Hi guys,New to the Mac OS world, was an AD Engineer for 10+ years working in powershell.How are you guys going about deploying your vpn configuration files when installing your vpn?My org is using Aviatrix, I want to create a script to deploy the custom configuration file and name the profile after it's creation.

I'm wondering if I can default Jamf Connect Login to show the local logins first instead of the network sign-in.Our network (call it NET-RAD) currently uses RADIUS, which we knew, so we'd planned to use our WPA2 network (call it NET-DEV) for Connect Login.A logged in user needs to be on NET-RAD, and even though the password for NET-DEV is saved on the device, Connect Login always asks for the password to NET-DEV.Since we don't share the NET-DEV password with users (it's pushed out via config profile) they end up with no network access on Connect Login and unable to fix it themselves without some sort of hotspot.I understand this is expected due to how Connect Login handles network credentials, but I'm wondering if there's a way I can default Connect Login to the local login page, as opposed to the network login page, at least until we can get Clearpass in place and figure out a better way to do our network for Connect Login. That, or if someone has better ideas.

Hello Everyone,We’re expanding our student loaner program to include Mac laptops. Each semester, students will check out these laptops for their coursework, and at the end of the term, the devices are returned to be reset and reissued.Here are the key issues we’re facing:Active Directory Binding: All devices must be bound to AD, and there’s no workaround at the moment. We’re looking into Jamf Connect or an alternative, but those options won’t be ready in the near future.Data Removal: We need a reliable way to remove user data at the end of each loan period.External Resetting: The entity handling the checkout process (not internal IT) will need to complete the reset. This means the "Wipe" command isn't viable since we can't ensure consistent internet access or the ability to follow a complex process.We currently have a Self Service item that successfully removes user profiles. It works great for us. However, the biggest challenge is managing applications. We need to find a way to remove

Hi guys,I recently used this video: https://www.youtube.com/watch?v=UtdPLbpREtM to erase a computer lab of MBAs to go from Catalina to Monterey. It worked great.Now I have two more computer labs that I need to do from Monterey to Sonoma. These MBAs are M1s, the others were Intels.I got the first part to work where it downloads Sonoma, but I can't get it to install. I have it set to install through Self Service but no dice. To see the errors I ran it through Terminal. I get the error: Could not find the provided own on this systemI've edited the Execute Command in the Files and Processes from when I used it for the first lab. (see screenshot below). But it doesn't want to work for me.Any help is appreciated. Thanks!

Hi jamf-types, I have been out of the jam loop for a few years, as the company I'm was in used a different product .Now I am looking to pitch jams at a new company... but I don't have access to all the data I used to have. Can anyone point me to a complete list of all the API calls that can be used in jamf? 

Hello Jamf Nation! To ensure on-time release of Jamf Pro 11.9.0, which will support Apple’s operating system releases this fall, we’ve made the decision to move the Jamf Pro 11.8.0 release content to Jamf Pro 11.9.0. This means there will be no Jamf Pro 11.8.0 release and you can expect these improvements and fixes to be included in Jamf Pro 11.9.0. The Jamf Pro 11.9.0 Beta Release features the exciting improvements and enhancements for managing your Apple devices found in 11.8.0 and a few new ones. Starting with 11.9.0, Jamf Pro admins will be able to set a minimum OS for MacBooks, iPhones, and iPads through prestage enrollment. Apple Vision Pros can now be enrolled in Jamf Pro through Automated Device Enrollment. New Configuration Profile keys are introduced for MAC address randomization on macOS, Lockdown Mode, and more. How to join the beta: Enroll in the Beta Program under Product Feedback at account.jamf.com. Once you enroll you'll receive an invitation to join the Beta Foru

Hi All,We have a problem on one MAC with JamF connect and logging out, but only logging out. The Connect screen loads when the MAC boots up and when restarted but if after a user logs in and then just logs out instead of restarting the MAC goes back to its normal local login screen!I have tried all the normal commands to try and reset JamF connect, sudo jamf recon/sudo jamf policy/sudo jamf update, but none have worked.Would anyone have any idea on how to resolve, the other 20 Macs work fine!ThanksDuncan

Only works under Catalina. Why is Apple making it so difficult to automate OS replacement/updates?

Is it possible to pass parameters for a script through the jamf policy -trigger command? For example, if I wanted to pass an end user's  email into a script that is being run in the policy I am calling can you enter sudo jamf policy -trigger <policyname> <user@email.com>? 

I'm trying to remove the old version of the Webex app and reinstall the latest version using a policy. Could someone please guide me without the patch update.Thanks in advance.

The latest version of Adobe Premiere version 24.6.1 through JAMF App installers is corrupt. On several of our machines we are getting an error(The file was downloaded on unknown date) with the package and have to control click and open to allow the app to launch. Is there a fix?

Evening, Does anyone else manage a lab with Pro Tools? I got Pro Tools running and licensed okay but the staff gave me 15+ plugins they wished to be installed (PKG & AAX) Can you please share any methods you use for Pro Tools plugins? Thank you in advance!

