than go through the Admin Console rigmarole if at all possible.

860
D

Want to write for Tech Thoughts?

Earn a cool badge and Jamf Nation Reward Bytes for your published articles. We’re looking forward to your submissions!

Submit A Blog Post
Terms & ConditionsCookie settings