I've been using a policy executing a straight up restart option bound to a SCG that gathers every Macbook that hasn't been turned off for more then 10 days but I find the policy to be too invasive since it doesn't allow deferral as far as I know.I've been searching if there is a way to just send a notification if somebody enters a SCG on their Macbook but I can't find anything of the sort and I'm not very good at scripting either.Do you have any tips about it?Thank you

I see a lot of threads on how to show some information about installed profiles using the profiles command. Anybody know how I can use bash to read specific values from a profile? I want to use it to get a configured server URL that is only easily available via configuration profile on a freshly deployed system.

I have a workflow to rebuild a Mac that is working pretty well for our purposes, and I'm not really looking to change it.  The workflow is initiated via Self Service, and it starts with a simple "softwareupdate" command that downloads the installer and then does an eraseinstall.  My issue is that since Sonoma, after clicking Install (or Reinstall) in Self Service, and the workflow starts, but it gives the appearance of stopping.  The blue spinning circle stops and the button goes back to Reinstall, even though the workflow continues.  It has caused some confusion if there is more than one hand in the pot. Is there a way to shift the focus off Self Service and bring forward the Apple Software Update window, or a terminal window that shows the progress of the download so the users know there is activity going on? Thanks,        Gus

We are experiencing some connectivity issues with our managed Apple TVs.  Since the beginning of the school year, we have been experiencing slow connecting times and choppy video.  We made some changes to our network to move the network the Apple TVs are on to its own VLAN in hopes this would help (hoping to force a peer-to-peer connection).  The teachers connect to the Apple TV through a managed Macbook or iPad.  Since making this change the Macbook/iPad will not connect at all, we have done some problem-solving and found that removing the Apple TV from management solves the problem or removing the WiFi profile also allows the device to connect (this forces the peer-to-peer connection).  There is something in the managed Apple TV that prevents devices from connecting.  Is anyone else experiencing this and what have you found solves the problem?

Anybody got this to work. When I set it up my Apple TVs fail to take the profile with "The field “Identifier” contains an invalid value." as an errorIn the configuration profile I have to populate the Bundle ID manually which I find strange.

I have a test group setup of 6 devices that I am using to test managing software updates. All of the devices in the group are loaded via ADE and Jamf has full control of them. I pushed out a minor OS update to the devices in this group and even though they are all online and running 14.6.1 which is updatable only one device received a notification about an enforced update.    I guess my first question is going to be is this feature reliable or am I wasting my time? Second any ideas where I should start in regards to troubleshooting as from what I can see there are no pending or failed management commands. 

It has been six months since my company went into insolvency with a court order. There is no admin to remove the Jamf. I am not alone. Many people are suffering from this problem. How can we solve the problem.Best

I'm trying to find a way , policy/config profile/etc , to set up a sync with Onedrive on our devices. We've given up basically on having Onedrive auto-logged-in but once they do log in we want specific folders to backup automatically to Onedrive. I'm having a hard time figuring this one out. We can do this on our current PC's via a group policy in Intune but I can't find the equivalent in Jamf.

While attemtping to test some changes I made to our ZTP process, I performed erase all content and settings on one of my test Macs, deleted it from Jamf Pro, and then enrolled it through PreStage. Everything worked exactly as it should. The Mac auto-enrolled, got some profiles installed, and all appeared to be good. When the enrollment policy that handles ZTP did not launch, the first thing I did was to look for the Jamf log to see if there were any errors. There was no Jamf log. Next, I checked to make sure that my Mac had indeed successfully enrolled. I saw that the MDM profile along with all the other profiles that this Mac is in scope for were there. I then went to /usr/local and noticed that there was no Jamf binary installed. After 10-11 minutes after enrollment the Jamf binary finally got installed, and the zero touch provisioning process kicked off with an enrollment trigger. I have never seen it take this long for the Jamf binary to get installed. In most cases, the user gets

I am currently running JAMF 10.8.0-t1539715549 and I cannot for the life of me, get any EDU profiles to download to our Macs for teacher use of Apple Classroom. We have been using Apple Classroom with iPads since it was launched and we really want the teachers to be able to use the Mac version. Has anyone had any luck with this? Note, we are manually adding the classes to JAMF and are not using Apple School Manager for the classes. I don't think that should have any effect considering the iPad app works just fine.

Has anyone had luck with setting up background services. Deploy and configure the OneDrive sync app for Mac - SharePoint in Microsoft 365 | Microsoft Learn Does the background services need to be added to the com.microsoft.OneDrive plist? If so it doesnt seem to work.      

Anyone know how to manage Improve Siri & Dictation and Share iCloud Analytics here? Can't seem to find the right plist for them.

We have 12 Patch Reporting smart groups set up using “Less Than” and the version we’re deploying. We deploy to 4 groups on different days: Alpha, Beta, UAT, Wave 1, and Wave 2 (Execs/Traders). One Deployment Day, I update each smart groups by adding the next test group using parentheses and the “or” option. We use AutoPkgr for package downloads but can’t use autopkg jamfuploaders due to DLP restrictions. We currently can’t have apps autoupdate and have to manage the updates on a monthly basis. Modifying the 12 groups takes about 15 minutes to do, but I’m looking for a more efficient solution. This is how our smart groups being setup. Using Chrome as an example. Application Smart GroupsName: Monthly Patching - Google Chrome UpdateCriteria: Patch Reporting Application nameOperator: Less thanValue: The current version we’re deploying. We have to manually change this each month.   Main Smart Group this list all 12 Patch reporting smart groups. Use an open/closed pa

Is there a way to do an inventory search of computers that are currently locked via the Management Commands -> "Lock Computer" option? I don't see it as an available search criteria or display option when creating an advanced computer search.... I'd like to delete a batch of old computers from our JSS, but want to make sure none of them have a computer lock PIN applied before deleting the entries.

