Skip to main content

General Discussions

What your peers are saying about all things Apple

  • 10,000 Topics
  • 245,067 Replies
10000 Topics
summerly
summerlyNew Contributor
asked in General Discussions
Jamf Connect "Change Password" Not Working

 As shown in the below screenshots, after clicking "Change Password" then authenticating, I am taken to a home page screen. I then have to scroll down and select "Change Password" again. When changing the password there, an error occurs. I am using Jamf Now's Jamf Connect option with Azure.    

2090
summerly
M
mthomaContributor
asked in General Discussions
Show in Jamf Dashboard not working

Since the 11.2 update I can't seem to have the checkbox that says Show in Jamf Dashboard stick on Smart Groups and Policies and Config Profiles. I check it, go to the Dashboard and it's not there. Back in the group the checkbox is unchecked again. Have tried on a few different browsers. Other admin users reported the same. Anyone else seeing this?

80
emojination
binjali
binjaliContributor
asked in General Discussions
Tips for swtiching off Nomad for Jamf Connect and Okta

We use Okta as our main identity provider, and I'd like to leverage that alongside Jamf Connect to get Zero-touch working in my environment.  is there any advice for disabling Nomad and getting Okta and JC working nicely together?

340
C
K
KalpeshwNew Contributor
asked in General Discussions
Jamf ADCS connecter not working due to missing client auth config

I have installed ADCS connecter to get PKI certs on mac devices.After everything correctly configured found that JAMF cloud is communication was rejected by ADCS connecter server. IIS logs shows error code 403.7 this error code generally talks about missing/incorrect client cert.when I looked into IIS settings from:"IIS>ADCSProxy website >Configuration Editor>system.webServer > security > authentication >iisClientCertificateMappingAauthentication" iisClientCertificateMappingAauthentication config is as below:Enabled --> FalseoneToOneCertificateMappingsEnabled-->TrueoneToOneMappings-->(Count=0)My question is it expected behavior? do I have to manually add the client cert details in IIS iisClientCertificateMappingAauthentication? Ideally certificate connecter installation should have been taken care of this.      

50
K
KyleEricson
KyleEricsonValued Contributor
asked in General Discussions
Free Jamf Health Check Book Now

✨ Exclusive Offer: Free Jamf Health Check for the First 10 Registrants! ✨ Optimize your Jamf environment with a comprehensive health check, available at no cost for the first 10 people. This free service includes: • In-depth review of policies • Analysis of configuration profiles • Assessment of enrollment methods • Verification of certificate renewal dates • Evaluation of scripts & packagesDon’t miss out on this limited-time opportunity to ensure your Jamf setup is running at peak performance.Secure your spot now:Book Here

80
H
T
tubmantNew Contributor
asked in General Discussions
Inconsistent results with erase-install from Ventura 13 to Sonoma 14

Our org has been using erase-install 33.1 off and on for full macOS upgrades but now we want all users on Sonoma 14.When testing on a (Intel) VM logged in as regular user, it runs through and finishes the update properly.  It also worked on about half the client Macs but also fails to work on a lot of other client Macs.  A common failure in the logs is:2024-08-16 12:16:11 | v33.1 | [get_user_details] user cancelled dialog so exiting...How are they doing this as it's set for no user interaction and I've done all the screenshots to track the procedure.  Is it hanging somewhere and the error is spurious?  The script is long and convoluted and I'm definitely not comfortable with scripting and therefore not good at interpreting it's errors.One user was not present for the procedure as they were out of town and later on when trying to upgrade their Mac manually in Software Update, it errored out twice with an 'internal error'.  Manually downloading the Sonoma install

150
T
_aDiedericks
_aDiedericksContributor
asked in General Discussions
Jamf App Catalog Patch Management Dialog Prompt

Hi there, Jamf App Catalog is great at patching applications. The only caveat is the method that it uses to communicate with the end-user that an update is pending. Most of our users ignore or are unaware of the notification from Jamf App Catalog when a new update is pending and as a result complain of their apps getting abruptly closed. This is compounded by an ongoing issue of inconsistent notifications (an issue that has been open for a couple of years).   Is there a way to mitigate the above issue by maybe a passthrough of a notification to a prompt or dialog box that the user can interact with? All my attempts at trying to resolve this issue is cut short by there being no direct feedback on the local machine that is recording Jamf App Catalog interactions with the local machine i.e a log that can be leveraged to base notification triggers on a Jamf Pro policy and Notifier App.   I thought to leverage IBM Notifier for this task as it would be ideal. Except that once

180
_aDiedericks
EmreU
EmreUContributor
asked in General Discussions
API result return as blank

