Hello,I'm having trouble with packages out of Composer. I previously had been able to create packages and push out through JAMF Pro. However the JAMF signing certificate was accidentally deleted from my machine and I received an error in Composer that the certificate could not be found to sign the package. I tried reinstalling the cert into Keychain Access. I am pretty sure this is the correct one. It shows up in Composer now when I build the package, but when the policy is run in JAMF I get the error "Installation failed. The package could not be verified."How can I confirm the certificate is correct, or can I re-download and re-install to stop endpoints from having the error? Any assistance is appreciated.

Hi I am trying to upload iPad details using the API, this script did work it now wont it comes up with an error, would anyone be able to point me to what the issue isbellow is the error-:10: parser error : Opening and ending tag mismatch: br line 8 and p </p> ^ -:11: parser error : Opening and ending tag mismatch: p line 8 and body </body> ^ -:12: parser error : Opening and ending tag mismatch: body line 5 and html </html> ^ -:12: parser error : Premature end of data in tag html line 1 </html>And bellow here is the script#!/bin/bash ############################################################ #SCRIPT INFO ############################################################ CURRENTPATH=$( cd "$( dirname "$0" )" && pwd ) CURRENTNAME=$(basename "$0") CURRENTSCRIPT="$CURRENTPATH/$CURRENTNAME" ############################################################ # JSS Variables ############################################################ APIUSER="APIUS

Hi all,I have to deploy Enfocus PitStop Pro 24.07 via Jamf Pro, but I have struggles with that.I followed the guide what I found at Enfocus (this works fine with PitStop Pro 23):https://enfocus.my.site.com/customers/s/article/How-do-I-install-PitStop-Pro-in-silent-mode?language=en_USBut as I realized, the installer cannot install the files.When I open the PKG manually on my device and following the installation wizard, I'm stuck at "Choose Acrobat" step: when I choose my Acrobat DC the installer says: "Cannot link Acrobat bundle".Do you have any ideas what can I do with this?Thank you.

I'm trying to identify devices that have been enrolled using the Jamf School managed Apple push certificates in our iPad fleet as per this:https://learn.jamf.com/en-US/bundle/jamf-school-documentation/page/Jamf_School-Managed_Apple_Push_Certificate_Removal.html#task-1533 Prior to the UI update, I used to be able to identify them easily, following the instructions that were provided.Step 5 of section "Identifying Impacted Devices" from the link above says "....... click the number next to Devices."The number displays the correct number of devices (I can remember how may we had), but when you click on that number, all devices now get displayed.I'm hoping someone can show me how I can discover which devices are using this Jamf School managed Apple push cert.Thanks.    

Suddenly, as of a few days ago, users are prompted on every login to allow Jamf Connect to access their Google accounts. They need to scroll down and click Allow every time.The only thing that's changed recently that I'm aware of is that Jamf Connect version 2.35 went out just before the issue appeared. I tried rolling back on a test device with no luck though. Laptops are all on at least 14.4.1 of Sonoma.I found two old posts with a similar issue, but neither state what actually fixed the issue: Old post 1 and old post 2  

I mostly see this with apps that update often or are set to auto update.I do see this on newly enrolled devices and also those that have been enrolled in 2 years or more.Inventory shows the app name, but the app version or app short version is blank.Numerous inventory update or restart commands issued.I see this on my production network as well as away/unmanaged networks.Support had me initate update inventory command, and I see this fixes issues for some devices but not all.Ideas?

I'm the new admin at my school, but apparently this problem has plagued our 1:1 Macbook program for years. We whitelist/blacklist programs for a specific set of allowed functions, and our students get constant "You don't have permission to use the application [X]" popups. I'm talking 5-6 at start up and multiple times an hour beyond that. The names of these processes have changed over time, but the most common ones are:MessagesActionExtensionTVCacheExtentionlauncherGoogle Updater (this one is recent, I might have the name wrong)among many others. I've contacted JAMF support and they said to allow /Applications/Utilities/ and ~/Library into the whitelisted folders directory, but this does not solve the issue. It also allows Terminal use which is not what we wanted.Trying to find and kill individual processes via Restricted Software has no effect positive or negative.

