We've got a few devices that the Student app is giving a generic error on.   We have enough licenses of it, wiped these iPads, tested other working ones. Any other ideas of what to check?

I'm trying to install Nexthink by using the script that was provided that has all the information in it. I'm issues getting it to run.  In the path BASE_PATH="/Library/NexthinkInstall" should this be where I'm mounting the .dmg file? For instance, I created a composer pkg to add the Nexthink.dmg file to /private/tmp/Nexthink and then tried adding the completed postinstall script.   #!/bin/bash# v5i - nxt_collector_installer.sh## Nexthink Collector Installation script for macOS## This script makes the following assumptions:# 1) The 'csi.app' folder from the Collector DMG is deployed to the endpoint. The installation# only needs that folder and not the full DMG.# 2) The deployment directory is configured below as 'BASE_PATH'# 3) This script is located in the same directory as the csi.app folder from assumption 1.# # Instructions: # 1) Modify the Nexthink Instance Settings in the section below# COLLECTOR_ADDRESS - The data collection address from the welcome email# CUSTOMER

We are running Jamf Pro v11.7.1I have setup devices in single app mode to Safari to grant access to select MS Forms.Staff you like to be able to adjust the brightness however Control Centre will drop down in Single App Mode.I have modified the Restrictions to allow Control Centre. This only shows the Control Centre bar on the Locked but it doesn't function, the bar disappears when Safari startsAm I missing an option or does single app mode kill Control Centre

I am new to the community. I have a configuration policy for AD binding. The policy has been in place for well over a year. There has been no changes to the Active Directory settings, however its giving failing messages. What's causing this?  

Here's one out of left field, from my security group... We have a number of computers (Macs, windows, etc) reporting in CrowdStrike, Axonius, and other services.  Not all of the Macs are enrolled in Jamf, for reasons good and bad, and we need to get them enrolled. The security team is looking for ways to deploy Jamf without needing to visit the computer (identifying user and location can be a challenge).  I know nothing about whatever process CrowdStrike might use for this.  I do know that installing MDM software on Windows computers can be done via Active Directory, and apparently CrowdStrike uses a some kind of method for deploying MSI or exe installers to Windows computers. I also know at one time Jamf had a quick add package that could, maybe, have been deployed from CrowdStrike or other tool that can support macOS pkg files, but today Jamf deployment depends on having the user, at the computer, download and install, with authentication, the Cert and MDM files. &nbsp

At one of the JNUC sessions, I could swear that a presenter commented that you could restrict access to the web console to specific IP ranges. This would be a good workaround for us to limit access to our 2FA jump host IPs rather than building a limited access JSS for this purpose. Am I taking crazy pills and made this up, or does anyone know how to configure such access, maybe via Tomcat settings?

Got an odd one. Anyone had this issue where Microsoft Word won't save anymore?I tried uninstalling, re-installing. Killed preference files and Microsoft Container files. Just on this Mac after he updated to 15.1 and Word 16.91.24111020. Tried an older version. User is signed into M365 okay. Other apps are fine, like PowerPoint and Excel. Other Macs are fine. Happens on every Word file, even a new blank one. Once we click Save As, just beach ball, freezes for a bit. No prompt or options to save from Finder.

Hi All,is it possible to enable an iPad that has been disabled for a period of time because the user has entered the incorrect passcode multiple times? I know that Casper can remove a passcode lock, but once the user has gone and disabled the iPad, can anything be done without having to resort to a full reset? Cheers,Chris.

HiQuestion which I don't know if it's related to Jamf or to Microsoft (Intune). We are using Jamf Pro with Microsoft Intune Integration. Some of our company Mac devices are fully managed and enrolled with our Jamf Pro Server. But some of our company Mac devices are just unmanaged (BYOD).Both types can be registered in Intune for Conditional Access. Jamf devices need to register with Self Service (which then starts Company Portal).BYOD devices just register with Company Portal app only. In the past, we had no issues with this. In the last days, all of our BYOD Macs can not register anymore with Company Portal. There's always the following error message: Your organization requires you to enroll this device with a different device management provider. It seems, that Intune now REQUIRES that every (Mac) device needs to be enrolled with Jamf.We updated our Jamf Pro Server to version 10.16.1 last week, but I don't know, if this is related to this update or if anything

Hi, We have integrated Jamf Pro and Microsoft Intune to define Conditional Access Policies for MacOS devices in our company. In this way, we can see the devices on Azure AD. In order to enroll devices on Intune, we also installed the Company Portal application as specified on the Jamf Pro site. After the installation, the user authenticates and registers. So far everything is running normally. However, after a while, authentication is requested again on MacOS devices at random times. What is the reason for this and is there a way to prevent it? I have shared the screenshots below. Thank you very much for your help in advance.This verification request is very annoying and bad experience for users and us technical teams. 

We have students using ipads that are removing the MDM profile. Is there a way to prevent this?

