Help! We're migrating to Jamf Connect from AD, and we've done successful testing and migrations and I've been setting up user accounts with no issues. But all of a sudden today when I went to change someone's password using the menu bar agent, I got this error: "Unable to reach any KDC in realm xxxxxxx, tried 10 KDCs"Nothing has changed in our infrastructure that I am aware of; does anyone know what would cause this? I am freaking out a little.

We have Configuration Profile to disable Apple ID in System Settings. <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>DisabledSystemSettings</key> <array> <string>com.apple.systempreferences.AppleIDSettings</string> </array> </dict> </plist> It works some of the time. I made sure the devices don't have pending or failed commands. Some times require a simple restart but most of the time require pushing the profile out again, inventory update, or send blank push. What am I missing?

hi all,anyone found a way to disable/lock itunes or parts of it? especially files transfer.

We have 802.1x on our Mac's configured by a Configuration Profile.  There are settings to authenticate to the network before login using a Device certificate to get network access.  I've just tested upgrading a M2 Mac Mini.  Upgraded from Ventura to Sonoma and after that the machine wasn't getting network so I logged in and manually started the network and was prompted to choose the device cert.  After doing that and authenticating to allow a change it connected.Later in the day I upgraded the machine to the beta version of Sequoia (15.0) and this time again, no network so logged in and again manually started the network but this time didn't have to choose the device certificate.Has anyone else seen this behaviour with upgrades?  Any ideas on how to fix the problem as we want people to keep their machines up to date.

We have a lot of older packages building up (pun intended) in Jamf for things that were older original installers, patch management packages, etc., and I was curious as to how long I should be keeping these things around? Obviously don't need the Firefox installer from 6 months ago, for example. What are some folks doing for managing that? Comb through every 30/90 days and delete things? Thanks!

Hi GuysI am struggling since multiple weeks with this new feature device compliance in jamf PRO und Azure Compliance.Everything is setted up like described here: https://learn.jamf.com/bundle/technical-paper-microsoft-intune-mobile-devices-current/page/Configuring_the_Intune_Integration.htmlThe connection between jamf and azure is fine. Partner Device Managament in Azure also fine.Following scenario:I tested 5 devices.one device (my productive) is the only one which was running the complete registration with company portal and jamfaad (jamf conditional access app) completely and the registration process was done completely with the steps in this screenshotall other devices are not runningi tried all other device multiple times (after clean install of macos) with my user, with another testuser, with another productive user from 2 colleaguesafter some longer troubleshoot i checked in terminal with log show --predicate 'subsystem CONTAINS "jamfAAD"' --last 30m​ and receive

I am running into an issue on big sur with prestage enrollments. After passing language and wifi, I run into the error stated above "an error occurred while obtaining automatic configuration settings" on the remote management screen. I have followed the vidoes and set my prestage to the same settings, yet big sur will not pull the configurations. On Jamf Pro 10.27. Any help would be appreciated.

One of our App dev teams is looking to use AWS EC2 mac for their pipeline.  Our security department wants this managed like any other Mac in our environment.  I know very little about AWS and these instances.  Anyone got step by step guide or suggestions?

Hi there,I'm not sure if this functionality exists for MacOS, but it does for Chromebooks, and it's pretty amazing, so we'd like to leverage it for our iMac labs at the very least, and if it works there maybe go org-wide with it. The problem is I'm not sure what method to attack this problem with.Currently our iMacs (like the rest of our Apple computers) are AD bound. Users log in with a mobile account, and use Enterprise Connect for password management.I know that Macs support Kerb/SSO authentication, and also that Google's SecureLDAP can work for macOS as well, but what I really want is for the login screen to show me a Classlink login page so users can sign in with a QR code badge.Since our Google accounts use Classlink as their IDP and show the splash page when you try to log into them via web browser, I started going down the rabbit hole of getting a test machine bound to Google Secure LDAP, thinking it might spawn a splash page for Classlink login. But now I'm realizing that mech

To support the migration from the legacy Conditional Access integration to the new Device Compliance integration, we published an update to our Cloud Connector that supports integration with Azure Government Cloud (GCC High). This feature is now enabled for Jamf Pro 11.7.1 and higher in all hosting regions and for all on-premise customers. Additionally, for customers using Jamf Cloud Premium Plus, the Cloud Connector is now available to connect to Microsoft Azure commercial cloud.  How to: In the Device Compliance settings of Jamf Pro, select “US Government” as the “Sovereign Cloud” to integrate with Microsoft Azure Government Cloud.  Note:  Jamf Pro on-premise customers will need to add a network rule to grant the server access to a new hosted service by Jamf Cloud Connector: Outbound TCP Port 443 to  registration.cloudconnector.gov.services.jamfcloud.com Resources: https://learn.jamf.com/en-US/bundle/technical-paper-microsoft-intune-current/page/Migrating_from_ma

New to this community so please be kind. I have noticed that if i enable File Vault i can no longer remote desktop onto that machine. I use apple remote desktop to manage a lot of Macs, so is there a workaround?

I have a requirement were wanted to hide or uninstall below MacOS default application i.e. (Freeform, Mail, Messages, Music, TV, Stocks, Chess)Is there any way I can achieve this?

Hello,We currently have a Configuration Profile in place which automatically manages the MacOS updates. This is working well and tends to update after a week or so after an official release.The only issue is that this has removed the option for the end users to manually check for available updates. The message is now 'Updates for this Mac are managed by xxx 'Is there a way I can enable a select few users to retain the ability to manually check for updates and install as required ? Thank you  

I have JAMF pro cloud instance and when I enroll new device using PreStage Enrollment, all my 12 application installations show ''background items added" notification on the right side of mac devices. can we mute these notifications?

