As a rookie question, I wondered how you'd either make a directory or move contents of old folder to another - as a user.   I know policies run as root but if I want it to do something in the users directory - how would I execute that? Getting the user, I can do: curUser=$( stat -f%Su /dev/console ) If I want to run something like "mkdir foo" shouldn't it be something like: su - "$curUser" -c 'mkdir "/Users/$curUser/foo"' Although I try that as a policy for my own computer and it doesn't do anything. The goal being to put the contents of one directory in another so their old data isn't overwritten     

I am attempting to get a policy working which is able to run minor Adobe updates in our environment using Adobe's Remote Update Manager, and after a lot of tinkering I am making progress but am once again stuck.Logs from my script:Script result: Creative Cloud app located; proceeding ... Starting Adobe RemoteUpdateManger... RemoteUpdateManager version is : 2.6.0.9 Starting the RemoteUpdateManager... ************************************************** No new updates are available for Acrobat/Reader ************************************************** Following Updates are applicable on the system : (KBRG/12.0.3.270/osx10-64) (AEFT/22.6.0.64/macuniversal) (FLPR/22.0.8.217/osx10-64) (AICY/17.4.0.051/macuniversal) (IDSN/17.4.0.051/macuniversal) (AUDT/22.6.0.66/macuniversal) (PRLD/22.6.0.6/osx10-64) ************************************************** Following Updates are to be downloaded : (KBRG/12.0.3.270/osx10-64) (AEFT/22.6.0.64/macuniversal) (FLPR/22.0.8.217/osx10-64)

Hey everybody, I'm looking to see if someone can point me in the right direction. I spent 14 years doing Apple Service, mostly in/out of warranty repairs and setups for customer's homes and office. None of that was JAMF related and I am now working at a company doing support for the corporate office that is mainly Windows but anything Mac related falls on me. It was the CIO's idea to get someone with macOS knowledge. I have been there for about a year now and just a couple weeks ago was given an Auditor Role. In the past year mac support has prob taken up about 15% of my time. The CIO loves AI and theyre working on implementing CoPilot for everyone eventually and it works just fine on Windows. He messaged me the other day because CoPilot is not working on one of his 2 macs and I told him I don't have a Copilot License to troubleshoot it and he got me license within a few minutes (yay :-/). On my mac and his, Copilot works in Teams, Appears in Excel, and Powerpoint but does not produce

The last week we are getting reports that people are loosing the Self Service app on there Macs.Anybody in the same situation? We're in the cloud with version 11.10.1.

Hi everyone, according to a notification in my Jamf account page I should be able to see the "Jamf Product Roadmap" option as described here: https://learn.jamf.com/en-US/bundle/jamf-account-documentation/page/Help_and_Resources_in_Jamf_Account.html#ariaid-title2 I'm not seeing it though, do others do?   here's what I see:

I updated a IOS iPad Pro to version 18 and now I can't view VPN and Device Management to look at my MDM enrollment information.   I can't seem to find anything that would gray this out in my Jamf Pro Configs.  Mind you, in version 17.x I do not have this problem with any of my enrolled devices.  I will also point out that when it is missing TV Provider is listed 2 times in the General section and both are greyed out. When VPN and Device Management is listed and grayed out TV Provider is listed 1 time above this.   This is oblivious a bug in iOS 18 or Jamf Pro.  Any help is appreciated. 

Hi there, I am trying to use Swiftdialog prompts for installing application with deferrals I have the following code which exits out with error code 1 when deployed by jamf , but the same code exit without any issues in vscode So i basically use this part of the code to exit log_message() { echo "$(date): $@" } cleanup_and_exit() { # If you have temp folders/files that you want to delete as this script exits, this is the place to add that log_message "${2}" exit "${1}" } Write_To_Config() { log_message "Writing to Plist" $pBuddy -c "Set :CurrentDeferralTime $currentDeferralTime" "$deferralPlist" $pBuddy -c "Set :TotalDeferralTime $TotalDeferralTime" "$deferralPlist" # $pBuddy -c "Set :TotalDeferralTimeEpoch $TotalDeferralTimeEpoch" "$deferralPlist" $pBuddy -c "Set :CurrentDeferralTimeEpoch $deferralDateSeconds" "$deferralPlist" $pBuddy -c "Set :AllowedDeferralTime $AllowedDeferralTime" "$deferralPlist" $pBuddy -c "Add :HumanReadable

I have had this happen a few times in the past month but a computer will get enrolled, installed the MDM profile successfully, and show up in JAMF Pro but will be under the serial number rather than the hostname like it should. Also, all profiles and software to be pushed to the device will be pending forever. The JAMF command doesn't install on Terminal either. I'm not sure what is holding the machine back from receiving everything else from our server. The machine is connected to the VPN and has worked plenty of times in the past.... Any help would be greatly appreciated!

