Get Support
Recently active
Heya awesome Mac admins! I am still relatively new to this whole Jamf thing and looking into setting up Jamf Setup Manager to install our apps before the user reaches the desktop. I am trying to follow guides and getting hung up quite a bit on step 1 of most them, “package Setup Manager”. This is kind of a loaded step. I have tried several ways of doing this. I have packaged the zip, which didn’t work. I have extracted the .zip to the desktop and then packaged, didn’t work. I have tried putting the extracted zip in different folders, then packaging from there with Composer, didn’t work. How the heck do I package this thing for deployment? The configuration from Jamf Pro is relatively straightforward, I just need some help making sure the actual files are in the proper places.
Hi,I recently set up a new Windows Distribution Point and am now trying to connect to it via the Jamf Sync App, but cannot get a connection. I see the DP in jamf sync, but it only asks for a password, not for a username. No matter what password I use I always get the error Message “Failed to load the … distribution point: cannotGetFileList” Unfortunately the new jamf support is pretty useless as there is not more option for me to communicate in english. All communication is automatically translated to german, but the translation is not that good so I often dont quite get what the supporter wants to tell me. Just english would be much better for me.
CIS 1 Allow Touch ID to unlock your mac what needs to be deactivated?Hi Hope you can help, how do we allow users to use Touch ID rather than the full password each time sleep is activated. What needs to be unticked in the list of Managed Rules in compliance?Thanks
Question for how/if we have controls to deploy a specific app version to iPads. We have a couple applications we use and work closely with the developer and schedule when we make the update available on our EFB iPads. We use the check boxes ‘Schedule Jamf Pro to automatically check the App Store for app updates’ and ‘Force App Update’ to accomplish this. Today is the first time we noticed a different version was installed than what Jamf Pro is reporting as available.This is what is showing under Mobile Device Apps.Does it always install the newest version of what’s available in the Apple store via Self Service regardless of what Jamf Pro is reporting? When looking at the Inventory for the iPad we see that 10.5.1 was installed.
Hi all,I try to create a user level configuration profile for ethernet (for 802.1x LAN authentication).So basically, the same we already use for WiFi.We currently use a computer lvl profile, which works without issues. But have to change it to user lvl because of the strong auth change Microsoft enforces soon.The settings should work but as soon as I click on save, the network payload vanishes. Without an error or any explanation… As said before, the WiFi profile (also user lvl) works like a charm.Any tips on why this might happen?BR Thomas
Hi folks, I’m trying to find a way to report (at the very least) which of our devices have Jamf Connect enabled in System Prefs>Privacy & Security>Local Network. Based on my investigation, it seems like SIP/Apple blocks this particular preference from being viewed or modified by MDM’s (on macOS 15+). I have seen similar discourse around the weekly system prompts for Camera/Screen recording and some solutions there, but nothing for this. I am preparing to upgrade all of our Macs to Sequoia 15.5, about ~80 computers. My org uses Entra for login + network drives and I’ve found that end-users on Sequoia that don’t have this enabled have issues with password sync and accessing the drives. Grateful for any input or advice!
We've followed the steps given in this guide (https://www.jamf.com/blog/help-users-activate-microsoft-office-365-and-configure-outlook-in-one-click/) but when we launch Outlook, our email address isn't automatically populated like it is here. Has anyone else experienced this? If so, what was your workaround? Any advice would be much appreciated! Thanks in advance!
I have Jamf connect configured with entra ID and requires authentication with their network account at each restart. My users are unable to sign into their macs offline because the account cannot authenticate with microsoft. Is this a setting within jamf connect that I can change to allow a local account to pass through when not connected to internet?
