Anyone know how to manage Improve Siri & Dictation and Share iCloud Analytics here? Can't seem to find the right plist for them.

We have 12 Patch Reporting smart groups set up using “Less Than” and the version we’re deploying. We deploy to 4 groups on different days: Alpha, Beta, UAT, Wave 1, and Wave 2 (Execs/Traders). One Deployment Day, I update each smart groups by adding the next test group using parentheses and the “or” option. We use AutoPkgr for package downloads but can’t use autopkg jamfuploaders due to DLP restrictions. We currently can’t have apps autoupdate and have to manage the updates on a monthly basis. Modifying the 12 groups takes about 15 minutes to do, but I’m looking for a more efficient solution. This is how our smart groups being setup. Using Chrome as an example. Application Smart GroupsName: Monthly Patching - Google Chrome UpdateCriteria: Patch Reporting Application nameOperator: Less thanValue: The current version we’re deploying. We have to manually change this each month.   Main Smart Group this list all 12 Patch reporting smart groups. Use an open/closed pa

Is there a way to do an inventory search of computers that are currently locked via the Management Commands -> "Lock Computer" option? I don't see it as an available search criteria or display option when creating an advanced computer search.... I'd like to delete a batch of old computers from our JSS, but want to make sure none of them have a computer lock PIN applied before deleting the entries.

Hello, we are currently experiencing issues with our Apple TVs and tvOS 18: connecting to the Apple TV for screen mirroring is not working properly, teachers have to repeat the process multiple times for it to work. We want to be sure that the problem is coming from tvOS 18 and not from our network. Is anyone also encountering this problem?Thank you

I work in a High School where we are currently moving to a full Mac platform for both staff and students.  We are installing Apple TVs in every classroom as well for teachers to wirelessly project more easily.  The issue we are having is students in or out of the classroom will attempt to connect to the Apple TV during class which brings up the pin code.  The teacher is then stuck waiting for the code to time out before they can move on.  Just to note I have require passcode on for every connection to prevent previously connected students form highjacking the Apple TV as well.So I guess my question is, does JAMF Pro provide a way to prevent connections to an Apple TV if it is in use?  We are using JAMF 10.42.1 if that matters.  We are also using 4th gen Apple TVs

Forgive me if this has been posted and I've missed it. I've found similar issues but all were a few years old. I'm on Jamf Pro 10.25.1-t1602899070. We have seemingly lost our ability to name mobile devices. Specifically Apple TV's in this case though when I checked on an iPad that didn't work either. We still have access to the same steps. Inventory Tab - General - Edit - Enforce Mobile Device Name - change name - Save. All of that goes normally, however if we then look at the history tab we don't see the name change command in pending, completed, or failed. It's like it just disappeared. All other management commands are working normally. I've confirmed with my administrator (whom seems to be the only one that still can name them) that none of our team's rights have been changed. We first noticed it after going to the version we are on now but we don't know for sure if that's ultimately related or not. Any ideas?

So I think I have found a bug which affects Jamf Connect Login products from at least 2.29 and above. It seems that when the disable button for the Wifi is used on the Login screen it doesn't actually disable the Wifi.  The icon still shows blue and we have issues with users logging in as we have it set to only fallback to local for users when there is no network connection.  However, this doesn't turn off the Wifi and the user is stuck when attached to open Wifi points that require things like captive portals and such (not pure password logins.).  So if they reboot at some location like an airport or hotel where they have been using the wifi but not authenticated to pass traffic it will just hang and not validate with our IdP nor locally. We would like to keep policy so that when an active Wifi is there but also have the ability for users to turn off wifi completely if they have to authenticate locally. Anyone else seeing this problem too?

Hello,Not sure if anyone is experiencing the same issue as I but I am having inconsistent results when attempting to change a devices name, being the S/N when enrolled, to a more suitable "Room Name" - Inventory > General > Mobile Device Name. The Asset Tag seems to be the only name that sticks consistently. Some ways we have found to force the name change is to manually reset the device (a few times) and or push a remote reset, this option rarely works. However, I would say 70% of the time, neither option works. Just curious if this is a bug or if there is a sure way to have the name change stick. 

