Has anyone figured out a way to remotely restart a managed Apple TV regularly or on a schedule?

I'm looking for any whitepapers or guidelines for deploying Apple TVs. I already have MacBook and iPads in my environment. Looking to add Apple TVs. Any information is greatly appreciated.

Have one iPad that is getting a 401 Unauthorized Error when the Return to Service app is opened and tap Reset. 

Is anyone else seeing WiFi profiles reloading this morning in JAMF School?  We have a bunch of devices that seem to have lost their WiFi settings.  This is just a simple WPA2 PSK based profile.  On one device with the issue, in the middle of the night it shows the following in the activity log below.  Reinstalling the managed profile for the WiFi setting fixes the issue, but of course is a pain to do since you have to get them back on a working WiFi. Action: "Refresh profiles list" Status: "NotNow"  Target: "endusers ID" We have seen this happen at least one other time in the last year or so, but I don't recall exactly when.

Dear Team,I have a script to obtain all browsers extensions (Safari, Edge, Chrome and Firefox) the script is running well and I would like to use it as EA. Can any body give a hand? ThanksHere is the output [Warn] This script may not be able to access all user directories unless run as root. Safari Extensions: User: xxx, Name: com.adguard.safari.AdGuard.Extension, Id: TC3Q7MAJXF Chrome Extensions: User: xxx, Profile Name: Person 1, Name: Google Docs Offline, Id: ghbmnnjooekpmoecnnnilnnbdlolhkhi, Version: 1.78.1 Firefox Addons: User: xxx, Profile Name: default-release, Name: AdGuard AdBlocker, Id: adguardadblocker@adguard.com, Description: Unmatched adblock extension against advertising and pop-ups. Blocks ads on Facebook, Youtube and all other websites. Here is the scripts#!/usr/bin/env bash _arg_multilineField=$1 _arg_wysiwygField=$2 # Determines whether or not help text is necessary and routes the output to stderr die() { local _ret="${2:-1}" echo "$1" >&amp

I recently found traffic to dev-account-cdn.jamfnebula.com blocked by my firewall. Can anyone explain the purpose of this URL?  addr.dst in '3.166.192.91 is an AWS IP

I have a script that worked before OS15. After updating to OS15, the script became abnormal. Even if it connected to the allowed SSID and obtained the IP address, it would turn off and on WIFI infinitely. The following is the script. Thank you for your help~~ #!/bin/bash# set the allowed SSID GUEST-VIPallowed_ssid1="GUEST-VIP"##Get the wireless port IDwifi_port=$(networksetup -listallhardwareports | awk '/Wi-Fi|AirPort/{getline; print $NF}')# current preferred SSID listssid_list=`networksetup -listpreferredwirelessnetworks $wifi_port | tail -n +2 | cut -c 2-`# current connected SSIDconnected_ssid=`networksetup -getairportnetwork $wifi_port | cut -c 24-`# clean up ssidIFS=$'\\n'for ssid in $ssid_listdoif [ "$ssid" != "$allowed_ssid1" ]thennetworksetup -removepreferredwirelessnetwork $wifi_port $ssidsecurity delete-generic-password -a $ssid -D "AirPort network password"#echo $ssid Not allowed, and removed#else#echo $ssid is allowedfidone if [ "$connected_ssid" != "$allowed_ssid1" ]thenne

So I’m trying to install office apps and I tried going through the Mac Apps and it worked on all our test laptops but after that it was very very spotty and mostly unsuccessful so I’m trying to find ways around that now.  I then downloaded the pkg files for teams outlook and onedrive and applied them via a policy setting it to continually check in. So far nothing.  What am I doing wrong?

Hey all,A non-scripter, knows just enough to be dangerous, tech here with a question.I have attempted a search for over three hours for a method to restrict multiple applications using one Restriction policy.We need to block Chrome, Firefox, Opera, Chromium Browsers on multiple devices. I tried adding in each of these apps in the 'Process Name' box separated by Semi-colons, Colons, Comma's and it does not work. As seen in the attached image.Besides adding 25 devices into a separate restriction policy, I see no means of performing a mass restriction. These separate restrictions are going to have to suffice for now, but what an administrative nightmare it is causing. Any help is appreciated.Maybe a feature request is in order with multiple add lines?

Hello, I am looking for a way for users not to sign in to the App store and download any apps. Is that possible via Jamf?