Hello All, can you someone guide me how to set different images for login screen and desktop wallpaper. i fine to create 2 different policies in Jamf. Thanks,Santosh
Hi, Jamf Nation! Many of you wear multiple hats and are the glue that holds the technical processes together in your environments. That’s why when something goes wrong, you need us, your Jamf Support team, to be by your side. Today we’re excited to share that the Support service you rely on is getting even better by streamlining your access to Jamfs who can best help you solve your problems at the right time. While all of the details of the enhanced process are in your email inboxes, we’re happy to share the highlights here. Knowledge and support now live together in the Support Portal, which is accessible via Jamf Account or at support.Jamf.com. Customers will see an updated chat experience (with more enhancements to come) The Product Issue process was simplified to enhance the customers’ overall interaction with Support While this work greatly enhanced the support you’ll receive from us, the majority of the changes are on our side (within the Jamf “walls”). Our Support teams w
Good Day!I am testing Platform SSO out in our environment and so far it is working great! We are pushing out MSCP via the Jamf Mac Apps. We’re using “Password” as our authentication type. Setup with Entra. And we do not currently have any custom config, just out of the box setup. Our machines are NOT Bound to AD, and we use local standard user accounts to start off with. then register and sync passwords. I have 2 major issues that I would love to hear from the hivemind:We are seeing that we can put in many bad passwords at the login screen without any repurcussions. If the machine was compromised, what is stopping someone from brute forcing the correct password? Is there a way to set password attempts? When a user’s password changes they can obviously go re-authenticate and sync their password again, but what if a user just ignores this and never syncs their password? Meaning whatever their password WAS is what they are using to Log In and then use a different password for their AD Ac
Getting kicked out of Jamf Pro server. If you are experiencing a similar issue here is my ticket number: 19843077 After enabling the SSO I am getting kicked out of the Jamf server multiple times daily.Behavior:clicking on a link presents signed out pageoractively browsing a page and presented singed out pageBrowser:SafariChromeOS: 15.4 (scheduled the update for later in the week)
I wanted to start a new post due to all the interest in some older posts. We are about to start a closed beta test of an app we built to help address a hole we saw in the digital signage space. We wanted a way to simply connect Google Slideshows to Apple TVs and we couldn't find a solution that fit our needs. So we built our own solution. Our app, Simple Signage, is a easy way to connect Google Slideshows to Apple TVs. You just copy the share link into Jamf, set the intervals for the slides and how often you want the slideshow to refresh. That is it. It has worked so well for us all year, we decided we would share with the community, but first we are hoping a few people will help us tryout and test the app. If you are interested in our app Simple Signage and would be willing to help us beta test it through TestFlight, just respond here and I will message you privately with more information.
Hello,With the new version of Jamf Connect 2.45, I noticed an issue with the login window.The login banner takes up the full width of the screen.Is there a way to reduce it to the size of the EntraID login window?
So any update about branding options of the SelfService+ App? So If I want to change the text under the "Welcome to Self Service+" is this possible?thanks.
Hello Jamf Community, I'm currently experiencing an issue with Jamf Remote Assist — I haven't been able to successfully connect to any Mac devices for the past two weeks. Each attempt either times out or fails with no clear error message. I've tried the following so far: Confirmed that Remote Assist is enabled in Settings. Restarted Jamf Daemon and the local Jamf app on the affected Mac. Verified network/firewall configurations (no changes recently). Tested on both Intel and Apple Silicon Macs with the same result. Has anyone else encountered similar issues recently?Is there any known workaround or reliable fix that could help restore functionality? Any suggestions or guidance would be much appreciated. Thanks in advance!
