Hello Jamf Nation! Advanced threat controls has been added to Jamf Protect. Advanced threat controls intervene when unsafe or malicious activity considered high-risk by Threat Labs is detected. Detected activity is blocked and reported to administrators for further investigation. For additional information, see Threat Prevention in the Jamf Learning Hub. Thank you,The Jamf Protect team

As per subject, save the below & you’ll get either the version of the BigFix Client installed.. Or you’ll get a message of Not Installed. This is Mac only for now, I’ll have an attempt at the VBScript when I can... Unless someone else wants to finish that bit :) #!/bin/sh#This script has been verified to work on BESAgent 7.2.6.4 #Check to see if BESAgent is installedif [ -d "/Library/BESAgent/BESAgent.app" ]; then result="$(defaults read /Library/BESAgent/BESAgent.app/Contents/Version CFBundleVersion)" echo "<result>$result</result>"else echo "<result>Not installed</result>"fi

Today we are releasing a maintenance version of Jamf Pro; this release includes the following changes and improvements:   Support Added for Deploying Apps Using the Jamf Certificate SDK You can now deploy apps that use the Jamf Certificate SDK to personally owned mobile devices, including iOS, iPadOS, and visionOS devices. Previously only institutionally owned iOS devices were supported.   Important Notice Cloud Service Connection Manual Initialization—Starting in August 2024, if you have Jamf Pro 11.3.0 or earlier, you must upgrade to Jamf Pro 11.4.0 or later to initialize a Cloud Services connection manually. After upgrading to Jamf Pro 11.4.0 or later, you can enable a Cloud Services connection in Jamf Pro. For more information, see Cloud Services Connection in the Jamf Pro Documentation. If you already have a Cloud Services connection enabled, you will not need to take any action.   Resolved Issues Jamf Pro Server [PI118234] Text in the Socket Filter Designated Req

Is there any way to prevent the removal of the MDM/management profile from a Mac, if the user is an admin? We usually lock the "Profiles" pref pane using a Config Profile, but I'm wondering if there's a way to keep the user from deleting the management profile if we unlock that pref pane? In my testing, I've not been able to stop an admin-level user from deleting whatever profiles they want.

Hello,Unfortunately, we are unable to upload P12 certificates for device identification when creating (network) profiles.While the .cert certificate uploads without problems, we get the error message "Invalid certificate" (without further details, unfortunately) when trying to upload the individual .p12 certificate:This is most intriguing, since we uploaded these exact same certificates without any problems about a month ago.Does anybody have an idea, what we might be doing wrong?Florian

I am getting an error -1 The cert for this server is invalid.  I am not sure what cert its talking about.  Im thinking I dont have the app configuration.  Has anybody used it and what did you do to get it running

Has anyone put together a policy/script to uninstall homebrew with Jamf?They have an uninstall script located here:https://github.com/homebrew/install#uninstall-homebrew But if I upload that to Jamf and run it with "--quiet --force" it throws an error shown below.  Seems like something from Jamf is adding a "/" argument to the script and it's causing it to fail.  Script exit code: 1 Script result: Warning: Unrecognized option: '/' Homebrew Uninstaller Usage: /Library/Application Support/JAMF/tmp/uninstallHomebrew.sh [options] -p, --path=PATH Sets Homebrew prefix. Defaults to /usr/local. --skip-cache-and-logs Skips removal of HOMEBREW_CACHE and HOMEBREW_LOGS. -f, --force Uninstall without prompting. -q, --quiet Suppress all output. -n, --dry-run Simulate uninstall but don't remove anything. -h, --help Display this message.

When my server is complete - I'll need to deploy the VMware Horizon client as an application. This doesn't have an installer with choices as AnyConnect does. It requires a server FQDN to be added in order to connect to the virtual desktop. If I remember - it'll need to be deployed as a pkg first, correct? Is there a way to populate the server address once the app is pushed to the system - or - on the first launch?

