Hello,I am not sure if I am looking for the wrong item or not wording my search correctly to find anything relevant but is there a way to disable or delete the wireless connection or options on our Macs that are hardwired with ethernet. We have students connecting to our wireless that requires authentication which then breaks the connection to the internet. They assume because it's not on wireless it loads slower or doesn't have internet.  The only configuration item I see under the configuration profile is to define a SSID, but I'd like to disable it all together.

Previously you could use the the airport prefs command to edit things like RequireAdminNetworkChange and RequireAdminPowerToggle (WiFi > Advanced > Require administrator authorisation to change betwork & turn WiFi on and off)With macOS 14 this command is now deprecated and doesn't do anything. What is the "new" way to set these settings (Either by script/command or by configuration profile)

I looked through Configuration Profiles but not seeing anything for this. On the Advanced tab in Network configuration, there is a check box to only allow administrators to turn off wireless. Is it possible to set that with a Configuration Profile so that users cannot turn off wireless?

Looking for some assistance in configuring iPads so that the Okta plugin is automatically installed into Chrome. Under Mobile Devices : Mobile Device Apps I select Chrome and navigate to the App Configuration Screen. In the Preferences field I believe we need to create a PLIST file and copy the code into this field. Has anyone created a PLIST for Okta's Chrome Plugin for Ipads. I keep getting failures trying to create the PLIST. Any assistance is greatly appreciated. Thx

We have an environment with a mix bag of 11, 12, 13 and 14 MacOS. Our target is to bring everyone up to an iteration of 14 so we can just us Jamf Pro to push out software updates going forward. Is there a method that can be done to easily get these users upgraded to 14? Maybe some sort of automation etc?

I'm trying to figure out how "Allow user to be granted first secure token" functions on the back end. I have seen a few tools that will generate the first secure token for a local account they create if the secure token has not been generated yet. Apple is claiming this is impossible, which has me wanting to know how it works even more. Anyone know the terminal command the Jamf binary is using for this?     New Features and Enhancements - Jamf Pro Release Notes 11.2.0 | Jamf

Hello all Apologies if this has already been asked and I have missed it, but has anyone got away of collecting the applications installed by home brew?

I need to remove the signature from a profile so that it is readable. In the past I have used this command:  openssl smime -inform DER -verify -in /Path/To/Profile I get a "Verification failure" when I try this. How can I remove the signature? It has been a while since I have needed to do this so has the procedure changed? I found some websites that said I can do this using Configurator but the profile won't open in Configurator. 

Hello Im trying to deploy avast through caspersuite to our macs when we image them and what not and its not working correctly. I was wondering how you guys do something like that? I talked to avast support and they said to use a repackaged installer, I am fairly new to mac so unsure on how to do that. is there a tool to use to do such a thing? I use the DMG from the avast for business portal and its set up with correct info however using composer it doesnt like to work correctly.

I'm trying to deploy Avast through Jamf Pro to our company MacBooks. This script & steps found here used to work, but there have been changes with Avast that seem to have since broken this process. There are several issues the first being that Avast Business Anti-virus now seems to rely on another App called Avast Business Agent. The other problem seems to be that the Avast that core shields now also includes the "Real Site" protection as well and this needs to be enabled as well. Any help on figuring out how to auto-install and setup the configuration profiles for this would be appreciated.

Hello, We have been using JAMF Connect tied with Azure AD to setup local user accounts on Mac. However recently we have started to see the error message "Password verification unsuccessful: Invalid Client. Contact your IT Administrator" However the password is correct and before we have been able to shut down the mac turn it back on and it has gone through ok, however this time it doesn't seem to have worked. Has anyone else had this issue/knows any workarounds?

Has anybody figured out in current version Google Chrome how to enforce incognito mode (private mode)? As anybody knows in education, expecting students to log out of registration or instructional websites doesn't always happen and occasionally another student or individual will come along and be able to access the previous user's private data. About the only 'sure' way we have 'fixed' this is to encourage students to reboot the computer after they are done. Most of the browsers have an enforceable privacy mode, but Google Chrome doesn't seem to. Any suggestions or ways you have managed to do this would be greatly appreciated!

Hello!We have a Jamf Connect window setup that works well except for one part: If you are a new hire and haven't setup your account yet (we use Okta), when you receive a new machine and get to that window, you'll let it sit but it will auto-continue to a standard MacOS login window. Without walking through the setup process that immediately follows the JC window, the machine will never pickup your username and you'll find yourself in a type of soft-lock where the machine doesn't have an account to use and we need to reach out to these users to walk them through a complete wipe/rebuild from Recovery. I assume there's just some setting/property in our Jamf Connect config profile that "autocomplete's" but I'm unsure what it is. Potentially the "Allow Local Fallback" property? We use that for it's intended use after the user has already setup an account to login to their machine, but our problem of course occurs only for new hires only when they haven't setup an account first.For what

I have a 10.13.6 fresh build mac with an local admin account created by macOS setup Assistant it has a secureToken, but then i bind the machine to our AD which has the setting enabled for mobile accounts, then login as a AD user and get the prompt Enter a secureToken Administrators name and password to allow this mobile account to use file vault.You can select bypass but would prefer we dont get this prompt in the first place for non filevaulted machines.Does anyone know how to suppress this?thanks

Hey Everybody, Ever since Jamf Pro 11.5 I have been seeing very long waits for packages to be completed via the GUI, for example, a single DMG that is 19MB in size can take 15 to 60 minutes for the Availability Pending alert to disappear. Is this now the new normal? If so, can't say it's an improvement.   

