Is there any application that can be used for the iPad and Macbooks to record the screen as it goes through ADE? I want to be able to use this for training purposes for our staff and IT department to make how-to. I have a bezel but it doesn't allow the ability to record the enrollment screen when enrolling a new device through our prestage. 

Can anyone explain why do some computers in Jamf drops the minor Operating System Version.ie.  If I have two M3 computers with macOS 14.7.0 build (23H124)One show in Jamf as 14.7 and the other shows as 14.7.0 We have seen this for many minor releases and help in fixing this anomaly would be appreciated as it messes up our reporting. 

Hi All,   Has anyone got the script enable the migrating local account with cloud identify (Azure), Pleas see link for more information:  https://learn.jamf.com/en-US/bundle/jamf-connect-documentation-current/page/Existing_Local_Account_Migrations.html Kind Regards

 Hi Jamf Nation, Is there a remote lock script that someone can recommend for a Mac in Jamf Pro that not managed? (Can only be deploy by Jamf Pro)Also is there a script to turn Mac's from unmanaged to Managed in Jamf Pro? Thanks in Advance Nation!

Hey. Im trying to upgrade GoodNotes for Institutions into GoodNotes for Business. There is only an instruction how to install a license key for iPad/iPhone (https://support.goodnotes.com/hc/en-us/articles/7568710302607-Installing-Goodnotes-for-Business-Enterprise-via-Jamf-Pro?source=search&auth_token=eyJhbGciOiJIUzI1NiJ9.eyJhY2NvdW50X2lkIjoyNTM0NzUsInVzZXJfaWQiOjc3MDkxMDA4MjcwMjMsInRpY2tldF9pZCI6MjMzMjk5LCJjaGFubmVsX2lkIjo2MywidHlwZSI6IlNFQVJDSCIsImV4cCI6MTY5NTIyMjU1OX0.MN6d_0tdipaCu0_cJb_fbyPYt1kHRPpY9l69iLvegXo). Does someone know how I can install a license on MacBook via JamfPro? 

so a s test with my lab systems i tried to re-enroll it to my admin account in JAMF to see if we can just hand over a system with out a re-images  and now it's hung trying to install the JAMF profile will not let me delete the old one or over ride it. how should i have done this.It seem to cause other problem the systems show up in inventory but not when i try to add it to a policy.Any uninstall scripted that i should have used  or is re-image the only option?     

HI, we need to package Avaya Agent with specify config.xml that has the necessary settings. The Config.xml will need to be placed into User/username/ Library/Preferences/Avaya-Agent/ folder which only gets created after the app is opened the first time after installation. Has anyone had the same scenario and found a workaround / solution. Placing files into an user profile could be done with a postflight script but the folder does not exist yet and has a lot more then just that config.xml that is being created. Thanks in advance

Hello, I need to figure out how to run a policy to check screen saver time settings so we can force a set time if it doesn't match. I'd assume that you could check against a value in the "~/Library/Preferences/com.apple.screensaver.plist" but not sure. Any ideas? I see a lot of older posts floating around about forcing a screen saver time in various ways. I need to check the time first before doing that. Thanks!

HiWe are facing an issue where ex-employees have signed in with personal accounts on icloud on corporate devices. Its been a pain while re-purposing the device where find my mac cannot be removed . I know we can restrict signing in to personal accounds via configuration policy but management dont want to take that route at this point of time . 1. is there a way other than contacting apple support to remove find my mac from the computer while wiping it ?2. if we enable activation lock , will that help to erase or disable find my mac for users  Any help would be appreciated, Thanks,

Our staff now has the error message " This provider is unavailable due to a device management profile" If we disable defender then they get access again. I cannot find any setting in the profiles that would be blocking OneDrive.

We have one VPP account hooked into our jamf pro cloud install. We did originally have an additional site set up which would create an global entry and an additional entry for the second site, but that was an inherited mistake which was since fixed. A couple of weeks ago I went through and started removing old apps or apps with no scope. Once there were fewer entries, I noticed that every time I added a new app to the Mobile Device Apps list, it would create an extra duplicate entry with the default options. We normally only do auto-install, but there's always a duplicate entry for the same app set to Make Available in Self Service with no scope. Why is this happening and how can I fix it?

Hey, We need to upload the personal recovery key from jamf to snipe using the jamf2snipe script. Any idea where i can find the subset to this? Thank you!

Hey Jamf Nation!Do you need to create a custom MacOS Dock for your users?I created a guide for the Jamf community, complete with scripts and packages, to help you do that.After struggling to find a current, working solution I decided to build one myself. Since it took some time to make, I thought I'd share it with others that are looking to do the same thing. Hope it's helpful!GitHub Repo with Full Guide Here: https://github.com/bluemoosegoose/Build-a-Custom-MacOS-Dock Some info about it:This Guide allows you to craft a custom MacOS dock for your environment, written specifically for Jamf Pro Admins.Verified working on Monterey 12.3.1 and should be backwards compatible.The custom dock will be built once, on first login, for any user that logs in to the Mac.After the dock has been built once, it will not run again automatically, which is the intended behavior because we want our users to have our custom dock during onboarding and then give them the ability to make ch

Hi everyone, I have a question about removing a device from inventory preload. for example, there are 10 devices in preload. I selected one of them and click delete it, will this action will delete the rest of 9 devices? just wanted to make sure the action only remove the devices I selectedBest Regards

