Since Sequoia will be prompting users to review their screen recording settings monthly, I was wondering if it was possible to create a Smart Group that displays which apps in the Screen & System Audio Recording are either enabled or not enabled. Ideally, I'd be able to query by app name (Teams, Chrome, Zoom, etc).My goal is to regularly prompt users to turn this setting on for the app(s) it is not enabled for.Thanks,Michael

We are in the process of migrating a jamf instance from a company that we are splitting from into our very own jamf instance.I have a lot of configuration profiles so far that are all "uncategorized" and I have gone through a few of them one by one to move to our temporary categories but would love to know if there was a way to assign them in batches so I don't sit here for the next 20-30 minutes doing them one at a time if I don't have.If there isn't a way to do this then that is fine, I'll just click them each and do what I've been doing. Thanks!

Hey guys! So today we came across an interesting issue with a few iPads. It seems that if someone goes to Safari and clicks on a page to create a bookmark and then saves it to the home screen, you cannot go and remove the bookmark. These particular iPads do NOT have a home screen layout profile setup and while they do have Restrictions payload, we tried allowing permission to remove both user and System apps and neither options allowed removal. Anyone know if there is an option someone else I could be missing? I looked over every single checkbox in the Restrictions payload and the only others in effect are Passcode and Lock Screen so those should not be conflicting. Any help or advice would be much appreciated!Alex

We have an app that is set to automatically install on all our managed iPads (i.c. Google Docs). Some functionality is only available in the web version, but access to the web version is limited because the browser's default behaviour is to redirect you to the app.A workaround is: uninstall the app, until you need it again. But although I can uncheck the box 'prevent users from removing the app' and disable 'reinstall this app when it's removed by the user', I need a way to make it reinstallable via the Student/Teacher apps (in My resources).I tried to make a second group of iPads, containing the same set as the first one, so that every iPad has both the 'automatic installation' and the 'on demand installation'. But the app doesn't show up in the list. Is this workaround not possible, or am I overlooking something?

Hey guys,I've been working on a computer lab and I have some time to troubleshoot. I had to upgrade the lab from Ventura and 2022 Adobe apps to Sonoma and Adobe 2024 apps.Previously for the Adobe 2022 apps I would run them though Composer and I had no problem pushing them out and they would install successfully on my lab computers.However, this time round the installations fail about 90% of the time, a few would work but most of the time they would fail. I have Photoshop, Illustrator, Acrobat, etc and package them individually.I came across this: https://community.jamf.com/t5/jamf-pro/adobe-product-package-fails-to-install/m-p/301627I was going to try that when I also read to check the \\var\\log\\install.logI had it open when I was using Composer to create a new snap shot and I could see a bunch of failed messages. Mostly saying Install failed: The Installer encountered an error that caused the installation to fail. Contact the software manufacturer for assistance. Then when the Insta

Hi, i am trying to script the final step in our onboarding process, where the user is presented with a list of Locations to chose, and once selected, the script will pull the serial number and rename the machine the location-serialnumberI'm 90% sure I have it right but i am getting echo errors when testing in CodeRunner... and i'd appreciate some extra eyes / advice....  #!/bin/bash #/usr/local/bin/dialog # Pull device serial number for lookup serialNumber=$(ioreg -c IOPlatformExpertDevice -d 2 | awk -F\\" '/IOPlatformSerialNumber/{print $(NF-1)}') nserialNumber=${serialNumber} #Specify variables for swiftDialog dialogInstalled="/usr/local/bin/dialog" downloadDialog="https://github.com/swiftDialog/swiftDialog/releases/download/v2.5.1/dialog-2.5.1-4775.pkg" pathToDownload="/usr/local/dialog" pathToPackage="/usr/local/dialog/dialog-2.5.1-4775.pkg" #Check if swiftDialog is installed if [ -e "$dialogInstalled" ];then   echo "Dialog Is installed" else   echo "Dialog is no