Hello All,   Looking to see if anyone has a bash script to pull brew installations and then use that in an Extension Attribute to pull from all machines.   Similar to this post: https://community.jamf.com/t5/jamf-pro/home-brew-and-collect-application-usage-information/m-p/249337   - Can't get the EA working from the post above though :(  

Here is a script that will remove all class data from your instance. If you use macOS' TextEditor, be sure to Convert to Plain Text. Ensure that the file is saved as .shI hope this helps!Have a great day and be well!Here is the script:#!/bin/bash###################################################################################################### THIS SCRIPT IS NOT AN OFFICIAL PRODUCT OF JAMF SOFTWARE# AS SUCH IT IS PROVIDED WITHOUT WARRANTY OR SUPPORT## BY USING THIS SCRIPT, YOU AGREE THAT JAMF SOFTWARE# IS UNDER NO OBLIGATION TO SUPPORT, DEBUG, OR OTHERWISE# MAINTAIN THIS SCRIPT####################################################################################################### DESCRIPTION# This script retrieves class information from the JAMF Pro RESTful API, saves it as an XML file,# and then uses that XML file to delete the classes.# Requires a user that has READ and DELETE privileges for Classes.#########################################################################

Hi Jamf AdminsThe annoying automatic logout from jamf after a short time. Every time login again and navigate back to where you were.Simply annoying.What do you think about this community?CheersPeter

Hi all,I am struggling to find a script that i can use to automatically set open with for certain file types: i.e. .csv to open with Excel, .pdf to open with Adobe Reader  I had a look at MSDA but couldn't find any working examples.  TIA. 

We are facing a problem where user accounts are locked for unknown reasons, and we are trying to find out if our users are entering their passwords correctly (we have a password policy that auto-locks user accounts after N failed attempts).So I'm trying to search logs for events of users typing the wrong password, and I'm running this command:log show --predicate 'subsystem == "com.apple.opendirectoryd" AND category == "auth" AND eventMessage contains "invalid credentials"' --style syslog --info --signpost --last 1h But it shows many "invalid credentials" messages; and every time the user locks the screen, an "invalid credentials" message is generated.Therefore, two questions:1) Does anyone know why an "invalid credentials" message is generated on the screen lock?2) How can I know when users are really entering their password incorrectly and not just locking screens?

Having lots of log-in issues, users getting stuck at loading page. Checking admin portal, it shows 'client crashed processing osupdate status'.I have bypassed by restarting in recovery mode and selecting start-up disk - machine runs very slowly for 10mins then is currently operating at c.90% functionality.Anyone else experiencing this issue? 

Is it possible to change the message "Your Microsoft Entra ID password does not match your local account password。 Enter your local account password to sync your passwords."  to something like "Enter your previous /old password her " ? Most user don't understand what it mean ,....   

Hey Guys,no real Question but i saw some similar posts and questions or request for something like "$sbuject_title" ..I want to share my solution for this scenario and perhaps some of you has an idea to optimize it:User got new mac and wants to transfer all Static Groups from the old to the new mac.I provide this script as policy in Self Service:#!/bin/zsh #region - Prerequisites ################################################################################################################################################################################################ ## Create tmp location # Define the path for the temporary folder TMP_DIR="/Users/Shared/tmp" # Check if the folder already exists if [ -d "$TMP_DIR" ]; then echo "The folder $TMP_DIR already exists." else # Create the folder mkdir -p "$TMP_DIR" # Check if the creation was successful if [ $? -eq 0 ]; then echo "The temporary folder has been successfully created at $TMP_DIR."

Hey Guys,I´m currently looking to get a List of Static Groups from a specific computer. I found the API command: v1/computers-inventory-detail/{id} getting a large JSON with the Details.Now I want to cut it down to:1. only the Arrays from Key "groupMemberships"2. maybe to all Arrays with "smartGroup=false"I tried with plutil -extract, but I cant get the right Keypath...Here is an example of my JSON:"id" : "866", "udid" : "6A94F1BD-XXXX-XXXXX-XXXX-ECB58DFA0B61", "general" : { "name" : "MC-XXXXXXXX", "lastIpAddress" : "XX.XX.XX.XX", "lastReportedIp" : "XX.XX.XXX.XX", "jamfBinaryVersion" : "11.7.1-t1721056075", "platform" : "Mac", "barcode1" : null, "barcode2" : null, "assetTag" : null, "remoteManagement" : { "managed" : true, "managementUsername" : null }, "supervised" : true, "mdmCapable" : { "capable" : true, "capableUsers" : [ "XXXXXX" ] }, "reportDate" : "2024-08-21T06:55:17.421Z", "last

Hi, I'm Andy.I finally figured out how to do this.So if there are other Archicad Users out there... enjoy! Just thought I would share this since I couldn't find any posts on how to do it. I will be using Composer & Archicad 25 Full Installer 4013 for Mac.Download the Installer to your Mac, and mount it.https://graphisoft.com/resources-and-support/downloads?localization=USA&type=AC&version=25to the side, open a Finder window to /Users/SharedDrag the Archicad Installer.app into /Users/Shared Open ComposerDrag the /Users/Shared folder into Composer on the left bar This may take some time to copy overRemove everything in the folder inside composer that you do not want. Click on the > next to your Shared Folder in the Left Bar Select ScriptRight Click > Select Add Shell Script > postinstallCopy this script: (reference: https://helpcenter.graphisoft.com/user-guide/76135/)/Users/Shared/ARCHICAD\\ Installer.app/Contents/MacOS/installbuilder.sh