Hello everyoneMy context: wi-fi authentication based on 802.1x through a Windows Server (NPS). Computer certificates are deployed by Jamf (Configuraton Profile) and through the Jamf ADCS connector.Macs are not bound to the Windows domain but a computer object is created for every laptop (it's mandatory with a NPS server).Everything is working as intended. As you may know, in may 2022 Microsoft published an important security update that changes the way certificates are validated by domain controlers.https://support.microsoft.com/en-us/topic/kb5014754-certificate-based-authentication-changes-on-windows-domain-controllers-ad2c23b0-15d8-4340-a468-4d4f3b188f16 A new extension identified by the OID "1.3.6.1.4.1.311.25.2" is now included in certificate templates, but only for the ones that build the subject information from Active Directory.Unfortunately, certificates issued through the Jamf connector are "offline", meaning that the subject information (CN, DNS name) are supp
HI Jamf Nation,I was wondering if there is already a Jamf Group dedicated to Mac admins in the LATAM region. I might have missed it, or perhaps it hasn’t been created yet. If it doesn’t exist, I’d love to explore how I could start one to help foster conversations and collaboration among admins based outside the US and APAC.Thanks again for all your support, and best of luck with the new Jamf Nation experience.
I am using Jamf Pro and ran tests to get Microsoft Defender installed on our Macs. However, we’ve now decided to go a different route and I need a way to automate the removal of Defender. It was installed via a PKG and a policy in Jamf Pro. I have tried running a sudo rm etc to remove the app but that returns “operation not permitted”. I am an admin on my device and all our other users with defender are as well. I read that I might need to give Terminal full disk access, so I did. That didn’t work. I also then revoked full disk access from Defender, that didnt’ do anything either. I’m not sure what script I need to be running in Jamf to get this gone.
I have this specific need to keep the Google Drive app version to 77.0 but it keeps updating to version 110.0 (latest).I’ve already removed the device from the Smart CG linked to the GDrive app on the Application section but it still automatically updating.Is there something I can do to solve the issue?Thank you
Did the mission of Jamf Nation change with the recent update? The recent activity feed is full of volunteer stuff, did I miss a memo somewhere?
Hey All,We are working on determining the best way to manage our assets. We are a Mac/iOS only environment. So all of our equipment goes into Jamf Pro. We don’t do touchless deployment (management decision although its practically touchless). I’d imagine we’d need to get MUT involved to update purchase status.How do you handle new equipment or equipment that goes back into inventory? Also, we are looking to get physical asset tag stickers for the devices. Any suggestions on using Jamf as a complete solution? Or addition tools that people use for Asset Management to track items?Thanks!
Hi,We are working on implementing Managed Blocking of Macros in Office365. My task was to to have every user (not computer) have the Macro Security locked to "Disable all macros without notification" There was also to be an exclusion group for users who would not be controlled by the above lock. For the exclusion group, we wanted if possible for them to be locked instead to "Disable all macros with notification" as that setting allows a user to enable macros on a document by document useI also had to make this work with Entra or our On Premises Active Directory (to which the Mac's are bound). As there's no linkage yet with Entra I've focused on Active Directory (AD)I found that the settings for this in the Configuration Profile only work on a "Computer Level" even though they seem to be User settingsMy Configuration Profile looks like this:This works but generally takes a few minutes for the machine to pick up a change in the group from ADIf I try and make a second Config Profile an
We have a small yet nice enhancement available as of today - you can now edit the benchmark description after creating the benchmark.This means that only the benchmark name cannot be changed once the benchmark is created (as it is used in all generated objects names). We therefore encourage you to pick a more general benchmark name and use the description (which is also visible on the benchmark card) to better describe the benchmark purpose - e.g. scope or mode.Let us know how this helps you to manage the compliance of your fleet!
Recently, an end user had their laptop stolen, so once notified i was able to apply a lock to the unit from my instance of JamfPro with a 6 digit code and it’s been a week now and it looks like nobody has tried to get the unit online. Long term can anyone suggest what i should do? I don’t expect to ever get the unit back so should i remove it from JamF?? Umberto
Earn a cool badge and Jamf Nation Reward Bytes for your published articles. We’re looking forward to your submissions!
Already have an account? Login
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.
Sorry, we're still checking this file's contents to make sure it's safe to download. Please try again in a few minutes.
Sorry, our virus scanner detected that this file isn't safe to download.
