We're rolling this out next week. Anyone have issues and if so, what were they?

Looking to pass custom scopes to jamf connect using entra ID. I've attempted to add it a few times, but am doing something wrong. Everytime i attempt to use the scope, the app breaks. Wondering if anyone else has gone through this process!

We encountered a problem with our APN certificate; it was mistakenly replaced rather than renewed. We had to track down the previous Apple ID to renew and restore it, preventing the need to re-enroll all devices.Additionally, an automated enrollment token expired. A technician uploaded a new token from our Apple Business Manager account and created a new pre-stage profile, assigning all devices to it. However, the old token still appears in settings > global > automated enrollment, marked with a yellow alert and a "sync failed" message; the last sync for both tokens occurred one minute ago.A iOS device was wiped for re-enrollment and is now stuck on the remote management screen displaying"Jamf Pro enrollment issues, the configuration profile could not be downloaded the MDM server certificate is invalid."Although initially enrolled with the now expired token, it was assigned to to the new profile using the non expired automated enrollment instance. No devices remain assigned to th

Greetings all,We are in the very earliest stages of setting up Okta.  I'm currently working on configuring our JSS Dev environment to use Okta for SSO.I'm working directly with our internal Identity Management team who manages our Okta instance.  They setup the integration on the Okta side, but I have no idea how they went about it.In the JSS dev, I've enabled SSO using Okta, added the necessary metadata URL provided by the IAM team, etc.When attempting a login, I am presented with the expected Okta user name screen, followed by the password screen, suggesting that the login process is working (and I've received notifications of a successful login), but then directed to an error message:Safari can't find the server.Safari can't open the page "https://https//<mysandbox>.jamfcloud.com/saml/SSO" because the Safari can't find the server "https".Note the extra "https// in the Url.The Okta team says everything is OK on their end, and I've reviewed the JSS SSO settings with th

Hi,if i want to be sure that after deployment with Jamf a file (i.e /usr/local/bin/dockutil) persists on the mac, what is best practice to accomplish that with jamf?I think a combination of Extension Attributes, Smart Groups and Policies will work, but I'm wondering if anyone has figured out what works best yet. Maybe so that it is universally applicable and easily reusable.Maybe someone has written an article about it?Many thanks in advance 

Today we are releasing a maintenance version of Jamf Pro. Jamf Pro 11.3.2 fixes the following product issue: Jamf Pro Server [PI116625] Jamf Pro no longer sends duplicate RemoveProfile commands to computers in the scope of a configuration profile; the duplicate commands caused HTTP 503 errors.   For additional information on what's included in this release, review the release notes via the Jamf Learning Hub. To access new versions of Jamf Pro, log into Jamf Account with your Jamf ID. The latest version is located in the Products section under Jamf Pro.   Cloud Upgrade Schedule Your Jamf Pro server, including any free sandbox environments, will be updated to Jamf Pro 11.3.2 based on your hosted data region below. Review this guide if you need assistance identifying the Hosted Data Region of your Jamf Cloud instance. If you would like to upgrade manually, navigate to https://account.jamf.com/products/jamf-pro and click Upgrade (Standard Cloud) or Schedule U

Monterey: https://swcdn.apple.com/content/downloads/44/03/052-69776-A_IHW739H9C3/904vsye1mrk5aq7zghtggnknxt40s9rz2d/Safari17.4.1MontereyAuto.pkg Ventura: https://swcdn.apple.com/content/downloads/32/05/052-69305-A_SZ6GUIGGCN/qsqqizujnfycg5iqr2re99l9qbpofbvi3k/Safari17.4.1VenturaAuto.pkg As always, remember that you cannot downgrade Safari without reinstalling macOS.

Hi all!I've created a nice little Extension Attribute which will list any pending updates for installed Adobe Creative Cloud applications. #!/bin/bash # Check if the Adobe Remote Update Manager (AUSST) is installed if [ ! -e "/usr/local/bin/RemoteUpdateManager" ]; then echo "<result>Adobe Remote Update Manager (AUSST) not found.</result>" exit 1 fi # Run the Adobe Remote Update Manager and capture the output output=$(sudo /usr/local/bin/RemoteUpdateManager --action=list) # Check if no updates are available if echo "$output" | grep -q "No new applicable Updates. Seems like all products are up-to-date."; then echo "<result>No new applicable Updates. Seems like all products are up-to-date.</result>" else # Filter and print the available updates updates=$(echo "$output" | grep -o "\\([A-Z]\\+\\)\\/[0-9.]\\+\\/[a-zA-Z0-9-]\\+" | grep -E "ACR|PS|AI|ID|AE|PR|AU|DW|FL|ILST|PSST|IDSN|AICY|PSCC|IDCC|AECC") if [ -n "$updates" ]; then

