Afternoon Where gearing up to rollout Sequoia later this year, does anyone have any config profiles there using to block these from appearing. Is it something that can be blocked? it doesnt seem possible through Jamf own config profile settings.I assume there is some custom xml that could be used possibly.Thanks Tom

I've got a profile added to my prestage to enable FileVault during enrollment, and for random systems, it seems to be failing to turn on FileVault. The profile is installed on the system, but the key is Unknown and FileVault 2 status is Not Enabled. These machines have all been on macOS 14.x (few with 14.1, few with 14.3). The weirdest one of all though, is a system with 13.7.3 enrolled, got the profile deployed, and FileVault enabled and key escrowed to Jamf. I doublechecked and confirmed the documentation states this is for macOS 14.0 or later. Anyone else seeing anything similar? My environment is running 11.12.1. I could rip out that profile from one system and then deploy the previous profile that I was using to enable at first login (I confirmed that both profiles are not on the systems affected). Also of note - users are FileVault2 Enabled, and have SecureToken issued. I also checked the PI's and didnt see anything that sounded similar to this.

Hey Everyone!I have been at this for hours and I am not sure what I am doing wrong. I am trying to make an extention attribute that will display the users current keyboard input type. We have users in the UK and in the US and I have been asked to show if the users mac has a UK Keyboard or a US Keyboard. This is my script, its very simple and I am not sure why its not showing a result in Jamf Pro. Even know it shows a result in terminal and code runner.  #!/bin/bash# get the keyboard layout nameresult=$(defaults read com.apple.HIToolbox AppleCurrentKeyboardLayoutInputSourceID)echo "<result>$result</result>"  Here is my EA's Attributes  I am trying to find out if I need to contact jamf or am I missing something. Any help would be greatly appreciated!         

In 11.11 a new attribute for macOS was released - Battery Health.  However the only value I see reported for any of my computers over 14.4 is Unknown.  Is anyone seeing this work?  There is a note stating that this will work for iOS but not iPadOS - but nothing about it not working for macOS.

Once established, it is no longer possible to change any configuration of the compliance set. It would be nice to have the ability to change it.

Hi, I'm fairly new to doing Software Updates via DDM and am having a few issues.  One of which is a Mac that requires an update from 14.6 to 14.7.2.  I've posted a software update to it, 'Latest Minor Version' with Download, Install and Allow Deferrals (3).   While most of the machines in the target group have worked, one user has reported that they haven't received any notifications despite the machine being on and connected for many days. Using the JAMF Api: https://[jamf server]/api/doc/#/managed-software-updates/get_v1_managed_software_updates_update_statuses_computers__id_ I can see that there are 2 other updates that seem to date back to 2023, which are showing DownloadPercentComplete = 0.  The 14.7.2 update is in the list too, and says it has 'notified' 4 times but its download percent is also at '0'. My assumption then is that the old updates are stuck for some reason, and the new update is waiting for them to complete before beginning to download.

Good day everyone, I usually setup our VPN, Cisco Secure Client via https://docs.umbrella.com/umbrella-user-guide/docs/customize-macos-installation-of-cisco-secure-client. Simple enough to navigate through if you have all the pieces. I am traversing trying to get this process a hair more automated. The end goal: One Policy that can create the DMG you're looking for.  The theory:  - Use composer to package your already configured XML file and orginfo json file into a specific directory. - Add the newest version of the pre-deploy DMG to that same directory - Run a script to do any of the steps you need in the url.   I've made this script so far where I want to make the file locations variables and make "Version" a user parameter so when the next version is getting prepared all you have to do is update the version number in the Policy Script Parameters. #!/bin/sh #This is to update the Cisco Secure Client #Create the Variables Version=“$4” orgFile=“/private/tmp/org