Hey Guys, Is there a way to export a report that confirms which users have the screen and system audio recording setting toggled on? The goal is to export a list of users with any settings enabled in that area. 

i had the same problem with my test run but on day 3 i got the update prompt, then i moved to adding 2 test users and nothing, i set it to give them 2 weeks to update and had them check after 3 and 9 days and they get "can not reopen app" error Police set to Recurring Check-in. i show it installed no error   Config profile Preference Domain Properties Properties to configure for the preference domain Form editorPlist preview   <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>optionalFeatures</key> <dict> <key>acceptableCameraUsage</key> <true/> <key>acceptableScreenSharingUsage</key> <true/> <key>attemptToBlockApplicationLaunches</key> <true/> <key>enforceMinorUpdates</key> <tru

Greetings! Having a bit of trouble with a host name mismatch on a ceritificate that's causing an issue with Outlook on startup. So far, I've added and exported the certificate in Keychain Access, uploaded it to the JSS in a configuration profile, and then tried to deploy it to a test computer but the problem here is that the trust settings are set to Use System Defaults. Then, I tried packaging the certificate up with composer and copying it to /tmp and installing it with this command: /usr/bin/security add-trusted-cert -d -r trustAsRoot -k /Library/Keychains/System.keychain /tmp/certificate.cer Which does add it and set to Always Trust... However, I still see the Verify Certificate message when Outlook is opened and Use System Defaults as the Trust settings even though the certificate is marked trusted for all users. Any thoughts on what I might be doing wrong or another way to go about adding this certificate to the keychain and setting it to Always Trust? Thanks!

I set up a configuration marked OnPrem and SharePointDoor, but when logging in it tries to authorize me through office365, but we have a keycloak

So, I’m Extremely new at all this IT stuff, I was able to launch Nudge on to 2 test laptops via jamf using https://github.com/macadmins/nudge/wiki/Jamf-Pro-Guide but I don’t know how to make it Do anything. a link to a step by step would be great. Thanks in advance.

Has anyone found an easy way to deploy the Rapid7 Mac Insight Agent using Jamf

Hello all, I will be purchasing some new hardware for local software distribution points for both content caching servers using Apple's content caching service, and for software distribution points for lab installs.  We do a lot of Adobe CC installation, and other larger software packages. What do you use in your environment?   Opinions on using a Mac mini?  Does the amount of RAM or processor speed in a Mac mini make a difference between either of those use cases?   Thanks!

We are encountering the following error: 'An SSL error has occurred, and a secure connection to the server cannot be made.' This error appears in the management history in the Jamf portal. The installation of apps is failing, for the apps from the Mac App Store and those made available in the Self Service portal.      

We're looking into adding a content caching M1 Mac mini to our network. I wanted to see what others have run into on their networks.1. How much storage space would we need? We're only going to cache software updates and apps for macOS and iOS, not iCloud caching.2. How much network traffic are people seeing? The Mac mini just added a 10 Gigabit Ethernet option. I'm going to say that should be a fat enough pipe.There anything else that any of you have run into?

Hi Community, We've had restrictions in place on installing Sequoia, and the restriction period is now coming to an end. Since we've had limited opportunities for testing, we would greatly appreciate any feedback from those using the new macOS in their environment.  

When running the following command: sudo security delete-certificate -c "NameOfCert"  /Library/Keychains/System.keychain   I'm getting: Unable to delete certificate matching "NameOfCert"   I'm building a job to deploy to multiple endpoints to clear out a wifi profile cert that isn't working. Thanks in advance for any assistance 

Today we are releasing a maintenance version of Jamf Pro. Consider upgrading to Jamf Pro 11.11.2 if you leverage AirPlay and are using devices with iOS 18, iPadOS 18, or tvOS 18 in your environment. Potentially impacted workflows include patient bedside environments, where Jamf Pro’s Global AirPlay Permissions settings allow for 1:1 mapping of bedside iPads to only see that room’s Apple TV devices as available targets; and interactive classroom settings, where teachers use Airplay to wirelessly display iPad content on an Apple TV. This release addresses the following product issues: Jamf Pro Server [PI120758] The AirPlay payload for computers now includes the DeviceName key to identify Apple TV devices with tvOS 18 or later as allowed AirPlay destinations, and it no longer requires a DeviceID key to be set. [PI121960] [PI122414] If you have AirPlay destinations mapped in Settings > Global > AirPlay permissions, devices with iOS 18, iPadOS 18, and tvOS 18 or later are now avai

Can anyone tell me if there is an updated version of this script floating around? https://www.jamf.com/jamf-nation/third-party-products/files/764/firefox-installupdate This has worked for quite awhile in our environment, and still works for updating Firefox, however if it is run on a machine that does NOT have Firefox installed it fails and does not install. Alternatively, if there is a better solution out there for installing/updating Firefox I would love to see it too :) Thanks all

Hi,We can't deploy Adobe Photoshop and Adobe Premiere Pro with Jamf.Do any of you have this problem?Whether we import the package via Jamf Admin or via JSS it is the same result.