I have installed ADCS connecter to get PKI certs on mac devices.After everything correctly configured found that JAMF cloud is communication was rejected by ADCS connecter server. IIS logs shows error code 403.7 this error code generally talks about missing/incorrect client cert.when I looked into IIS settings from:"IIS>ADCSProxy website >Configuration Editor>system.webServer > security > authentication >iisClientCertificateMappingAauthentication" iisClientCertificateMappingAauthentication config is as below:Enabled --> FalseoneToOneCertificateMappingsEnabled-->TrueoneToOneMappings-->(Count=0)My question is it expected behavior? do I have to manually add the client cert details in IIS iisClientCertificateMappingAauthentication? Ideally certificate connecter installation should have been taken care of this.      

✨ Exclusive Offer: Free Jamf Health Check for the First 10 Registrants! ✨ Optimize your Jamf environment with a comprehensive health check, available at no cost for the first 10 people. This free service includes: • In-depth review of policies • Analysis of configuration profiles • Assessment of enrollment methods • Verification of certificate renewal dates • Evaluation of scripts & packagesDon’t miss out on this limited-time opportunity to ensure your Jamf setup is running at peak performance.Secure your spot now:Book Here

Our org has been using erase-install 33.1 off and on for full macOS upgrades but now we want all users on Sonoma 14.When testing on a (Intel) VM logged in as regular user, it runs through and finishes the update properly.  It also worked on about half the client Macs but also fails to work on a lot of other client Macs.  A common failure in the logs is:2024-08-16 12:16:11 | v33.1 | [get_user_details] user cancelled dialog so exiting...How are they doing this as it's set for no user interaction and I've done all the screenshots to track the procedure.  Is it hanging somewhere and the error is spurious?  The script is long and convoluted and I'm definitely not comfortable with scripting and therefore not good at interpreting it's errors.One user was not present for the procedure as they were out of town and later on when trying to upgrade their Mac manually in Software Update, it errored out twice with an 'internal error'.  Manually downloading the Sonoma install

Hi there, Jamf App Catalog is great at patching applications. The only caveat is the method that it uses to communicate with the end-user that an update is pending. Most of our users ignore or are unaware of the notification from Jamf App Catalog when a new update is pending and as a result complain of their apps getting abruptly closed. This is compounded by an ongoing issue of inconsistent notifications (an issue that has been open for a couple of years).   Is there a way to mitigate the above issue by maybe a passthrough of a notification to a prompt or dialog box that the user can interact with? All my attempts at trying to resolve this issue is cut short by there being no direct feedback on the local machine that is recording Jamf App Catalog interactions with the local machine i.e a log that can be leveraged to base notification triggers on a Jamf Pro policy and Notifier App.   I thought to leverage IBM Notifier for this task as it would be ideal. Except that once

 Greetings all,Until last JAMF Pro update i had no issue with the script below. But as of today, the script returning blank result without error. Any idea ?   APIUsername="" APIuserpassword="" JAMFServer="" EAID1=69 JAMFAPIToken=$(curl -X POST -u $APIUsername:$APIuserpassword -s $JAMFServer/api/v1/auth/token | plutil -extract token raw -) DeviceSerialNumber=$(system_profiler SPHardwareDataType | awk '/Serial/ {print $4}') curl -u $APIUsername:$APIuserpassword -H "Accept: application/xml" $JAMFServer/JSSResource/computers/serialnumber/$DeviceSerialNumber/subset/extension_attributes | xpath -e \\ "//*[id=$EAID1]/value/text()" 2>/dev/null 

Today I Setup up pool IPads with temporary guest user only on shared iPads and couldn’t install all apps. There was a lot of available space on the iPads. What did I miss?

Is it possible to proactively block application downloads through JAMF pro? For example, we determine and set up a whitelist of applications, and anything not on that list is blocked, rather than us finding it through our computer lists and removing it after the fact.

We're trying to initiate a Jamf Connect password change workflow from a policy, rather than from the Jamf Connect menubar item.I see there are options for opening menu items using URL schemes (open jamfconnect://) but there doesn't seem to be a Change Password option, and the action command (open jamfconnect://action/Change%20Password...) doesn't work.Anyone have a solution?

Does anybody have a way to look for Rapid 7 and it's version? it doesn't seem to put anything in the /Applications folder.

We currently have an instance installed on tomcat and working on getting memcached working.memcached out of the box works fine, but it supports TLS encryption.  When we enabled this, it appears that JAMF doesnt know what to do with the TLS connection.We will firewall off that port as suggested.  But TLS seems like a good idea.

We are using apple business manager in my organazation.  Our jamf pro sync with azure ad , when we try to enroll a new mac os device its ask e-mail password but does not the accept . Because of that we cant pass this step and couldnt open the device.   

Good morning,I am having the hardest time trying to find where I disable Apple ID Login in Restrictions for Configuration Profiles for iPads. Can anyone point me to where that is? If it matters, the iPad OS I'm running is iOS 15.x.Thanks,llckhrt1

We are using Jamf Connect and Azure to sync accounts/passwords with MacOS.  The computers are not AD bound.  Is it possible to get Jamf to warn users when their password is set to expire (we have a company policy to reset every 90 days)? If not, what are other fellow admins doing in this case?

