I have a script to remove the default apps from the dock but I can't get it to execute when a user logs in. It only works when I run the policy in terminal or from Self Service. The policy is set to trigger at login but doesn't seem to run. Is there an issue with the script or a Jamf policy setting that should be modified? #!/bin/bash# Get currently logged in usercurrentUser=$(scutil <<< "show State:/Users/ConsoleUser" | awk '/Name :/ && ! /loginwindow/ { print $3 }')# Path to dockutil tooldockutilbin="/usr/local/bin/dockutil"# Sleep for 30 secondssleep 30# Remove default Mac apps from the dock/bin/launchctl asuser $(id -u $currentUser) $dockutilbin --remove 'App Store' --restart $loggedInUserPlist/bin/launchctl asuser $(id -u $currentUser) $dockutilbin --remove 'Contacts' --restart $loggedInUserPlist/bin/launchctl asuser $(id -u $currentUser) $dockutilbin --remove 'FaceTime' --restart $loggedInUserPlist/bin/launchctl asuser $(id -u $currentUser) $dockutilbin --re

Hey everyone!Is it possible to restrict creation of more than one user accounts using Jamf Connect or restrict it only to an assign user in Jamf Pro?What I did:Enrolled a device, went through Setup Assistant, created an account with Jamf Connect, logged out and when I accidentally entered credentials of another user in Login Window, another user account was created on a computer alongside the one already existed (and hidden admin account).What is the setting, that I need to change, so that it would not be possible to create another account?

Is there a way to truly lock an iPad in JAMF that disables the end user for putting in their passcode to clear the message sent within the Device>Management>Lock Device?   It seems useless to send a lock device command only to have the end user be able to put in their passcode and ignore the command sent.

The yesterday announced Apple TV 4K has no USB-C connector on the back:Apple TV 4K specs As we have no DEP, we have to use Apple Configurator to enrol the Apple TVs into the JSS. Does anyone know if and how we can enrol the Apple TV 4K without DEP?

We are installing the LG CreatBoard application on all of our new Mac Laptops, and the main installation goes without issues. The issue we are running into is that upon first launching the application, it installs the MAXHubUSB audio drivers and requires admin rights.Has anyone been able to install the audio drivers separately and get the system settings plists updated so the application sees the driver installed?the folder with the plists is /Library/Preferences/Audio/ Thanks for any assistance.....

My company is making a switch from Jamf to a new MDM, and we are in the process of migrating them over. I have been unenrolling the laptops from Jamf first and then usually deleting the profile in the Jamf console. However, I found a few profiles in Jamf that I missed. Despite them being unenrolled on the device for over a week, they are still checking in with Jamf according to the console. How is this possible? How is the device still checking in when JAMF has been removed from the device? 

i am working on setting a specific wallpaper with company logo. I have created the package, policy and configuration profile to push the set wallpaper and lock it. The problem is the jpeg does not fit on the screen and comes out blurry, I messed with it a bit on my computer and see that if I set it to "Fit to Screen" it comes out alright. Is there a setting or easy script that I can push to make sure it sets it to "Fit to Screen on all machines? Thanks 

Hi Jamf Nation,I need some guidance\\assistance as I cannot figure out how to find the settings I am seeking in mobile devices\\configuration profile to remove users ability's to change Software Update\\Automatic Updates settings on an ipad.  I have a configuration profile on mac devices that restrict users users ability's to change Software Update\\Automatic Updates as JAMF manages the settings for the end customer.  

Hi, I'm new to JAMF and work with a MSP.  We are trying to build a package that installs our ConnectWise Control app on our clients Mac computers. So far we have no success in our testing and creating this package with Composer. Has anyone been successful with achieving this?

I am trying to deploy the latest Falcon Sensor for CrowdStrike and keep getting an error message saying the package was not successfully downloaded and an error code # 400. I haven't been able to identify the problem for a month or two now. This has been tested using Intel, M1,M2, and M3 macbooks. Also we are using our default distribution point not the cloud distribution point if that makes a difference. I have this uploaded to our pro server already multiple times haha. When I manually install the package on the device i have no issues. Any advise would be greatly appreciated. Thank you!  

Hi, maybe someone can help. I want to follow JAMF Michael Covington's recommendation to enable the  Stolen Device Protection for iPhoneI searched the documentation and looked at the configuration profiles in JAMF Pro, but so far, I haven't found any description of how to do this. Any tip, link or description is welcome.  Thanks,Andreas 

hello all,Any one help that i can make exception for this . I tried but same T_TGatekeeper Blocked SignedGatekeeper Event DetailsEvent Timestamp05/06/2024 14:49 GMT+7MessageASP: Security policy would not allow process: 2834, /Library/Application Support/JAMF/Remote Assist/jamfRemoteAssistConnectorProcess ID : 2834Path: /Library/Application Support/JAMF/Remote Assist/jamfRemoteAssistConnectorProcess :kernelI tried to made exception but it does not work by install and uninstall jamfremote package   To Uninstallsh "/Library/Application Support/JAMF/Remote Assist/Uninstall"To Install/usr/sbin/installer -pkg "/Library/Application Support/JAMF/Jamf.app/Contents/MacOS/JamfDaemon.app/Contents/Resources/JamfRemoteAssist.pkg" -target /

I am having issues installing Apps from my Self Service Portal.The log is reporting back with this "Error: Package was not successfully downloaded. 403" When I install the pkg on my computer it installs fine. This is what I have notice but I"m not sure where to start troubleshooting.I copy the working pkg to my Jamf Admin and the replicate to my Jamf Cloud and it was able to replicate. Test in Self Service I get the error message. I go back into Jamf Admin and I replicate without adding or removing any files and it starts to replicate the previous file again. Thanks in advance!

