Hello Jamf Nation! The Jamf Pro 11.10.0 Beta Release features several improvements including a new Self Service branding option, App Installers workflow enhancements and more. How to join the beta: Enroll in the Beta Program under Product Feedback at account.jamf.com. Once you enroll you'll receive an invitation to join the Beta Forum, click "Join this group Hub" to gain access. Email beta@jamf.com with questions. The beta program is covered by the Jamf non-disclosure agreement; please do not share any information regarding your testing on any public forum, including the non-beta areas of Jamf Nation. Use the Jamf Nation Beta Forum or contact Jamf via beta@jamf.com with any questions. Thank you to all who participate in this program!

I can find the Apple calculator app using New in the Mobile Device Apps.When added it shows Content not available to assign to mobile devices under Managed Distribution. Also, I am unable to find it when searching in Apps and Books in Apple School Manager. I assume these apps are NOT device assignable.  If that is correct then how do you get them onto a device? This only happens with Apple apps.  I have no issues with any 3rd party apps. Any help would be appreciated. Thanks! 

Hi Jamfers!Is there a way I can use authchanger to force Jamf Connect to display the 'local login' screen by default as opposed to the 'Azure Login' (or whichever IdP screen you might use)I've managed to use 'sudo authchanger -reset' to switch the Jamf Connect login window off, and 'sudo authchanger -reset -JamfConnect' to turn it back on, but I'd like our users to have easy access to the Azure login option should they require it. The reason: our on-prem WiFi uses 802.1x security and doesn't play nice with Jamf Connect, so users will have to switch to local login when on-site anyway. I'd just like to save them all one less click in the morning :-)We've looked into workarounds for the WiFi security but local login seems like it is going to be our best course of action as the alternatives would be more hassle than it is worth. Thanks for your help and time! Steve.

Our infra team changed the wifi password for an SSID that was also being user for an iPad in our office, the iPad itself is in single app mode by a configuration profile.Problem is, it cannot access the internet anymore and obviously jamf commands do not work on it, apart from wiping the machine itself, are there any other options we can use?

Hello together,I am currently looking for a solution to automatically create tickets when a device becomes uncompliant. We check the compliants with JAMF.I can have emails sent automatically with Smart Groups, but only to my user.Would I have to create a service user for this or is there another way?Many thanks in advance!Regards,Jonas

Is there a way to block specific sudo commands from being ran? Two specific commands that I have in mind are: sudo jamf removeFramework or sudo /usr/local/jamf/bin/jamf removeFramework sudo -s We don't want users with admin rights to be able to remove the Jamf framework, and we don't want them to be able to elevate their Terminal session to root. We use CyberArk EPM to allow non-admin users to run sudo commands that they need to run as part of their jobs. I recently discovered that non-admin users can run both of these commands with CyberArk installed. Both are very dangerous. We want to be able to allow legitimate admins to be able to run these commands. I sometimes have to run removeFramework to clear out issues with the Jamf agent or Jamf keychain issues. I also frequently elevate terminal sessions to root to be able to view the contents of certain directories where a normal sudo command won't do it. We just want our regular users to not be allowed to run these commands. I can't thi

I am trying to fetch all policies through an API call to endpoint `/JSSResource/policies`But I am getting only 25 policies, without any header of `next` `page` or something like this.How can I query for all policies and not just random 25 of them?Thanks in advance

Does anyone have an issue where Jamf's implementation of Service Now does not allow you to see tickets opened by others on your team? I opened a ticket to ask if this is on their radar and can we expect a fix. I got the usual boilerplate response (for this issue; second time opening a ticket):To confirm, the way our ServiceNow support portal is setup, admins can only see tickets in their portal that they have submitted under their Jamf ID.Service Now is highly configurable and customizable. Yes we know the ability to see each others' tickets is not currently possible. That was not our question.We want to know if the team that is responsible for the development of Jamf's Service Now implementation is aware of the issue/impact, and do they plan to fix it?I will not be submitting a Feature Request, because this is not a Jamf product issue. This is a Service Now implementation issue.Thoughts?

Will be getting a large end user department who got approved for Macs to use NPM/homebrew/Git, etc I know how to gather what's installed - but how do ya'll patch that stuff? Assuming you have a company policy that *any* install needs to be current - how would one approach that via Jamf? Sure, there are exceptions where a dev needs a certain build but how does one accomplish patching those packs via Jamf?