We have this bug for over a week, Jamf Support couldn't solve it yet.We could enroll around 40 iPads without any problems, but suddenly, this error "Unable to Download Profile Configuration" pops up after continuing the DEP Enrollment process on every iPad. We tried our school wifi and multiple mobile hotspots.We tried renewing the DEP token, ASM connection, unassigned the devices from MDM and reassigned them in Apple School Manager, but no luck yet.See the attached screenshot:It says: "An internet connection is required to download the configuration for this profile. To continue, you can try again or choose a Wi-Fi network. Options: Try Again or Choose Wi-Fi NetworkUsing the latest Jamf (hosted) 10.47.0.Any help is greatly appreciated.

Is there a way to get the JSS ID of a system locally via script (is it stored anywhere on the client)? I am working on some API data upload scripts and want to get the JSS ID of a system locally, since that is the best unique identifier for the JSS DB and every system has one. I don't really trust serial number or name 100%.

i have a client thats not checking in so i ran a jamf policy from terminal and its stuck on "Upgrading Self Service.app..." any way around this?

I have a large number of labs in our district and students will either walk away from their workstations at the end of class and rely on another student switch users or just lock their account and leave.  Both scenarios leave the student logged in.  This can create some issues when attempting to use remote commands so I am looking for a configuration or script that I can deploy that will log users out.  I would think the easiest way to do this is deploy something at the end of the day.  Just wondering if anyone has something they are using that they like.

Hi there! I'm tasked with migrating our devices from Jamf to WorkspaceONE. Working on a migration script to unmange computers automatically and have the user install an MDM profile for automated enrollment.  My issue is the JamfPro API Command to UnmanageDevice. Its just not going through. Here is the command I am using:  curl -X POST --header "Authorization: Bearer $bearer_token" "$JamfProURL/JSSResource/computercommands/command/UnmanageDevice/id/$DeviceID" The variables are working for everything else so it can authenticate into jamf and pull the device ID using the computers serial number, but this is the main blocker. Below is the response I get: <html> <head> <title>Status page</title> </head> <body style="font-family: sans-serif;"> <p style="font-size: 1.2em;font-weight: bold;margin: 1em 0px;">Not Found</p> <p>The server has not found anything matching the request URI</p> <p>You can get technical detai

You can manage so many more settings than Apple documents.  Apple’s list of supported management keys for configuration profiles is slowly growing, though some listed on their own support site no longer apply or work for current versions of macOS. If you want the official Apple documented supported settings for configuration profiles there’s two places, Apple’s developer documentation and an Apple support page  https://developer.apple.com/documentation/devicemanagement/profile-specific_payload_keys  https://support.apple.com/guide/mdm/complete-payload-list-mdm5370d089/1/web/1.0  The developer documentation is nice because it lets you know what keys have been updated and changed. The complete payload support page is nice because it gives a little more description about each setting.  But…But…But…there’s so much more, so many more settings you can manage with a configuration profile! So, what if you want to manage settings not listed in those documents…there’s a

Hi All, I just need some assistance with unmanaging Macs through a script which is ran using a policy via Self Service. Our goal is for end-users to run this script themselves to unmanage the device (and lifting all the restrictions) without erasing the device. We have a mix of MacOS Monterey, Venutra and Sonoma. We have noticed that removeMDMProfile no longer works for MacOS Venutra and higher (I think because of Apple's updated security) but it has been working for MacOS Monterey. This is the script we are using at the moment:     #Remove JAMF echo "Deleting JAMF..." 2>>$Result_path 1>>$Result_path sudo /usr/local/bin/jamf removeMdmProfile 2>>$Result_path 1>>$Result_path sudo /usr/local/bin/jamf removeFramework 2>>$Result_path 1>>$Result_path sudo /usr/local/bin/jamf -removeFramework 2>>$Result_path 1>>$Result_path MDM_UUID=$(sudo profiles -Lv | awk '/attribute: name: MDM/,/attribute: profileUUID:/' | awk '/attribute: profileU

Any MacOS device that's released into our production environment has location services enabled in the operating system. However, there has been a request to enable location services in Apps such as Chrome and Siri, which require admin privileges to unlock the Privacy settings. Is there any way this can be done via configuration profile or script? If this has already been answered, I apologize. I can't find anything on doing this on a per app basis though.