I work at a university, which means we try to keep the same configuration throughout the academic year, which in turn means that I mostly don't use JAMF for about 9 months and then have a really crazy 3 months to prepare next year's configuration. Quite often, during those 9 fallow months, big changes happen. This time it's especially bad because we have also migrated to a cloud instance, which seems to have brought a number of changes along with it.The thing I'm struggling with is that the Composer interface seems to have changed in such a way that it's completely useless now. But it must be just me, because I don't see anybody else posting about it.Now, when I do a snapshot, instead of showing the files that it found in the main pane, in an expandable tree, I have to expand the snapshot itself in the left pane, and then Files – or at least I can find a list of what it found anywhere else but here. But that doesn't seem to be the right thing either; it's just a list of items that I ca

I’ve been asked by our support teams to see if there’s a way to automatically drop devices that haven’t checked in with Jamf within a certain timeframe (I.e. 30-90 days). In Config Manager on the Windows side, we have it set to 14 days. However, if we were to even set the device to unmanaged to drop out of Smart Computer Groups, when the device comes back online, it would have to be re-enrolled again.This is mainly an issue with things like security patches and zero-day vulnerabilities where it may show 100 devices out of compliance, yet 20 of those haven’t been online in 90+ days. So after pushing a patch via a policy, we still show 20 out of compliance and 2nd level has to engage the customers to see what the status of those devices is.How are you dealing with stale Macs and if/when they do come back online if the device is either unmanaged or the record is removed completely?

Good Morning So we have been using a .csv inventory preload with a script since we set up jamf a number of years ago, all of a sudden it is no longer renaming the computers properly. It is used to rename the machine to the asset tag, the asset tag shows up correctly in the jamf inventory if i do a search but it just will not rename. When the policy runs it says its completed, so i don't even have an error to research. I have no idea what has changed. I have checked the account username/password, tried deleting data from the preload and re-uploading a new sheet. What am i missing here Here is the script we are using. #!/bin/bash ## Enter the API Username, API Password and JSS URL hereapiuser="account"apipass="password"jssURL="https://quinnipiac.jamfcloud.com" ## Get the Mac's UUID stringUUID=$(ioreg -rd1 -c IOPlatformExpertDevice | awk -F'"' '/IOPlatformUUID/{print $4}') ## Pull the Asset Tag by accessing the computer records "general" subsectionAsset_Tag=$(curl -H "Accept: text/xml" -s

Has anyone been able to get mice to have right-click enabled by default? We are running lab machines with new users logging in all the time and would prefer they not have to enable that for themselves each time. I have seen (and tried) various solutions here on Jamf (scripts run in a policy) but have not been able to get it to work. I am interested if anyone has had any success?We use Logitech Mice in most of our classrooms, since the apple studio doesn't come with mice/keyboards and most of our users prefer them over the apple mouse anyway.

Hi All,Is there a way to disable Apple Music on macOS.Tried a restriction profile using the com.apple.applicationaccess - false for allowMusicService.Also tried using Restricted Software, this takes too long and can take up to 1min to kick in. And it doesn't close the application or terminate the process.Would it even be possible to delete the application as its in the /System?Any ideas?TIASimon

We use the Patch Management reporting in Jamf Pro to keep track of versioning for a lot of applications that use auto updates. However, since we moved some of our devices to the Chrome Beta/Extended Update Channel, we noticed that those versions show up as "Unknown" in the Google Chrome Patch Report.  Does Jamf have a way to keep track of these versions in patch management? or would I need to put in a Feature Request for that?

Every time I change an erroneous computer name on Jamf through "Search Inventory" the name eventually reverts back to "David's MacBook Pro" or something. Any ideas why this might be happening?

HI,I am having trouble deploying the Papercut Print Deploy Client.The two queues work fine. When I try to reach the correct port via the browser I get the hot green coffee.I followed the instructions from Papercut however my OS Version is Sonoma which doesn't have Managed Preferences so I unsure then how the plist you create is supposed to work.I tried to override the Server_Host value but adding it in Enabling and Print deploy and then putting in the FQDN of the server.I am getting This is Akward from the Print Deploy app on the Macs as they can't find their way back to the server.Does anyone has any suggestions to get around this issue please? Thank you in advance.

We are using Jamf pro, Jamf connect and Microsoft intune.We start facing a issue when user password expire and need to change password.Any specific thing I need to set in 365 ?ThanksEC

I've taken up to Jamf 300 and the training course resources used to be available here:https://docs.jamf.com/education-services/resources/Anyone know if the link has changed or if the materials are no longer publicly available?Thanks!

Is there a way to prompt users to allow Location Services after the Return to Service app runs? I don't see how the average user could be directed to go and set Location Services. I understand Apple still does not allow it to be set by default. Thanks for your thoughts.

Getting the notification that the Push Proxy Cert is expired. Been getting this for the last 2 weeks since the update to Jamf Pro Cloud Version11.4.2-t1713554080Went into Global > Push Certificates, clicked on Push Proxy Settings, clicked renew, and am watching the endless spinning.Logged into Jamf to make sure the account used to make the cert is correctDeleted the cert and re-added it with a fresh date, then next day got the alert againVerified connection in the Global > Cloud Services connection, updated credentials as wellAt a loss here how to fix this.