Has anyone figured out a way to remotely restart a managed Apple TV regularly or on a schedule?

I'm looking for any whitepapers or guidelines for deploying Apple TVs. I already have MacBook and iPads in my environment. Looking to add Apple TVs. Any information is greatly appreciated.

Have one iPad that is getting a 401 Unauthorized Error when the Return to Service app is opened and tap Reset. 

Is anyone else seeing WiFi profiles reloading this morning in JAMF School?  We have a bunch of devices that seem to have lost their WiFi settings.  This is just a simple WPA2 PSK based profile.  On one device with the issue, in the middle of the night it shows the following in the activity log below.  Reinstalling the managed profile for the WiFi setting fixes the issue, but of course is a pain to do since you have to get them back on a working WiFi. Action: "Refresh profiles list" Status: "NotNow"  Target: "endusers ID" We have seen this happen at least one other time in the last year or so, but I don't recall exactly when.

Dear Team,I have a script to obtain all browsers extensions (Safari, Edge, Chrome and Firefox) the script is running well and I would like to use it as EA. Can any body give a hand? ThanksHere is the output [Warn] This script may not be able to access all user directories unless run as root. Safari Extensions: User: xxx, Name: com.adguard.safari.AdGuard.Extension, Id: TC3Q7MAJXF Chrome Extensions: User: xxx, Profile Name: Person 1, Name: Google Docs Offline, Id: ghbmnnjooekpmoecnnnilnnbdlolhkhi, Version: 1.78.1 Firefox Addons: User: xxx, Profile Name: default-release, Name: AdGuard AdBlocker, Id: adguardadblocker@adguard.com, Description: Unmatched adblock extension against advertising and pop-ups. Blocks ads on Facebook, Youtube and all other websites. Here is the scripts#!/usr/bin/env bash _arg_multilineField=$1 _arg_wysiwygField=$2 # Determines whether or not help text is necessary and routes the output to stderr die() { local _ret="${2:-1}" echo "$1" >&amp

I recently found traffic to dev-account-cdn.jamfnebula.com blocked by my firewall. Can anyone explain the purpose of this URL?  addr.dst in '3.166.192.91 is an AWS IP

I have a script that worked before OS15. After updating to OS15, the script became abnormal. Even if it connected to the allowed SSID and obtained the IP address, it would turn off and on WIFI infinitely. The following is the script. Thank you for your help~~ #!/bin/bash# set the allowed SSID GUEST-VIPallowed_ssid1="GUEST-VIP"##Get the wireless port IDwifi_port=$(networksetup -listallhardwareports | awk '/Wi-Fi|AirPort/{getline; print $NF}')# current preferred SSID listssid_list=`networksetup -listpreferredwirelessnetworks $wifi_port | tail -n +2 | cut -c 2-`# current connected SSIDconnected_ssid=`networksetup -getairportnetwork $wifi_port | cut -c 24-`# clean up ssidIFS=$'\\n'for ssid in $ssid_listdoif [ "$ssid" != "$allowed_ssid1" ]thennetworksetup -removepreferredwirelessnetwork $wifi_port $ssidsecurity delete-generic-password -a $ssid -D "AirPort network password"#echo $ssid Not allowed, and removed#else#echo $ssid is allowedfidone if [ "$connected_ssid" != "$allowed_ssid1" ]thenne

So I’m trying to install office apps and I tried going through the Mac Apps and it worked on all our test laptops but after that it was very very spotty and mostly unsuccessful so I’m trying to find ways around that now.  I then downloaded the pkg files for teams outlook and onedrive and applied them via a policy setting it to continually check in. So far nothing.  What am I doing wrong?

Hey all,A non-scripter, knows just enough to be dangerous, tech here with a question.I have attempted a search for over three hours for a method to restrict multiple applications using one Restriction policy.We need to block Chrome, Firefox, Opera, Chromium Browsers on multiple devices. I tried adding in each of these apps in the 'Process Name' box separated by Semi-colons, Colons, Comma's and it does not work. As seen in the attached image.Besides adding 25 devices into a separate restriction policy, I see no means of performing a mass restriction. These separate restrictions are going to have to suffice for now, but what an administrative nightmare it is causing. Any help is appreciated.Maybe a feature request is in order with multiple add lines?

