Hi all, so I have a weird bug about Jamf Self Service Center that I can't seem to find much online about. I have a case of an application (New MS Teams) I want to be installed on all machines after device enrollment setup. This policy works great.I have another policy where I also want that same application to be available in Jamf Self Service so users can install it in case they delete it, etc. My issue is that Jamf Self Service seems to have some kind of bug where it never detects that the installation of an application has finished. It just has a forever spinning wheel.So once I install the application via the service center, it will install just fine on the computer after a minute. I can just go to the Applications folder and start up the application just fine. But in Jamf, it never registers the application as having been finished installing. So I looked up this issue and people said my best bet was to look into the Jamf logs, and I would but there are none to be found within

Good afternoon everyone! Curious if anyone knows how to build in the "request desktop site" into the Web Clip function. I have a website that works well in desktop mode on an iPad however it is for PreK/K children and having them open it in desktop mode each time may be a little troublesome. Any help appreciated!

Hey folks!I've been setting up LAPS for my organization and we've hit a little snag. We can't enter the LAPS password into administrative prompts until after we log into the account for the first time, then it forces a password reset. Afterwards we can use what we set as the password and it'll work. Does anyone have any ideas on what could be going on?

Hello Everyone,        We have started rolling out JAMF Teacher in our district and have run into an issue with iCloud Drive.  We are using JAMF Pro to manage if that helps.  The original issue was each time a teacher would use JAMF Teacher to restrict Apps, it would disable iCloud Drive and Notability, which we use heavily in our district, would lose all its synched notes.  We restrict the ability for the students to manage their Apple ID and see the iCloud settings through Configuration Policies, and when JAMF Teacher restrictions were removed, it would not turn iCloud Drive back on.  We discovered that adding iCloud Drive to the safe-list of JAMF Teacher Apps that could not be removed helped but we are still seeing this same issue on a handful of iPads each day.  The solution is to remove the Configuration Policy and go into iCloud and it automatically turns everything back on as soon as we go into the Settings.  Is anyone else

Hi, I'm trying to upgrade Cisco Client from 5.1.1.42 to 5.1.3.62 and seem to be having some issues.  I followed the below article with no luck.  When deploying the policy via Jamf, it will failhttps://support.umbrella.com/hc/en-us/articles/23515921165844-How-to-deploy-Cisco-Secure-Client-via-JAMF-MacOSI also followed the below and can get the client to install if I double click on package on my test device, but when I upload it to Jamf, the policy is stuck on pending.https://community.jamf.com/t5/jamf-pro/build-a-package-for-cisco-secure-client-5-replacing-umbrella/m-p/308231Anybody had any luck in upgrading?Thanks

I am in the process of testing the privilege elevation feature in Jamf Connect 2.34.0. Everything seems to be working well, except I am noticing that after a period of time if I attempt to elevate nothing happens. If I run the command :sudo defaults delete com.jamf.connect.state TimeTamperingDetectedI am able to elevate again. So it appears something is incorrectly triggering the timetamperingdetected and preventing me from elevating again. The configuration is set to 40 elevations/month for my testing, but I'm wondering if there is an issue with this setting and I should just remove it entirely? Has anyone else had any issues with this?

We're seeing a strange issue for a few weeks now.The active window starts to lose focus randomly, which is a bit hard to explain, but for example, while typing every 20 seconds the textfield greys out for 5 secs then it's active again, which makes it impossible to work as this doesn't stop.With the help of the following python script (Brian33 on Nov 18, 2022), we found that OneDrive always steals the focus for a few seconds:https://forums.macrumors.com/threads/active-window-loses-focus.2321723/The only fix currently is to close OneDrive and re-open it, but this needs to be done always once the Mac restarts.So I created a script to close and re-open OneDrive during login, but it would be great to find a real solution. Our OneDrive version is always the most recent one: 23.056.0314Anybody else facing those issues?  

My organization uses Duo and we use their Mac Login app. I frequently have to reinstall it following macOS updates and find this to be a hassle.Is this how it is with all MFA solutions that are installed in macOS? I only have experience with Duo and would appreciate it if others would share their experiences and recommendations if they have an MFA solution that doesn't require as much maintenance following macOS updates.

has anyone setup through a policy  the installation of the PaperCut Print Deploy Client.pkg  to a lab of computers and had the printer successfully install on the Macs?