Hey guys,Something is really messed up for us with our Cisco instance.I have attempted to find anything and everything I can on this in JAMF Nation, but no luck so far.I pushed a Cisco Umbrella / Open DNS to all out MacBook Airs with 10.15.7, Then created a "restricted software" policy to block the uninstaller, the SCG was added to exclude certain vintage devices. Well it did not exclude those devices. The SCG does have all of them listed so we are really stumped by this one.I did go in and disabled the blocking policy, but it still does not allow the uninstaller app to run even after sitting all day. I have run policy and also recon. but that did not seem to help either.If I run the uninstaller as root does it bypass the restricted software policy?A policy was created that installs the app, but it is still blocked and it does not run the app, just installs the app.Is there a method to run the un-installer in a script? Still this leaves me wondering why I cannot disable the

I sent in a support ticket about this but they're not available yet so I figured I'd post here too. We use JAMF Cloud and every single package that we had uploaded to our distribution point has disappeared. Policy logs report that the files don't exist. The web interface says "availability pending" for each package. The text for each one appears in red in JAMF Admin. Has this happened to anyone before?

Jamf Concepts is a site to browse utilities built by Jamfs, for the Jamf community.    Jamfs often create fun and useful utilities to solve customer challenges. When these utilities cannot make it into our products, at least not right away, we still need a way to share them with you. That’s why we created the Jamf Conceptssite.    Jamf Concepts is an evolution of what Jamfs have been doing since our earliest days. Before, if a Jamf created a utility, it might have been be shared by Support, posted in Jamf Nation, in the Apple App Store or in our GitHub. The Jamf Concepts site gives Jamf customers a central repository to view, investigate and implement a utility.    To view our concept projects and learn more, please visit concepts.jamf.com.

do anyone have a script that will add AD Group Membership to OSX maxchine in AD. or a Apple script that will call a web service to addcomputergroup

Hello community.When I create or delete something on my Jamf site through api call (for example, creating a new policy with  POST on "/JSSResource/policies/id/-1"), I am getting a successful response with code 200 and the newly created policy's id.Then, I am trying to fetch all policies from my Jamf site (GET on "/JSSResource/policies"), but the response does not contain the newly created policy. Should I wait for few seconds before I fetch my policies and check if the creation succeeded? (Since I am running a code that does it I need to know how much sleep time I should add). Are there a different solution than doing busy waiting?All I wrote I experience for DELETE requests as well.Thanks in advance 

We used to authenticate our JAMF users (as owners of iPad-devices) against an Active Directory on our local Windows Server 2016 for several years. The server accepts only SSL connections and uses a special user for ldap-requests by jamf (no anonymous connections). The connections are secured by "Let's Encrypt" wildcard certificates which are renewed at least every three months. After each renewal I had to re-enter the domain-name on the organization/preferences/synchronization tab.This scenario worked fine since 2020. It works still fine for other services (e.g. our timetables by WebUntis, which authenticate via ldaps, too, and it's also used by our Nextcloud and by local scripts)Since several weeks it does not work any more: When I enter either LDAP-Server or LDAP-Port, there is an error "Fehler beim Abrufen des LDAP-Zertifikats" (Error retrieving the LDAP certificate). These errors are listed in our server's log:Event-ID 2085:Internal event: An LDAP over Secure Sockets Layer (SSL) co

Hi, I am looking for a way to sync my Exchange Global Address List to my users iPhones. But Jamf Pro seems to have no obvious way to do that. Can anyone point me in the right direction? Kind regards

i need to be able to isolate a single user with multiple machines, with very strict policies. any ideas on how to accomplish this?

Looking for a script to achieve this from JAMF Pro for  all the managed devices 

Is there any way to directly install the newest MacOS from the Recovery Mode for Macs with ARM chip? For example: I have an M2 Pro MacBook Pro that is currently on MacOS Ventura. Now I want to set it up for a new user, but if I delete the HD and reboot it in recovery I still can only install Ventura. I would have to install Ventura, Update to Monterey and then go through the whole process again.

