Hi All,We have a problem on one MAC with JamF connect and logging out, but only logging out. The Connect screen loads when the MAC boots up and when restarted but if after a user logs in and then just logs out instead of restarting the MAC goes back to its normal local login screen!I have tried all the normal commands to try and reset JamF connect, sudo jamf recon/sudo jamf policy/sudo jamf update, but none have worked.Would anyone have any idea on how to resolve, the other 20 Macs work fine!ThanksDuncan

Only works under Catalina. Why is Apple making it so difficult to automate OS replacement/updates?

Is it possible to pass parameters for a script through the jamf policy -trigger command? For example, if I wanted to pass an end user's  email into a script that is being run in the policy I am calling can you enter sudo jamf policy -trigger <policyname> <user@email.com>? 

I'm trying to remove the old version of the Webex app and reinstall the latest version using a policy. Could someone please guide me without the patch update.Thanks in advance.

The latest version of Adobe Premiere version 24.6.1 through JAMF App installers is corrupt. On several of our machines we are getting an error(The file was downloaded on unknown date) with the package and have to control click and open to allow the app to launch. Is there a fix?

Evening, Does anyone else manage a lab with Pro Tools? I got Pro Tools running and licensed okay but the staff gave me 15+ plugins they wished to be installed (PKG & AAX) Can you please share any methods you use for Pro Tools plugins? Thank you in advance!

Our users do not have local admin rights, so we have to deploy PPPC for all things which need it.  Recently having trouble with Techsmith Snagit 2023.  Created a Configuration Profile containing ScreenCapture = "Allow Standard Users to Allow Access" and Accessibility = "Allow".  When Snagit prompts for access, the Screen Capture portion is working, but the Scrolling Capture is not.  When I click that button, it got to an Accessibility panel but when I try to toggle the slider to turn on Snagit I receive a prompt for administrator credentials.This thread from 2016 suggests that the edit would need to be done in the TCC database, but the thread ends in 2017 saying that the stated solution doesn't work since Sierra.  Does anyone have an insights or assistance for this issue?https://community.jamf.com/t5/jamf-pro/snagit-and-scrolling-capture/m-p/195623

I have Autopkgr setup to automatically update Jamf applications like Chrome, Firefox...etc  using the Jampatchuploader process by Graham Pugh.  This has been working fine for a year or so and now I noticed it quit working.  I updated all the repos and have the latest version of Autopkgr.  Example:  The process downloads the latest version of Chrome, uploads it to the patch repository and links the new package to the patch policy.   Everything works except the last part I am getting this error ERROR: Couldn't find patch softwaretitle with name 'Google Chrome'I validated that this is the correct name of the policy and I used the Swagger UI to check the API directly.  It returns the exact same name and the correct ID.Hopefully someone has an idea about what is happening.

We found few apps in Jamf School Apps->Update have new version.But it seems not automatic push update version to iPad. I need manuallyclick "Update all devices" in each Apps.

Hey All,I am trying to find a way to have one of out users be able to update his plugins without us needing to scope the make me an admin script onto his machine all of the time. I made a script to run the plugin manager app as admin then kill it after 10 minutes for security, but wanted to see if there is a better way to do this. Here is what I have  #!/bin/bash# Run the app as administratorsudo open -a "/System/Applications/MyApp.app"# Shutdown the app after 10 minutessleep 10mpkill myapp

Having issue with enrolling jamf protect to device

Hi,At the college where I work, we have helped out a music college who have to relocate by offering the use of a couple of rooms for their students, which means they will be using our Macs, specifically for Logic Pro. This, in itself is not a problem, the issue is we don't have enough Logic Pro licenses to cover their students & our own. They do have their own licenses in ASM, so my question is this:I know we cannot transfer licenses from ASM to another but if I added our JAMF mdm to their ASM then transferred the Logic Pro licenses to our MDM, would that work or is there another way of tranferring licenses?TIA Andy 

Hi,We have a local admin account which is hidden upon enrollment. Before we used to get the option to "switch user" and login to that. For some reason, for the past month we are only getting that option on some laptops. Is this due to some sort of OS update? Is there any other way to reset or delete local account password to get into the computer? I'm also looking at my local admin account which is hidden on each computer, the "enable user for filevault 2" is not selected. I did not set this up, this was previously setup by the old sys admin and I am taking over the organization now. Any suggestions would be helpful, thanks in advance! 

Our students are logged into managed Apple IDs on their iPads. They also have "Modifying account settings" restricted so they cannot edit accounts. This grays out the iCloud settings so they can't change anything once it's set.Teachers are looking to use shared Freeform files. When students get a link to an iCloud-synced Freeform file, it requires them to have iCloud sync enabled for Freeform. Some do and some don't (not sure why). The ones that don't can't turn it on and just keep getting messages saying they need to turn it on.Is there a less invasive way to enable iCloud sync with Freeform on iPads? My best option at the moment is to disable that restriction for a period of time and have staff go in and check but that's a pain but I haven't been able to come up with a better way.

I was trying to deploy the Visual Studio Code with the VEX robotics extension through JAMF policies. I can deploy the Visual Studio Code; however, I need to download the VEX extension manually. Any idea if we can deploy both together?

