Hello,I would like to set up "destroyfvkeyonstandby" so that I can continue to use the touch id. because when I close the hood of my mac after 30 seconds when I open the hood again it starts by displaying the logo of the apple then he asks me for my password without the possibility to use touch id.Thanks in advance

I think I know the answer already but I figured I would try asking anyways...On an iPad under Settings > Safari there is an option called Block Pop-ups which appears to be enabled by default. Is there a way with Jamf Pro to be able to disable it? I know there is an option in a configuration profile to "Allow Pop-ups" but this is just to control whether users are able to manually enable or disable the Pop-ups setting. I've tried Googling this question and everything points to it not being able to be controlled, I just figured I would ask to see if anything has changed with newer versions of iPadOS over the years.Thanks in advance.

Hello everyone,I'm trying to access the website https://200review.jamfcloud.com to assist in learning for the Jamf 200 exam. Would anyone happen to know the credentials used to access the website?Thank you, in advance!

I was using this to import my Class for a few years now, but this year it simply won't work.I have this error on the log:***************Could not retrieve the Jamf Pro version number.org.xml.sax.SAXParseException; lineNumber: 1; columnNumber: 1; Premature end of file.at com.sun.org.apache.xerces.internal.parsers.DOMParser.parse(Unknown Source)at com.sun.org.apache.xerces.internal.jaxp.DocumentBuilderImpl.parse(Unknown Source)at com.jamfsoftware.conduit.plugins.sisplugin.SISPluginCore.get_jss_version(SISPluginCore.java:416)at com.jamfsoftware.conduit.plugins.sisplugin.SISPluginCore.connect(SISPluginCore.java:185)at com.jamfsoftware.conduit.core.ConduitPluginManager.doConnect(ConduitPluginManager.java:169)at com.jamfsoftware.conduit.core.ConduitController.doConnect(ConduitController.java:404)at com.jamfsoftware.conduit.gui.MainController.doConnect(MainController.java:149)at com.jamfsoftware.conduit.gui.JSSConduitWindow$9 run(JSSConduitWindow.java:621)at java.lang.Thread run(Unknown Sourc

We have various shell scripts in which we open or directly execute a policy in the self service as follows:  open "jamfselfservice://content?entity=policy&id=10&action=view"  Since the update from 11.4.1 to 11.7.1, we have noticed the problem that the following error message appears when we open / execute such a policy (unfortunately I can't insert a screenshot, I don't seem to have any permissions):Self Service quit unexpectedly.Click Reopen to open the application again.Click Report to see more detailed information and send a report to Apple. if you first open the Self Service app and then execute the command, it works.Does anyone else have this problem?Our workaround is now to open self Serivce first, and then wait with a sleep 5 until hopefully the app is started, so that the URL command can be executed afterwards.  open "/Applications/Self Service.app" sleep 5 open "jamfselfservice://content?entity=policy&id=54&action=view" &

Just wanted to see if there were any other Mac Admin's here on JAMF nation that are in the Omaha Metro area? If so, I thought I would see if there were any interest in forming a local JAMF user group or meet up?

We are deploying new iPad 10's to our students.  In one of our configuration profiles functionality restrictions restrict "modifying account settings" but that seems to affect the prestage setup assistant option for "Apple ID and iCloud" in that it is not displayed even though it is the only option we have unchecked. When "modifying account settings" is allowed, the setup assistant option IS displayed during enrollment. We do not have "install configuration profiles before setup assistant" selected in the profile because we don't want the profile to enforce any restrictions prior to the "setup Assistant". This is precisely because we do want students to login to their Managed AppleID before the modifying account settings restriction kicks in.What am I missing? In the meantime we deploy the iPads with "modifying account settings" allowed and are forced to then manually run an inventory check which we've designed to pick up a passcode and then deploy another config that restric

I am trying to install CrowdStrike agent on an iPhone (iOS) but keep running into errors. Steps taken: 1. CrowdStrike app is pushed out to iOS via 'Mobile Device Apps' + Managed Distribution - Successful 2. Created a configuration profile for mobile devices. Content Filter payload configured. Filter Type - Plugin Identifier - com.crowdstrike.falconmobileFilter WebKit - Unchecked Filter Socket - Checked Under Custom data, I have key/value mapping I got from CrowdStrike that contains the following key/value pairs: user_email$EMAILhostname$SERIALNUMBERskip_legalTruecloud_id<REDACTED>customer_id<REDACTED>provisioning_token<REDACTED>The application installs but when I open the application and click "Get Started" I see the following error - Crowdstrike missing deploymeny profile ios. Content Profile does not exist. Can someone help? 