Created a simple log viewer that the end users can run and optionally email log contents.  Nothing fancy, but might come in handy... #!/bin/zsh # # Log Viewer # # Created by: Scott Kendall # Created on: 01/29/25 # Last Modified: 01/29/25 # # Expected Parmaters # # Parm #4 - Full Path of Log to view # Parm #5 - Window Title # Parm #6 - Length of log to display or email (tail -n) ###################################################################################################### # # Gobal "Common" variables (do not change these!) # ###################################################################################################### export PATH=/usr/bin:/bin:/usr/sbin:/sbin LOGGED_IN_USER=$( scutil <<< "show State:/Users/ConsoleUser" | awk '/Name :/ && ! /loginwindow/ { print $3 }' ) USER_DIR=$( dscl . -read /Users/${LOGGED_IN_USER} NFSHomeDirectory | awk '{ print $2 }' ) OS_PLATFORM=$(/usr/bin/uname -p) [[ "$OS_PLATFORM" == 'i386' ]] && HWtype="SPHard

I try to add the app screen recorder to in iPad. Tipping on the "+" sign on the screen has no effect. It is not possible to add or delete items. Is there a solution?

Note: A newer version of this article is available on the Jamf Blog.   Jamf added support for LAPS in April’s Jamf Pro 10.46.0 release.   What is LAPS? LAPS is short for Local Administrator Password Solution. It was coined by Microsoft in May 2015 as a solution for automatically rotating passwords of shared IT administrator accounts on end users’ computers. Since then, it’s become a standard industry term used across platforms. Desktop administrators have added shared IT admin accounts to their end users’ computers for decades for those times when they need to sit in front of a computer or remotely control it and log in. But this practice introduces a few major security problems: Typically, these accounts share the same username and password across computers. If the credentials are ever exposed to unauthorized persons, the entire fleet is vulnerable to attack. Multiple people know these shared IT admin credentials and they’re easy to reshare to anyone without any mea

We’re thrilled to share the Jamf Online Training Catalog’s new look! In an effort to provide a consistent, satisfying experience across all of our customer engagement platforms, we’ve reworked the user interface from the ground up to bring a more usable, accessible experience to anyone interested in developing their Jamf expertise. Please learn more about the updates here: https://www.jamf.com/blog/jamf-catalog-new-look/

On the 17th of February we will be removing three software titles from App Installers : Adobe Prelude, Microsoft Remote Desktop and VMware Horizon. Adobe made the announcement that Prelude was no longer available for downloading on December 9, 2024. You can read the announcement here. Microsoft rebranded Remote Desktop to the Windows App and we published it as a new title in September 2024. We will now be removing the Remote Desktop title from App Installers. VMware’s EUC division became Omnissa last year and as a result VMware Horizon became Omnissa Horizon. As the Omnissa Horizon Client utilises a new Bundle ID, we will be publishing it as a new title in App Installers and retiring the VMware Horizon title. Whilst these titles will be removed from App Installers on Monday the 17th of February, they will not be removed on any Mac computers on which they are currently installed. As a reminder you can see the monthly history of what titles are added and retired from App Installer

If I want to add a local admin profile pic, is the only way to do so by referencing an external site/vault to copy the image from? Or is there a way to store the file on Jamf? 

Using Jamf Pro here and its my first time using Shared Ipad. I am testing an iPad as the idea is that we will be using a cart of shared ipads in temporary session only. These iPads will be used in conjunction with Apple Classroom. However when testing, the iPad shows up in Apple Classroom, but it shows up as offline.    I was able to determine that the Education Configuration shows up within the MDM profile on the device.    To test, I went ahead and changed the Username in Jamf, and the name change is reflected in Apple Classroom; however, it still shows up as offline in Classroom.    Is there something I am missing here? Happy to provide more information.

I get a blank dropdown box when selecting ADCS in the SCEP payload. I do have ADCS configured in the PKI part of settings.  

Being new to the Jamf world, maybe this has been asked and answered. We are a K12 school district and we are rolling out Jamf to our iPads and using self service for app installs. I would like all apps to show up for every user in self service, if it is a free app anyone can install it and use it. If it is a paid app, I would like the button in self service to say "Request" instead of "Install" and then have that request go to our software guy in the department to make sure we have licensing and to approve it. Once it is approved, it can be installed. I am not sure if that is possible or if anyone has tried it before? Thanks!