We are looking at utilizing Jamf Setup Manager to make enrolling devices easier. I tried installing the graphics for the setup manager and it will not load when going through the setup manager. I have verified that it is packaged correctly and it is assigned in the PreStage but it is still not seeing them. I have had similar problems in the past when trying to upload them in the prestage but now want to get this fixed due to trying this new way of enrolling the devices. I have confirmed that it is not installed on the computer after enrollment.

I came up empty on Jamf Nation and realize this isn't specifically a Jamf-related thing per se, but maybe you guys would have some ideas. I'm in IT at a university where we just upgraded some of our audio software over the winter break, including Reaper.I initially did an update from 6.66 (hail Satan) to 6.83 using a package created in Composer and then scoping it as a policy, pretty straightforward. And that was fine. The problem is that our license isn't valid for version 7, and I don't have much of a paper trail as to how Reaper was originally deployed and what we actually paid for, etc. Long story...the guy before me left some notes but it's taken some reverse-engineering to get things going again.So I ended up just buying 13 of the $60 discounted licenses for one of our classrooms rather than trying to retrace our steps from the last purchase. Went around logged in under the [local] admin account and licensed a few computers, so far so good...then logged into my own network accoun

How to Implement Temporary Permissions in Jamf Connect with Azure Entra Background: I got a bit frustrated the other day because, well, most folks have teams of people to configure these token settings, dig into the claims, and get everything working seamlessly. Meanwhile, I had NO IDEA what I was doing. As someone who manages desktop technicians, I work closely with them to handle the technical aspects of both macOS and Windows environments. When I first dove into the Jamf Connect documentation on temporary elevation permissions, I’ll admit—I got a bit... annoyed. It didn't feel very easy for what seemed like a straightforward task. So, if you’re in a similar boat, trying to configure these permissions with existing setups, this guide is for you. I’ve broken down the steps to make it a little less painful and help you get up and running without reinventing the wheel. Assumptions Jamf Connect is already set up in your environment with your IDP configurations in place. You have a group

Hi all, I've been running Jamf Pro with Jamf Connect Basic for over a year for our basic MDM needs, but still have our users (about 140) log in to their Macbooks with a locally managed account rather than our primary identity provider, Google Workspace. We already have the link between the Jamf Connect and Google for self service and I understand that Jamf Connect Basic allows "the login window which enables users to login from the macOS via their cloud identity" but can't find in the documentation how to enable this. Is this possible or do I need to look at (yet) another third party solution for this? Any help would be greatly appreciated.

Hi!We recently noticed that our Shared iPads automatically log off a user after 10 minutes of inactivity. (I do know about the equally unsatisfying screen lock after 2 minutes, but that's not it.)I'm quite positive that this wasn't the case last year when we had the same scenario. Is there any way of disabling automatic logging off or modifying the period of grace for inactivity? (In addition, some updates must've led to the logging-off process, i. e. writing data back to the managed iCloud accounts, taking way longer [around 2-3 minutes] than earlier this year, such that easily logging in again is not really feasible.)Any input much appreciated!Neven

Good morning.In my instance of Jamf Pro I have several developers using Rancher Desktop in Administrative Mode, which requires "sudo access" for some operations. Therefore, at each start, they must rise (we have provided a special tool) to start the application. Is there a way I can avoid this step for them?I tried with a script that modifies the sudoers file like this:   echo "$USER_NAME ALL=(ALL) NOPASSWD: $/Applications/Rancher Desktop.app/Contents/MacOS/Rancher Desktop" | sudo tee -a /etc/sudoers > /dev/null.   The file is indeed modified but Rancher continues to ask for the password on startup.Am I doing something wrong? Are there other ways?I already tried also to install the app in the User Folder.

Hi, I am trying to get information of User,  Computer Name, Operating System, Last Inventory Update and Last Check-in through APIs Right now, the API I'm dealing with are these 2 below:https://xxx.jamfcloud.com/api/v1/computers-inventoryhttps://xxx.jamfcloud.com/uapi/preview/computers The problem is they are NOT returning all the computers' details only partially. I even tried with https://xxxx/uapi/preview/computers?page=1&page-size=10000000 or https://xxx/api/v1/computers-inventory?section=GENERAL&page=0&page-size=10000&sort=id%3Aasc.Do you have any idea what did I miss ? or suggestions to another API calls ? Thank you so much,

I have been playing with machine based certificates now on the macs, trying to get them to authenticate more cleanly to our environment. I ran into a problem. I can push the config profile, and i finally got it working. It installs an AD cert into the SYSTEM keychain. When you are logged in, it connects automatically and fine to the network using the machine certificate. yay...However the problem, is if you reboot or logout, the network disconnects. The wireless in the top right goes connected for a few seconds, then goes faded (not connected) again shortly after. It might flap like that a few times. My radius server sees no connection attempt at the time, so its not really doing anything. Log on as an existing user, and all is well again. anyone got any ideas? policy pushes out a certificate and a wireless profile in the same configuration profile. Using TLS, radius is NPS server. Certificate logon works fine on windows machines. Machine is active directory joined.

