I have deployed Sophos Intercept X to our mac and ipad fleet. running great on the Mac, but on the iPads the app has to be opened before the device is enrolled into Sophos Central to pickup the policies. It's unfeasible to get all our students to manually open the app so I'm racking my brain to figure out how to do this. Initially I setup a config profile to deploy a single app mode payload which opens the app, and then had a smart group (with criteria of having the single app mode config profile installed) in the scoped exclusions to disable the single app mode once it was pushed out. but this created a loop.  I'm wondering if anyone had any suggestions on how to get this sorted by either being able to open an app without single app mode. or another criteria i could try with the smart group.

Hi, I'm running into an Enrollment issue where the jamf connect okta screen is getting bypassed if the computer is idle and goes to sleep. For example, the user will go through the setup assistant options and reach the jamf connect screen. The mac goes idle/to sleep and once the mac is turned back on, it prompts for a local account login instead of the jamf connect login and you do not get an option to switch to the jamf connect screen anymore. How could I keep the computer display awake when new users get to the jamf connect screen stage? If a computer goes idle and prompts for local account login, is there anything I can do to revert back to jamf connect screen? For one case, I wiped the computer and reinstalled macOS, went through setup stage and it still prompted for local login instead of jamf connect screen

Good morning, We have a problem with shared iPads and students that have to change the Apple School password.After select the name on the list and before begin the password change process, appear the setup assistant about the language and country, I just now create a profile removing all the setup assistant steps from shared iPads and it stil appearing.The problem are the students don't be patience and the iPad get hang during the language process if you didn't wait to select and continue with the password change process. Thank you very much and Merry Christmas.

So we have an ipad that I enabled lost mode, due to the fact it was overdue and the one who checked it out did not return it.  So then I locked it and put a message on the screen.  It was returned so I disabled lost mode, does the system take a while before it unlocks it?  I can see that the command is pending 12 minutes ago, along with other commands that are still pending since 7-2-24 after I locked it.  But what I am not sure is if this iPad has active internet connection so that it can receive the command.  How can I connect this ipad when it is locked and I do not think there is an active internet connection to it?  Will the factory reset method work and when I am asked to join a network connect it and then the commands will process?

Ho do I remove Wallpaper from one iPad?  I set it with a picture in Device Management, now I can only upload a new image, I can't remove the one already uploaded? Thank you

When I try updating IntelliJ IDEA (Ultimate edition, i.e., the licensed version) using the Jamf App Catalog, I'm getting an error message. I installed older versions of the application on a couple test devices. I get notified that the app needs to close to update. I close the app, the update begins, and then I get an error message containing the following info: Cannot start the IDECannot set current directory to ‘/Library/Application Support/JamfAppInstallers/com.jetbrains.intellij/scripts’Caused by:No such file or directory (os error 2)Please try to reinstall the IDE.   I’ve verified the directory noted in the error message does not exist. Has anyone else experienced this or anything similar?   Some additional background info: Our end users currently install the app from the vendor’s website; we don’t currently offer it through Self Service. I’m not a user myself, so I’m unfamiliar with the app. I do have a license and activated it after installing the app. To set things up

This is great did some initial testing with S.U.P.E.R.M.A.N | Jamf Pro on a couple of Intel devices one running Big Sur and one with Monterey both are now fully patched thanks to Kevin M White and @HCSTechnology post on it.https://github.com/Macjutsu/super has anyone else tried it out yet and what do you think of it?

So I have around 360 devices that haven't checked into Jamf for at least 60 days. Thats a lot of licenses being used for no reason. Around 300 of those haven't checked in for 90 days, and maybe half of those haven't checked in for at least a year.My fear is, we have devices all over the world, and managers that like to hold onto returned devices in a drawer for their next employee. If I move these devices into unmanaged, then i'll have to be notified that the device is going to be used again to move it into managed or the device won't get updates or any management tasks when, not if, the manager just turns it back on and hands it to their new employee and says "here, get to work". If I delete the device from jamf so its not taking a license anymore, then I have the same problem, but the only resolution is a full re-jamf. I have a feature request in for some time for some kind of Archived mode (similar to what Filewave has/had) that we could put a device in (call it Quiet or Stored mode

