Having issue with enrolling jamf protect to device

Hi,At the college where I work, we have helped out a music college who have to relocate by offering the use of a couple of rooms for their students, which means they will be using our Macs, specifically for Logic Pro. This, in itself is not a problem, the issue is we don't have enough Logic Pro licenses to cover their students & our own. They do have their own licenses in ASM, so my question is this:I know we cannot transfer licenses from ASM to another but if I added our JAMF mdm to their ASM then transferred the Logic Pro licenses to our MDM, would that work or is there another way of tranferring licenses?TIA Andy 

Had a student this week figure out that if they look at the more information of the connected Wi-Fi that they could change the Configure DNS from Automatic to Manual and then provide a new DNS IP.  Which then jailbreaks our content filter.Any suggestions on how to enforce the Automatic setting of Configure DNS? There should be no reason for any of my students or staff to need to Manually configure this.

Hi,We have a local admin account which is hidden upon enrollment. Before we used to get the option to "switch user" and login to that. For some reason, for the past month we are only getting that option on some laptops. Is this due to some sort of OS update? Is there any other way to reset or delete local account password to get into the computer? I'm also looking at my local admin account which is hidden on each computer, the "enable user for filevault 2" is not selected. I did not set this up, this was previously setup by the old sys admin and I am taking over the organization now. Any suggestions would be helpful, thanks in advance! 

Our students are logged into managed Apple IDs on their iPads. They also have "Modifying account settings" restricted so they cannot edit accounts. This grays out the iCloud settings so they can't change anything once it's set.Teachers are looking to use shared Freeform files. When students get a link to an iCloud-synced Freeform file, it requires them to have iCloud sync enabled for Freeform. Some do and some don't (not sure why). The ones that don't can't turn it on and just keep getting messages saying they need to turn it on.Is there a less invasive way to enable iCloud sync with Freeform on iPads? My best option at the moment is to disable that restriction for a period of time and have staff go in and check but that's a pain but I haven't been able to come up with a better way.

I was trying to deploy the Visual Studio Code with the VEX robotics extension through JAMF policies. I can deploy the Visual Studio Code; however, I need to download the VEX extension manually. Any idea if we can deploy both together?

Facebook memories says it has been two years since MUT hit the App Store as version 2.1.0--which happened roughly a year after I began work on it. I thought it was a good time to look back on the last three years of development. Pardon the lengthy post. The MUT is now open source The MUT can be found on GitHub here: https://github.com/mike-levenick/mut Open source is something that I have had planned for MUT for a very long time; however, I was hesitant to do so, because I was embarrassed. I have no formal programming training. I graduated from UWEC with a business degree, and began scripting because I enjoyed it. The MUT was my project to learn how to create an "actual program" instead of just scripts. It was created by watching YouTube videos, copy and pasting from Stack Overflow, using Google to resolve error messages that came up, and piecing it together a bit at a time. The source code is ugly. I know there are folks smarter and more proficient than I, and if I open source

Hello,I'm encountering an issue where Jamf School is not accepting my two-factor authentication code. Only my Jamf account is allowing me to log in. Is there a way to disable the two-factor authenticator without needing the code?Thank you.

Hey everyone,I know this is a long shot but I figured I would ask!There has been some talk about some nearing districts being able to lock student's down to specific domain logins in Chrome. I know there is the whole "managed browser with a token" structure but in our testing, this was not successful in blocking any kind of secondary account access in Chrome.Has anyone had any luck using these Google Policies on iOS?https://support.google.com/chrome/a/answer/7572556?hl=en#zippy=https://chromeenterprise.google/policies/?policy=RestrictSigninToPatternI know they only mention Windows and Mac but I figured I would reach out to see if anyone has an app configuration that is working for this purpose!I appreciate you all!