I'm distributing a configuration profile to users with rules for their password and I'm seeing a "Cancelled" status on some of them, about 7%. At first, I thought that it was something similar to the alternative status "Pending" and among the list of those with such a status are devices that have access to the Internet. After that, I tried to redistribute the profile again and one of the devices instantly got the "Cancelled" status, even though it doesn't have internet access at the time of getting that status.What does it mean? is there any way i can fix this?

Seeing this message on an old iPad Air so I'm not sure if that's the problem. User installed some kind of update but it's stuck at the Remote Management screen when connecting to JAMF. The error message continues "The configuration is not available".    Reading through a lot of the other posts with a similar message when enrolling. I've so far tried removing it from pre-stage and adding back then waiting, I renewed the token from ASM as well as uploaded a new token from JAMF back into ASM. Our pre-stages don't have any certificates with them that would need updated like what fixed some others. I also erased it completely with a restore and update but still get stuck. Is this iPad too old? Maybe it's a different issue? I haven't seen this before but none of our other iPads are having problems.

Hi, i am locking my device to a specific app over time, but when the lock time expires the device is still locked to that app without exiting that app. Does anyone in the group have this problem, can you tell me how to handle it?

I am trying to follow the HCS guide to allowing Jamf Pro to send notifications for Slack, but under the channel, there is no "send emails to channel" under the integrations tab. Is there something that needs to be set up first? I have the Pro plan; does it have to be a higher plan?HCS Guide

I recently took a full-time position with a company for whom I used to consult on their Jamf instance. It had been a little over a year since I was on the system and in the meantime there had been a few other people with their hands inside it though it was mostly perceived as stable and left alone.But I recently discovered that in the intervening year, the APNS cert had expired. A new certificate was created (with a different AppleID) and the handful of iOS devices were re-enrolled. Since the Macs were still checking in, it was assumed that nothing needed to be done.I managed to find the original AppleID and found the cert under that login had been renewed at the same time. But it was the cert with the new login was uploaded to Jamf instead.I have both certs downloaded and I created an extension attribute to determine which computers have which cert topic. Of the computers that have reported in, it's almost 50/50!So I have a large number of computers that are still checking in but not

I have a script that worked before OS15. After updating to OS15, the script became abnormal. Even if it connected to the allowed SSID and obtained the IP address, it would turn off and on WIFI infinitely. The following is the script. Thank you for your help~~我有一个在OS15之前运行正常的脚本。在升级到OS15之后，脚本变得异常。即使连接到允许的SSID并获取了IP地址，它也会无限循环地开启和关闭WiFi。以下是该脚本。谢谢您的帮助~~我有一个在OS15之前运行正常的脚本。在升级到OS15之后，脚本变得异常。即使连接到允许的SSID并获取了IP地址，它也会无限循环地开启和关闭WiFi。以下是该脚本。谢谢您的帮助~~我有一个在OS15之前运行正常的脚本。在升级到OS15之后，脚本变得异常。即使连接到允许的SSID并获取了IP地址，它也会无限循环地开启和关闭WiFi。以下是该脚本。谢谢您的帮助~~     #!/bin/bash #！/bin/bash #！/bin/bash #！/bin/bash #！/bin/bash#!`/bin/bash` 文件内容： ```bash #！/bin/bash #！/bin/bash #！/bin/bash #！/bin/bash ```#!`/bin/bash` 文件内容： ```bash #！/bin/bash #！/bin/bash #！/bin/bash #！/bin/bash ```#!`/bin/bash` 文件内容： ```bash #！/bin/bash #！/bin/bash #！/bin/bash #！/bin/bash ```         # set the allowed SSID GUEST-VIP设置允许连接的SSID为“GUEST-VIP”。设置允许连接的SSID为“GUEST-VIP”。设置允许连接的SSID为“GUEST-VIP”。     &nbsp

Hey, guys. Started testing Jamf Sync app, since Admin is going away (gone?). I was checking out the documentation and the latest bug fixes list that the upload timeout was changed to an hour to accommodate large uploads, but does not solve issue with files larger than 5GB on a JCDS2 distribution point. This concerns me as my most frequent uploads are Adobe apps and they typically are larger than 5GB. I have not had much success with the web upload of these installers in the past, which is why I continued to use Admin. I am attempting an upload now using Jamf Sync, but I suspect it may just fail as package is larger than 5GB. Progress bar isn't doing much either. What have your experiences been?Bug fixes• Changed the timeout for uploads to an hour to solve an issue with large uploads. This does not solve the issue with files > 5 GB that are uploaded to a JCDS2 DP.