Hello,Is there any way to know if a macOS software update is ready to be installed ? Ready as, Downloaded. My current problem is this:I created a script that prompt users (based on the "Number of available updates" criteria) whether they want to apply an update or not, and they can postpone this twice. On the third occurrence they will be forced to agree to install the update.We want to force them to install the updates, but they have to be able to postpone it in order to not have the update apply at unfortunate moments. With the 3 steps deferral method they can see it coming cause we display the remaining count of "pospone" available.One the update is accepted or forcibly applied, the script simply run this command:softwareupdate -iaR(--install --agree-to-license --reboot)Though, most of the time this doesn't work, for some nothing happens. for some the 4Gig update takes forever to download (despite our high speed company's network) and eventually drop.This is painfull because it

We experimented with profile settings a little bit but removed the profile in the end. Since then, there are a number of students report that the Safari app, camera and bluetooth/airdrop won't work anymore on their devices. But this is a minority. I have looked at the iPads in question and I cannot see anything in the settings that would cause this. Any ideas?Thanks.

So, when my dev wants to run the console to debug his application, console (after you hit "Start") requires an admin username and password.  I can't remote into his system every time he want to do run the console debugging.  I have done a bit of Google searching and found so many different scripts, etc I am overwhelmed.  Can anybody give me good direction on this?  

Hi Jamf users,I'm facing an odd and recurring issue with random users, from time to time the enrollment break and the end users is no longer received updates, use the Self Service and son on. We have to re-enroll the computer using : jamf enroll -promptSo I was thinking of making a small shell script running everyday on computer checking if the commande jamf policy returns the error Device Signature Error and if "yes" starting JamfHelper and displaying a message to contact the IT.My script is the following :#!/bin/bash output=$(jamf policy 2>&1) if [[ $output =~ "Device Signature Error" ]]; then /Library/Application\\ Support/JAMF/bin/jamfHelper.app/Contents/MacOS/jamfHelper -description "Please contact IT immediatly" else exit 0 fiThen I've written a LaunchDaemon : com.pretendo.JCE.plist to start at login and run it every 2 hours :<?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/Proper

Hi !With iOS 17 Apple introduce the profiles in Safari. When you create one, all the favorites web site, cookies and history are stored inside this profile. And when you delete this profile, all these things are deleted too. That's the new way our student's hide their history of navigation with Safari. I don't find any restrictions about that. Do you have a tip to disable / avoid / hide these profiles ?Thanks.

Hello Peeps, SOS! We were able to use Local Login when the device was not connected to the internet. Suddenly, the function was off itself. Could you guide me how to resolve this issue?Thank you!! 

We seem to be seeing people being randomly logged out while in the middle of using their Macs (so not locking due to inactivity) its logging people fully out so they then have to log in using Jamf Connect but for some reason also locks out the screen so nothing responds, All we can do is a hard reboot. Is there anywhere we can check in Jamf Pro for any indication of what is causing these random log outs.

Hi there, Has anyone figured out a way to make the local admin account created in prestage into volume owner (post prestage)? The behaviour I've see so far lines up with Apple's documentation on this topic which is that the first user signed in gets the bootstrap token.I know it's possible to manually grant the local account volume owner status but that requires the current volume owner account details which in our environment is the local accounts created by Jamf Connect all as unique usernames and passwords so this cant be scripted and automated directly.

Bonjour tous,Nous avons quelques soucis de gestion réseau pour JAMF. Est ce que quelqu'un aurait l'intégralité des accès à ouvrir pour que Jamf version cloud fonctionne parfaitement. Il semble que des IP d'accès changent régulièrement ...Merci beaucoupPY

I am getting the message saying "Self Service is a component of Jamf Pro, developed by Jamf. This app must be associated with a Jamf Pro Server. Contact your IT administrator for more information." We use automated device enrollment and the iPads experiencing this issue are enrolled into our Jamf instance. Our Self Service app is set to be installed manually to avoid Apple IDs. I have already set up the app configuration as seen on the Jamf Pro documentation. Is there anything else that I am missing? Thank you!

I've currently got an iMazing Config profile and a Jamf Login Configuration profile that is restricting everything including these 2 items but despite both of them restricting the Apple ID and Siri prompt for login, new users are still getting this! Does anyone have any ideas? 

What's the best way to silently uninstall Backblaze off people's computers? We've had it for awhile and recently decided to stop using it, as it wasn't being used and move people are just using OneDrive or Dropbox accounts we've given them. I know there's a guide from Backblaze itself, but it seems to require other steps: https://help.backblaze.com/hc/en-us/articles/115003602813-Silent-Uninstaller.