I’m currently developing a remediation policy for Self Service that triggers the uninstall and reinstall of a profile. While I can successfully remove and reinstall the profile, I need a verification step to check if the profile was reinstalled. I'm using the following command:bashprofiles show -o stdout | grep "ProfileDisplayName = "$profileName"" | /usr/bin/awk '{print $3}' | sed 's/[[:punct:]]//g'This works perfectly for single-word profile names, like "Zoom," but fails with multi-word names, such as "Zoom Profile," resulting in "no such file or directory." I’ve tried enclosing the profile name in both single and double quotes, and using "${profileName}", but nothing seems to work.Could anyone suggest how to modify the command so it successfully handles profile names with more than one word? Here’s the function I created for verification:bashfunction checkInstall() {installed=$(profiles show -o stdout | grep "ProfileDisplayName = "$profileName"" | /usr/bin/awk '{print $3}' | sed 's/

Hi, as was suggested to me, I'm trying to use a hybrid solution to take advantage of App Installers with regards to the management of updates, and the installomator policies for initial provisioning, as Mac Apps have an important delay for installations when executed in Self Service.However, I have a simple but annoying issue in the Store, as in the "All" category, I see both installation options, even if I clearly deactivated all the Self Service Categories on Mac Apps Self Service tab. How can I handle this? The "All" category doesn't seem to be removable, so I ask those who make these two options coexist how they handle this annoying redundancy on self service.

Hello Team, I reenrolled few macs in Jamf using by user initiated enrollment and mail invitation to end users but before going to re-enroll l those macs I never deleted their devices entry from Jamf console, I just ran "sudo jamf removeframework" on those macs and did clear all existing profiles and then did hit the URL of Jamf and followed by /enroll and provided by credential and downloaded CA certificate and MDM profile and installed those two. I can see all applicable configuration profiles are deployed but device are not speaking to Jamf console, if I run the command "sudo jamf recon" then it is saying command not found. What is the solution here I dont want to reenroll those macs back again to Jamf.

Hi Community,I am just sharing here another way of deploying silently a new Desktop Background to Mac computers without using Script install, Desktoppr or a Configuration Profile. This workflow is compatible from Catalina to Monterey Beta.Place your_image.png into /Users/SharedOpen Automator app on macOS Big SurCreate New application projectChoose in Library 'Get Specified Finder Items" and select your_image.png (located in /Users/Shared)Add "Set Desktop Picture" in Automator libraryExport your Automator project > Save (ideally sign it) into /Users/SharedOpen Composer appDrag and Drop your Automator.app in it (from /Users/Shared)Add from Users/Shared folder in Composer your_image.pngSelect Script and Post-InstallCopy paste this simple script belowBuild and sign your packageCreate your Jamf Policy to deploy it  #!/bin/bash open /Users/Shared/Your_Automator.app sleep 10 rm -R /Users/Shared/Your_Automator.app rm -rf /Users/Shared/Your_Image.png  

When I run the application on the iPad, it will wipe and reconfigure itself fine with all of the applications but does not retain the name or the username/email. How do I get the username/email and the device name to stay the same on enrollment?Ex. Name: iPad 1username: name@yourcompany.comWhen it wipes, the information above will be removed from Jamf Pro. How can I make it stay? 

Hello fellow Jamf Admins,I have a request in from our InfoSec team to disable the data collection features within Firefox. I have tried pushed config profiles with custom settings to turn them off. Here's the output:<key>DataCollection</key><dict><key>Experimentation</key><false/><key>HealthReport</key><false/><key>Submission</key><false/><key>Telemetry</key><false/></dict> Firefox is not changing the settings though. It seems to not care about the plist at all. Has anyone run into an issue like this and if so, how did you get Firefox to behave? Thanks in advance!

Is it just me or is this forced update feature not working for you too? NothIs it just my system or is this not working for you too? Updates do not get forced and we are all on Sonoma.  

Hello,I have extensive experience with Jamf Pro but one area I've never touched is the API. But now with the release of Return to Service (via the API) I want to at the very least script something so that I can use this feature to eliminate some of the tedious work.I work at a school and as such have hundreds of devices to erase every school year and its very time consuming to manually enter Wifi credentials on all of them after wiping to re-enroll with Jamf Pro. Can someone help me with a script that will automate this process using the Return to Service API??? It would be much appreciated. Thanks!

We have had the Darktrace cSensor running on our macs for months. I am currently tasked with creating a report that pulls in all machines with DT sensor and its running. I found a script that I could use with extension attributes to report that the sensor is installed and running, but it does not pull any data once it's set up as the exention attribute. I can run this script in a local bash environment on my mac and it seems to report that sensor is running on my mac. #!/bin/bash# check for processPROCESS=$( pgrep Darktrace\\ cSensor )#see if process is runningif [[ -z "$PROCESS" ]]; thenRESULT="Not Running"elseRESULT="Running"fi#report resultsecho "<result>${RESULT}</result>"

Hi all, we're looking into managed Wi-Fi network settings for our MacOS 15 devices when users begin upgrading (deferred for the full 90 days), but within the network payload settings or the restrictions settings there is no way to disallow the users ability to change the private IP address back to fixed or rotating. The "Disable MAC Address Randomization" works when we deploy a network to machines, but users can still just go into settings and enable this. Any ideas or have I just missed a simple setting somewhere? This is early days and we still have until December before our users start upgrading.

Cannot find this answer anywhere. We currently have Jamf Safe Internet but prior to that we utilized the content filter in Jamf Pro via configuration profile. When we implemented JSI I was never told I had needed to, or if was recommended to, disable the JAMF Pro content filter. So now when I am making changes to the allow/block list I am not sure if one is interfering with the other. What is best practice?