I'm trying to setup the GoGuardian app for a small group of our iPads. I have everything working except that I can't find a way in Jamf Pro to turn on the setting for "Allow Notifications" in the Screen Sharing section. It's off by default but it needs to be enabled so that teachers can send notifications to the iPad requesting it to open a browser tab for the student.I'm guessing that's just not something Apple allows Jamf to set, but I wanted to check with group and make sure I'm not missing something obvious. Thanks!

I am trying to create a script that displays a message when a specific application is launched to alert the user it is not supported and they're using it at their own risk. I was able to get the base script I want to trigger together, but cannot seem to find a way outside of constant loop checking running processes to trigger it (below). I thought maybe a daemon would be my best bet but I can't seem to find a way to know if the application is launched. #!/bin/bash# Infinite loop to continuously monitor processeswhile true; do # Check if 'Microsoft OneNote' process is running if pgrep -x "Microsoft OneNote" > /dev/null; then echo "Microsoft OneNote process has started!" fi # Adjust sleep time as needed to avoid high CPU usage sleep 5 # Check every 5 seconds, adjust as necessarydone Anyone have a way to launch a script only at application launch, not by checking if it is running/open? 

when I do an inventory and collect hidden accounts, some macs show 60+ hidden accounts.does any knows why so many hidden accounts gets created? thank you.

We're looking to set up a near real time process to get change records for computers from Jamf into another system. I know very little about the Jamf Pro API, but I've downloaded the Postman collection. Is there an API call I can make that will just return any computers whose record has been amended in some way within, say, the past hour?Failing this, which call should I use to get a full list of computers? The one I've currently been using is the {{baseUrl}}/preview/computers one, but I'm unsure what the 'preview' in this represents and therefore whether this is the correct one.Thanks in advance for any advice!

Unfortunately Jamf doesn't support the Sophos Endpoint Protection in the Patch Feed anymore. Due to that fact all newer Versions are showing up as unknown. Unfortunately, I can't get the Jamf Title Editor to display the installed Sophos Endpoint versions in the Jamf Dashboard again. Does anyone have a solution to the problem? Can someone help me here (just show/post some settings or similar)Thanks in advance!PS: Why is Jamf reducing the Titles in the PM-Feed instead of increasing them???

Hello everyone, We are experiencing a wild experience in JAMF School the last 3 weeks.  We have had 18 devices randomly logged out of their Microsoft Federated MAIDS account on their iPads even though we have a restriction profile preventing any changes or log out in JAMF School.  Now, it has only been 18 out of about 1000 devices.  But it's still concerning as student then lose all of their Notability notes.   Has anyone experienced this random issue?  I have looked in Activity Logs on the last 5 with no indication of any kind of push or change.  It seems to happen off hours around 8 - 10 pm based on the Notability's last sync.   Thanks for any insight to this. Blessings, Matt

We're about to try Jamf Teacher with or on-prem Jamf Pro. Have configured and set up as should and distributed the app to some devices to try. But when we start the app we only get an error that doesn't tell us anything. Does anyone know what could be wrong?An error has occurred. Contact your school's IT department (that's me in this case) for further support.Error: Unknown Error

I have configured the network settings and deployed to 250 device and 60 % of device its got success and wifi is auto connected (certificate - certroot A) and no issue and only 40 % of device is having issue (certroot B) and not getting conneted and getting below error all the time.once thing i noted without network settings its working fine user able to connect the wifi only when i apply that certificate and network settings its getting below error & certificate is valid and same i am using in jamf for the deployment & its trusted in jamf aswell. 2024-04-19 13:53:35.239211+0200 localhost eapolclient[8831]: [com.apple.eapol:Client] en0 START uid 501 gid 20 2024-04-19 13:53:35.275909+0200 localhost eapolclient[8831]: [com.apple.eapol:Client] EAP identity privacy is not required 2024-04-19 13:53:35.281989+0200 localhost eapolclient[8831]: [com.apple.eapol:Client] en0: 802.1X User Mode 2024-04-19 13:53:35.546909+0200 localhost eapolclient[8831]: (EAP8021X) [com.apple.eapol:Client]

Hi all, do you know if there is an API endpoint that allows to know if a mobile device update was successfully downloaded (not installed)? thanks :) julien 

The documentation from Cisco is pretty abysmal, it took me hours to finally make sense of it all. I made my own guide and an all-in-one config profile to use for deployment via Jamf. I hope this helps anyone in the future.  https://scribehow.com/shared/Create_Cisco_Secure_Client_Jamf_Installer_pkg__ODli2lu5QiyylY4S5aCvMQ

I was setting up Jamf Connect on a device and was going through the steps but I signed in to the Menu Bar item and think it may have messed things up. When I logged out to get to the login window, I'm getting this error below: "An error occurred. Contact your IT administrator. The operation couldn't be completed. (JamfConnectLogin.JCAuthProviderFactory.FactoryError error 0.)" To see if it was the Menu Bar item that messed it up, I was trying to log out but for the life of me can't find a way to log out/reset it back to a blank state. I'm running: Jamf Connect 2.30.0 macOS Sonoma 14.2.1

Hi all,We are still trying to get used to Jamf Connect and when our users try to use the local login it doesn't show their account. It shows the Admin account and Other account.How do you get Connect to show all of the Local accounts on the device? 