Hello,I am getting an error while setting up the SCEP profile in the JAMF.We have integrated the okta with the JAMF 

Dear Jamf Team, We are an IT service provider managing multiple Jamf Pro Cloud Instances for our clients. Over the past few weeks, we have encountered significant technical issues that have disrupted our services and negatively impacted our client relationships. Below is a detailed description of the problems we faced: Technical Issues Encountered: • Previously uploaded and functional packages suddenly became unavailable. Within the Jamf Pro Web Interface, these packages displayed a status of "Availability pending."• Client-Side Errors: "Error: Package was not successfully downloaded. 500", "Error: Package-2.1.1.pkg is not available on the HTTP server."• Server-Side Errors: Unable to get download URL from JCDS 2. Falling back to JCDS 1.x. org.springframework.web.client.HttpClientErrorException$NotFound: 404 Not Found: "Not Found" Possible Cause and Support Interaction: • We suspect these issues stem from an infrastructure change implemented by Jamf in mid-Decem

Hello everyone,We're trying to set up so we can auto join devices to our Wi-Fi. We've deployed the certificate and configured the payload for the Wi-Fi but we keep getting an error when trying to install the profile, saying - The Wi-Fi network "Wi-Fi name" could not be set up for EAP.Any ideas what could be wrong, what we missed or what we can do?

Hey all,A number of years ago I inherited a Jamf platform that I am trying to improve and clean up. We have a policy of naming computers of your choice. Currently, it consists of three scripts, one of which is an AppleScript to bring up a dialog box where you can enter the desired name of the computer.This solution has worked fairly well until about a year ago. Now you have to run the script twice for it to work, at least for Ventura and Sonoma.The script looks like below and I was wondering if someone could help me, give me some tips to make it work better so that you don't have to run it twice?Thanks in advance.First script (how it's listed in Jamf policy) #/bin/sh #Skript som sätter en raett hostname osv. - Made by Marten B. BK.IT #define variables name=$(sudo /usr/sbin/scutil --get ComputerName) sname=$(echo "$name" | tr -cd '[[:alnum:].-]') # set computernames sudo /usr/sbin/scutil --set HostName "$name" sudo /usr/sbin/scutil --set LocalHostName "$sname" sudo

Our fleet includes nearly (70) 2020 Intel MacBook Pro laptops running macOS Monterey 12.7.2, 12.7.3, and 12.7.4.Over the past month, nearly a dozen of them have suddenly died. Each time it starts with the computer restarting without warning, sometimes more than once, before it won't power back on at all.Each of these laptops have been brought across the street to Apple, where the majority of them have been able to be revived via Apple Configurator. None of them have had a reoccurrence of the issue after being revived so far.Apple Diagnostics show no issues with the laptops and Apple support in the store and via their Help Desk Support have not been able to provide any insight or suggestions other than to bring it to them when it happens or to replace them.Curious if anyone has seen any similar issues and has any ideas for preventing this. Wondering if there is any preemptive action we can take.Notes:We can't currently update these laptops beyond macOS Monterey because we use on-site SM

Dear Team,Following https://trusted.jamf.com/docs/establishing-compliance-baselines >> Jamf Compliance Editor - User Guide.I generated the baseline and I need to upload from my project to Jamf Pro (following Uploading to Jamf Pro page 24) to have report as same as guidelineBut i can not upload , it is postpone at the continue button. Can anyone have the exp on this ?I tried to raise case but I got this "There is currently no support for the Jamf Compliance Editor application as stated in the article that you linked as the Jamf Compliance Editor is a free-to-use Jamf Pro add-on utility." Thanks 

Hello Jamf community, For my environment, we have an admin account to make any required changes for our users because their account is set up as standard. I've realized that the admin account will sometimes be stuck in prestage when looking at inventory > local user accounts. 2 questions here: Has anybody made a script to make an extension attribute or some sort to get these macs to filter into a smart group? Do we have to push another policy to get these admin accounts out of prestage and into a local user account? Or has somebody thought of a process to resolve this? Thanks everyone. Your insights are appreciated. 