 Greetings all,Until last JAMF Pro update i had no issue with the script below. But as of today, the script returning blank result without error. Any idea ?   APIUsername="" APIuserpassword="" JAMFServer="" EAID1=69 JAMFAPIToken=$(curl -X POST -u $APIUsername:$APIuserpassword -s $JAMFServer/api/v1/auth/token | plutil -extract token raw -) DeviceSerialNumber=$(system_profiler SPHardwareDataType | awk '/Serial/ {print $4}') curl -u $APIUsername:$APIuserpassword -H "Accept: application/xml" $JAMFServer/JSSResource/computers/serialnumber/$DeviceSerialNumber/subset/extension_attributes | xpath -e \\ "//*[id=$EAID1]/value/text()" 2>/dev/null 

110
Tangentism
I
InubiNew Contributor
asked in General Discussions
Shared iPad temporary user storage problems

Today I Setup up pool IPads with temporary guest user only on shared iPads and couldn’t install all apps. There was a lot of available space on the iPads. What did I miss?

1120
L
P
Provincial_Pine
asked in General Discussions
Proactive Application blocking (Enforcing an application Whitelist)

Is it possible to proactively block application downloads through JAMF pro? For example, we determine and set up a whitelist of applications, and anything not on that list is blocked, rather than us finding it through our computer lists and removing it after the fact.

20
pete_c
michaelprice
michaelpriceContributor
asked in General Discussions
Jamf Connect - Initiate Password Change via Policy

We're trying to initiate a Jamf Connect password change workflow from a policy, rather than from the Jamf Connect menubar item.I see there are options for opening menu items using URL schemes (open jamfconnect://) but there doesn't seem to be a Change Password option, and the action command (open jamfconnect://action/Change%20Password...) doesn't work.Anyone have a solution?

160
S
ImAMacGuy
ImAMacGuyEsteemed Contributor
asked in General Discussions
EA for Rapid 7?

Does anybody have a way to look for Rapid 7 and it's version? it doesn't seem to put anything in the /Applications folder.

220
D
W
wstewart3Contributor
asked in General Discussions
memcached and TLS?

We currently have an instance installed on tomcat and working on getting memcached working.memcached out of the box works fine, but it supports TLS encryption.  When we enabled this, it appears that JAMF doesnt know what to do with the TLS connection.We will firewall off that port as suggested.  But TLS seems like a good idea.

50
AJPinto
H
hdagidirContributor
asked in General Discussions
DEP enrollment doesnt work

We are using apple business manager in my organazation.  Our jamf pro sync with azure ad , when we try to enroll a new mac os device its ask e-mail password but does not the accept . Because of that we cant pass this step and couldnt open the device.   

110
dubel
L
llckhrt1New Contributor
asked in General Discussions
Where Is the Setting to disable Apple ID Login for iPad using Shared Device setting?

Good morning,I am having the hardest time trying to find where I disable Apple ID Login in Restrictions for Configuration Profiles for iPads. Can anyone point me to where that is? If it matters, the iPad OS I'm running is iOS 15.x.Thanks,llckhrt1

20
L
S
Scott_ConwayContributor
asked in General Discussions
Jamf Connect - Azure Password Expiration Notification

We are using Jamf Connect and Azure to sync accounts/passwords with MacOS.  The computers are not AD bound.  Is it possible to get Jamf to warn users when their password is set to expire (we have a company policy to reset every 90 days)? If not, what are other fellow admins doing in this case?

640
dubel
atomczynski11
atomczynski11Jamf Heroes
asked in General Discussions
Jamf ID is missing work email, and associations.

Reason for this post is to start a conversation around Jamf IDs.As of late, my Jamf ID is missing Organization email, organization association, certifications, as well as products.(Last I checked, I can still access support tickets sot this is a good thing)I reached out to support, and they had me create a seperate Jamf ID using my business email and I'm being told that this account will be tied to the organization.I asked for my Jamf certifications to be connected with my personal Jamf ID again.Is this really how we are doing this now?Having to maintain a private Jamf ID and work Jamf ID?There is a bit of discussion on this on Slack, however I wanted to share this information here, for those of us who are not using/not able to access Slack.