Hello, we are currently experiencing issues with our Apple TVs and tvOS 18: connecting to the Apple TV for screen mirroring is not working properly, teachers have to repeat the process multiple times for it to work. We want to be sure that the problem is coming from tvOS 18 and not from our network. Is anyone also encountering this problem?Thank you

I work in a High School where we are currently moving to a full Mac platform for both staff and students.  We are installing Apple TVs in every classroom as well for teachers to wirelessly project more easily.  The issue we are having is students in or out of the classroom will attempt to connect to the Apple TV during class which brings up the pin code.  The teacher is then stuck waiting for the code to time out before they can move on.  Just to note I have require passcode on for every connection to prevent previously connected students form highjacking the Apple TV as well.So I guess my question is, does JAMF Pro provide a way to prevent connections to an Apple TV if it is in use?  We are using JAMF 10.42.1 if that matters.  We are also using 4th gen Apple TVs

Forgive me if this has been posted and I've missed it. I've found similar issues but all were a few years old. I'm on Jamf Pro 10.25.1-t1602899070. We have seemingly lost our ability to name mobile devices. Specifically Apple TV's in this case though when I checked on an iPad that didn't work either. We still have access to the same steps. Inventory Tab - General - Edit - Enforce Mobile Device Name - change name - Save. All of that goes normally, however if we then look at the history tab we don't see the name change command in pending, completed, or failed. It's like it just disappeared. All other management commands are working normally. I've confirmed with my administrator (whom seems to be the only one that still can name them) that none of our team's rights have been changed. We first noticed it after going to the version we are on now but we don't know for sure if that's ultimately related or not. Any ideas?

So I think I have found a bug which affects Jamf Connect Login products from at least 2.29 and above. It seems that when the disable button for the Wifi is used on the Login screen it doesn't actually disable the Wifi.  The icon still shows blue and we have issues with users logging in as we have it set to only fallback to local for users when there is no network connection.  However, this doesn't turn off the Wifi and the user is stuck when attached to open Wifi points that require things like captive portals and such (not pure password logins.).  So if they reboot at some location like an airport or hotel where they have been using the wifi but not authenticated to pass traffic it will just hang and not validate with our IdP nor locally. We would like to keep policy so that when an active Wifi is there but also have the ability for users to turn off wifi completely if they have to authenticate locally. Anyone else seeing this problem too?

Hello,Not sure if anyone is experiencing the same issue as I but I am having inconsistent results when attempting to change a devices name, being the S/N when enrolled, to a more suitable "Room Name" - Inventory > General > Mobile Device Name. The Asset Tag seems to be the only name that sticks consistently. Some ways we have found to force the name change is to manually reset the device (a few times) and or push a remote reset, this option rarely works. However, I would say 70% of the time, neither option works. Just curious if this is a bug or if there is a sure way to have the name change stick. 

Has anyone figured out a way to remotely restart a managed Apple TV regularly or on a schedule?

I'm looking for any whitepapers or guidelines for deploying Apple TVs. I already have MacBook and iPads in my environment. Looking to add Apple TVs. Any information is greatly appreciated.

Have one iPad that is getting a 401 Unauthorized Error when the Return to Service app is opened and tap Reset. 

Is anyone else seeing WiFi profiles reloading this morning in JAMF School?  We have a bunch of devices that seem to have lost their WiFi settings.  This is just a simple WPA2 PSK based profile.  On one device with the issue, in the middle of the night it shows the following in the activity log below.  Reinstalling the managed profile for the WiFi setting fixes the issue, but of course is a pain to do since you have to get them back on a working WiFi. Action: "Refresh profiles list" Status: "NotNow"  Target: "endusers ID" We have seen this happen at least one other time in the last year or so, but I don't recall exactly when.

Dear Team,I have a script to obtain all browsers extensions (Safari, Edge, Chrome and Firefox) the script is running well and I would like to use it as EA. Can any body give a hand? ThanksHere is the output [Warn] This script may not be able to access all user directories unless run as root. Safari Extensions: User: xxx, Name: com.adguard.safari.AdGuard.Extension, Id: TC3Q7MAJXF Chrome Extensions: User: xxx, Profile Name: Person 1, Name: Google Docs Offline, Id: ghbmnnjooekpmoecnnnilnnbdlolhkhi, Version: 1.78.1 Firefox Addons: User: xxx, Profile Name: default-release, Name: AdGuard AdBlocker, Id: adguardadblocker@adguard.com, Description: Unmatched adblock extension against advertising and pop-ups. Blocks ads on Facebook, Youtube and all other websites. Here is the scripts#!/usr/bin/env bash _arg_multilineField=$1 _arg_wysiwygField=$2 # Determines whether or not help text is necessary and routes the output to stderr die() { local _ret="${2:-1}" echo "$1" >&amp

I recently found traffic to dev-account-cdn.jamfnebula.com blocked by my firewall. Can anyone explain the purpose of this URL?  addr.dst in '3.166.192.91 is an AWS IP