Hi all,We are still trying to get used to Jamf Connect and when our users try to use the local login it doesn't show their account. It shows the Admin account and Other account.How do you get Connect to show all of the Local accounts on the device? 

Hello Everyone,possible i oversee anything drive me crazy.We have a Jamf Pro setup, all standard with Infrastructure.I facing the Problem the Department field mapping does not pull the data form AD, fun fact if i enter department in the Room Field it does. So the connection between Jamf Pro and AD LDAP are working correct.Yes, i can pull the data into JAMF by JSS etc, but this does not solve the issue why on our side the Department Data not pulled automatic with mappings. Anyone an Idea what i can additional check to get this working except open an support Ticket :)ThxAndreas 

I am looking for a "reliable" way to find out what network is the computer using. I think I have the WiFi part working.check_wifi_status() { local wifi_interface=$(networksetup -listallhardwareports | grep -A 1 Wi-Fi | awk '/Device:/ {print $2}') if [ -n "$wifi_interface" ]; then local wifi_status=$(networksetup -getairportpower "$wifi_interface" | awk '{print $4}') if [ "$wifi_status" = "On" ]; then local ssid=$(networksetup -getairportnetwork "$wifi_interface" | awk -F': ' '{print $2}') echo "WiFi status ($wifi_interface): On" echo "Connected to network ($wifi_interface): $ssid" else echo "WiFi status ($wifi_interface): Off" fi else echo "WiFi interface not found" fi }With ethernet, users can be using different brand name docking station and also other network adapter/card may not be an actual working ethernet adapter. Some could be for ZTNA or Netskope or some other service u

Hi folks,We have a policy for our Core Apps that is set to execute once per computer each day and is triggered by a check-in. This is to ensure that users don't delete apps that they shouldn't delete, and if they do then running this policy should re-install any apps. There are multiple apps that use this same event trigger "Core-Apps".I'm currently in the process of developing a new enrolment procedure, however in testing it appears that a recurring check-in is occurring and when this happens, the enrolment process halts until the Core Apps policy has complete. As you can imagine this increases the time it takes to perform the enrolment. The Jamf.log states the following:"Checking for policies triggered by "recurring check-in" for user..."Previously, we have used this trigger to install all the core apps during enrolment, however this doesn't provide very good on-screen feedback, so instead of this I've created separate enrolment policies for each app so that better feedback can be sh

We have an iPad that has been sitting unused since November while the employee it was assigned to was laid off for the winter (we are a construction company and have a lot of seasonal layoffs).  The user is ready to start back up for this season but can't remember his passcode.  We issued the clear passcode command but there are several commands including the clear passcode that are stuck in pending.  The iPad is on LTE with Verizon.  The only WiFi it was ever connected to had it's password changed a while ago and one of the pending commands is the one to push the new WiFi information out to it so connecting it to WiFi appears to not be an option.  We have tried several incorrect passcodes and have been locked out several times, 1 minute, 5 minutes, 15 minutes and now 1 hour.  Has anyone had this happen or have any suggestions on what to do?  We don't care if it resets itself and we can start from scratch but it seems it needs to get it unlocked to ha

The Cisco anyconnect uninstaller ( from gui or running uninstaller from command line) has popup box that has two options, 'uninstall' or 'quit'. Is it possible via command line to have it choose 'uninstall'? I have a simple script to uninstall, but in testing the script I get the popup box, so I'm assuming running the script via Casper it will not work due to the popup box.

We want to build a python script for our suppport team, that allows them to send the shard user lot out command per script to a list of devices.We have not found a documentation for this commands.Does somebody have infos about that ?

Is there a way to only update an extension attribute's value if it hasn't been populated yet? If the field is already populated, I want JAMF to leave it alone. Something along the lines of: if ""; thendo this commandecho the resultfi not sure if there's a field or variable associated with it... in MUT, I know it would be EA_4 or whatever the ID is, but not sure if JAMF uses the same term.

Hi there, We make use of AdminByRequest to escalate local users in our environment. Unfortunately ABR doesn't work 100% for apps like Rancher/Docker. Since we have Jamf Connect, would it be possible to create a self service script that will escalate users to admin, launch docker then de-escalate back to standard user and would it be possible to make this a desktop shortcut pointing to the self service icon?

Has anyone got this to work? I keep getting a sync error. https://freshservice.com/product-updates/jamf-pro-freshservice-integration-blog/

I'm curious to know if there is a way to automate ticket creation in Jira based off machines that fall into scope of a certain smart group? For example if a machine falls to a smart group that has a criteria of 'FileVault not enabled' a jira ticket would then be created and I can assign to my peers accordingly. Im curious if anyone is currently doing this? Our current Jira version is 7.2.x ( I know its old, not my team...)

Hey All,So, I was informed by Jamf Support that CA Cert on my JSS was expiring in a few short days.  It's not, which they confirmed.  It was renewed on time, and now does not expire until 2034.However, it appears that some devices have not received the updated CA.  I don't have a grasp yet on how many, but its greater than 2.My question- Is there a way to force devices to update the CA, via the JSS console or the API?Does the "Renew MDM Profile" command also renew the CA cert on the device? Its not entirely clear from the documentation if Renewing MDM Profile also replaces the CA on the device as well.Thanks

I setup a test config profile with the Proxies payload for our HTTP/HTTPS proxy. When installed, we get prompted to go to System Preferences to enter our credentials like normal, but when we go to a specific network interface like WiFi > Advanced > Proxies there's nothing actually under HTTP/HTTPS proxies. We removed the profile, but the proxies seem to be persisting, so I want to clear them out.

