With Jamf Pro 11.13, configure single sign-on with Jamf ID, enhance user experience with Self Service+, and enjoy more screen space using the collapsible sidebar! Be sure to check out the Jamf Pro release notes for all of the exciting new features and enhancements. Thank you for your continued support and feedback! https://learn.jamf.com/en-US/bundle/jamf-pro-release-notes-videos

We have tried to set up device compliance multiple times and it keeps failing on registration.  I currently have a ticket open with jamf support but its going nowhere.I have upgraded my cloud to version 10.46.1Here is part of the log from the company portal app.2023-05-25 13:37:31.279 | workplaceJoinSdk | 344229 | INFO: -[WPJBaseKeychainAccessor getRegistrationInformationWithTenantIdentifierInternal:domainName:error:] [Line 190][2023-05-25 13:37:31 +0000][WPJBaseKeychainAccessor] getRegistrationInformationWithTenantIdentifierInternal - check for incomplete registration or no registration.2023-05-25 13:37:31.279 | workplaceJoinSdk | 344229 | ERROR: [errorCode:-400][2023-05-25 13:37:31 +0000][WPJBaseKeychainAccessor] getRegistrationInformationWithTenantIdentifierInternal - tenant is unregistered!2023-05-25 13:37:31.280 | workplaceJoinSdk | 344229 | ERROR: [errorCode:-400][2023-05-25 13:37:31 +0000][WPJDecisionHandler] retrieveKeychainAccessorForTenantInternal - unable to retrie

Hi Jamf Community,I have been scouring the internet and developing my own script to pull the installed browser extensions from Firefox.Does anyone have this working in their environments?Problems I'm running into in my scripts/Users/USERACCOUNT/Library/Application Support/Firefox/Profiles/* is profile driven, so there could be multiple profiles with different addonsaddons.json file is problematic to work with. Formatting of the output is frustrating, looking to pull just the extension name and version in CSV formatI was able to achieve this using the jq CLT command, extensions=$(cat "$addonsJson" | jq -r '.addons | map({name: .name, version: .version}) | .[]')However I dont want to install this CLT on every system for an EA. Any help would be appreciated. Hoping there is a recent solution available that i missed. 

Hi folks,we have a policy available in Self-Service, which executes a script that opens Microsoft Outlook and set some settings.#!/bin/sh #Get current User currentuser=$(scutil <<< "show State:/Users/ConsoleUser" | awk '/Name :/ && ! /loginwindow/ { print $3 }') echo $currentuser #Runs Apple Script with current User sudo -u $currentuser /usr/bin/osascript -e 'tell application "Microsoft Outlook" to set properties of exchange account 1 to {ldap server:"xxx.xxx.local", ldap use ssl:true, ldap port:"xxx"}'When executed from Self-Service we are getting a pop-up asking for "Jamf wants to control access to Microsoft Outlook".We've created a mobileconfig with PPPC but still get the pop-up.Can someone give us a hint how we can solve this?thx and regards! 

Hi everyone, I have the problem that I need all UUID of the clients from Jamf Protect in a bash script. Unfortunately, pages are always limited to 200 entries. Unfortunately I can't get it to move to the next page to query another 200 clients. Maybe someone has an idea how to do this.   API Call from Bash Script #Read Out all UUID from JAMF Protect protectuuid=$(curl -H ‘Content-Type: application/json’ \\-H ‘Authorisation: $jamfprotectapitoken’ \\-X POST ‘$jamfprotectapiurl’ \\-d ‘{’query‘: “query {listComputers {items {hostName, uuid }}}”}’ | jq -r .data.listComputers.items | grep uuid | awk ‘{ print $2}’ | sed ‘s/^.//;s/.$//’ | tr ‘[:lower:]’ ‘[:upper:]’)

testing Google Secure LDAP integration (Cloud Identity Providers) I can lookup a user and it returns the user, but not the groups associated to the user. I can lookup a group, but no users are associated.  Everything is configured as per this https://learn.jamf.com/en-US/bundle/jamf-pro-documentation-current/page/Google_Secure_LDAP_Integration.html LDAP is configured for the domain in Workspace Can someone who has this working shed some light!   