Our Jamf version 10.16.1-t1572055156iPad in discussion, 13.2.3Mac version 10.15.1 I had a situation Friday where I had to put an iPad in Enable Lost Mode. I have played with this before, with iOS 12, and Mac 10.14.x last year. Turn it on, turn it off, just easy peasy. Today Monday, YOU CAN NEVER TURN ENABLED MODE OFF!! I even plugged the iPad into an ethernet adapter we have for this very thing, as in the past if a user turned off the 1-1 iPad, it would never connect to wifi until you get passed the iPad code. Can't get past the iPad code, can't connect to wifi. Can't connect to wifi, no command from Jamf is gonna hit the iPad. So we got an ethernet adapter, so we could get Jamf commands to hit the iPad through an ethernet connection. I MUST MENTION THAT THE IPAD WAS TURNED OFF when enable lost mode was on, because the beep beep sound from enabling lost mode, was driving the person crazy. Turning off the iPad when in Lost mode, BIG NONO!! After that....Turning off th

I am trying to figure out how to allow the computers to keep the system.log, install.log, and a few other logs for 90 days. Apple's newsyslog.conf man is gone and I've searched and haven't had much luck. Can someone point me to the direction on how we can set this value, to keep certain logs for 90 days?

I've been trying to script a plist change to com.Safari.plist that sets the value for the favorites toolbar show to true. Here is what i'm running, and what it returns: #!/bin/sh defaults write /Users/$3/Library/Preferences/com.apple.Safari.plist ShowFavoritesBar-v2 -bool true defaults read com.apple.Safari exit 0 Script result: {"ShowFavoritesBar-v2" = 1;} I think I'm missing that step that tells the OS to ignore the cashed version of this file and use the modified one. Gabe ShackneyPrinceton Public Schools

I have had a few users where after they change their password with Jamf Connect, the password expiration countdown time turns into a negative number. For one user in particular, we have tried re-logging into Jamf Connect, clearing the Kerberos tickets, killing the service and restarting the app, and nothing has updated the date to the correct time. Instead of saying "Password Expires: 55 days" it counts backwards to his old expiration date with "Password Expires: -4 Days" Does anyone know where Jamf Connect Sync v1 gets this date from/how to fix this issue?

I'm working to push out network threat prevention in Jamf Protect as described here: https://learn.jamf.com/bundle/jamf-protect-documentation/page/Configuring_Network_Threat_Prevention.htmlUsing Jamf Pro, We have successfully deployed the configuration profile to 4 pilot machines, however, the DNS Settings are disabled and the option to enable them is greyed out.  As a result, Network Threat Prevention is not working on these machines.  My guess is a previous admin changed a setting in Jamf Pro that disables DNS settings, but I feel like I'm running around in circles trying to find it.  I apologize for the wildly open ended question, but I'm curious if anyone has any ideas on how I could enable these DNS settings?  Appreciate any help!  Thank you!

Hello, I have a problem with the managed iPads at my JAMF School.In fact, many of the devices were previously shown to me as inactive. I have now fixed this problem, but now I can no longer upload new profiles to the devices. Or rather manage them.When I reset one of the devices, I get the message: "Guided Access is not available. Please contact your admin."So I can no longer do anything with the device.Thank you for help.   Hallo, ich habe ein Problem mit den verwalteten iPads bei meinem JAMF School.Undzwar, wurden mir bisher viele der Geräte als inaktiv angezeigt, diese Problem habe ich nun behoben, aber nun kann ich keine neuen Profile mehr auf die Geräte aufspielen. Beziehungsweise diese verwalten.Wenn ich eines der Geräte zurücksetzt wird, bekomme ich die Nachricht: "Der geführte Zugriff ist nicht verfügbar. Bitte wende dich an deinen Admin."Somit kann ich mit dem Gerät nichts mehr machen. Danke für die Hilfe.  MfG.: M.K.

Can't quite figure out an issue with Office (M365) for iPad, accessing the print function in the menu on some iPads but not others. The one on the left is my own iPad and the one on the right is an extra one I work with.The one on the left is an iPad Pro and the one on the right is an iPad 8, they're running the same iPadOS (17.6.1), they have the same version of Office, and they're signed in with the same Microsoft account.However, they do not use the same LDAP account and they are located in two different sites in Jamf. That is the only difference. Neither device has any restrictions whatsoever in Jamf. The only profiles of importance are MDM Profile and Passcode.Anyone who has experienced something similar and who possibly knows what could be the cause and possibly has a solution to the problem?I am absolutely not sure if the problem has a relation to Jamf, our LDAP or something else.

