I wanted to monitor if our Macs are doing their Microsoft Defender Full and Quick Scans  properly in Jamf.As I couldn't find any solution out-of-the-box I came up with a custom script, in case anybody got the same need.The problem I faced, was that the Mac only saves the state of the last 7 scans (Quick and Full Scans are combined). So let's say you schedule your Quick Scans once per day and your full scans once per week and the user is on vacation only on the "Full-Scan-Day", you have no chance to see, if a full scan never ran or just the week before, but was overwritten by Quick Scans.That's why I came up with two different timestamps for the full scans, that one timestamp will always be in Jamf, to see when the last full scan ran, the second one might not really be needed, as it only checks the Full Scan within the last 7 scans.The script might be a bit fragile as it relies on Microsoft to keep the same format for the "mdatp scan list" c

I am seeking help with a project. I have created a package within Adobe that I want to push to a Smart group.This package contains approved versions of specific Adobe software. I also need to downgrade the software it it exceeds the version.Any help will be appreciated. 

It's extremely annoying that Jamf have decided to prevent Jamf Pro cloud instances from being upgraded before 14th September to v11.9.0, after already bumping v11.8.0 of Jamf Pro.It does not seem fair that we are still waiting for key features to be made available in Jamf Pro, which should have already been released months ago.Why Jamf are you making life so difficult with getting new key new features made available to Jamf Pro customers?

Hey all, Anybody managed to install Elastic agent via jamf pro? during the installation process, it asks whether I want to instal it in /Library/agent and I have yes/no options That is pausing the installation process and I need away to auto answer with yes !Thoughts?

Hello,I am trying to copy and paste this script https://github.com/Macjutsu/super/blob/5.0.0-beta2/super in to Jamf. It is close to 10,000 lines. When I copy and past short snippets of the script, Jamf allows me to save it, no problem. However, if I try to copy and paste the whole thing, I get a 403 error saying to contact my IT Administrator, which that is me. :) I don't have an issue copying and pasting other, smaller scripts. Is there a limit to how many lines you can paste and save at one time?Thank you ahead of time for your advice.

We are a school housed on a church campus which means there is often foot traffic in our rooms outside of school hours for church activities. We have our wifi ssids and the church has theirs, not tumultuous - we just have different needs to accommodate. We largely don't have an issue allowing the use of our technology, but recently noticed our Apple TVs connecting to the church's guest network. We obviously want to keep our devices on our network.Is it possible in Jamf School to restrict the ability to change Wi-Fi networks on TVos? 

what are you guys/gals doing with the 'secure token' popup ? I don't have FV2 enabled and AD users are getting the popup, so we have them select 'bypass'. i created a configuration profile, using the custom settings payload i added this .plist file (com.apple.MCX as preference domain) <?xml version="1.0" encoding="UTF-8"?><!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"><plist version="1.0"><dict> <key>cachedaccounts.askForSecureTokenAuthBypass</key> <true/></dict></plist>

Hello,I installed the sccm plugin for jamf, but I have a problem. I have the synchronization which is carried out but the data does not appear in sccm.I looked in the logs of the plugin but I have no error, the xml files are well created.Have you encountered this problem before ? Regards

We deployed the new cisco secure client last week along with the new configuration profile. The profile installed on 341 devices and is pending on 54 devices. I spot checked some of the devices and they're online and checking in correctly, but the profile isn't installing and causing issues when trying to use the VPN. Any ideas other then restarting. These Mac's are currently running Sonoma.

