So this may be a stupid question. All of the notifications that come from jamf policies (patch management for example) always show with the default jamf icon. Where do you set a custom image?

Hey everyone. I deployed a policy that runs a script which notifies users that they need to reboot their Macs. The policy is scoped to a Smart Group that contains users whose Macs have been up for 10 days or more. The issue I'm running into is that after the users reboot, they're seeing the notification again. My guess is that an inventory update isn't happening quickly enough after the reboot to remove them from the Smart Group. Can anyone help me configure this properly? Happy to provide any other details. Thanks in advance!

Greetings all, We're getting our Fall builds ready, and again I am facing the issue of automating the software installation for the Wacom tablets in our Industrial Design (17 Cintiq 27" panels) and Multimedia (10 Wacom 12" LCD tablets) labs.  I'd really like to not have to walk around to each one of these to individually allow the permissions they need (which is Wacom Technical Support's position). Does anyone have, or know of, a way to automate this, particularly in Jamf Pro, but I'll take anything.  We are running Big Sur on a variety of Mac types, but no M1's have Wacoms hooked to them yet.  There were a variety of suggestions in Jamf Nation last year, but most of them were for Mojave and we were unable to get them to work successfully in Catalina. Thanks in advance for any suggestions.

I am working on a script that uses Swift Dialog to prompt users who have been running their Macs for a long time to reboot. The script creates a launch daemon after getting user input from Swift Dialog. The user is offered a drop down menu with 4 options: Reboot Now, 1 hour, 4 hours, 1 day. The StartInterval for the launch daemon gets set based on the option the user chooses from the drop down menu. Users are allowed 3 deferrals which I track using a PLIST. After the time set in the StartInterval elapses, the user is able to choose a different option. This changes the StartInterval to a new value. I included a step in the script to bootout the launch daemon just before it gets deleted and replaced with a new one containing the new StartInterval. When the new launch daemon is installed, there's a step to bootstrap it. I see in the policy log that the bootout step is failing, which then leads to the bootstrap step also failing since the launch daemon is still running.  Boot-out fail

We're using Jamf Pro 10.50 on prem in an educational environment.In the past we have used the MUT to assign devices to specific users. As soon as the device is assigned, the MDM automatically creates an EDU profile configuration and installs it on the device so that the user is able to use Apple classroom as either a teacher or student - whatever their account specifies.Now, if we use the MUT for a device assignment, it appears to properly assign the device to the user and apps/polices/etc work appropriately for the assigned user, but the EDU config is not installed on the device.If we manually (find object, Inventory, User & Location, search for user and save change there) assign the device to the same user, it then creates and installs the EDU config on the device.Has anyone else seen this or does anyone have ideas on what is going on? @mlev The log looks normal.I downloaded clean templates.It does appear to have set the device name and username as we set in the CSV use

Hi All,We have a few laptops that are actively checking in and performing inventory updates however, there are a couple commands that have been pending for a week, like the "lock device" command.I have attempted the following in an attempt to fix:Canceling all pending commandsSending a blank pushAny ideas on what could be the issue? The lock command has worked well in the past and the only thing recently changed was the MacOS updates(beta) was turned on and we've been upgrading people from 14.0 to 14.6. All devices were already on Sonoma before the issue arose.

Last week, maybe 2 or 3 days after our Jamf instance went up to 10.48, we've been running into issues with Automated Device Enrollment.During a fresh install of macOS 13.4, we get stuck at the Remote Management screen, where the message "Waiting for management server" hangs on the screen, seemingly forever. Sometimes, after 20 or so minutes a laptop might decide to move on to the User Account creation screen.If we reboot these stuck laptops, then navigate back through Set Up, we can create Users and see that they have all the Managed Profiles installed, but need to run "sudo profiles renew -type enrollment" in Terminal before Jamf fully installs itself on the devices and then runs policies as normal.Any thoughts or similar issues?

Has anybody tried deploying solstice? I've tried the Autopkgr deployments and copying the app from a working machine into composer and every time I deploy to another machine, the icon has a line through it saying it's "Not supported on this type of Mac"

Good afternoon,We are currently testing the Compliance Editor and have deployed the CIS Level 1 benchmark to three test devices via Jamf Pro. The benchmark appears to be fully implemented on these devices. However, the 'Sonoma CIS Benchmark Level 1 Audit' in Jamf is showing that the devices are non-compliant because Siri Listen was not disabled (system_settings_siri_listen_disable). I checked the devices, and Siri Listen was already disabled (screenshot below) before the CIS benchmark was applied. Does anyone know how can I resolve this false positive?  Thank you.

Hi there, Does anyone know if Jamf App Catalog has a log that records pending updates on the local machine?

GMMG,Has anyone noticed that the icon for JAMF Connect has changed with version 2.38.Is it me or does this look very similar to the beta versions of JAMF Connect [icon] when they are released. Or do I just need a stronger cup O'joe this morning.+ Gracias

Hi everyone...I am preparing to deploy Oracle SQL Developer to some folks at the office and saw the "Oracle Usage Tracking" pop-up appear when I launched the application.  Does anyone know if there's a way to suppress this (and auto-update maybe?) with a config profile?  Didn't see too much Oracle documentation in the way of deploying with macOS/MDM solution.  Any assistance would be greatly appreciated!