Is there a way to remove web clips that have been created by users via an mdm command/profile? My issue is we have locked our student iPads so that they cannot remove apps from their devices, primarily so that they can't delete our filtering app. However, they still have the ability to create web clips, so some of our students have cluttered their iPads with web clips that now cannot be removed, since the profile treats web clips like apps. I know I could just hide the web clips, so that they couldn't be seen by the students, but then this would hide any of the web clips that we have specifically pushed out. I would really like to be able to send a command to remove web clips from a device, then have our district web clips just be resent to the device. Also, is there a way to restrict web clips being created on the device? Remove the "Send to Home Screen" option"

I am working on creating a good way to track Macs that are not communicating over MDM properly. I have several Macs that are not getting profiles installed, profile changes, and are generally not working properly with MDM communications. One way I have tracked them down in the past is to create a profile, scope it to all computers and then wait to see which Macs don't get the profile. This works, but I wanted to dig a bit deeper. I have been trying to use this command to find out if Macs are reliably working with MDM: log show --info --debug --predicate 'subsystem == "com.apple.ManagedClient"' --last 1h The time can be changed to what ever I want. It seems that this command is only gathering activity from the Mac, not incoming MDM activity. That's what I need. Running the command above will result in a lot of information so I have used grep to make the output more focused. So far, I haven't been able to identify communication coming from APNS.  Just running the command from a Mac

On Saturday, November 23rd, 2024, Jamf Cloud Infrastructure will be patched. During this time, you will be logged out of your Jamf Pro instance. The purpose of patching is to ensure that Jamf Cloud infrastructure and the database service are up-to-date, stable, and safe from security threats. Please see the times for our regions below.   Hosted Data Region Date Start Time End Time ap-southeast-2 November 22 1300 UTC 1700 UTC ap-northeast-1 November 22 1500 UTC 1900 UTC eu-central-1 November 22 2300 UTC 0300 UTC eu-west-2 November 23  0000 UTC 0400 UTC us-east-1/2 November 23  0500 UTC 0900 UTC us-west-2 November 23  0800 UTC 1200 UTC Jamf Cloud Hosted Data Region Information

I'm trying to have OneDrive function on our company devices so that when they login and Onedrive prompts their login for Onedrive specifically it will automatically start backing up the local documents and desktop to Onedrive. I've tried a lot of variations and done a lot of searching through these forums but nothing's working. I have a Config Profile - > Apps + Custom Settings -> Upload -> com.microsoft.OneDrive. and below is the plist .  Is there anything clearly wrong here, I'm stumped.<?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>DisablePersonalSync</key> <true/> <key>DisableTutorial</key> <true/> <key>AutomaticUploadBandwidthPercentage</key> <integer>30</integer> <key>FilesOnDemandEnabled</key> <true/> <key>BlockExternalSync</key&

Today we released Jamf Connect 2.41.0. This release includes the following changes and improvements: Upcoming Support Removal for macOS 12.xSupport for macOS 12.x will be removed from Jamf Connect in a future release. Jamf recommends updating to macOS 13.x or later to ensure continued support. Other Changes and ImprovementsYou can now configure offline multifactor authentication (MFA) without integrating Jamf Connect with a cloud identity provider (IdP). This allows users to have an accessible MFA solution, increasing device security without the immediate need for an IdP integration.   To access new versions of Jamf Connect, log in to Jamf Account with your Jamf ID. The latest version is located in the Products section under Jamf Connect. Product Documentation For additional information on what's included in this release, review the release notes via the Jamf Learning Hub.

Hi all, New to Jamf and I'm not seeing the connection on getting Free apps deployed. I followed the steps in the Jamf 100 Course but im getting "Pending - All licenses are in use or the license is not assigned yet". So I went to Apple Business manager and added 1 licenses for the application (im testing this). Made sure the VPP was configured inside of Jamf. What am I missing??This is a 100% free app... why/where do I need assign a license?

I've been using a policy executing a straight up restart option bound to a SCG that gathers every Macbook that hasn't been turned off for more then 10 days but I find the policy to be too invasive since it doesn't allow deferral as far as I know.I've been searching if there is a way to just send a notification if somebody enters a SCG on their Macbook but I can't find anything of the sort and I'm not very good at scripting either.Do you have any tips about it?Thank you

I see a lot of threads on how to show some information about installed profiles using the profiles command. Anybody know how I can use bash to read specific values from a profile? I want to use it to get a configured server URL that is only easily available via configuration profile on a freshly deployed system.