I pushed out the 2.38.0 version, and the grey box around the Entra ID/Microsoft login is very, very big.It's not breaking anything, but it just looks weird.   I even had some staff working the desk ask if the Macs had been hacked or something, as it looked like an opened webpage window to them.  I guess in some manner it is a "webage", but I told them no, it's not hacked.Any solution to make it look like this again?

Hello to all, Sometimes I remotely wipe my test macs for various reasons. Is the best practice that after the wipe command is sent, and it begins to wipe, should I also delete the device from JAMF inventory or leave it in JAMF inventory? 

When i look into inventory I have several devices that are not displaying the device phone number. If the device phone number isn't displaying does this cause any issues with apps? For us it seems that we have issues with the device not getting self service or able to install apps that we push to the device if the device phone number isn't pulling into inventory. Is there a way to force inventory to get the device phone number? I have tried to do an inventory update and it still does not pull in the device phone number.

If you are an admin that has access to the Adobe Admin Console, you can control what services and apps are available to users via the Creative Cloud desktop app. The following Adobe support articles document what customization options are availablehttps://helpx.adobe.com/enterprise/using/customize-creative-cloud-app.html The settings are controlled on the end user machine by the ServiceConfig.xml file that is installed alongside the Adobe application withing the following location /Library/Application Support/Adobe/OOBE/Configs/Since the launch of App Installers in Jamf Pro 10.37, the ServiceConfig.xml that App Installers installed alongside any Adobe deployments had the following settings configured: Adobe Admin Console optionAdobe Admin Console valueServiceConfig.xml keyServiceConfig.xml valueEnable self-service installNoAppsPanelfalseAllow non-admins to update and install appsNoSelfServeInstallsfalseDisable auto-update for end-usersYesAppsAutoUpdatefalseEnable self-se

Hi All,Does anyone know if it's possible to deploy the Adobe CC apps via Jamf App Installers (awesome feature, by the way!) and then issue just the Shared Device licence from the Adobe Admin Console to licence them? It sounds logically possible, since you can just deploy the Shared Device licence file and the Adobe menu bar app without any other apps in the Admin Console... basically, I'd far rather deploy the Jamf packages than go through the Admin Console rigmarole if at all possible.

Just spent 30+ hours working on this so I thought I'd share   Had a few users contact me yesterday with the inability to use teams on their mac. Initial diagnosis was teams cache, so after combing thru thousands of posts and trying to clear the cache with no success, i began trying to uninstall/'reinstall, again, no success. This morning i was affected and ended up installing an OLD version of teams successfully. i tried to upgrade teams through the desktop client and same result. it was then that i noticed that the old version allowed me to use single sign on, and the new version wasnt even getting there.    the current resolution is that i have turned off ourMicrosoft Enterprise SSO plug-in for the affected devices.    if anyone happens to find the url for teams, feel free to share, or i will when i find it so i can put a nail in this coffin and be done with it. for today anyways.....until MS screws up something ELSE!

Has anyone seen this issue where when a user is sending an email to either a windows device or another Mac using office 365 and it has embedded images, but the when the other user gets it, it switches to an attachment. It's hit and miss and eventually goes away and we think it's only this one user that has issues. Our exec support is still trying to schedule a time to troubleshoot because it got escalated up and this user is a EA. The user sending the emails is on 16.87 and the user getting the email is on 16.88. 

Hi, I am trying to create a naming script for computers in my organization based on the inventory preload /Asset Tag field. The goal is to have the computer name be set based on the serial number.i.e.. If serial is 12345 then name be set to COMP-ID-01Thanks,  

We currently have multiple Pre-Stage Enrollments in place. One for Middle School Students, one for High School Students, one for Middle School Staff, and one for High School Staff. It has been recommended that we flatten our pre-stage one or two enrollments, however we assign the devices to a Site (Middle School/High School) during the enrollment process. This triggers Site Specific Policies to run (printer installs, software installs, etc.) and prep the device for use in that building. Were we to only have two enrollments (Staff and Student), What would be the best way to assign those devices to their respective sites after the fact, or do we have the most efficient setup? Additionally, we want to know if there's a way to Bulk Remove device records from devices that have been enrolled? Thank you for any suggestions you may have. -Micah