Hello Everyone,possible i oversee anything drive me crazy.We have a Jamf Pro setup, all standard with Infrastructure.I facing the Problem the Department field mapping does not pull the data form AD, fun fact if i enter department in the Room Field it does. So the connection between Jamf Pro and AD LDAP are working correct.Yes, i can pull the data into JAMF by JSS etc, but this does not solve the issue why on our side the Department Data not pulled automatic with mappings. Anyone an Idea what i can additional check to get this working except open an support Ticket :)ThxAndreas 

I am looking for a "reliable" way to find out what network is the computer using. I think I have the WiFi part working.check_wifi_status() { local wifi_interface=$(networksetup -listallhardwareports | grep -A 1 Wi-Fi | awk '/Device:/ {print $2}') if [ -n "$wifi_interface" ]; then local wifi_status=$(networksetup -getairportpower "$wifi_interface" | awk '{print $4}') if [ "$wifi_status" = "On" ]; then local ssid=$(networksetup -getairportnetwork "$wifi_interface" | awk -F': ' '{print $2}') echo "WiFi status ($wifi_interface): On" echo "Connected to network ($wifi_interface): $ssid" else echo "WiFi status ($wifi_interface): Off" fi else echo "WiFi interface not found" fi }With ethernet, users can be using different brand name docking station and also other network adapter/card may not be an actual working ethernet adapter. Some could be for ZTNA or Netskope or some other service u

Hi folks,We have a policy for our Core Apps that is set to execute once per computer each day and is triggered by a check-in. This is to ensure that users don't delete apps that they shouldn't delete, and if they do then running this policy should re-install any apps. There are multiple apps that use this same event trigger "Core-Apps".I'm currently in the process of developing a new enrolment procedure, however in testing it appears that a recurring check-in is occurring and when this happens, the enrolment process halts until the Core Apps policy has complete. As you can imagine this increases the time it takes to perform the enrolment. The Jamf.log states the following:"Checking for policies triggered by "recurring check-in" for user..."Previously, we have used this trigger to install all the core apps during enrolment, however this doesn't provide very good on-screen feedback, so instead of this I've created separate enrolment policies for each app so that better feedback can be sh

We have an iPad that has been sitting unused since November while the employee it was assigned to was laid off for the winter (we are a construction company and have a lot of seasonal layoffs).  The user is ready to start back up for this season but can't remember his passcode.  We issued the clear passcode command but there are several commands including the clear passcode that are stuck in pending.  The iPad is on LTE with Verizon.  The only WiFi it was ever connected to had it's password changed a while ago and one of the pending commands is the one to push the new WiFi information out to it so connecting it to WiFi appears to not be an option.  We have tried several incorrect passcodes and have been locked out several times, 1 minute, 5 minutes, 15 minutes and now 1 hour.  Has anyone had this happen or have any suggestions on what to do?  We don't care if it resets itself and we can start from scratch but it seems it needs to get it unlocked to ha

The Cisco anyconnect uninstaller ( from gui or running uninstaller from command line) has popup box that has two options, 'uninstall' or 'quit'. Is it possible via command line to have it choose 'uninstall'? I have a simple script to uninstall, but in testing the script I get the popup box, so I'm assuming running the script via Casper it will not work due to the popup box.

We want to build a python script for our suppport team, that allows them to send the shard user lot out command per script to a list of devices.We have not found a documentation for this commands.Does somebody have infos about that ?

Is there a way to only update an extension attribute's value if it hasn't been populated yet? If the field is already populated, I want JAMF to leave it alone. Something along the lines of: if ""; thendo this commandecho the resultfi not sure if there's a field or variable associated with it... in MUT, I know it would be EA_4 or whatever the ID is, but not sure if JAMF uses the same term.

Hi there, We make use of AdminByRequest to escalate local users in our environment. Unfortunately ABR doesn't work 100% for apps like Rancher/Docker. Since we have Jamf Connect, would it be possible to create a self service script that will escalate users to admin, launch docker then de-escalate back to standard user and would it be possible to make this a desktop shortcut pointing to the self service icon?

Has anyone got this to work? I keep getting a sync error. https://freshservice.com/product-updates/jamf-pro-freshservice-integration-blog/

I'm curious to know if there is a way to automate ticket creation in Jira based off machines that fall into scope of a certain smart group? For example if a machine falls to a smart group that has a criteria of 'FileVault not enabled' a jira ticket would then be created and I can assign to my peers accordingly. Im curious if anyone is currently doing this? Our current Jira version is 7.2.x ( I know its old, not my team...)

Hey All,So, I was informed by Jamf Support that CA Cert on my JSS was expiring in a few short days.  It's not, which they confirmed.  It was renewed on time, and now does not expire until 2034.However, it appears that some devices have not received the updated CA.  I don't have a grasp yet on how many, but its greater than 2.My question- Is there a way to force devices to update the CA, via the JSS console or the API?Does the "Renew MDM Profile" command also renew the CA cert on the device? Its not entirely clear from the documentation if Renewing MDM Profile also replaces the CA on the device as well.Thanks

I setup a test config profile with the Proxies payload for our HTTP/HTTPS proxy. When installed, we get prompted to go to System Preferences to enter our credentials like normal, but when we go to a specific network interface like WiFi > Advanced > Proxies there's nothing actually under HTTP/HTTPS proxies. We removed the profile, but the proxies seem to be persisting, so I want to clear them out.

Hello Everyone, We are approximately six months into Distance Education at our K12 institution and are looking to push out a payload to route all student iPad traffic through Cisco Umbrella. We are currently using Umbrella district wide both for on-campus network filtering and also for all Chromebook traffic (including at home). We have successfully linked Umbrella with JAMF, as you can see in the below screenshot. The downside we are seeing is that in order for the DNS routing to work you must install the Cisco Security Connector. This is fine and all, but it also appears that this application must be opened prior to any data following through OpenDNS? Has anybody run into a similar scenario and found a solution? It feels like our department can do everything on our end to get this ready to go but if the student doesn't open this app at least once they will be able to browse unfiltered internet. Here is the link to the official documentation from Cisco on deployment.