While testing the Temporary User Promotion feature I noticed that nothing happens when clicking the option in the menu bar. I have various attributes set as far as UserPromotionRole, UserPromotionReason, UserPromotionChoices. Any thoughts? Running on JC 2.37.0.  com.jamf.connect plist<dict><key>Appearance</key><dict><key>MenubarIcon</key><string>********************</string><key>MenubarIconDark</key><string>*******************</string><key>ShowWelcomeWindow</key><false/></dict><key>CustomMenuItems</key><dict><key>getsoftware</key><string>Self Service</string></dict><key>HiddenMenuItems</key><array><string>preferences</string><string>quit</string></array><key>IdPSettings</key><dict><key>OktaAuthServer</key><string>***************<

Hi All, I have created the CyberArk config profile with below info and it got installed successfully. 1) Approved kernel extension with bundle id: DF8U2CCCD8 2) PPPC with the following: Identifier: com.cyberark.CyberArkEPMEndpointSecurityExtensionCode Requirement:anchor apple generic and identifier "com.cyberark.CyberArkEPMEndpointSecurityExtension" and (certificate leaf[field.1.2.840.113635.100.6.1.9] / exists / or certificate 1[field.1.2.840.113635.100.6.2.6] / exists / and certificate leaf[field.1.2.840.113635.100.6.1.13] / exists / and certificate leaf[subject.OU] = DF8U2CCCD8)Service:SystemPolicyAllFiles = Allow 3) System Extensions:It will not work with the Team ID only. In my testing you must add the system extension for this to work.Team ID: DF8U2CCCD8Allowed System Ext: com.cyberark.CyberArkEPMEndpointSecurityExtension I was executing the installer via below cmd as a script:sudo /private/tmp/Install CyberArk EPM.app/Contents/MacOS/CyberArkEPMInstaller -configuration /priv

Hello All,I'm not entirely sure what it is used for, but the DeclarativeManagement command is stuck pending for a lot of our MacBooks.  I am seeing this issue during enrollment, and also in computers that have already been enrolled.  It looks like this is a new Jamf command?During enrollment, the computers grab their profiles.  Sometimes (and I don't know why it's only sometimes) the DeclarativeManagement command will come up during the profile installation part of enrollment.  I noticed that when this happens, on the computer you see "Waiting for management server" and it will be stuck like this forever.  If you cancel the DeclarativeManagement, the enrollment immediately continues.  For the computers that have already been enrolled, DelcarativeManagement is randomly appearing in the pending commands.  But since it gets stuck, it is also preventing other commands from completing.  I need to cancel the DeclarativeManagement command and then

I am working on a remediation policy for Self Service that will trigger the uninstall and then reinstall of a profile. Doing this is easy to do. I created a smart group then excluded the smart group from the profile I was testing with. Once the policy causes the Mac to be added to the smart group, the profile gets removed. When the Mac is removed from the smart group the profile is installed again. But there's a problem... I wanted to have a step that would verify the the profile did get reinstalled. To do that, I used this command: profiles show -o stdout | grep "ProfileDisplayName = "ProfileName"" | /usr/bin/awk '{print $3}' | sed 's/[[:punct:]]//g') When I was testing this on my own Mac and a test Mac, I was testing removing a profile we have for Zoom. The profile is simply named "Zoom". The command above works perfectly for a profile named with just one word. If the profile is named something like "Zoom Profile" the command will output "no such file or directory". I have tried

What would cause a brand new computer to skip user creation right after an internet network is chosen? We have a few recent computers that went out and some of the computers in that shipment, seemingly upon choosing a network, enrolls the computer and the management user then goes straight to the login screen. Mind you that other computers from the same shipment worked/enrolled normally.

I don't usually discuss beta stuff in public channels, but this new "feature" is already being discussed publicly so I figured we should be good. macOS Sequoia adds weekly permission prompt for screenshot and screen recording apps - 9to5Mac   Is it just me, or has Apple gone way past crossing the line of security notifications that they used to criticize Windows Vista over with UAC? Get a Mac - Vista Vs Mac - Security - New Mac Add (youtube.com)

Any suggestions on how to do this?