Unlike the old interface, the new one doesn't tell you how many inactive devices you have over a configured time period.The old one would alert me (based on the default 14 day setting) if any devices hadn't checked in for 14 or more days, the new one requires me to sort the list by "Last Connected" in descending order just to get the same information, which isn't an 'at a glance' type display like the old one was.

Hi JN Team,I’ve successfully configured Power BI with Jamf and am now looking to create a reporting dashboard to track key metrics such as macOS versions, managed devices, and installed applications.If anyone has a Power BI dashboard template (PBIX file) related to Jamf reporting, I would greatly appreciate it if you could share it with me. It would be incredibly helpful as a starting point for building out our reports.Thank you in advance for your assistance!

In previous versions of Mac OS I was setting users home page in Safari with a PKG that copied a com.apple.Safari.plist to their own /Library/Preferences/ folder or in a policy under Files & Processes and running the jamf command to enable home page. I also use to be able to dismiss the Welcome startup screen and change the default open behavior from Favorites to Homepage. I've had no success testing with El Capitan and wondering what is working for others? Any help is much appreciated. Thanks,

Does any one know why when you create multiply admin accounts via a policy it shows all the separate accounts on the one user profile in Jamf?  So for example if i create a managed admin account via 3 individual policies for Tom, Alex and Jane when i go to - locals accounts payload for Tom i can see Alex and Jane too (however no come directory path) I can also see the accounts in directory utility on Toms local machine too  

Hi,I am trying to replicate a smb distribution point using jamf admin, but whenever it's trying to mount the share it adds http to the path. Is that expected / am I missing something? It also adds the share name at the end twice, which doesn't make sense to me? So it's trying to connect to:smb://http://sharename.domain.com/jamf/jamfbut the address should be:smb://sharename.domain.com/jamf/ - at least that's how I can connect manuallyOr does jamf admin use some other way to connect I'm not aware of?Thanks,Georg 

Hi! How can i do individual appleid for every mac? Now we have 1 for every mac in admin user, but with that locator doesnt work well. What i want - 1 mac 1 appleid to locate them.

HI,Does anyone have a working script to add asset numbers to iPad records using a csv file?We want to scan serial number and asset tag at 1 to 1 rollout, and then upload to put asset number into the iPad record.Thanks!Sandy

Hi, is there a way to prevent users signing in to the MacBook with an Apple ID? In a Configuration Profile in Restrictions, I have the following: Preferences -> -> Disable Selected Items -> Apple ID Preference Pane, iCloud, Internet AccountsFunctionality -> Disable -> Allow Internet Accounts modification in System Settings (macOS 14 or later, supervised) But users can still go into System Settings and sign in to their Apple ID. 

Jamf support has been nothing but useless the last week regarding the issue that all users who update from 12.0.x to 12.1 are being demoted from Local Admin to Standard User.Anyone any clue why this is and how to prevent it?Nothing has changed on our pre-enrollment side. Once we wipe a demoted device and re-enroll it the user is local admin again, but now on 12.1

We are using Jamf Connect for our Macbooks and during provisioning, there is a way to make it call DEPNotify without a user logging in. We can't use Jamf Connect on our labs because we could not make it work the way we wanted to with Google as the authentication source. So we're stuck with NoMAD for now, which is fine but I wanted to be able to run DEPNotify similar to how Jamf Connect does it (without a user logging in). Anyone have suggestions how we can achieve the same?

A couple of questions that are interconnected: 1. Jamf needs a user to log in first in order to escrow the secure boot token required to be able to wipe the device from Jamf, right?2. What's the best way to create an auto login user during the provisioning process? I'd like to use this account to run DEPNotify (as it doesn't run without a user apparently; happy to be corrected if wrong) immediately upon enrollment completion and then delete the auto log in user and itself once it has completed it's run. This will also hopefully cause Jamf to escrow the secure boot token. 

How can we apply a single wallpaper on the login screen on public computers through Jamf?

I'm trying to install JAMF 11.7.1 on a new RHEL 9 box, I'm receiving the following error, "Verifying archive integrity... All good.Uncompressing Jamf Pro Installer 100%Starting the Linux Jamf Pro InstallationChecking installation requirements...Checking for a 64-bit OS...OKChecking available disk space...Warning: Available disk space is below the recommended 150 GB to install Jamf Pro. Ensure your server has adequate disk space before proceeding.Proceed? (y/n): yContinuing installation requirements...Executing set-java-home...JAVA_HOME is ''...Setting JAVA_HOME to '/usr/lib/jvm/java-21-openjdk-21.0.4.0.7-1.el9.x86_64'Checking for Java 11...Verifying JCE Unlimited Strength Jurisdiction Policy files...Could not install Jamf Pro because the following requirements were not met.Java Cryptography Extension (JCE) Unlimited Strength Encryption Required.For information on installing Java and MySQL, see related Knowledge Base articles on Jamf Nation.Checking if Tomcat is running...Passed To