Remotely control computers in Jamf with Intune Remote Help, is it even possible if the systems are not integrated with each other???Personally, I am very convinced that it does not work unless the systems are integrated with each other. Or am I wrong?The reason I ask this (to me, rather stupid question) is because we are two camps - 2-3 people in the Intune world and myself in Jamf. We will eventually abandon Teamviewer and I have taken the opportunity to ask the question how we will then solve the remote control of the Mac computers.- We fix that with Intune Remote Help, I get as a reply from those in the other camp.I answer:- So we still have plans to integrate Intune with Jamf?The others:- Hmmm

  We have some users with iPhones in the field taking lots of photos/videos of roads/bridges that seems to be the biggest issue taking up space and leading to these iOS Update Download Error: Insufficient Space, especially with these larger iOS 18.x updates Was chatting with a user some last week and tried a consumer app on my iPhone over the weekend I wasn’t really impressed with. Seen anything else lately that does a good job of this? I found Clean Up in Photos but this is brand new may not be exactly what I am looking for. It's tedious for many users to have to manually choose what to delete off their iPhone. Thanks

I'm looking for an up to date extension attribute that checks to see if a mac has an account signed into iCloud and what that full account name is, if an account is signed in.   I've found several other EA's that look for this plist, MobileMeAccounts.plist. The mac I'm testing with is running on OS 15.1, and I do not see this plist under ~/library/preferences.   Any info on if the plist has changed or moved would be greatly appreciated as well.

I've been doing a bit of a clean-up on our Jamf Pro instance prior to us migrating to Jamf Cloud (which will hopefully be within the next month or two) and one of our extension attributes seems to be a bit out of date as I've noticed it's not been working properly.It's supposed to determine what the active/in-use network interface is (i.e. Ethernet or wireless) and has the following script:#!/bin/sh OS_MINOR=`/usr/bin/sw_vers -productVersion | /usr/bin/cut -d . -f 2` if (( $OS_MINOR < 5 )); then if [ -f /System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/Support/networksetup ];then echo "<result>`/System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/Support/networksetup -listnetworkserviceorder 2>&1 | grep $(/usr/sbin/netstat -rn 2>&1 | /usr/bin/grep -m 1 'default' | /usr/bin/awk '{ print $6 }') | sed -e "s/.*Port: //g" -e "s/,.*//g"`</result>" else echo "<result>The networksetup binary is not present on th

Just setup MacOS onboarding and working great for use.As anyone configured the MacOS Onboarding extension attribute mentioned here https://www.motionbug.com/jamf-pro-and-macos-onboarding/This does'nt appears to create tag usisng  touch /Library/Application Support/JAMF/.onboardingcomplete. I assume thats what its suppose to do, unsure if the path is correct shouldnt it be touch /Library/Application\\ Support/JAMF/.onboardingcompleteDoesnt create the file either way assuming thats what its suppose to do.Anyone got this working? think I missing something simple.   ThanksTom

I created the MakeMeAnAdmin Policy and made it available in Self Service and it is working well and creating the log file at the end.Is there a way to retrieve that file without having to engage / bother end user?The following options would have to engage end user, no?1. https://github.com/kc9wwh/logCollection/wiki2. JamfRemoteAssistANDIs there a way I can receive a notification when an end user executes that policy (when they click on "run" on the MakeMeAnAdmin button in self service)?

Has anyone had any luck with removing managed apps from mobile devices that had died and won't turn on? We have already removed them from the scope of all apps that were originally assigned to them, but this isn't freeing up the license to the apps because it isn't able to sync with WIFI. I guess I should note that these were also manually added through the Apple configuration tool.