 Hello!We already use Jamf School in our school.Now we would like to use the “Jamf School Student” app.We would like to prevent the request for data protection information and access permission for Bluetooth, notifications, etc. from being displayed when the app is opened for the first time.With a managed app configuration, we want to allow the corresponding access, etc. during installation.Maybe someone has an idea what the managed app configuration could look like?Thanks!DominikDeutsch:Hallo,in unserer Schule nutzen wir bereits Jamf School.Nun möchten wir zusätzlich die App "Jamf School Student" nutzen.Wir möchten verhindern, dass bei erstmaligem Öffnen der App die Abfrage zum Datenschutzhinweis und die Zugriffserlaubnis für Bluetooth, die Mitteilunge etc. angezeigt wird.Mit einer verwalteten App Konfiguration möchten wir die entsprechenden Zugriffe etc. schon bei der Installation erlauben.Vielleicht hat ja jemand eine Idee, wie die verwaltete App Konfiguration aussehen könnte?D

Hey everyone,  I have three issues with Jamf connect and would love some guidance please.  Issue 1: Everytime I reset my machine and login through the jamf connect login window it always reverts my admin account to a standard how can I have it not do that?  Issue 2: Upon multiple restarts the Authchanger doesn’t kick in and the login window still appears and when it does work it will work on the second restart but we want the login window to disappear on the first restart  Issue 3: We use our company logo for Jamf connect menu bar but once it launches it show the default menu bar then upon restart our company logo appears 

Hello,I have enrolled a new macbook on the MDM server without PB.But I can't see it on jamf pro and I don't know why . Do you have any suggestion ?Thank you

Hello !Since the last update of Jamf Pro and the dark mode (Many thanks for that !!!), I now have the management interface switching back to french to each new login despite the fact that the account preference for the language is set to english. It's better for me to have the interface in english than french because most of the informations I need are in english and thus, it's easier for me.Is there a way to lock the language preference once for all ? I already removed the cookies and data for the website but it changed nothing...Thank you for your help !

So we're a Jamf Pro school with iMacs and iPads--iPads are for grades preK-3. All commands for all iPads are stuck at pending (no failures, just pending) and they haven't checked in since 3/31/2023. All devices have internet access, they're just not getting any policies or checking in at all.iMacs are fine. I don't believe it's a certificate or token issue, but not sure what it could be. I'll give Jamf Pro support a ring in the morning, but figured I'd throw it out there in case anyone has a quick fix. Devices are all running current or reasonably current iOS.

Hi All,I need to find a way to set MacOS to use Microsoft Edge as the default browser.  Either by script or config profile.  Alot of auth/token services do not work with Safari on Monterey so would like to avoid using it altogether.  We would also like to give users the option to move to a MacOS device and a good attraction is the ability to sign into Edge (which they used on their Windows machines) and have their favourites, browsing history and cookies appear on the MacOS version of Edge. Any help would be greatly appreciated. Gavin

I am trying to create a smart group that will show me Macs that have been booted for more than 7 days. Many times, my team gets support tickets from users that would not have been necessary if they had rebooted their Macs at least once a week. I love that Macs can stay booted for a really long time. My record is 92 days, but to get there, I had to put up with some quirks and minor issues. I just wanted to see how long I could go between reboots. I don't want my users doing this, so I want to create a smart group for Macs that are booted up longer than 7 days, and then display a message asking them to please reboot soon. I have found extension attributes that will show me the up time, or last reboot, but when I go to create the smart group, the operator shows only is, is not, like, and not like. What I need it to show is something like "more than X days ago". Does anyone know how I get this? Maybe I'm using the wrong extension attributes?

The jamf profile description file is incompletely deliveredThere are 10 files, but only 5 can be installed

hi all, i need some advise input from anyone about my environment. we just recently build a new NDES Cert server and we use Azure App proxy pointing to our NDES to deploy 802.1x certificate to allow our azure joined windows devices access to our wifi (we use Cisco ISE for authentication and authorization). We currently have our macs bound to the domain to allow cert request (so it can request cert from the old CA if its in office). We recently got our Jamf Connect setup and have no reason to bind to domain anymore. I want to ask anyone advise of what is the best practice for us to deploy our 802.1x cert to our mac that will be Jamf Connect only? is it possible to integrate our Jamf cloud with our Azure app proxy for certificate deployment (just like intune - windows)?Or do i need to go with Jamf AD CS Connector? or do i go with setup Jamf SCEP so it can point to my NDES server (on prem)? i prefer not to do this as I want to limit the amount of network connection between my NDES servers

Hello, I noticed that "private navigation" is now accessible on Safari despite using a "web content filter" profile present on the devices. Deleting history is still impossible. Thx.Christophe

Hello everyone,I'm looking for help deploying AppleScript through Jamf Pro. I know the basics of bash scripts but almost nothing about AppleScript. I got the following AppleScript from one of our network administrators:tell application "System Events"set macUser to name of current userend telltryset FortiDir to POSIX file "/Users/Shared/Fortinet/Forticlient"set ztnaConfig to POSIX file "/Users/Shared/Fortinet/Forticlient/ztnaconfig.json"set FortiDir to POSIX path of the file FortiDirset ztnaConfig to POSIX path of the file ztnaConfigdo shell script "chown -R " & macUser & " " & FortiDir with administrator privilegesdo shell script "chmod 755 " & FortiDir with administrator privilegesdo shell script "chmod 644 " & ztnaConfig with administrator privilegesdisplay dialog "BW FortiClient permissions patch successful"on error theErrdisplay dialog "File permissions update failed for " & FortiDirend tryI tried to deploy it as a shell script in Jamf like this:#!/bin/bash

I feel like I'm just missing this somewhere, but is it possible to query the api to find the Jamf pro management ID? I know where it lives in the console but I would like to programmatically send a wipe computer command to device through this endpoint: https://yourserver.jamfcloud.com/api/v2/mdm/commands and that requires the Jamf pro management ID. If there's a better way to wipe a device other than this endpoint, I would also like to know. Thanks!

Not directly related to Jamf, but for those of you working in Colleges and Universities, what are the benefits of managed Apple IDs for your users?  This is via SSO/Federation in Apple School Manager.