Hi All,I have never done this before, but I am trying to upload an iBook that I download from the App store (free book).  Every time I attach the file to upload it to my cloud distribution point, it is complaining that I am uploading a ibooks.zip file.  It is looking for just .ibooks, .epub, or .pdf.  Does anyone know a workaround to this?  Is this a way to convert ibooks to PDF?  I have looked around online but I do not see any tools that actually work.  Maybe this is a bug on JAMF's end?Thank you

Hey, y'all! I'm baffled and after much internet searching I need help!Our current setup is Mac lab computers bound to AD so that students can log in with their network accounts (also have a single local admin account). This creates a mobile user profile. I have a configuration profile with the following settings: Login Window / Window / Login Prompt: Name and password text fieldsLogin Window / Options / [x] Enable external accountsOn Ventura, our Mac lab computers would show the name and password fields when the screen was locked. If I remember correctly, it would show name and password EVEN IF the user hadn't logged out.Since Sonoma 14.1 or something, this is no longer the case. If a user leaves a computer and the screen times out and locks, it only shows the last user's profile picture, name, and password field, with no option to change this. I keep thinking this will magically return to the way it worked on Ventura, showing the name and password fields on the lock screen and lo

Hi there !Currently got a frustrating bug in Jamf Pro as it happens as soon as I log off (manually or via auto logout).I'm used to the interface in english but since the version 11 of Jamf and the new interface with translations, it keeps ignoring my setting to keep the interface in english and shows me french as soon as I login.Computer language is french, Chrome is used and empty cache/private navigation/Firefox got same issue.Timezone in Paris/Monaco does not change anything. How to reproduce:On top right corner lick on Account Settings when logged/Language & Region/ set language to english, save and logout.When I log back interface is back in french even if setting is still in english. Workaround:Set langage to french (but anything should work I think), save, set it back to english, save, interface back in english until next logout.Hope it can be fixed soon ! 

I've been trying to created a managed folder of bookmarks/favorites deployed via Configuration Profile to Microsoft Edge. It isn't available via the JSON custom schema.    I've uploaded this plist, borrowed from Talking Moose, using the com.microsoft.edge domain. This info outlines how the setting should work:https://docs.microsoft.com/en-us/deployedge/microsoft-edge-policies#managedfavoritesMaybe I'm missing how to make the setting "mandatory".Thanks for any help.

Have an application that I  want  to use with that (EndNote) but it needs some extra scripts to run (with SmartGroups) after installation but I cannot find the "Update Inventory" option after this application is installed. (manually) is that not available if you use Mac Apps ?thanks

HiAfter upgrading MacOS to Sonoma 14.4.1 Jamf Connect: Request Admin Privileges has stopped workingI got this error:User is blocked from further elevations due to system time tampering.

Can one display what site a Jamf deployed computer is in from the Terminal application on the client?

We have found ourselves in a situation where a user created an AppleID for the purpose of logging in to the Mac App Store to install some apps.When he did that, the Mac latched on to that AppleID and enabled all the goodies that AppleIDs can use - including Find My Mac.  The problem is that the user's Mac has died and needs to be repaired. The user has no idea what his AppleID password is and he's locked the account. Account recovery apparently takes 3 weeks to complete. Since Find My Mac is enabled and the user has no way of logging in on the computer nor on iCloud.com we can't disable it or remove the computer from the account.  We may have to write this computer off and move on. (Another similar situation that you may find yourself is that a former employee logged in with their AppleID, but didn't remove it from their account when they left and now the computer needs repair while that user is 100% unreachable)What I would like to do is identify all Macs that have an AppleI

I purchased and app through ASM that is compatible with macOS and iOS. I want to deploy it to our macOS devices via Self Service but it only shows up as a Mobile Device App and not in the Computer side. How can I make it available to the computer side?

I am attempting to install AndroidStudio 2023.2.1 on systems that are currently running 2023.1.  I am using the patch management system to deploy these updates.  I have taken the dmg file from Google and converted it to a pkg file with composer.  However when I push it through patch polices I get an error stating that the program is trying to install to the system volume.  See error below.  Any help would be appreciated. installer: Package name is AndroidStudio - Iguana | 2023.2.1 Patch 1 installer: Upgrading at base path / installer: The upgrade failed. (The Installer encountered an error that caused the installation to fail. Contact the software manufacturer for assistance. The package is attempting to install content to the system volume.)  

I've been down the rabbit hole of deploying Cisco's new Secure Client and I am running into an issue that I cannot find any documentation on. Some context: we only need the Umbrella Module for our school and nothing else that is loaded within Cisco's PKG. I have been successful with deploying the choice XML file, but I get the following pop-up in the installation:  I would like this permission to be enabled within the config profile I built in jamf, but I can't seem to locate any of the info I need to do so. I already have gone through Cisco's docs and pushed out the System Extensions payload, but that seems to be just for the Cisco Secure Client itself and not this "AnyConnect VPN Service." If I manually toggle it on, the Umbrella Roaming Module will activate and work as it should, but if this is not toggled on, then the roaming stays inactive.   Any ideas? I am assuming there is something I am missing in the System Extensions payload, but I could be wrong... 

Hello ,Need a suggestion with the macOS patch management.in our environment we are managing different OS version.Eg: we have 100 device with macOS 12 , 100 device with macOS 13 and respectively 100 device with macOS 14If we need to update patch in macOS 12 to latest 12.7.4If we need to update patch in macOS 13 to latest 13.6.6If we need to update patch in macOS 14 to latest 14.4.1What is the best practice we can follow , thank you 

Our mac users work off multiple servers we have. We just got them set up all on jamf a few weeks ago. They are testing out their new macs with Jamf. Whenever they make changes on one of the servers they mount, whether it is creating a folder or deleting something. They will get a prompt asking for admin credentials on this mac. Is this anyway to disable this? 