Hi, We would like to create custom analyses for firewall monitoring. When users turn off the firewall (System Preferences → Network → Firewall), Jamf Protect should trigger an alert. We have already built a custom analysis for the firewall: $event.type IN {0, 3, 4} AND$event.path == "/Library/Preferences/com.apple.alf.plist" AND$event.file.contentsAsDict.globalstate != "1" After the update to macOS 15 Sequoia, the plist file no longer exists, which is why we are trying to create a new custom analysis: $event.type IN {0, 3, 4} AND$event.path == "/Library/Preferences/com.apple.networkextension.plist" $event.file.contentsAsDict.com.apple.ALF.ApplicationFirewall.Enabled != "1" I searched on GitHub https://github.com/jamf/jamfprotect  but couldn’t find any relevant information. The plist file contains several dictionaries, but we are only interested in the firewall section. Unfortunately, the analysis does not work. We suspect that the issue lies in the syntax. Could you please he

We are a K-12 school looking to have some laptops available for exam use. This has two phases. Initial Requirements Replace our current ageing unmanaged windows devices with managed macos devices to match the rest of the 1-1 Mac program in the school.- No spell check or grammar checking.- No browser access (effectively no internet access to user)- Ideally Single App mode to lock to TextEdit or similar. This small fleet are currently only used for students requiring assistance during a paper exam. e.g. Struggle to write - allow typing. Read questions out loud etc. Future Have students OWN devices locked to allow them to complete testing. I know this is possible with SafeExamBrowser and we are using that in other areas. SafeExamBrowser also requires the testing to be completed online.Would love to be able to lock a student to Word or TextEdit when completing an essay for assessment. Basically looking for Single App Mode on MacOS. I would be interested how other school are creating

Hi allJamf Pro gives us ability to see latest version under Patch Management clearly labeled Latest Version So with that in mind - Jamf knows what systems are on the latest possible version of OS and which ones are not. Which is great, right? However so far i was not able to harness that into Smart Group that would point to the same Latest Version systems. Is it not possible or am i missing something?  

Can some suggest how can we Managed Login Items to allow in background for the application Zscaler   We are implementing this in our company to ensure that users wouldn't have an option to turn off. We implemented something similar creating a Configuration Profiles for Ms defender using a some documentation from Microsoft but over ever I don't any documentation for Zscaler. 

Hi everyone,Is there a possibility to set a configuration on Macs that allows AirDrop transfers, but only to other macOS (or iOS) devices, and not to others?Thanks!

User wants to turn off Assistive Access on an iPad but forgot the passcode. He didn't set the recovery Apple ID so the Forgot Assistive Access passcode option is not appearing. The soltion to disable Guided Access does not work with Assistive Access.  Is there a way to disable it without wiping the iPad? Thanks.

I can't remember how but how do i see the file in the office2024.pkg showing what get's installed? I can't seem to get the microsoft teams to NOT install.   Here is my .plist that i use with -applychoicechanges Am I naming the <string>com.microsoft.teams</string>. correctly? or is it something else? is it com.microsoft.teams2 I added the 'defender' entry but not sure if that is correct/necessary/needed. (defender didn't get installed) <?xml version="1.0" encoding="UTF-8"?><!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"><plist version="1.0"><array><dict><key>attributeSetting</key><integer>0</integer><key>choiceAttribute</key><string>selected</string><key>choiceIdentifier</key><string>com.microsoft.OneDrive</string></dict><dict><key>attributeSetting</key><integer>0</integer>&lt

Seeing inconsistent deployment of a Config Profile that is required for use of CISCO Secure Client. "the current system configuration does not allow the requested operation" My device it installed fine (15.1) on another device (15.1), it gets the above message in the JAMF device record.   The config profile does have one kernel extension being deployed Kernel Extension Bundle ID       com.cisco.kext.acsock  

I have an in-house Automator app I need to distribute to my teacher fleet of laptops. There used to be an in-house app upload space (a while ago) that I no longer see. This is the first time I have needed to distribute a non App Store app. How are folks handling uploading and distribution of non App Store apps?