80
mvu
Jacek_ADC
Jacek_ADCValued Contributor
asked in General Discussions
XCode 15.4 Deployment

HelloAnyone here, which used the guide for the xcode installation from:Deploying Xcode on managed devices (jamf.com)everything works for me til i start to install it via self service. After downloading the pkgi receive in my log:no app at /Applications/Xcode.app, exiting I am using the script from:Configure Xcode post installation script with SDK download for Xcode 14 and 15 (github.com)#!/bin/sh export PATH=/usr/bin:/bin:/usr/sbin:/sbin xcodePath="/Applications/Xcode.app" if [ ! -e "$xcodePath" ]; then echo "no app at $xcodePath, exiting..." exit 1 fi # select Xcode xcode-select -s "$xcodePath" # accept license xcodebuild -license accept # install additional components xcodebuild -runFirstLaunch # add everyone (every local account) to developer group dseditgroup -o edit -a everyone -t group _developer # enable dev tools security DevToolsSecurity -enable # download platform SDK # all available platforms # xcodebuild -downloadAllPlatforms # update previously down

260
Jacek_ADC
T
tsawyerNew Contributor
asked in General Discussions
Can't sign into OneDrive on fresh deployed Macs Sonoma 14.4.1

Hey so we use Jamf to deploy our Macs and recently whether it's a new Mac or one that's been wiped, we're unable to open and start OneDrive. Tried everything from uninstalling and installing from O365, installing from the microsoft page and so on. When running Onedrive I get an error saying Onedrive Couldn't Start, a system component is preventing OneDrive from starting. If I quit from Onedrive and try to start it again the error become We couldn't find the location of your onedrive folder, and the cycle repeats itself. Only thing I can find on the internet is involving Files on Demand.

310
N
R
rkeleghanContributor
asked in General Discussions
JAMF API - Prestage Enrollment

Hi All,Just wondering .. Using the JAMF API - Can I check that prestage a macOS in enrolled in or part of? Rk

60
M
M
mrrobertbussContributor
asked in General Discussions
Proper way to push these scripts out?

Hello everyone,I have received command entries from JAMF tech support to adjust our password policy that is reporting errors. I have been running these commands manually with a remote session with the user and it works. Is there a way to create Policies so that this will run without the user and myself involved? Reboot is not required but to run the commands requires user name and password in Terminal. On the user's Mac in Terminal run  sudo jamf removeframeworkOnce that completes stay in Terminal and  run  sudo profiles renew -type enrollmentAny help is much appreciated.  

310
M
L
light-userNew Contributor
asked in General Discussions
Force Password Update for local user best practice

Hi All, My end goal here is to force the local user (end-user) to update their password upon 2nd login (I will explain). Here is my current workflow for new hires (note: we don't have jamf connect) so I have to work with what I got.Current Workflow:1. Enroll the computer into pre-stage enrollment and let it cook.2. Create the local user (new hire) account in the create local account page in apple setup assistant. in this step we are manually creating a "temp" password 3. Log out of the current user's (local user) account and log into our jamfadmin account to finish manual set up steps (additional privacy permissions, re-naming hostname, enabling FV, etc)4. Log out of the jamfadmin account and shutdown.5. Deliver the laptop to the new hire with login information securely enclose. We leave it up to them to update their default password.So, with that being said, we now want to enforce our users to update their default/temp password to a secure one. After doing some research I ca

460
L
W
WombatContributor
asked in General Discussions
WebClips / URL Shortcuts

I tried creating shortcuts directly on iPads and it let me do that but after refreshing the profile they disappeared! I then found out about the Web Clips and put those in my profile and organised them on the Layout however they don't show on the iPads either!Can someone explain how I get URL shortcuts on to a home screen please!

610
N
DMH2000
DMH2000Valued Contributor
asked in General Discussions
Need Configuration profile or script to allow pop-ups for a couple web sites in Safari

I looked all over the internet, tried ChatGPT and can't find anything to allow a few websites to pop up windows.  This is affecting our Intune Integration when Safari opens and it goes to login.microsoftonline.com and device.microsoftonline.com. It take 2-3 times before we can successfully get through the enrollment.Does anyone know how to do this, I don't want to allow all pop-ups as I think that is dangerous. Apple isn't making this easy.  

1080
J
rpayne
rpayneContributor
asked in General Discussions
Nudge failing to launch when profile is updated

We have been using Nudge as a means to prod users to update for a few years and it has been flawless until recently. In test machines Nudge is no longer running despite having the launch agent installed being included in our managed login item profile. Manually installing the Nudge suite causes the service to run, but it doesn't pick up its settings in our Nudge config profile (minimum OS and whatnot). Granted we created our Nudge config profile back with version 1.x. Comparing the json for 1.x to 2.x looks identical, so I don't think that is our issue. Has anyone experienced something like this? 

110
rpayne

Want to write for Tech Thoughts?

Earn a cool badge and Jamf Nation Reward Bytes for your published articles. We’re looking forward to your submissions!

Submit A Blog Post
Terms & ConditionsCookie settings