I've done a ton of searching and still haven't come up with the answers I need. I'm looking for a document/web page that tells me exactly how to setup a 2nd NDES server with App Proxy and get it working with Jamf, including how to setup the config profile for iOS and MacOS.  We have moved to Cisco ISE and it requires certs to access the network.  We do have NDES/SCEP working with Intune, but there aren't many documents on how to setup a 2nd one to work with Jamf.We've tried several documents and everything looks fine, but the iOS profile won't load on the device.  I feel like there's probably something easy that needs to be done on the NDES server, but I can't figure it out.  ***We are using profiles and not setting up Jamf to be a SCEP Proxy.  Not my decision.  And our network team says they can't do the network integration into Cisco ISE.  Again, not my decision.***And before anyone suggests it, I have worked with Jamf Support.  They

Hi folks We are trying to configure Jamf Pro as a SCEP proxy for our Microsoft CA which is hosted in our company network.So far we have set up the NDES role on one of our servers and the website shows the challenge passwords can be obtained from the mscpe_admin webpage. We have verified that the connection between jamf pro and the SCEP / NDES server is allowed on our firewall. I can see inbound traffic from the jamf pro network ranges (Data Region eu-central-1). In the logs of the SCEP configuration profile, I always get an error that the server could not be found, which I weird since I see the traffic coming in on the firewall. I tried both ways of configuring SCEP, in the configuration profile and in "Settings/PKI Certificates/Management Certificate Template), it shows the same issues. Now what's really the icing on top is that sometimes we get an error that the certificate could not be verified, which I see only in the jamf pro server logs(but I might be reading that w

Hello,   we have the following problem: Nobody can change their AD password via NoMAD. This error shows up: "Unable to change password: Configuration file does not specify default realm" I found out as soon as I go to the nomad app container and execute the unix file, another NoMAD instance is opening and showing an icon in the menu bar, where I can successfully change my AD password:   In Jamf we deliver nomad and the launch agent as a policy and a Plist as a configuration profile.  This comes from the past, I dont know if this is enough and correct in this time: The weird thing is that it is working with the unix file inside the nomad.app which is on all our Macs.  Thank you for your help in advance!  

I'm rather suddenly having an issue with Mac Apps and it not installing Google Chrome from the Jamf App Catalog. Before, if I wiped a device and got it set back up, within a few minutes Chrome would auto-install like it should. But over the last two days I've had 400+ devices stuck in the 'In Progress' stage including devices I've recently wiped.  Version deployed is the latest version of Chrome Target Group: All Managed Clients Update Method: Automatic Initial Distribution: Install automatically I tried switching it from Install Automatically to making it available in Self Service, but when I opened Self Service, there wasn't an option to install, only Open or Reinstall but it would error each time I selected either option.  Any ideas?

Hi, is there a way to add network shares to finder favorites via the command line? I could not find anything by googling.  

Greetings. I need to be able to ingest Security related log data from JAMF Pro api. Does anyone have suggestions on the API endpoints that I should focus on? ThanksFrank 

Hi Everyone,   Am trying to Packaging Homebrew-4.4.0.pkg using Jamf composer When i install Homebrew-4.4.0.pkg on clean Mac machine it will install without issue it shows Homebrew 4.4.0 when checked on terminal with brew -v but When i package it using jamf composer and install the packaged Homebrew on other Mac machine it will show Homebrew 4.3.0 on terminal with brew -v. Can someone please help me with this, packaging Homebrew 4.4.0 is not right?  

So I know this was requested and asked about a couple years ago based on searches but have not seen anything recently. With the addition of screen time tracking having been added to iPads in general is this something that JAMF now tracks or are we still out of luck?   I have several users requesting new iPads because there are "We use them to much and there aren't enough for all of us" but in reality I think its they do not want to share.

Hello everyone,   I'd like to know if it's possible to have a configuration profile for each of my Chrome extensions when deploying them on the same target? I currently use a single configuration profile for all my extensions, because when I tried to create several configuration profiles and applied them to my target, only one of them applied. Current configuration : <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>ExtensionSettings</key> <dict> <key>eljmjmgjkbmpmfljlmklcfineebidmlo</key> <dict> <key>installation_mode</key> <string>normal_installed</string> <key>update_url</key> <string>https://clients2.google.com/service/update2/crx</string> <key>toolbar_pin</key> <string>force_pinned</string> </dict> <key>cjpalh