Hey all!   I just had a user send me the attached screenshot. I was wondering if anyone else had seen this, and, if you did, did you find a way to disable it? Our leases terms are three years, but we try to run our Macs for three years at least or "until the user notices they should probably get a new machine" at most. These pop ups send a very clear signal to the user of "hey, your computer is old". Any thoughts?  

I'm having a really hard time consistently getting forced updates to work through Jamf. I finally was able to get a upgrade via packaged policy to work yesterday but I'm not having a lot of success using the Software Update payload within the policy for minor updates. I need to figure this out because ensuring that our computer operating systems are up-to-date are the whole reason why we upgraded to Jamf Pro in the first place. I'm currently testing computers going from 13.0.1 to 13.1 and 12.6.0/1 to 12.6.2 It says the policy executes correctly, but it's not installing the updates on the computer

We set up Edge using an App Configuration within the Mobile Device App to force InPrivate mode and it was working until the most recent Edge update to version 131.2903.54. Now when Edge is installed on a newly Jamf enrolled iPad or uninstalled / reinstalled on an existing managed iPad the app immediately closes after opening. When I removed the configuration to force InPrivate mode the app opens but is not in InPrivate mode which is a requirement for our company. This is the configuration we were using that no longer works.  Has anyone else run into this issue?  <dict><key>InPrivateModeAvailability</key><integer>2</integer></dict>

 To renew a SCIM (System for Cross-domain Identity Management) token in Apple Business Manager, you will need to follow these steps:Log in to your Apple Business Manager account using your admin credentials.Click on "Settings" in the lower-left corner of the screen.Click on the "Integration" tab in the upper-right corner of the screen.Find the integration for which you want to renew the SCIM token and click on it.Scroll down to the "Authentication" section and click on "Renew Token".A pop-up window will appear, prompting you to confirm that you want to renew the token. Click "Renew" to proceed.The new token will be displayed on the "Integration" tab. Copy the token and use it in your SCIM-enabled identity provider to update your integration.Note that you will need to update your SCIM-enabled identity provider with the new token before the old token expires to ensure uninterrupted SCIM provisioning. The expiration date for the token is shown on the "Integration" tab.To update the S

I know this appears to have been partially answered in an older post, but it's a nearly 10 year old post. Does anyone have any idea how to disable the "Enable automatic connection" for 802.1x in Network Settings? Very similar to that post, the networking team has enabled 802.1x on our network switches before we were ready to implement it with the expectation that "well, Windows will ignore it until its set up". MacOS will not unless the toggle/checkbox for "Enable automatic connection" is turned off. My users are getting repeated popups telling them 802.1x authentication has failed until we get around to sending at tech to toggle that choice manually. I'm hoping there is any other way, rather than doing it manually. Any help is appreciated!

I am testing moving users from Admin to Standard and I am running the command below in Files and Processes in a policy and it works and makes the user Standard, but when I reboot it reverts back to Admin. The machine was bound to the domain (we are working to get away from that), so I thought maybe that had something to do with it, and I unbound and ran the policy again and when I rebooted, I was back to Admin again. I have no policies applying post reboot and none of my profiles appear to be doing anything in terms of user rights. Does anyone know what I may be missing and how I can keep this from happening? dseditgroup -o edit -d myusername -t user -L admin

I have an iPad that has a boogered charging port with no charge. I want to bring back the license for a $250 app. I am un-managing the iPad, but since the device has no power to check in with the JAMF Pro server, it is never considered un-managed.I have un-managed the device & released it from Apple School Manager.   Any help is appreciated.   Bill

Just started using Installomator and was curious if it's possible to create a single policy that installs multiple apps.

Hello everyone, I'm trying to access the website https://200review.jamfcloud.com to assist in learning for the Jamf 200 exam. Would anyone happen to know the credentials used to access the website? Thank you, in advance!