I've been seeing an error, "Software update timed out after 300 seconds" lately when a device runs an inventory, recon.Any one have an Idea what this is from?  In the device inventory I'm not seeing any pending apple software updates or failed MDM commands.

Hello everyone. I am trying to install Forticlient, following the manual https://fortinetweb.s3.amazonaws.com/docs.fortinet.com/v2/attachments/1201c33e-764c-11ed-8e6d-fa163e15d75b/FortiClient_7.0_Jamf_Deployment_Guide.pdf  but I have not been able to find the certificates folder in "library" my goal is for it to be installed automatically with the previous configuration and the user only enters their credentials, any help?

Hi folks,   For all our iPads we have several prestage enrollments regarding their role/functions.Some iPads were still in the default enrollment because initially they weren't supposed to be fully managed. Now one department wants their iPads more managed because they expect more iPads and don't want them to configure everything manually. I created a new prestage enrollment. I want some of the existing iPads being enrolled in the new prestage enrollment without erasing them. How can I accomplish this?On a test-iPad I choosed for 'Unmanage device' in Jamf Pro. Then I went to the Jamf url .....jamfcloud.com/enroll and reenrolled the iPad. I did'nt fill in a user to assign the iPad to. It enrolled well, but in the Inventory display and then "Enrollment Method:" it says "User-initiated - no invitation". How can I reenroll the existing iPads an get the Prestage Enrollment name in the Enrollment Method?Of course I can scope configuration profiles to a department, but for

Hi, we are very new to JAMF pro having recently updated from JAMF now.  We've just had to share our local admin password with a remote user and would like to now have this changed. Can this be changed manually without any need for scripting if so how? Thanks in advance

I want to allow clients using Safari and Chrome to browse a specific URL while disabling file uploads.How can I configure this?

Hi All - we recently started using JAMF in our middle school and I am working with teachers to integrate it into their class. I have a teacher that uses Desmos for Math and can usually see on her computer what students are doing in there so she can provide feedback, adjust the lesson, etc. But when we used JAMF on the students ipads it suddenly would not allow her to see anything from their screens. Is there a way to fix this?

We use iLok's license server to serve our Pro Tools licenses. Currently, to connect the computer to the license server you have to log in and manually set it up, even if the server is on the same subnet as the client. iLok doesn't provide any help with configuring the license server IP via typical means of placing a file in a folder to point the client to the server, or CLI command to point it to a server, and basically told me the only way to do it was manually. Obviously this gets old after the first 20 computers.I've tried sniffing around using Composer on the client while configuring it to see if I can isolate the file(s) it stores server info in. I did find a file that changed (along with a couple of files placed by the installer that look associated), but copying that file to a computer with iLok License Manager installed and then rebooting didn't pre-populate the server entry in iLok License Manager. There is a way to export a config files from the server, but it still needs to

Hello Jamf Nation!We have several exciting new features including Apple Watch management and FIDO2 authentication support for macOS Self Service. You can find more information in the release notes when you enroll.Starting with the Jamf Pro 11.6.0 Beta, we will be deleting any Jamf Cloud Beta instances that have not been accessed for more than 90 days. Once a beta instance is deleted, it is not recoverable. If you would like to retain your existing beta instance, please log into your instance within the next 30 days. You can find your instance at account.jamf.com >> Feedback >> Jamf Pro Beta.If your Jamf Cloud Beta instance is deleted, you’re always welcome to create a new one in the Beta section of Jamf Account. Please email any questions to beta@jamf.comHow to join the beta: Enroll in the Beta Program under Product Feedback at account.jamf.com. Once you enroll you'll receive an invitation to join the Beta Forum, click "Join this group Hub" to gain access. Email beta@jamf.c

Ok! So is it Jamf, JAMF or jamf?

I have devices that we have wiped and redeploy and also devices that are brand new and are not being picked up by the smart group. or at least its failing to be picked up as those devices are supposed to get FileVault enable. Theses devices are not getting filevault trigger. Im a bit concerned as we now have device complaince enabled and this a requirements. not sure how to fix those devices that I just reliazed filevault is not enabled and went thru the process.