Hey everyone. I'm relatively new to Jamf, but have been chugging along pretty well the past month or two. I've run into an issue, however, trying to use self service to allow users to Install Izotope Product Portal. The installer download from Izotope is a .dmg, but the installer inside that you launch is a .app. That .app initiates your typical installer dialogues that you click through and the installer runs. I just can't figure out how to deploy this. I've tried uploading the full .dmg, uploading the .app, and using composer to re-wrap the .app into a .pkg. Any help would be appreciated! Here is a link to the installer download, if anyone wants to take a look.

I have already installed the vmware pkg with the windows file, but when I try to open it, it gives me the message: "VMware Fusion requires administrative privileges to perform one-time setup." Is there any way to install VMware without using any admin privileges?

Good day    I want to ask if there is a possibility of setting a default web page that will open when Safari is opened.  we are using Jamf Pro and Ipads  Thank you  for your help  Regards 

Hi all, is it possible to create a smart group with membership based on Entra ID platform SSO registration? That is, devices where a user has gone through the SSO registration process by selecting the Company Portal notification. I'm rolling out Platform SSO to our devices and am in need of a way to group which devices have SSO registered so we know which ones can be signed in by any organisation user, and also just to verify that it's enabled on devices we're pushing it to. Thanks :)

I have a script that shows exenstion attribute for the type of license installed for Office.   With the release of the Office 2024 LTSC license does anyone know if the script will be updated to add the information for the 2024 license? I installed the LTSC 2024 serializer but it still reads 'office 2021 volume license'  and from the actual mac end the 'about word' shows 'Office LTSC Standard for Mac 2024'.   Word version is 16.90.2 the script is called Office_License.sh (see below for the script).  Looks like an IF statement needs to be added for Office 2024 volume license https://github.com/pbowden-msft/ExtensionAttributes

We are using Rapid 7 for Vulnerability scanning in our environment, and we are seeing a lot of "Vulnerability in the Oracle Java SE Hotspot component" vulns pop up pointing to some jar files inside Jetbrains apps/folders.  The listed resolution is to update "Azul Zulu" and links to an Azul JDK page. None of our users have installed the Azul OpenJDK, and I don't think I can update the .jar files inside the .app. Has anyone else seen these vulnerabilities and know how to approach this?

Will Self Service+ be added to Jamf Pro automatically to replace the current Self Service.  The current way it is set up on my end, when we add a user and they add the profiles, Self Service automatically deploys to those computers.  Will this be added to Jamf Pro as well for the new Self Service+? If so, is there a timeline of when this will happen?

We have added a new reward to Jamf Nation Rewards: the ability to donate using points to Los Angeles County, by supporting organizations providing emergency relief.  Dangerous wildfires, including the destructive Palisades fire, have ravaged Los Angeles County. The wildfires have burned more than 60 square miles and destroyed over 12,000 buildings. More than twenty people have died, dozens more are missing and more than 90,000 people are under evacuation orders.   It is the most destructive fire in LA history.  If you’re interested in a way to help through sending a donation, we have set up a new way you can redeem your Byte reward points to help with the LA wildfire relief.  It only takes 50 points to donate $25! To find out where the donations are heading, check out this page -https://jamf.benevity.org/community/fundraiser/24332  Donations can be made under the reward '$25 Donation to Emergency Relief LA County'. Please reach out to jamfnation@jamf.com s

Question? Has Jamf changed his Classic API Syntax?  Example: When making a simple get Command using the following syntax  curl -su example:exmaple -H "accept: text/xml" https://example.jamfcloud.com/JSSResource/computers/ I get the following error message:  <title>Status page</title> </head> <body style="font-family: sans-serif;"> <p style="font-size: 1.2em;font-weight: bold;margin: 1em 0px;">Unauthorized</p> <p>The request requires user authentication</p> <p>You can get technical details <a href="http://www.w3.org/Protocols/rfc2616/rfc2616-sec10.html#sec10.4.2">here</a>.<br> Please continue your visit at our <a href="/">home page</a>. </p> </body> </html>%                         However if I just cut and past from the try this out I notice that url now has a bearer token attached to the end. Example cu