Hello all, We want to provide an action to all our IT helpdesk teams that they should run on the user's Mac before a support incident is sent to a dedicated Mac support team. They  don't always have physical access to the Mac and won't have access to the JAMF Console.   Is it possible to run a policy on a managed Mac through an API call ? The policy itself is very simple: it only contains the "Update Inventory" command and the scope is set to all computers, so there's no requirements on scope or possible issues on exclusions.  I could not find any API action on policies to do that..

HelloMy company is planning to move away from Sophos to MS Defender. Is there any tools out there that locks a user out while the uninstall Sophos is happening, reboots and then installs Defender? Assuming I can do this via a policy but I just don't want users to intervene while it's uninstallingThanks! 

Hello, we have a problem with google chrome. After getting 20 licenses and deploying to our ipads it is not showing up on the ipad screen. According to jamf school it is installed, but on the ipad it is not. The layout is configured correctly and the profile is up to date. What can be the problem?

Hello, we have a lot of iPads for a special use case. Therefore the devices are very restricted. We are using a configuration profile with a home screen layout and restrictions for Apps.We restricted many apps and especially we are using the function "App usage" with "Only some apps allowed". Since iOS 18 it's no longer possible to send a document via Airdrop to this device. The sound of reception is heard but no notification appears to allow the document. The status on the other device which send the document is "waiting".It works again, if I remove the function "app usage" from configuration profile. Is there any option to add AirDrop or the notification to "allowed apps"? Or is there any other workaround to use this function with AirDrop? Best regardsFabian

Hello, We are going to use Jamf Security Cloud (Radar) on our macOS devices.We will not be using the ZTNA part.I still haven't understood if the Jamf Trust application is really necessary if we are not using ZTNA and, if it is necessary, what does it bring? Thank you for your help.

In the release notes from December 10, 2024, I noticed the following update:   Changes and Improvements You can now download audit logs in CSV file format by clicking Export on the Organization > Audit log page or by using the GET <domain>/audit-logs/v1 endpoint.   The endpoint mentioned here (GET <domain>/audit-logs/v1) seems to follow a different structure compared to the existing APIs: • API v1 uses: https://{yourDomain}.jamfcloud.com/endpoint • API v2 uses: {yourDomain}:443/apiv2/v1/endpoint   I couldn’t find any reference to this new endpoint in the API documentation, except for the release notes and a brief mention in the Audit Log documentation about the new Export button.   My questions are: 1.Which API version does this new endpoint belong to? 2.How should this endpoint be addressed (full URL structure)? 3.Are there any additional details or headers required to access it? Some changes in the Access Right Role?   Any clarification would

Is there a fix for Webclips and shared ipads. Currently it is only possible for single user only.

Greetings all, We are migrating from our on-prem Jamf Pro to the cloud product.  We are working with Rocketman Tech as consultants, and with Jamf Support of course.  I just wanted to hear from anyone who has gone through this transition as to things to watch out for, possible problem points, things you would do differently and so forth.  Our "lift and shift" date is January 21, 2025, so we are definitely approaching the critical point in the process.  Any thoughts or comments would be greatly appreciated.

We are currently seeing minor updates being deferred even though there are no restrictions on them. There is a major OS Deferral set for 90 days and enforced and no other settings.  I thought maybe it may have been the Jamf configuration profile, so I configured just the settings manually but same issue appears. If I disable the configuration profile completely, all updates show Deferred: NoThere going to be no major release until the end of the year so its safe to disable the policy for now but would be great to get an understanding on why this is occuring.    

My organization is looking to rely less on local admin accounts. We mainly use admin accounts that exist in our IdP (Okta) to preform any tasks that needs hands on elevated permissions. We do have a managed admin account set up with LAPs to rotate a password, but prefer to avoid that if possible. The issue we run into if one of our admin accounts does not already exist on the machine we can not simply enter credentials if it needs elevated permissions. Is there a way, or has anyone made a script to prompt the Jamf Connect log in window if a user is already signed in? Something where this would create a user similar to a Windows experience with a UAC prompt.