I have a workflow to rebuild a Mac that is working pretty well for our purposes, and I'm not really looking to change it.  The workflow is initiated via Self Service, and it starts with a simple "softwareupdate" command that downloads the installer and then does an eraseinstall.  My issue is that since Sonoma, after clicking Install (or Reinstall) in Self Service, and the workflow starts, but it gives the appearance of stopping.  The blue spinning circle stops and the button goes back to Reinstall, even though the workflow continues.  It has caused some confusion if there is more than one hand in the pot. Is there a way to shift the focus off Self Service and bring forward the Apple Software Update window, or a terminal window that shows the progress of the download so the users know there is activity going on? Thanks,        Gus

We are experiencing some connectivity issues with our managed Apple TVs.  Since the beginning of the school year, we have been experiencing slow connecting times and choppy video.  We made some changes to our network to move the network the Apple TVs are on to its own VLAN in hopes this would help (hoping to force a peer-to-peer connection).  The teachers connect to the Apple TV through a managed Macbook or iPad.  Since making this change the Macbook/iPad will not connect at all, we have done some problem-solving and found that removing the Apple TV from management solves the problem or removing the WiFi profile also allows the device to connect (this forces the peer-to-peer connection).  There is something in the managed Apple TV that prevents devices from connecting.  Is anyone else experiencing this and what have you found solves the problem?

Anybody got this to work. When I set it up my Apple TVs fail to take the profile with "The field “Identifier” contains an invalid value." as an errorIn the configuration profile I have to populate the Bundle ID manually which I find strange.

I have a test group setup of 6 devices that I am using to test managing software updates. All of the devices in the group are loaded via ADE and Jamf has full control of them. I pushed out a minor OS update to the devices in this group and even though they are all online and running 14.6.1 which is updatable only one device received a notification about an enforced update.    I guess my first question is going to be is this feature reliable or am I wasting my time? Second any ideas where I should start in regards to troubleshooting as from what I can see there are no pending or failed management commands. 

It has been six months since my company went into insolvency with a court order. There is no admin to remove the Jamf. I am not alone. Many people are suffering from this problem. How can we solve the problem.Best

I'm trying to find a way , policy/config profile/etc , to set up a sync with Onedrive on our devices. We've given up basically on having Onedrive auto-logged-in but once they do log in we want specific folders to backup automatically to Onedrive. I'm having a hard time figuring this one out. We can do this on our current PC's via a group policy in Intune but I can't find the equivalent in Jamf.

While attemtping to test some changes I made to our ZTP process, I performed erase all content and settings on one of my test Macs, deleted it from Jamf Pro, and then enrolled it through PreStage. Everything worked exactly as it should. The Mac auto-enrolled, got some profiles installed, and all appeared to be good. When the enrollment policy that handles ZTP did not launch, the first thing I did was to look for the Jamf log to see if there were any errors. There was no Jamf log. Next, I checked to make sure that my Mac had indeed successfully enrolled. I saw that the MDM profile along with all the other profiles that this Mac is in scope for were there. I then went to /usr/local and noticed that there was no Jamf binary installed. After 10-11 minutes after enrollment the Jamf binary finally got installed, and the zero touch provisioning process kicked off with an enrollment trigger. I have never seen it take this long for the Jamf binary to get installed. In most cases, the user gets

I am currently running JAMF 10.8.0-t1539715549 and I cannot for the life of me, get any EDU profiles to download to our Macs for teacher use of Apple Classroom. We have been using Apple Classroom with iPads since it was launched and we really want the teachers to be able to use the Mac version. Has anyone had any luck with this? Note, we are manually adding the classes to JAMF and are not using Apple School Manager for the classes. I don't think that should have any effect considering the iPad app works just fine.

Has anyone had luck with setting up background services. Deploy and configure the OneDrive sync app for Mac - SharePoint in Microsoft 365 | Microsoft Learn Does the background services need to be added to the com.microsoft.OneDrive plist? If so it doesnt seem to work.