Reading Jamf documentation on this is kind of confusing . During prestage enrollment for computers is activation lock automatically enabled?  There is in option in the device prestage for a ios/ipad devices that allows you to turn this on, but for computers that option is not there but the jamf documentation seems to hint that its automatic for Macs? Also to check the status of actitation lock on the mac documentation is confusing. It says the Activation Lock status is displayed in the device's inventory information with a value of "Enabled" or "Not enabled". The device's status will show as "Not enabled" if Activation Lock was configured for the device in Apple Business Manager or Apple School Manager during enrollment. I'm asking this because I'm noticing Macs in apple school manger are showing as activation locked off even though we enroll our Macs through a prestage, Maybe I'm just confused and the Not enabl

I see references to a Shared iPad setting for default domain that would help speed up logins for kids. Apparently it was in iOS 16?Is this functionality included in Jamf? I can't seem to find it anywhere.https://support.apple.com/en-is/HT213470https://www.jamf.com/blog/what-os-16-means-for-education/ https://developer.apple.com/documentation/devicemanagement/settingscommand/command/settings/shareddeviceconfiguration  

Hello Jamf Nation! The Jamf Pro 11.8.0 Beta Release features a number of exciting improvements and enhancements for managing your Apple devices. Starting with 11.8.0, Jamf Pro admins will be able to set a minimum OS for MacBooks, iPhones, and iPads through prestage enrollment. Intune Platform Single Sign-on is now supported, alleviating end-user password fatigue. New Configuration Profile keys are introduced for MAC address randomization on macOS, Lockdown Mode, and more. How to join the beta: Enroll in the Beta Program under Product Feedback at account.jamf.com. Once you enroll you'll receive an invitation to join the Beta Forum, click "Join this group Hub" to gain access. Email 

Hey all,I'm attempting to use the JAMF Pro API to wipe a computer via MDM. I'm using the "Try it out" feature in the API page on our Jamf Pro instance, to make sure I'm not missing anything.Here's the request: curl -X 'POST' \\ 'https://[OUR JAMF INSTANCE]:8443/api/v2/mdm/commands' \\ -H 'accept: application/json' \\ -H 'Authorization: Bearer [TOKEN REMOVED]' \\ -H 'Content-Type: application/json' \\ -d '{ "clientData": [ { "managementId": "74EDC9D1-FB3F-5E28-BA0F-3E71E88FB00E" } ], "commandData": { "commandType": "ERASE_DEVICE", "pin": "123456" } }' And the response: { "httpStatus": 500, "errors": [ { "code": "SYSTEM_EXCEPTION", "description": "Unable to perform MDM operation", "id": "0", "field": null } ] } This is strange. We're able to wipe a device just fine using the "Wipe Computer" button on the com

Today we are releasing Jamf Pro 11.9. Highlights include: Compatibility with Apple Operating SystemsCompatibility and new feature support are based on testing with the latest Apple beta releases of macOS Sequoia 15, iOS 18, iPadOS 18, tvOS 18, visionOS 2, and watchOS 11. Minimum OS EnforcementWhen you enroll computers and mobile devices with Jamf Pro via Automated Device Enrollment, you can use a PreStage enrollment to specify a minimum operating system version the device must have before continuing enrollment. When a device does not have the operating system you specified in Jamf Pro, the user is prompted to update the device before Setup Assistant continues. This feature enhances your organization's security by ensuring devices have the required operating system version the moment they are enrolled. Automated Device Enrollment f

We are having issues where Secure Token is not being assigned to the first user who logs in. (I THINK this started in mid-July, but am no 100% sure)   In fact, according to an extension attribute we use to see who has Secure Token, no one has Secure Token on the Macs in question.  This has caused endless issues including  being unable to install macOS updates.  This appears to be happening only on our faculty/staff machines, which are Filevault enabled.  It does not appear to happen on our lab machines, with do not have Filevault enabled.  I can't think of any changes we made in mid-July that would cause this issue.  Our Macs are bound to Active Directory (yes, I know, that's not recommended, but due to security software we use such as Admin by Request, we must do so.)  The end user is the first person to log into the Mac.  Our users are not admins on their machines, but can get admin privileges temporarily using Adm

I hope everyone is doing well! I've been working in the IT help desk domain since 2020. I'd like to switch to endpoint management or JAMF Admin, and I intend to enroll JAMF 200 by the end of next month. However, before I do that, I need some Clarification on the following points.1. What information is required of me previous to the course?2. Will there be lab access? If so, for how long?3. Will study materials be distributed?4.Will the video recording be shared?Kindly let me know if there is anything else I should know.Thankyou all.

