Hi all
Jamf Pro gives us ability to see latest version under Patch Management clearly labeled Latest Version
So with that in mind - Jamf knows what systems are on the latest possible version of OS and which ones are not. Which is great, right? However so far i was not able to harness that into Smart Group that would point to the same Latest Version systems.
Is it not possible or am i missing something?
You can use Patch Management as a criteria in a Smart Group.
Create a Patch Management Title for the software title you want to track (including macOS versions).
Then create a Smart Group and select Patch Reporting Software Title as the criteria (you may have to Show Advanced Criteria.). You then choose the Software Title you want to use. Your options will be all the versions that Jamf Patch Managment knows about, plus "latest version".
You can use "Latest Version" as criteria for a smart group - this is correct. You can't, seemingly, then use this same group and add it to the scope of a policy. I've confirmed this with Jamf, and this seems a very strange decision. If you want to deploy / target anything with "Latest Version" you'll need to specify the version of the OS and manually keep checking it is indeed the latest for that smart group. Shame
You can use "Latest Version" as criteria for a smart group - this is correct. You can't, seemingly, then use this same group and add it to the scope of a policy. I've confirmed this with Jamf, and this seems a very strange decision. If you want to deploy / target anything with "Latest Version" you'll need to specify the version of the OS and manually keep checking it is indeed the latest for that smart group. Shame
You are correct. However, there is a workaround. Create the first Smart Group with the Patch Management criteria as "Last Version". Then create a 2nd Smart Group with the criteria as "Computer Group" and "Member of" the first smart group. That works.
Will give that a go - thanks very much!
You are correct. However, there is a workaround. Create the first Smart Group with the Patch Management criteria as "Last Version". Then create a 2nd Smart Group with the criteria as "Computer Group" and "Member of" the first smart group. That works.
I just came across this and tried it out. The only problem that I have found is that there are some variations that sort of trip this up. For example, looking at Sequoia in Patch Management, there are two releases that are both listed as 15.1. One of these versions is the recognized latest version, the other is the version that is actually installed on my endpoints. As a result, Jamf is seeing all of my "up to date" computers as out of date:
I've seen similar situations with Sonoma as well. I kind of wish there was a RegEx option for the Patch Management criteria, rather than simply all numerical comparisons.
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.