Does anyone have a good method to pull al list of all applications across all machines? We have Jamf Cloud so I am not sure if I can run SQL queries directly against the DB. Preferably something I can get to Excel so I can filter out all the Windows applications on VMs.

Hi,Does anyone use a Mac script to mount AD SMB Path as home folder. I am trying to get it working but struggling to get it to mount the SMB path.The current script looks at the current user in AD and gets the SMB Path. But doesn't mount it. Does anyone use a script to do the same? Script:#!/bin/bash# Log writing functionwritelog() {echo "$(date): $1" | tee -a /var/log/smb_mount.log}writelog "STARTING: User drive mount"# Check if the user's personal network drive is already mountedisMounted=$(mount | grep -c "/Volumes/$USER")if [ $isMounted -ne 0 ]; thenwritelog "Network share already mounted for $USER"exit 0fi# Retrieve SMBHome attribute for the current userwritelog "Retrieving SMBHome attribute for $USER"ShortDomainName=$(dscl /Active\\ Directory/ -read . | grep SubNodes | sed 's|SubNodes: ||g')adHome=$(dscl /Active\\ Directory/"$ShortDomainName"/All\\ Domains -read /Users/$USER SMBHome)if [ $? -ne 0 ]; thenwritelog "ERROR: Cannot read ${USER}'s SMBHome attribute from '/Active D

I am having random apps installing on iPads after manually wiping them, updating the ios and re-enrolling. Clearing pending and failed commands with the mass actions has not seemed to work. I have even checked the iPads I was working on to see if they had any leftover commands and they would all be cleared. But when it gets to the home screen and connects to our wifi, it will start downloading random apps. Only two apps are set to be pushed as they are required by our district. I shouldn't be getting, for example, two different graphing calculators loading on these iPads. Does anyone have any ideas as to why this might be occurring? Thanks.

I have been trying to get Camtasia 2023 to install with JAMF for 2 weeks solid. I am following their Enterprise guide Enterprise Install Guidelines For Camtasia on macOS and I am not getting any luck. I have followed all the steps in creating the LicenseKey file, put into the proper location, and gone so far as to package that separately and deployed that and the Camtasia package (downloaded from the AutoPKG app). Camtasia installs fine, but upon launch, it does not grab the License information. The next issue (which I know is moot until I can solve the first issue) is I would like to utilize all of the "Deployment Options" that are listed on the document above. When I try to do just the one where the software doesn't display the sign-in page, the software cannot see the app license anymore as a valid license. I don't understand why that is.What makes these options difficult is that the plist that they write to isn't created until after the software is launched for the f

I'm having an issue where when I setup screen sharing in macOS when I specify a user to have rights to remote into a Mac using screen sharing the password doesn't work. It just shakes the screen. I did verify that user has rights to Observe and Control (both boxes are checked). If I leave it as Allow access for All Users the same username and password works fine. Is anyone else having this issue? If so, were they able to resolve it? I want to enable this but I don't feel comfortable leaving this open to all users. Thank you! 

Hey Jamf Nation family, i´ve got a problem with our managed Apple IDs. This week we created Users in Apple School Manager and imported them into Jamf.After this we purchased a VPP App "Evernote" in Apple School Manager and assigned it to my test users under Jamf Pro => Users => VPP Assignments.So far so good.On my iMac i logged into App Store with my test account and i can see the App "Evernote" under "Purchased".When i click "Install" i only get the message "This Apple ID cannot be used to make purchases."I also can´t install any apps, i get the message above everytime. Can someone help us please?

We have Jamf Pro and the Mac users is connected with the O365 accounts on the device. But suddenly the user can’t log in. I change the password for the user two times but still no luck. Where shall I start searching for error? Can it be sync between O365 and Jamf? Where can I see of the sync is ok? Any tips?

I have disabled "Transfer Information" in DEP AND Blocked "Migration Assistant" in Restricted apps BUT it is still allowing end users to do this during enrollment and set up.Any solutions?

How to cleanly and properly uninstall Adobe Creative Cloud apps has been an ongoing Mac admin challenge for years. I recently came across this post by Anthony Reimer which details how to uninstall an Adobe app by it's sapCode and base install version number. I decided to see if that method could be automated to uninstall all currently installed Adobe apps. And it can!Instead of specifying a baseVersion, my script looks at "/Library/Application Support/Adobe/Uninstall" to find a list of Adobe apps currently available for uninstall. It then passes sapCode and current product version to the Setup executable.I've also included additional code to specifically uninstall Acrobat and the Creative Cloud Desktop app.I've only tested this on 2020 versions of Adobe apps so it may or may not be useful for older Creative Cloud apps. If you have some older installs out there, let me know if it works or not.Edit: Now pulling sapCode and productVersion from the adbarg files instead of parsing them from

How do you have your mac's setup?We currently have them setup with Active Directory Binded with SMB path as home folder. This is no longer supported / working in any newer OS. As students use these Mac's they use a different Mac every lesson so local users with local data will not work for us.

Hi All,I would like to create below software and add in Selfservice portal in our jamf enviroment, if can give some guideline for this ? https://github.com/AliyunContainerService/ack-ram-tool I checked and found Apple device installation File could be a .pkg, .dmg, or another supported format for macOS applications, not sure software above is compatible for Jamf or not. Thanks and regardsWilson