Hello everyone not really a reach out for help but more informational.Our company ticketing system has been getting a lot of reports once upgrading to 14.6 & 14.6.1 that their macs are slow to lock and their touchid no longer work or theres a huge delay. I myself upgraded and was affected.Reading through some apple forums someone identified that the issue was with a configuration profile that sets the local device password policy. It uses the com.apple.mobiledevice.passwordpolicy payload type.I went looking into our jamf instance and found a password policy configuration group and unscope my machine from it. I then locked my mac and both lock and touchid were back to instantly working. I rescoped the same policy back to my mac and boom delays again.This is where things get complicated for our environment, we have conditional access policies set by intune that our macs register to for access to certain apps. Those conditional access policies are tied to our jamf  password

Our Company utilizes JAMF Pro and JAMF Connect for MDM Management, Up until recently, we have always had local accounts created manually during prestage - then sign out and sign in with the users Azure Credentials - connect the local account and then merge the passwords so the local account and network account have the same credentials through JAMF Connect.We want to streamline this process and switch over to a Full Zero Touch Deployment - Currently we do have some minimal connection on the JAMF Pro side using LDAP Credentials/Directory services, so we can have admins login with their LDAP Creds and then techs can manually assign Location and User data by searching LDAP. We do not have an LDAP server connected and again, SSO is not setup yet. Part of that process I know we can setup SSO and use it in an enrollment customization then pass it through to Jamf connect during that process so the user can authenticate with their company account, it will generate the local acco

We have been using Jamf Setup with Entra SSO for a year now. Since the begining one of the first steps required is to log into Microsoft authenticator and register the device to the tenant using an account with cloud device administrator access. At JNUC I asked one of the sessions and they thought that requirement has been removed. I look at the documentation but I am not seeing any configuration changes but any device we setup still requires that step. Can anyone point to what I need to change to no longer require that registration step?

Hi guys,New to the Mac OS world, was an AD Engineer for 10+ years working in powershell.How are you guys going about deploying your vpn configuration files when installing your vpn?My org is using Aviatrix, I want to create a script to deploy the custom configuration file and name the profile after it's creation.

I'm wondering if I can default Jamf Connect Login to show the local logins first instead of the network sign-in.Our network (call it NET-RAD) currently uses RADIUS, which we knew, so we'd planned to use our WPA2 network (call it NET-DEV) for Connect Login.A logged in user needs to be on NET-RAD, and even though the password for NET-DEV is saved on the device, Connect Login always asks for the password to NET-DEV.Since we don't share the NET-DEV password with users (it's pushed out via config profile) they end up with no network access on Connect Login and unable to fix it themselves without some sort of hotspot.I understand this is expected due to how Connect Login handles network credentials, but I'm wondering if there's a way I can default Connect Login to the local login page, as opposed to the network login page, at least until we can get Clearpass in place and figure out a better way to do our network for Connect Login. That, or if someone has better ideas.

Hello Everyone,We’re expanding our student loaner program to include Mac laptops. Each semester, students will check out these laptops for their coursework, and at the end of the term, the devices are returned to be reset and reissued.Here are the key issues we’re facing:Active Directory Binding: All devices must be bound to AD, and there’s no workaround at the moment. We’re looking into Jamf Connect or an alternative, but those options won’t be ready in the near future.Data Removal: We need a reliable way to remove user data at the end of each loan period.External Resetting: The entity handling the checkout process (not internal IT) will need to complete the reset. This means the "Wipe" command isn't viable since we can't ensure consistent internet access or the ability to follow a complex process.We currently have a Self Service item that successfully removes user profiles. It works great for us. However, the biggest challenge is managing applications. We need to find a way to remove

Hi guys,I recently used this video: https://www.youtube.com/watch?v=UtdPLbpREtM to erase a computer lab of MBAs to go from Catalina to Monterey. It worked great.Now I have two more computer labs that I need to do from Monterey to Sonoma. These MBAs are M1s, the others were Intels.I got the first part to work where it downloads Sonoma, but I can't get it to install. I have it set to install through Self Service but no dice. To see the errors I ran it through Terminal. I get the error: Could not find the provided own on this systemI've edited the Execute Command in the Files and Processes from when I used it for the first lab. (see screenshot below). But it doesn't want to work for me.Any help is appreciated. Thanks!

Hi jamf-types, I have been out of the jam loop for a few years, as the company I'm was in used a different product .Now I am looking to pitch jams at a new company... but I don't have access to all the data I used to have. Can anyone point me to a complete list of all the API calls that can be used in jamf? 