Hello! We are running macOS 14.6.1 on a fleet of iMac's and Macbook Pros. The Mac's can AirDrop to other devices (EG it can see my phone and sends files successfully to it) but the Mac itself doesn't appear to AirDrop too. (So I cannot AirDrop from my phone to the Mac). We've different various devices (Managed and non managed) and the Mac doesn't appear as an AirDrop destination of any of them. These devices are new so we can't test with other versions of macOS (So we don't know if it's a new thing or always been like this!). The Mac's are all MDM managed and we have tried being on the same WiFi network (And also not being on the same WiFi network). They have WiFi and Bluetooth enabled. We tried the solution here but it didn't make any difference (We checked, the command does the value correctly). Has anyone else seen this or have any ideas on how to fix it?! Thank you in advance 

I am trying to setup managed favorites in Microsoft edge. can someone share a working plist for managed browsers in edge?My basic requirement is to have few URLs in managed favorites and then few URLs in folders structure something like this:url-Microsoft.comurl-Intune.microsoft.comJamf(folder)            url-id.jamf.com             url-jamfcloud.comInternal(folder)            url-abc.com Appreciate your help in advanced.

Looking at the Jamf School API documentation, I have found it to be 'lacking'.Example:Devices - List DevicesGEThttps://api.zuludesk.com/devices This is incorrectIt should behttps://api.zuludesk.com/api/devices It would also help if they gave an example curl command like Jamf Pro API documentation has.

I am trying to retrieve the scope of apps, including the catalog and associated scopes/groups for my instance, but so far, I have been unable to fetch the app information as outlined in the API documentation at api.zuludesk.com. According to the documentation, the GET URL provided is as follows:https://{yourDomain}.jamfcloud.com/apps/:idthe response would include the serial number of the devices but I am only getting the following:","vendor":"Mathematics Rockx Pty Ltd","price":0,"isDeleted":false,"isDeviceAssignable":true,"is32BitOnly":false,"isCustomB2B":false,"deviceFamilies":["iphone","ipad","ipod"],"isTvOSCompatible":false,"isMacOsCompatible":false,"autoGrant":true,"autoRevoke":true,"totalLicenses":149,"usedLicenses":0,"availableLicenses":149,"isVppV2":false} #Script for testing purposes, retrive app ID#30 #Headers Authorization not included for security ------Python scriptAPP_DETAIL_URL = 'https://xxxx..jamfcloud.com/api/apps/30' # Headers for the GET request headers = { 'User-Ag

Hi,  I am looking for some help to see if there is an existing JAMF Brand Computer Extension for reporting all local groups on a computer and\\or a particular group name.  I would also like it to report all of its membership.  ANy help is appreciated.  Thanks!!

We had a device that was not able to be managed, so we tried to delete the device and remove the profile to re-enroll. We are not allowed to remove the MDM profile, and reinstalling the profile through self enrollment fails, stating "New profile does not meet criteria to replace existing profile". For additional info, this computer was part of a pre-stage enrollment originally. 

We are after changing the naming convention for classes imported with ASM. Is there a way to mass delete the classes in there now? Thanks

Today we released Jamf Connect 2.39.0. This release includes the following changes and improvements: The Jamf Connect menu bar app now displays the temporary privilege elevation duration in the format "HH:MM:SS" to improve usability when elevating users for more than 60 minutes.   To access new versions of Jamf Connect, log in to Jamf Account with your Jamf ID. The latest version is located in the Products section under Jamf Connect. Product Documentation For additional information on what's included in this release, review the release notes via the Jamf Learning Hub.

We use Solarwinds for asset tracking and internal support. The installation instructions have you running a command to silently install. How would that be done? I'm used to Intune allowing your to run an install command but not sure where to do that here. Thanks.