Any one know why this is restricted to JAMF cloud? With DDM and macOS14+ I can't see how JAMF cloud would be needed at all

I received notice that my SSO cert is expiring in a few weeks and I can not find anything on what the process is to update it. I talked to the person that runs our AD side and he doesn't remember ever doing this so he wasn't sure if this autoupdates automatically. Any advice on where to start would be much appreciated! Thanks! 

I have a problem with a few users (SVP's) who are getting the error message when checking to see if chrome is updated. They go to about chrome and the error shows below.  We have uninstalled chrome multiple times, I've tried looking up this error message no info found on it, I've put in support tickets unfortunately nothing has worked, I've manually pushed out chrome via a policy and the error still appears I'm now doing the Mac apps the device is up to date but this error message still appears, even when the user was 5 versions behind last year this message appeared.  HELP!!     

There's an ongoing bug with composer that is hit or miss between composer versions 11.3.0 to 11.5.0 where the file/folder view portion of composer doesn't actually show any of the files/folders of your source or package. Its there if you kind of know where the folders would be if you just randomly click around the screen but everything in that section is like hidden. I'm tried this version of composer on two separate machines (M2 and intel chip) with the issue. Some of the threads of those with the same issue said Composer 11.4.0 appears to be the most stable working. Only Composer 11.5.0 is available for me to download through my profile. Does anyone have the Composter 11.4.0 or an older version installer package for me to use? 

Hello everyone,  IDK if anyone is using the great add on to Macs, but if you are can you help me get 4 Tiles to work?  Tile #1 - Submit a Service Desk Ticket - the link is mailto:#servicedesk@mycompany.com. Nothing happens.  Tile #2 - Battery - can't get it to display the battery level. Tile #3 - Storage - can't get the amount of storage to display.  Tile #4 - Privacy and Security - can't figure put how to open this one. We want end users to be able to open Privacy & Security directly without going through SystemSettings>Privacy and Security.  Other than that, it is a great addition to our JAMF program. If you haven't tried it - check it out.  https://github.com/root3nl/SupportApp JNUC 2021 release with training: https://www.youtube.com/watch?v=LijCmR

 Here is the translation:Hi!We are currently setting up several hundred Macs, and we are experiencing that more and more of them are having issues downloading applications.Inside the managed apps list on the devices, we see the error "Duplicate request," and in the activity log on the device, the error "connection to service with pid 1706 named com.apple.appstored.xpc" also appears.I also notice that all the apps, at least at one of the locations (I haven't checked them all), are marked with the yellow tag "shared app."Any tips on how we can get all the apps through? It's starting to wear on the users.

For thoese managing lab enviroments. We have screen saver set for when users are logged in. Does anyone know a way to set this at the login screen I have seen few threads on here but havent been able to get anything working.   Feels like another thing Apple dont want you to mess with, from reading around there seems to be some changes in Sonoma how the screensaver is handled. Thanks

Hello,I would like to set up "destroyfvkeyonstandby" so that I can continue to use the touch id. because when I close the hood of my mac after 30 seconds when I open the hood again it starts by displaying the logo of the apple then he asks me for my password without the possibility to use touch id.Thanks in advance

I think I know the answer already but I figured I would try asking anyways...On an iPad under Settings > Safari there is an option called Block Pop-ups which appears to be enabled by default. Is there a way with Jamf Pro to be able to disable it? I know there is an option in a configuration profile to "Allow Pop-ups" but this is just to control whether users are able to manually enable or disable the Pop-ups setting. I've tried Googling this question and everything points to it not being able to be controlled, I just figured I would ask to see if anything has changed with newer versions of iPadOS over the years.Thanks in advance.