Hello Everyone, We are approximately six months into Distance Education at our K12 institution and are looking to push out a payload to route all student iPad traffic through Cisco Umbrella. We are currently using Umbrella district wide both for on-campus network filtering and also for all Chromebook traffic (including at home). We have successfully linked Umbrella with JAMF, as you can see in the below screenshot. The downside we are seeing is that in order for the DNS routing to work you must install the Cisco Security Connector. This is fine and all, but it also appears that this application must be opened prior to any data following through OpenDNS? Has anybody run into a similar scenario and found a solution? It feels like our department can do everything on our end to get this ready to go but if the student doesn't open this app at least once they will be able to browse unfiltered internet. Here is the link to the official documentation from Cisco on deployment.

I have a few devices in my environment that have XCode 15.2 installed, and the business unit is needing to update them to 15.3. Most devices have 15.3, and these devices had failed MDM commands that I cleared a couple of hours ago.   I already clicked force update button in the Mac App's policy, but I'm not seeing any MDM commands going around for that. Beyond uninstalling XCode, waiting for everything to sync up and Reinstalling XCode. Is there a way to reliably force the update?

Hi everyone,I would like to understand how do you generate system health historical report for device managed in Jamf. Due to current limitations in Jamf, We cannot get the historical data on CPU, RAM usage and battery health etcIs there any third party tool or automation that can help to address this issue

Does anyone know, if there is a way to export automatically specific user/s "Computer Usage logs?"

To all, we are trying to create a package for self-service to install and launch. I have followed the directions from tech support:1. Open the Endpoint Central Cloud Console 2. Redirect to the Agent Module3. Click on the Computers sub-tab4. Click on the Download Agent/Copy the download link for MacI followed the read me Follow the steps mentioned below to install/Uninstall Endpoint Central Agent:Installing Mac AgentMac agents can be installed manually in the computers that need to be managed. If a previous version of the Endpoint Central agent is already installed on the client computer, then uninstall it before installing the latest agent.To install the agent, log in to the computer as an administrator and follow the steps mentioned below:1. Login into the Mac computer as an administrator and navigate to the location where the agent is downloaded.2. Extract the zip file and locate UEMS_MacAgent.pkg and serverinfo.plist file.3. Double-click to install the agent. Ensure t

New to Jamf so I need help with a Mac screen timeout config profile when device is running on Battery, not plugged to power. I need the timeout to be set as 10 minutes.

Our end users have firewalls enabled on their mac. Turning it off is not really a viable solution. They use an application that is being blocked by the mac firewall. When I add an exclusion for the application, it does not fix it and this pop-up still comes up. I have verified the bundle ID is correct when I add the exclusion. The popup will still come up after the exclusion is added. The popup will only go away once I disable the firewall completely. So I am not sure how to fix this issue. I have read on mac forums and have not found a viable solution for this that does not involve turning off the firewall completely. 

Hello! I'm utilizing JAMF Pro for our school's MDM solution and have been encountering a strange issue lately where a newly configured iPad does not retain it's config profile requirement for 6-digit passcodes. Every iPad we set up receives several Configuration Profiles, one of which is the 6-digit Passcode. However, recently after setting the passcode the device stops asking for it almost immediately after receiving the push to install apps associated with it's static device group.I've been trying to determine the cause of this issue and would appreciate being pointed in any possible direction! 

I have got as far as configuring IPAD but getProfile Installation failed, and Profile was unable to Install.     

We have noticed that iOS MS Edge has forced the Sync accounts startup screen on Edge.  This was introduced in version 98.1108.56.  I put the following in the Edge app config section in Jamf, but it did not work.  Maybe these values are only good for Intune?!?!?<dict><key>com.microsoft.intune.mam.managedbrowser.account.syncDisabled</key><true/></dict>https://docs.microsoft.com/en-us/mem/intune/apps/manage-microsoft-edge  Wondering if there's any App Config that would disable this feature or how do people control MS Edge on iOS devices.

Hello,Is there any way to know if a macOS software update is ready to be installed ? Ready as, Downloaded. My current problem is this:I created a script that prompt users (based on the "Number of available updates" criteria) whether they want to apply an update or not, and they can postpone this twice. On the third occurrence they will be forced to agree to install the update.We want to force them to install the updates, but they have to be able to postpone it in order to not have the update apply at unfortunate moments. With the 3 steps deferral method they can see it coming cause we display the remaining count of "pospone" available.One the update is accepted or forcibly applied, the script simply run this command:softwareupdate -iaR(--install --agree-to-license --reboot)Though, most of the time this doesn't work, for some nothing happens. for some the 4Gig update takes forever to download (despite our high speed company's network) and eventually drop.This is painfull because it

We experimented with profile settings a little bit but removed the profile in the end. Since then, there are a number of students report that the Safari app, camera and bluetooth/airdrop won't work anymore on their devices. But this is a minority. I have looked at the iPads in question and I cannot see anything in the settings that would cause this. Any ideas?Thanks.