I have some apps that need a to run a scrip after the install and have been unable to figure out how to trigger them to run after the install of the App or how to show up in Self service.  one of the App's is VPN client and the script will add  the two VPN portals we use  the other will uninstall VPN. The other app win installed asks for a FQDN as part of the setup anyway to software i can use to create a new package 

Today we are releasing Jamf Pro 11.5. Highlights include: Enabling LAPS in the Jamf Pro InterfaceFunctionality for the local administrator password solution (LAPS) is available in the Jamf Pro interface. This enhancement allows you to define settings for the managed local administrator accounts configured in user-initiated enrollment settings and PreStage enrollments that were previously available in the Jamf Pro API only. Packages Page RedesignThe Packages settings page has been redesigned with new functionality and an updated layout that matches the design of Jamf Pro 11. In addition to various accessibility improvements including larger font sizes and reduced clutter, the update features a floating progress bar that displays the upload progress of a package and download functionality for previously uploaded packages directly from the Jamf Cloud Distribution Service (JCDS).   For additional information on what's included in this release, review the release notes via the Jamf

So, here's a thing:Have you ever wished your users didn't try to use Migration Assistant? Maybe you have something better (Alectrona Migrator, Druva - that's what I used to use & it was the best...) But, maybe, you just want to stop them. Yes, you can use Restricted Software. But, maybe, for some reason, the internet has led you here & you don't use Jamf, or, you don't want to use Restricted Software. Ta da. #!/bin/sh # write out blocking script /bin/cat << 'EOF' > /opt/blk.migr.asst.sh #!/bin/sh if /usr/bin/pgrep -ail 'Migration Assistant' then /usr/bin/osascript -e "display dialog \\"Migration Assistant is blocked on this computer. Please contact your administrator for help.\\" buttons {\\"OK\\"} default button 1 with title \\"Migration Assistant Blocked\\" with icon file \\"System:Library:CoreServices:CoreTypes.bundle:Contents:Resources:AlertStopIcon.icns\\"" /usr/bin/pkill -ail 'Migration Assistant' fi EOF /bin/chmod 755 /opt/blk.migr.asst.sh /usr/sbin/ch

I changed my password via Jamf Connect yesterday, but when the prompt to sync passwords appeared it did not accept my previous password, giving me the "Your local password is incorrect" message. Rebooting showed that I needed my previous password to log in to FV. Once at the desktop, logging into Jamf Connect used my new password but still would not accept the old one when trying to sync passwords. Based on this Jamf Nation thread (https://www.jamf.com/jamf-nation/discussions/35744/jamf-connect-login-with-okta-local-password-issues), I manually changed my local password using the diskutil apfs changePassphrase command. This worked in that my FV password now matches my Jamf Connect password, but after the FV login I now get a Jamf login screen, where the old password is required. When I get to the desktop, Jamf Connect works with the new password as before, but still prompts to sync passwords. I've tried multiple passwords to no avail. As a result, I cannot complete a login to Ja

On 31 May 2024, Jamf will retire the following App Installers software titles from the Jamf App Catalog. Jamf recommends disabling any App Installers deployments for the impacted software titles as they will no longer receive updates after 31 May 2024. For instructions on creating new deployments, see App Installers in the Jamf Pro Documentation.For a complete list of software titles that are available as App Installers, as well as retired software titles, see App Installers Software Titles in the Jamf App Catalog.   Retired Software Title Replacement Software Title Adobe Animate 2022 Adobe Animate 2023 or 2024 Adobe Audition 2022 Adobe Audition 2023 or 2024 Adobe Bridge 2022 Adobe Bridge 2023 or 2024 Adobe Character Animator 2022 Adobe Character Animator 2023 or 2024 Adobe Illustrator 2022 Adobe Illustrator 2023 or 2024 Adobe InCopy 2022 Adobe InCopy 2023 or 2024 Adobe InDesign 2022 Adobe InDesign 2023 or 2024 Adobe Media Encode

I have written a long time ago and still use an Automator workflow which runs an AppleScript which front-ends the built-in ZIP command line tool. Its main purpose is to provide a means to generate password protected ZIP files. The built-in 'service' does not give this option even though I suspect it also frontends the same built-in ZIP command line tool.This workflow for me still works fine even in macOS Sonoma.It used to be (back in the good old days 😁) that installing an Automator workflow was literally a simple matter of copying it to either -/Library/Services/ (to make it available to all users)or~/Library/Services/ (for an individual user)These days it is a lot more complicated.You still need to copy it to /Library/Services/ but you then apparently need to open it in Automator, re-save it in the same /Library/Services/ location which appears to cause Automator to register it in the list of available services - this of course requires using an Administrator authen

We're transitioning over to a new printing system and I need to remove printers on all macOS machines. The printers are all named by site, for example Miami HP 504, Dallas HP 653 etc.  What's a good way to delete the printers in bulk by using the site names? I have a script that works for one site at a time. I don't want to just remove all printers as there may be personal printers installed. 