Thank you @DFree  & @MikeF - This worked nicely - I did some editing:Use directory: cd /Library/Application\\ Support/tmpDownload anyconnect-macos-4.10.03104-predeploy-k9.dmg from Cisco (or your vendor) and open it via installer (Double Click it in finder).Drag the AnyConnect.pkg file inside the .dmg to your tmp (for simplicity) and then do @MikeF's steps (4-9 below):Open Terminal and cd /Library/Application\\ Support/tmpPkgutil --expand AnyConnect.pkg AnyConnectVPNWent to the tmp folder, opened the AnyConnectVPN folderopened the AnyConnectVPN/Distribution fileLook for <choices-outline> <line choice="choice_vpn"/> lines starting around line. Delete the ones you don't need, and Save. (I Used Xcode to edit the file)pkgutil --flatten AnyConnectVPN AnyConnect_4.10.03104.pkgUpload that pkg file to JSS and go from there in however you want to deploy it.

Hi,We are in the process of setting up Jamf Pro and added our Azure tenant as a cloud IDP. Jamf Connect has been setup so we are able to sign into the device with our AAD credentials and the account is synced with a local account on the device. This is working as expected. I am slightly confused as the User and Location information is missing from the device inventory, should this not be pulling the information from our Azure cloud IDP? Also is it possible to target applications/policies and configuration profiles with AAD groups?Apologies if this is a simple answer however we are new to Jamf coming from a Windows background so slightly confused at the moment!TIA.

Hi All,We presently have behaviour where devices which are registered and marked as compliant in Entra using partner compliance are showing as unregistered and failing.  These failures appear to be sporadic and some devices are showing as successfully bypassing the CAP with the same apps and registration status.  Re-Registering doesn't seem to fix the problem.Has anyone else had this?  We think this may have occurred after turning off partner SSO last week and requesting people re-register for compliance as it hadn't come up in testing prior to this.Is anyone else still having issues with conditional access policies.

For some years now we've been encountering the odd mac where even though newly-enrolled, the local admin password does not work. With no way to login, we were reduced to Recovery Console, wipe and re-enroll.  To mitigate this we created a backup admin account to allow us a way in, but with the advent of Secure Token things have got weirder. Has anyone experienced this?  Here is our setup:1. Our student macs are enrolled with a prestage where a single local admin account "Admin1" is created before setup assistant.2. A Jamf policy then creates a second admin account, "Adminbak". 3. Setup assistant does NOT create a local account, instead we later bind the macs to ADS and network users then logon.  Adminbak was created to be the first account created after setupassistant, so it would get Secure Token. Our onsite techs can then logon to each machine with Adminbak to enable bootstrap.Here are our symptoms:4. We are finding that Admin1 has Secure Token instead. We don't k

Curious how everybody is remediating that new supply chain vulnerability for XZ.   My security team sent me this link - xz-backdoor-attack  I'm guessing an EA to locate non-patched versions, but what about deploying/updating the version?  I'm guessing a lot of them were done using brew.    

With the loss of the Teacher WebApp, 50% of our teachers can't control our student devices. This is a really big problem!We need a device-independent control for teachers! So please bring back the Teacher WebApp.

Does anybody know what field the "Display Name" attribute in JSS MUT maps to in the JSS? Is that the Computer Name? Thanks.

We are new to JAMF. Our JAMF instance is on Cloud and we have Infra Manager. Firewall ports are opened to connect to Inframanager. However we are not able to query any users. If we do a test. Below is the error message. Any suggestions are appreciated. ERROR:Unable to connect to the LDAP Server. SUGGESTION:Ensure that the username and password provided are valid. Infra log is as belowClosing connection because of SSL problem: Remote host closed connection during handshake.

Anyone has a reboot script that Allows deferral and uses Jamf Helper?. Would like to attach it to an apple updates policy. After the policy runs, it should prompt the user to restart the machine. The user should be allowed to postpone that reboot at least once before it reboots on its own. I have seen some that uses CocoaDialog. We cant/wont use Cocoadialog here at our company.

A few users updating from 13.6.4 to 13.6.5 have run into an issue where all the background applications have been removed. There is also trouble running some supplemental apps like the 1Password desktop app and Privileges app. It doesn't seem to matter if the background application was associated with an MDM payload. Even the jamf processes end up not running. Has anyone else had this issue? The users can log in, but since all the background services are wiped out many things like VPN, Jamf and Security software no longer function. I guess it isn't a black screen this time, but still.

Hi all,I'm new to Jamf Connect so I might be doing something wrong, or forgot a step somewhere. Whenever a user is logged out and they want to login again, they see the Windows login screen. How can I disable that so they only see the local user that Connect created? Is that even possible? Now they have to type in their email and password, and knowing the end users, they might see that as too much work or confusing :)Bit of background info; I'm using Jamf Connect in combination with Jamf School. If you need more, let me know!Thanks!

Hi everyone, We just implemented Jamf Connect and are still testing it. We had issues with devices randomly getting kicked off AD, so since we are on AzureAD now, we decided to get Jamf Connect. When we set everything up when a user logs in, we can reboot the machine, and someone else can log in. Now, after a reboot, no one else but the last user can log in. How can I get out of this? What are your best practices for using Jamf Connect in a lab environment?  Thank you