Reason for this post is to start a conversation around Jamf IDs.As of late, my Jamf ID is missing Organization email, organization association, certifications, as well as products.(Last I checked, I can still access support tickets sot this is a good thing)I reached out to support, and they had me create a seperate Jamf ID using my business email and I'm being told that this account will be tied to the organization.I asked for my Jamf certifications to be connected with my personal Jamf ID again.Is this really how we are doing this now?Having to maintain a private Jamf ID and work Jamf ID?There is a bit of discussion on this on Slack, however I wanted to share this information here, for those of us who are not using/not able to access Slack.

HelloAnyone here, which used the guide for the xcode installation from:Deploying Xcode on managed devices (jamf.com)everything works for me til i start to install it via self service. After downloading the pkgi receive in my log:no app at /Applications/Xcode.app, exiting I am using the script from:Configure Xcode post installation script with SDK download for Xcode 14 and 15 (github.com)#!/bin/sh export PATH=/usr/bin:/bin:/usr/sbin:/sbin xcodePath="/Applications/Xcode.app" if [ ! -e "$xcodePath" ]; then echo "no app at $xcodePath, exiting..." exit 1 fi # select Xcode xcode-select -s "$xcodePath" # accept license xcodebuild -license accept # install additional components xcodebuild -runFirstLaunch # add everyone (every local account) to developer group dseditgroup -o edit -a everyone -t group _developer # enable dev tools security DevToolsSecurity -enable # download platform SDK # all available platforms # xcodebuild -downloadAllPlatforms # update previously down

Hey so we use Jamf to deploy our Macs and recently whether it's a new Mac or one that's been wiped, we're unable to open and start OneDrive. Tried everything from uninstalling and installing from O365, installing from the microsoft page and so on. When running Onedrive I get an error saying Onedrive Couldn't Start, a system component is preventing OneDrive from starting. If I quit from Onedrive and try to start it again the error become We couldn't find the location of your onedrive folder, and the cycle repeats itself. Only thing I can find on the internet is involving Files on Demand.

Hi All,Just wondering .. Using the JAMF API - Can I check that prestage a macOS in enrolled in or part of? Rk

Hello everyone,I have received command entries from JAMF tech support to adjust our password policy that is reporting errors. I have been running these commands manually with a remote session with the user and it works. Is there a way to create Policies so that this will run without the user and myself involved? Reboot is not required but to run the commands requires user name and password in Terminal. On the user's Mac in Terminal run  sudo jamf removeframeworkOnce that completes stay in Terminal and  run  sudo profiles renew -type enrollmentAny help is much appreciated.  

Hi All, My end goal here is to force the local user (end-user) to update their password upon 2nd login (I will explain). Here is my current workflow for new hires (note: we don't have jamf connect) so I have to work with what I got.Current Workflow:1. Enroll the computer into pre-stage enrollment and let it cook.2. Create the local user (new hire) account in the create local account page in apple setup assistant. in this step we are manually creating a "temp" password 3. Log out of the current user's (local user) account and log into our jamfadmin account to finish manual set up steps (additional privacy permissions, re-naming hostname, enabling FV, etc)4. Log out of the jamfadmin account and shutdown.5. Deliver the laptop to the new hire with login information securely enclose. We leave it up to them to update their default password.So, with that being said, we now want to enforce our users to update their default/temp password to a secure one. After doing some research I ca

I tried creating shortcuts directly on iPads and it let me do that but after refreshing the profile they disappeared! I then found out about the Web Clips and put those in my profile and organised them on the Layout however they don't show on the iPads either!Can someone explain how I get URL shortcuts on to a home screen please!

I looked all over the internet, tried ChatGPT and can't find anything to allow a few websites to pop up windows.  This is affecting our Intune Integration when Safari opens and it goes to login.microsoftonline.com and device.microsoftonline.com. It take 2-3 times before we can successfully get through the enrollment.Does anyone know how to do this, I don't want to allow all pop-ups as I think that is dangerous. Apple isn't making this easy.  

We have been using Nudge as a means to prod users to update for a few years and it has been flawless until recently. In test machines Nudge is no longer running despite having the launch agent installed being included in our managed login item profile. Manually installing the Nudge suite causes the service to run, but it doesn't pick up its settings in our Nudge config profile (minimum OS and whatnot). Granted we created our Nudge config profile back with version 1.x. Comparing the json for 1.x to 2.x looks identical, so I don't think that is our issue. Has anyone experienced something like this? 

Anyone else having issues with the new update to the JAMF Student app?  After it updates it won't auto login any more and we have to un-assign and re-assign the device owner.

I haven't used the Software Updates feature before. In the past, I have tried performing a mass action using a static group for testing. Yesterday, I decided to do that for some of my hot spares on the bench to take them from 14.5 to 14.6 and discovered that we had enabled the Software Updates feature. This understandably removed that ability from an action, so I figured I would give it a try with an eye towards deferrals as the "killer app" of the process.We control updates on our active machines with some restrictions payload and restricted software, but the spares are a little more relaxed. The only thing they get is our software update payload, which is set to make sure updates are automatic and enabled:So I decided to take two of them, put them in a static group and run the following:This ran very much like previous experiences with the MDM action. Devices eventually handled the commands and downloading/staging commenced. I set one machine aside with the 'REBOOT(8)' man page open

We are looking at testing CrowdStrike for mobile, we currently use Cisco Security (DNS Security & Endpoint Visibility)I have created a new CS profile and when I first scoped it to one of my test devices I get Permission denied,  I can only get this to successfully install after I remove Cisco Security,  any suggestions on why both config's wont work on a single device,  appreciate it