Does anyone have a solution to limit "User-Initiated Enrollment Process" to specific LDAP groups?

Hello communityI just started to testing prestage enrollment with jamf connect configuration for standard useraccounts (non admin).Enrollment working fine, like our enrollment for the admin user. But we have the behaviour on the macbooks, that the keyboard layout changes to default (ABC) after each restart of the macbook. All keyboard layouts that are not necessary were deleted in the user setup steps (before connecting to wlan). After the MacBook has restarted after on of our policy the keyboard is set to default ABC.Someone has an idea how this can be solved. My problem is, that we have differen offices in different countries with different keyboards, so pushing a configuration will be not as much easy :)THX in advanceBRJ

Hi all. We're testing out Jamf Connect here for an eventual rollout to all our Macs a little later this year. One of the things I'm looking at is the recently added privilege escalation process Jamf added to Connect. It seems to work pretty well, and makes it easy for an end user to ask for temp admin. I have it set to only allow a set number of escalations per month per the documentation. But one question I had was, what happens if a user uses up their monthly allotment, and I decide I'd like to reset the counter for that month for that user or device, or extend an additional privilege escalation to them? It doesn't seem like there's a way to do this. I've been looking for something that tells Jamf Connect that they've used their allotted privilege escalations, either in Jamf Pro or on the device. I suspect since Jamf Connect can be MDM agnostic this is held somewhere within the device itself or within the Jamf Connect application. But I've yet to find any information on how this work

We're currently testing out the Microsoft Enterprise SSO plug-in (without Platform SSO) for macOS and have run into an odd problem.  Everything works perfectly, but if the user opens the Company Portal application it tries to get them to enroll the device into Intune.  This makes for an awkward scenario where the user is guided to download the Intune management config, see it fail to install, and then back out until they can say "Postpone."  Not a great experience, and telling people to just not open the app doesn't really work at scale.  Is there any way to suppress this Intune enrollment prompt from the Company Portal app when we deploy it for the Microsoft Enterprise SSO?   NOTE: We're not currently using Intune for device management outside some testing, and we do not have Device Compliance integration set up just yet. It's on our roadmap, but hasn't been a high priority.  We can probably move it up if it is an assumed prereq for the Microsoft Ent

ok so I have very little knowledge about Jamf Pro.  I am more of a Windows engineer. However we have to support Mac users at work..even though I don't have any access to JAMF PRo.The scenario is that the user is insisting that they didn't change there password but can't logon.They are at home my understanding is that he 100% is tying his password wrong.He thinks the system has somehow changed his password.Is this impossible? 

Anyone else get a very google vibe that Jamfs "Software Updates" workflow is still in beta never mind it's been the "production" solution for OS updates for over 6 months now?      

Haven't posted in a while... glad to be back, at least to ask this question:When do normal Jamf Pro customers get this?https://datajar.co.uk/products/jamf-auto-update/This seems like something that Jamf App Catalog was meant to be.  This company is now owned by Jamf.  Hoping this product expands from being just for MSP's to Jamf Pro customers soon.  Having automatically updating Mac packaged app catalog for over 800+ apps seems like something all Jamf customers deserve.  The App Catalog in Jamf Pro has not expanded as quickly as hoped, and also continues to be unreliable at times with it using the Apple Enterprise Application install API's.Thoughts?

Background While we're waiting for @NightFlight's Extention Attribute Execution Frequency feature request to be implimented, here's my two cents, which was inspired by @brad's approach for only occasionally capturing the status of a computer's Recovery HD. Approach As one of the first steps of an Extension Attribute script, you pass the name of the Extension Attribute and the desired execution frequency (in days) to a client-side function. A client-side plist stores the epoch and the result. During subsequent inventory updates, if the current epoch is less than the given frequency, it just reads the previous result from the plist instead of executing the entire Extension Attribute script. For example, I have an EA for “Model Name”; how many times do you need to run that Extension Attribute? (Once per quarter? Once per year? Certainly not every time.) Results Early tests show an overall inventory collection that is 1.6x faster, using the following as a gauge before and after:

hi,We use SPARK email software.With APPLE volume purchasing we have deployed the app with JAMF and the APP STORE.When SPARK makes an update and it appears in the App Store, JAMF downloads the update but cannot deploy it on the client workstations because it systematically asks for the workstation's admin code.How can I automate these updates?cordially