Hi Anyone, we have a company AWS own VPN. When we run the AWS VPN its bypasses the Jamf Radar policy and the user can be access how we can fix this issue

We have historically given users who teach in Xcode the "Privileges" app from SAP because they insist that they need to run every update that comes out from Apple. Recently we noticed that one user has been abusing this app and installing various unapproved applications without going through IT first. We are wanting to see if there is a way that we can give a standard user the ability to run updates on Xcode only without having administrative privileges to do anything else or install any other applications.It looks like, in the past, a device (or user maybe?) could have been put into a Developer group which would allow them access to do things in Xcode that a standard user wouldn't, but still not be an admin. From what I have read, this doesn't seem to still be a possibility. Does anyone know if there is a guide to allow this? Or are we stuck using the Privileges app or someone from IT manually entering the admin credentials every time there is an update?

Hello! I have an advanced computer search setup that I use to keep eyes on what version of macOS our users are on, and ideally I'd like to be able to email the entire list using the "Action" command.  When I have tried this in the past emailing just a single user, I am able to send the email through JAMF, so I believe my SMTP settings are correct.  When I try to send an email with multiple users (sometimes 50-100) I receive an error command saying the email could not be sent.  I have verified that there are email addresses for each user in the list.  Is there something else I should be trying?  Thanks in advance for your help! Keith

 where at Jamf to inform about this?

I'm working creating a script that performs several functions. One of the functions requires me to obtain the computer's Jamf Pro ID. I'm trying to figure out how to do this using the new API. I thought if I have a variable for the computer's serial number I could use that to query for the Jamf Pro ID. Is this possible?

Hello,One of our users is requesting that we change their Name, Email, Username in all of our systems for their legal name change.  I am wondering how that will work with Jamf Connect. The Jamf Connect login screen should authenticate to Okta and allow them in but I am curious if there are other steps we would need to do like changing the Record Name value or disconnecting/reconnecting the local account with the IDP account. Anyone have experience with this?

Hi, all.I'm having two huge problems with Composer (Version 11.4.1 running on an M2 MacBook Air w/ macOS 14.4.1).When I create a source, I can't see files at all to interact with them. They appear to be there (see screenshot), and I can sort of kind of navigate the filesystem inside there with the arrow keys, but I see nothing. This makes it impossible to work with Composer atm, and it's a crucial part of my Jamf workflow. Anyone here seen this or know how to fix it? I've already tried uninstalling, ripping out the Composer prefs, and reinstalling. No joy.When I try to create a source from an existing file, I'm able to do it from a .dmg, but not a .pkg. Those always fail.Anyway, HELP! Is there maybe a beta I can try? I dunno…

We have a user who has discovered a log file on their MacBook called MCXTools.log that is being endlessly written to with the same entry (ID's have been obfuscated for security): Aug 27 13:45:39 mdmclient[20216] [0:MDMDaemon] Using MDM profile: <DeviceEnrollment> [CloudConfiguration:SetupAssistant] EnrollID: XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX (User:XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX) <Payload: JAMF Manual Enrollment Payload: MDM (<com.apple.mdm> 00000000-0000-0000-A000-XXXXXXXXXXXX:00000000-0000-0000-A000-XXXXXXXXXXXX) from profile: MDM Profile (00000000-0000-0000-A000-XXXXXXXXXXXX:00000000-0000-0000-A000-XXXXXXXXXXXX)> It has been writing these lines (and others) endlessly ever since it was enrolled. I cannot find any information on the internet about this log file and wondered if anyone has seen this before and what it is doing?