Facebook memories says it has been two years since MUT hit the App Store as version 2.1.0--which happened roughly a year after I began work on it. I thought it was a good time to look back on the last three years of development. Pardon the lengthy post. The MUT is now open source The MUT can be found on GitHub here: https://github.com/mike-levenick/mut Open source is something that I have had planned for MUT for a very long time; however, I was hesitant to do so, because I was embarrassed. I have no formal programming training. I graduated from UWEC with a business degree, and began scripting because I enjoyed it. The MUT was my project to learn how to create an "actual program" instead of just scripts. It was created by watching YouTube videos, copy and pasting from Stack Overflow, using Google to resolve error messages that came up, and piecing it together a bit at a time. The source code is ugly. I know there are folks smarter and more proficient than I, and if I open source

Hello,I'm encountering an issue where Jamf School is not accepting my two-factor authentication code. Only my Jamf account is allowing me to log in. Is there a way to disable the two-factor authenticator without needing the code?Thank you.

Hey everyone,I know this is a long shot but I figured I would ask!There has been some talk about some nearing districts being able to lock student's down to specific domain logins in Chrome. I know there is the whole "managed browser with a token" structure but in our testing, this was not successful in blocking any kind of secondary account access in Chrome.Has anyone had any luck using these Google Policies on iOS?https://support.google.com/chrome/a/answer/7572556?hl=en#zippy=https://chromeenterprise.google/policies/?policy=RestrictSigninToPatternI know they only mention Windows and Mac but I figured I would reach out to see if anyone has an app configuration that is working for this purpose!I appreciate you all!

While testing the Temporary User Promotion feature I noticed that nothing happens when clicking the option in the menu bar. I have various attributes set as far as UserPromotionRole, UserPromotionReason, UserPromotionChoices. Any thoughts? Running on JC 2.37.0.  com.jamf.connect plist<dict><key>Appearance</key><dict><key>MenubarIcon</key><string>********************</string><key>MenubarIconDark</key><string>*******************</string><key>ShowWelcomeWindow</key><false/></dict><key>CustomMenuItems</key><dict><key>getsoftware</key><string>Self Service</string></dict><key>HiddenMenuItems</key><array><string>preferences</string><string>quit</string></array><key>IdPSettings</key><dict><key>OktaAuthServer</key><string>***************<

Hi All, I have created the CyberArk config profile with below info and it got installed successfully. 1) Approved kernel extension with bundle id: DF8U2CCCD8 2) PPPC with the following: Identifier: com.cyberark.CyberArkEPMEndpointSecurityExtensionCode Requirement:anchor apple generic and identifier "com.cyberark.CyberArkEPMEndpointSecurityExtension" and (certificate leaf[field.1.2.840.113635.100.6.1.9] / exists / or certificate 1[field.1.2.840.113635.100.6.2.6] / exists / and certificate leaf[field.1.2.840.113635.100.6.1.13] / exists / and certificate leaf[subject.OU] = DF8U2CCCD8)Service:SystemPolicyAllFiles = Allow 3) System Extensions:It will not work with the Team ID only. In my testing you must add the system extension for this to work.Team ID: DF8U2CCCD8Allowed System Ext: com.cyberark.CyberArkEPMEndpointSecurityExtension I was executing the installer via below cmd as a script:sudo /private/tmp/Install CyberArk EPM.app/Contents/MacOS/CyberArkEPMInstaller -configuration /priv

Hello All,I'm not entirely sure what it is used for, but the DeclarativeManagement command is stuck pending for a lot of our MacBooks.  I am seeing this issue during enrollment, and also in computers that have already been enrolled.  It looks like this is a new Jamf command?During enrollment, the computers grab their profiles.  Sometimes (and I don't know why it's only sometimes) the DeclarativeManagement command will come up during the profile installation part of enrollment.  I noticed that when this happens, on the computer you see "Waiting for management server" and it will be stuck like this forever.  If you cancel the DeclarativeManagement, the enrollment immediately continues.  For the computers that have already been enrolled, DelcarativeManagement is randomly appearing in the pending commands.  But since it gets stuck, it is also preventing other commands from completing.  I need to cancel the DeclarativeManagement command and then

I am working on a remediation policy for Self Service that will trigger the uninstall and then reinstall of a profile. Doing this is easy to do. I created a smart group then excluded the smart group from the profile I was testing with. Once the policy causes the Mac to be added to the smart group, the profile gets removed. When the Mac is removed from the smart group the profile is installed again. But there's a problem... I wanted to have a step that would verify the the profile did get reinstalled. To do that, I used this command: profiles show -o stdout | grep "ProfileDisplayName = "ProfileName"" | /usr/bin/awk '{print $3}' | sed 's/[[:punct:]]//g') When I was testing this on my own Mac and a test Mac, I was testing removing a profile we have for Zoom. The profile is simply named "Zoom". The command above works perfectly for a profile named with just one word. If the profile is named something like "Zoom Profile" the command will output "no such file or directory". I have tried

What would cause a brand new computer to skip user creation right after an internet network is chosen? We have a few recent computers that went out and some of the computers in that shipment, seemingly upon choosing a network, enrolls the computer and the management user then goes straight to the login screen. Mind you that other computers from the same shipment worked/enrolled normally.

I don't usually discuss beta stuff in public channels, but this new "feature" is already being discussed publicly so I figured we should be good. macOS Sequoia adds weekly permission prompt for screenshot and screen recording apps - 9to5Mac   Is it just me, or has Apple gone way past crossing the line of security notifications that they used to criticize Windows Vista over with UAC? Get a Mac - Vista Vs Mac - Security - New Mac Add (youtube.com)

Any suggestions on how to do this?