Hi everyone,So I am trying to make it possible to ban certain apps depending on which grade the students are in. This would be really easy in a 1:1 environment, of course, but my iPads are in shared mode using managed IDs. I thought smart device groups would be a solution but this does not seem to do anything. Is this even possible with a shared iPad/managed IDs environment? Thanks a millionAlex

Hello Jamf Nation! This post is to provide you with an update related to the Microsoft and Jamf Device Compliance integration and the Conditional Access deprecation timelines. As of Jamf Pro 11.6 and 11.7.1, the Microsoft and Jamf Device Compliance integration can be fully leveraged in these environments. Jamf Pro environments hosted in Jamf Cloud, including Jamf Cloud Premium and Jamf Cloud Premium Plus  Jamf Pro on-premises deployments Microsoft 365 Government Community Cloud (GCC) and GCC High In Jamf Pro 11.7, an issue (PI119904) related to internal proxies was identified that might prevent some customers from migrating from Jamf Pro Conditional Access to Jamf Pro Device Compliance. This issue will be resolved in Jamf Pro 11.9, and this fix is available to test in the 11.9 beta. Customers who are not using an internal proxy are not blocked and should proceed with their migration. You can go to Jamf’s Known Issues page for more information about

Hi all, So a teacher reports that the students have found a way to bypass a lock to a specific app or a website. Apparently, if the student restarts the device, they will get thrown back into the app / website, but they won't be lock. Can anyone else confirm this?

Hi,How have you got Jamf Connect configured with Google Drive for cloud storage?Is it possible to automatically login to Google Drive app once you have signed into Jamf Connect?Or do users have to sign into Google Drive after?Thanks, 

Hi Everyone,So, I have about 85 iPads in a school running Jamf School, connected with the Apple school manager. All iPads run in shared mode and are updated to 17.4.1Since putting them all in shared mode, I have needed to start using managed IDs, obviously, but the message "sign in to iCloud" keeps re-appearing for all students and teachers. They can put their code in, and it signs them correctly, but the problem is, especially when working with young kids, that they click the message away. They need to be signed in because otherwise, they can't sync up to the cloud with pictures and settings, etc. Has anyone else had this problem and found a work around for it? Any input would be really appreciated.CheersAlex

I've been looking at finding unique ways to deal with the x-vpn, its tricky in bypassing our firewall. From what I can see it creates a tunnel to a private network within the client machine, and then passes the traffic via https, through a series servers categorised as content servers, is is needed for access via the firewall as most of the time this will be a sever that is side loading content for a general use website. and with 8000 servers for it to chose from, its not so easily blocked. I had implemented a certain level of application blocks, which are circumventable, if you know what hidden files to look for and delete, and for some of the more savvy users it still remains in use. my latest consideration of attack, is to see how to set route or a gateway for the utun6 connection it creates, that directs any traffic within the 172 network range, back to 172.0.0.1netstat -nrshows what gets routed and how when x-vpn is connected: Internet: Destination        Gatew

Hello party people.So, we had a bit of a shakeup a few months ago, and people got let go. A couple of people took the chance to take their computers and "forget" to bring them back.There's one machine, a M1 MBPro, running 13.2.0, that its owner seems to have absconded with. After verifying that they was no longer employed, I sent the Lock Computer command with the Remote Lock Passcode set and a friendly message suggesting they call us. Thing is, it's still saying Pending and the machine has checked into Jamf twice a day since. I canceled the initial try and redid it this morning, and the Last Push coincides with the date this computer last checked in...  So, the machine is checking in, and I don't think that the Lock Device is firing. I've done some searching, and there was an issue with M1s and earlier OS versions, but that isn't it, I don't think. Any ideas?

Hello,I am not sure if I am looking for the wrong item or not wording my search correctly to find anything relevant but is there a way to disable or delete the wireless connection or options on our Macs that are hardwired with ethernet. We have students connecting to our wireless that requires authentication which then breaks the connection to the internet. They assume because it's not on wireless it loads slower or doesn't have internet.  The only configuration item I see under the configuration profile is to define a SSID, but I'd like to disable it all together.