Hello, I am looking for a way for users not to sign in to the App store and download any apps. Is that possible via Jamf?

We have this bug for over a week, Jamf Support couldn't solve it yet.We could enroll around 40 iPads without any problems, but suddenly, this error "Unable to Download Profile Configuration" pops up after continuing the DEP Enrollment process on every iPad. We tried our school wifi and multiple mobile hotspots.We tried renewing the DEP token, ASM connection, unassigned the devices from MDM and reassigned them in Apple School Manager, but no luck yet.See the attached screenshot:It says: "An internet connection is required to download the configuration for this profile. To continue, you can try again or choose a Wi-Fi network. Options: Try Again or Choose Wi-Fi NetworkUsing the latest Jamf (hosted) 10.47.0.Any help is greatly appreciated.

Is there a way to get the JSS ID of a system locally via script (is it stored anywhere on the client)? I am working on some API data upload scripts and want to get the JSS ID of a system locally, since that is the best unique identifier for the JSS DB and every system has one. I don't really trust serial number or name 100%.

i have a client thats not checking in so i ran a jamf policy from terminal and its stuck on "Upgrading Self Service.app..." any way around this?

I have a large number of labs in our district and students will either walk away from their workstations at the end of class and rely on another student switch users or just lock their account and leave.  Both scenarios leave the student logged in.  This can create some issues when attempting to use remote commands so I am looking for a configuration or script that I can deploy that will log users out.  I would think the easiest way to do this is deploy something at the end of the day.  Just wondering if anyone has something they are using that they like.

Hi there! I'm tasked with migrating our devices from Jamf to WorkspaceONE. Working on a migration script to unmange computers automatically and have the user install an MDM profile for automated enrollment.  My issue is the JamfPro API Command to UnmanageDevice. Its just not going through. Here is the command I am using:  curl -X POST --header "Authorization: Bearer $bearer_token" "$JamfProURL/JSSResource/computercommands/command/UnmanageDevice/id/$DeviceID" The variables are working for everything else so it can authenticate into jamf and pull the device ID using the computers serial number, but this is the main blocker. Below is the response I get: <html> <head> <title>Status page</title> </head> <body style="font-family: sans-serif;"> <p style="font-size: 1.2em;font-weight: bold;margin: 1em 0px;">Not Found</p> <p>The server has not found anything matching the request URI</p> <p>You can get technical detai

You can manage so many more settings than Apple documents.  Apple’s list of supported management keys for configuration profiles is slowly growing, though some listed on their own support site no longer apply or work for current versions of macOS. If you want the official Apple documented supported settings for configuration profiles there’s two places, Apple’s developer documentation and an Apple support page  https://developer.apple.com/documentation/devicemanagement/profile-specific_payload_keys  https://support.apple.com/guide/mdm/complete-payload-list-mdm5370d089/1/web/1.0  The developer documentation is nice because it lets you know what keys have been updated and changed. The complete payload support page is nice because it gives a little more description about each setting.  But…But…But…there’s so much more, so many more settings you can manage with a configuration profile! So, what if you want to manage settings not listed in those documents…there’s a

Hi All, I just need some assistance with unmanaging Macs through a script which is ran using a policy via Self Service. Our goal is for end-users to run this script themselves to unmanage the device (and lifting all the restrictions) without erasing the device. We have a mix of MacOS Monterey, Venutra and Sonoma. We have noticed that removeMDMProfile no longer works for MacOS Venutra and higher (I think because of Apple's updated security) but it has been working for MacOS Monterey. This is the script we are using at the moment:     #Remove JAMF echo "Deleting JAMF..." 2>>$Result_path 1>>$Result_path sudo /usr/local/bin/jamf removeMdmProfile 2>>$Result_path 1>>$Result_path sudo /usr/local/bin/jamf removeFramework 2>>$Result_path 1>>$Result_path sudo /usr/local/bin/jamf -removeFramework 2>>$Result_path 1>>$Result_path MDM_UUID=$(sudo profiles -Lv | awk '/attribute: name: MDM/,/attribute: profileUUID:/' | awk '/attribute: profileU