Our users do not have local admin rights, so we have to deploy PPPC for all things which need it.  Recently having trouble with Techsmith Snagit 2023.  Created a Configuration Profile containing ScreenCapture = "Allow Standard Users to Allow Access" and Accessibility = "Allow".  When Snagit prompts for access, the Screen Capture portion is working, but the Scrolling Capture is not.  When I click that button, it got to an Accessibility panel but when I try to toggle the slider to turn on Snagit I receive a prompt for administrator credentials.This thread from 2016 suggests that the edit would need to be done in the TCC database, but the thread ends in 2017 saying that the stated solution doesn't work since Sierra.  Does anyone have an insights or assistance for this issue?https://community.jamf.com/t5/jamf-pro/snagit-and-scrolling-capture/m-p/195623

I have Autopkgr setup to automatically update Jamf applications like Chrome, Firefox...etc  using the Jampatchuploader process by Graham Pugh.  This has been working fine for a year or so and now I noticed it quit working.  I updated all the repos and have the latest version of Autopkgr.  Example:  The process downloads the latest version of Chrome, uploads it to the patch repository and links the new package to the patch policy.   Everything works except the last part I am getting this error ERROR: Couldn't find patch softwaretitle with name 'Google Chrome'I validated that this is the correct name of the policy and I used the Swagger UI to check the API directly.  It returns the exact same name and the correct ID.Hopefully someone has an idea about what is happening.

We found few apps in Jamf School Apps->Update have new version.But it seems not automatic push update version to iPad. I need manuallyclick "Update all devices" in each Apps.

Hey All,I am trying to find a way to have one of out users be able to update his plugins without us needing to scope the make me an admin script onto his machine all of the time. I made a script to run the plugin manager app as admin then kill it after 10 minutes for security, but wanted to see if there is a better way to do this. Here is what I have  #!/bin/bash# Run the app as administratorsudo open -a "/System/Applications/MyApp.app"# Shutdown the app after 10 minutessleep 10mpkill myapp

Having issue with enrolling jamf protect to device

Hi,At the college where I work, we have helped out a music college who have to relocate by offering the use of a couple of rooms for their students, which means they will be using our Macs, specifically for Logic Pro. This, in itself is not a problem, the issue is we don't have enough Logic Pro licenses to cover their students & our own. They do have their own licenses in ASM, so my question is this:I know we cannot transfer licenses from ASM to another but if I added our JAMF mdm to their ASM then transferred the Logic Pro licenses to our MDM, would that work or is there another way of tranferring licenses?TIA Andy 

Had a student this week figure out that if they look at the more information of the connected Wi-Fi that they could change the Configure DNS from Automatic to Manual and then provide a new DNS IP.  Which then jailbreaks our content filter.Any suggestions on how to enforce the Automatic setting of Configure DNS? There should be no reason for any of my students or staff to need to Manually configure this.

Hi,We have a local admin account which is hidden upon enrollment. Before we used to get the option to "switch user" and login to that. For some reason, for the past month we are only getting that option on some laptops. Is this due to some sort of OS update? Is there any other way to reset or delete local account password to get into the computer? I'm also looking at my local admin account which is hidden on each computer, the "enable user for filevault 2" is not selected. I did not set this up, this was previously setup by the old sys admin and I am taking over the organization now. Any suggestions would be helpful, thanks in advance! 

Our students are logged into managed Apple IDs on their iPads. They also have "Modifying account settings" restricted so they cannot edit accounts. This grays out the iCloud settings so they can't change anything once it's set.Teachers are looking to use shared Freeform files. When students get a link to an iCloud-synced Freeform file, it requires them to have iCloud sync enabled for Freeform. Some do and some don't (not sure why). The ones that don't can't turn it on and just keep getting messages saying they need to turn it on.Is there a less invasive way to enable iCloud sync with Freeform on iPads? My best option at the moment is to disable that restriction for a period of time and have staff go in and check but that's a pain but I haven't been able to come up with a better way.

I was trying to deploy the Visual Studio Code with the VEX robotics extension through JAMF policies. I can deploy the Visual Studio Code; however, I need to download the VEX extension manually. Any idea if we can deploy both together?

Facebook memories says it has been two years since MUT hit the App Store as version 2.1.0--which happened roughly a year after I began work on it. I thought it was a good time to look back on the last three years of development. Pardon the lengthy post. The MUT is now open source The MUT can be found on GitHub here: https://github.com/mike-levenick/mut Open source is something that I have had planned for MUT for a very long time; however, I was hesitant to do so, because I was embarrassed. I have no formal programming training. I graduated from UWEC with a business degree, and began scripting because I enjoyed it. The MUT was my project to learn how to create an "actual program" instead of just scripts. It was created by watching YouTube videos, copy and pasting from Stack Overflow, using Google to resolve error messages that came up, and piecing it together a bit at a time. The source code is ugly. I know there are folks smarter and more proficient than I, and if I open source

Hello,I'm encountering an issue where Jamf School is not accepting my two-factor authentication code. Only my Jamf account is allowing me to log in. Is there a way to disable the two-factor authenticator without needing the code?Thank you.

Hey everyone,I know this is a long shot but I figured I would ask!There has been some talk about some nearing districts being able to lock student's down to specific domain logins in Chrome. I know there is the whole "managed browser with a token" structure but in our testing, this was not successful in blocking any kind of secondary account access in Chrome.Has anyone had any luck using these Google Policies on iOS?https://support.google.com/chrome/a/answer/7572556?hl=en#zippy=https://chromeenterprise.google/policies/?policy=RestrictSigninToPatternI know they only mention Windows and Mac but I figured I would reach out to see if anyone has an app configuration that is working for this purpose!I appreciate you all!