Is there a way to run a configuration profile that is set to self service distribution via the command line? I've tried jamf policy -id X, but it didn't work.

Hey all,I hope someone can help.I have an iPad (7th Gen) that I've successfully added to Apple Business Manager (ABM) using Apple Configurator. After that, I moved the iPad to our MDM server in the pre-stage enrollment, but it never appears in JAMF.I’ve tried releasing it from ABM and re-adding it, but the issue persists.I've done this process with 20 other iPads without any problems, so I'm not sure what's going wrong this time. I even left it in ABM overnight to see if it just needed more time, but that didn’t resolve the issue either.Any ideas on what might be happening or what else I can try?Thanks in advance for your help

Hi folks,Since yesterday my fleet of 750 iPads started asking users to change their passcode.I have never had this before, I wasn't aware iPad passcodes expired.And I've never configured any passcode expiry nor can I find where to do it in Jamf School.They're behaving as if I've applied a profile requiring a passcode, which I have not.A mixture of iPadOS 16-17Any thoughts appreciated.Thanks

Hey Everyone,Does anyone know how to disable the "Wacom Desktop Center" app from auto launching during a user's first login?(I don't remember having this issue last year when setting our computer lab iMacs at my community college.)

Our Jamf Pro is currently setup to use LDAP for adding Directory Accounts. I want to switch to using Entra for Cloud IdP.Anybody run into any issues when making the switch? Did you do a straight swap or have both Cloud IdP and LDAP configured at the same time?  

I've messing around with the below script I found, so we can allow some users to forget ssid's. When I forget the wifi, I still get the admin prompt, but if I hit cancel on the prompt, it does forget the ssid. Just trying to figure out how to get the prompt to not show on Sonoma.   #!/bin/bash # Get a list of preferred Wi-Fi networks wifiList=$(networksetup -listpreferredwirelessnetworks en0 | sed 's/^\\*//') # Present a dialog box for selecting a Wi-Fi network to forget selectedWifi=$(osascript -e 'choose from list {'"${wifiList}"'} with prompt "Select the Wi-Fi network to forget:"' | tr ',' '\\n' | sed -n 2p) if [ -n "$selectedWifi" ]; then # Forget the selected Wi-Fi network without requiring admin privileges sudo -u $USER networksetup -removepreferredwirelessnetwork en0 "$selectedWifi" echo "Wi-Fi network '$selectedWifi' has been forgotten." fi echo "Please select the Wi-Fi network you want to forget."   

I'm sure the really smart people will be able to improve the steps I took to insert the Serial and prevent updates. 1: Download the newest version 10.3. Upload to the JSS2: Install on your test machine. Authorize with your serial. This process will create the com.finaldraft.finaldraft. plist. I used Composer to capture the file.3: I then created a policy with the installer, and the license package and the script below that runs after the install is complete #!/bin/sh Define logged in user user=ls -la /dev/console | cut -d " " -f 4 Run command with sudo as user sudo -u $user defaults write /Users/$user/Library/Preferences/com.finaldraft.finaldraft.v10.plist IT-Install XFDY-XXXX-XXXX-XXX sudo -u $user defaults write /Users/$user/Library/Preferences/com.finaldraft.finaldraft.v10 SUEnableAutomaticChecks -bool no When run for the first time the Authorization box pop up with the Serial pre populated. That's it

Hi there,We currently have Google Workspace configured in Jamf Pro. This allows us to manually search for users in "Users and Location" to assign them to a device.We also have Jamf Connect in our environment that associates the local account with an Okta account which is linked to the user's Google Workspace email.Is there some way to automate assigning user details into User and location based on the username of a logged in user?

I need to update the PaperCut server on our Macs via the /Applications/PaperCut Print Deploy Client/data/config/client.conf.toml file so our devices will pick it up.I created a pkg with Composer that solely consists of that modified file, but it is failing to deploy.Here is the error I'm receiving:Installation failed. The installer reported: installer: Package name is PaperCutConfig installer: Installing at base path / installer: The install failed. (The Installer encountered an error that caused the installation to fail. Contact the software manufacturer for assistance. The package is attempting to install content to the system volume.)Any help would be appreciated.