Hello Jamf Nation! To ensure on-time release of Jamf Pro 11.9.0, which will support Apple’s operating system releases this fall, we’ve made the decision to move the Jamf Pro 11.8.0 release content to Jamf Pro 11.9.0. This means there will be no Jamf Pro 11.8.0 release and you can expect these improvements and fixes to be included in Jamf Pro 11.9.0. The Jamf Pro 11.9.0 Beta Release features the exciting improvements and enhancements for managing your Apple devices found in 11.8.0 and a few new ones. Starting with 11.9.0, Jamf Pro admins will be able to set a minimum OS for MacBooks, iPhones, and iPads through prestage enrollment. Apple Vision Pros can now be enrolled in Jamf Pro through Automated Device Enrollment. New Configuration Profile keys are introduced for MAC address randomization on macOS, Lockdown Mode, and more. How to join the beta: Enroll in the Beta Program under Product Feedback at account.jamf.com. Once you enroll you'll receive an invitation to join the Beta Foru

Hi All,We have a problem on one MAC with JamF connect and logging out, but only logging out. The Connect screen loads when the MAC boots up and when restarted but if after a user logs in and then just logs out instead of restarting the MAC goes back to its normal local login screen!I have tried all the normal commands to try and reset JamF connect, sudo jamf recon/sudo jamf policy/sudo jamf update, but none have worked.Would anyone have any idea on how to resolve, the other 20 Macs work fine!ThanksDuncan

Only works under Catalina. Why is Apple making it so difficult to automate OS replacement/updates?

Is it possible to pass parameters for a script through the jamf policy -trigger command? For example, if I wanted to pass an end user's  email into a script that is being run in the policy I am calling can you enter sudo jamf policy -trigger <policyname> <user@email.com>? 

I'm trying to remove the old version of the Webex app and reinstall the latest version using a policy. Could someone please guide me without the patch update.Thanks in advance.

The latest version of Adobe Premiere version 24.6.1 through JAMF App installers is corrupt. On several of our machines we are getting an error(The file was downloaded on unknown date) with the package and have to control click and open to allow the app to launch. Is there a fix?

Evening, Does anyone else manage a lab with Pro Tools? I got Pro Tools running and licensed okay but the staff gave me 15+ plugins they wished to be installed (PKG & AAX) Can you please share any methods you use for Pro Tools plugins? Thank you in advance!

Our users do not have local admin rights, so we have to deploy PPPC for all things which need it.  Recently having trouble with Techsmith Snagit 2023.  Created a Configuration Profile containing ScreenCapture = "Allow Standard Users to Allow Access" and Accessibility = "Allow".  When Snagit prompts for access, the Screen Capture portion is working, but the Scrolling Capture is not.  When I click that button, it got to an Accessibility panel but when I try to toggle the slider to turn on Snagit I receive a prompt for administrator credentials.This thread from 2016 suggests that the edit would need to be done in the TCC database, but the thread ends in 2017 saying that the stated solution doesn't work since Sierra.  Does anyone have an insights or assistance for this issue?https://community.jamf.com/t5/jamf-pro/snagit-and-scrolling-capture/m-p/195623

I have Autopkgr setup to automatically update Jamf applications like Chrome, Firefox...etc  using the Jampatchuploader process by Graham Pugh.  This has been working fine for a year or so and now I noticed it quit working.  I updated all the repos and have the latest version of Autopkgr.  Example:  The process downloads the latest version of Chrome, uploads it to the patch repository and links the new package to the patch policy.   Everything works except the last part I am getting this error ERROR: Couldn't find patch softwaretitle with name 'Google Chrome'I validated that this is the correct name of the policy and I used the Swagger UI to check the API directly.  It returns the exact same name and the correct ID.Hopefully someone has an idea about what is happening.

We found few apps in Jamf School Apps->Update have new version.But it seems not automatic push update version to iPad. I need manuallyclick "Update all devices" in each Apps.

Hey All,I am trying to find a way to have one of out users be able to update his plugins without us needing to scope the make me an admin script onto his machine all of the time. I made a script to run the plugin manager app as admin then kill it after 10 minutes for security, but wanted to see if there is a better way to do this. Here is what I have  #!/bin/bash# Run the app as administratorsudo open -a "/System/Applications/MyApp.app"# Shutdown the app after 10 minutessleep 10mpkill myapp