Is there any way of configuring JAMF to send out login credentials for the Google Apps so students are not required to sign into each Google App? Currently, they need to sign into Google Docs, then Google Drive, then Google Sheets, then Google Slides, etc This is time consuming with younger grades. Hoping there is a AppConfig way of auto signing into each of those apps based on username and email address fields.

The Autoactivationlink is not passing through to the application.  The mobileconfig provided is for Intune, the vendor does not have a Jamf version.  I am also having trouble getting it to pull the USERNAME and DEVICE_NAME from the system, I tried the original palceholders {{Username}} {{Devicename}} and the ones you see now..  I have obscured the link as it is unique to our license. <?xml version="1.0" encoding="UTF-8"?><!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"><!-- This profile contains all CIRA DNS Firewall specific settingsFor detailed information on these options, please see the MDM specification"--><plist version="1.0"><dict><key>PayloadContent</key><array><dict><key>PayloadContent</key><dict><key>ca.cira.secure.remote</key><dict><key>Forced</key><array><dict><key>mcx_preference_settings&

Hello,I continue to get this message when I am on JAMF Pro Cloud ... Poor network connection strength.Changes may not be saved. I have tested our network - and speed is fine. We do not have any other problems on any other sites. I have checked out firewall. Everything fine. Any suggestions? Nikole

I have set up an API Role, and Client.  When I go to retrieve the token, I am seeing an error on my PC, but not on my Mac. When I go to retrieve the token, on my PC I get this error: curl: (35) schannel: next InitializeSecurityContext failed: CRYPT_E_NO_REVOCATION_CHECK (0x80092012) - The revocation function was unable to check revocation for the certificate. If I add "--ssl-no-revoke" to the curl command, it works fine. My Mac is managed by Jamf, and it has a couple of Jamf specific certs installed. I am assuming I need a certificate on my PC.    Any help on how to get this going would be appreciated. Dave  

Hey all,Does anyone have a solution to automatically install apps upon enrolment from the mac apps app store and then make them available in self service as well?Appreciate any help or advice, Thank you!

So I've created a new package using Jamf Pro web GUI, pointed it to a newly uploaded file on repository, and tried to deploy, but all installs are failing because the "package could not be verified". Never had this issue with Jamf Admin...just sayin' Jim

If you're like me, you wear many hats at your organization, and if your organization is like mine (higher education) your staffing is lean. You may think, as I once did, that you don't have time to start enforcing macOS security compliance, or even see why you should. But in today's climate of evolving threats, increasing regulation, and high-profile settlements, it's likely that you'll need to get started sooner than you think.  First of all, if you're new to security compliance, you might want to check out my presentation from PSU MacAdmins 2024, where I went into detail about how the macOS Security Compliance Project (mSCP) works together with Jamf Compliance Editor (JCE) to help you build a framework you can use to: set a compliance baseline, check your fleet to see what's compliant and what's not, report on those findings, and fix non-compliant devices. There are plenty of great resources on how to use mSCP and JCE, so what I'll concentrate on is the planning and staging.&nbs

Looking at setting up single app mode for a Mac and it is failing (The “Assessment Mode” payload contains an improperly formatted key: “AllowedApplications”.)The one thing I know I'm missing is the Team identifier for the app. My test app, Chess, doesn't have it.I'm using com.Apple.Chess as the bundle identifier.I can only guess as to what is actually breaking it.

I haven't had to do much with extension attributes yet, looking for an easy way to determine if something is installed and the version number, and if it isn't installed, to also note that. So the command I run on a local machine is: sysctl cs.version That will return the version number of the Falcon Host installed, something like: cs.version: 2.27.4809.0 If the application isn't installed it returns: sysctl: unknown oid 'cs.version' Ultimately I will use a smart group to make sure Falcon Host is installed, and if it is not installed, to flag it for installation. The version number is just nice to know. Is there an easy way to do this that anyone would know? If it works, I'm happy to submit it to the EA list as well.