Hey All,Still pretty fresh to being a JAMF admin and had some questions. When I picked it up I know that we had a local, hidden, admin account created during the PreStage and that works wonders when something auto enrolls. Although on the off chance that one of us have to manually enroll the device, the local account we create does not always populate. I see that in the Global settings there is a section for User-initiated enrollment, will this assist with creating local accounts when someone does it themselves or am I misunderstanding this? Is there a better way to make sure the local account we want get setup when someone manually enrolls a device?

I created a package using jamf composer, These are the error messages I get when trying to install. For some reasons the package install works on newer devices (2020 MBAs) and failing on older devices (2017 MBAs)After searching for some suggestions I changed the package validation to never instead of "when checksum is present". This is the error after changing that setting. Any suggestions why it is not installing on the older MBAs? 

Hi, We use the Jamf SCCM Plug-in. With Jamf Pro 11.5 removing the ability to use basic API authentication, what solutions are you moving to? Any workarounds? All ears and curious about what other Jamf SCCM Plug-in customers are doing. Thanks a lot...   API basic authentication deprecation In Jamf Pro version 11.5, the ability to use basic API authentication will be removed. Before upgrading to this version, review any scripts or extension attributes using API calls and update the authentication method to use a bearer token.  

Hey everyone, Is there a way to increase the size of the Jamf Connect login window? And if so how can I go about doing that?

Hello everybody !I'm encountering a rather blocking problem in JAMF Pro.I need to enable the AirDrop & Handoff option in the General tab of System Settings to allow users to configure AirDrop.I have excluded my MAC from all the configuration profiles that I deploy, but despite this, I arrive on the page 'AirDrop and Handoff settings are not available' "These settings are controlled by a profile", while the button to access the settings is not blocked. Do you have any idea how to unlock these settings? Thank you !

whats the best appoach to deploy new Jamf Protect plan in to machines?currently we have a Default plan that is deployed to all Macs using configuration profiles in Jamf Pro. I want to either deploy a new plan that has tamper prevention enabled or edit an existing one to enable it.what is the best way to fix this?it’s enough to edit the current profile and deploy it in Jamf Pro and I don’t have to create a new one?

I have a customer who has a couple dozen BYOD iPhones that were user enrolled into Jamf as personally-owned devices. We set the iOS Self Service app to automatically install, as well as a few other applications such as OneDrive, Outlook, etc. Users are being prompted about once a day to install applications that are missing, including Jamf Self Service.If they tap on "Cancel" when prompted to install, should Jamf be prompting them every day to install the missing applications? Is there any way to only prompt them once?Thanks!

I am attempting to download the macOS version of the JAMF Pro Server Tools from account.jamf.com and have an issue.No matter which version I choose, they all download as a plain file with no extension, when they should be downloading as a .dmg. Even if I add the missing .dmg extension I still cannot open the downloads.This was working great yesterday, but it seems like after the new version of Server Tools for macOS was added today, it’s broken.

Per the newly issued Apple Doc https://support.apple.com/en-us/HT208019 , any new enrolls I have for clients running macOS 10.13.2 need the MDM Profile to be "approved" by a user (any user!) in order to have full functionality. Is this something that JAMF Pro will be able to work around? (I'm on 9.81 at the moment) Is the only real "solution" to this enrolling in DEP? (the distributed nature of our organization makes DEP annoying at best) This seems like a case of Apple creating a problem that DEP is the solution for. The profile functionality being disabled is listed in the following screenshots.

Hi All!We are using Account Driven User Enrollment for our BYOD program. I haven't seen anything directly stating no or yes to this so some clarity would be great! Is there a Profile that can be pushed to block an email domain from being added to the native mail app? We are wanting users to only use Outlook. I feel like Microsoft Exchange may have a policy, but I don't think Jamf can do this since this would affect a user's non-managed Mail app. I may be overlooking something simple, but the more eyes, the better! 

Using the Jamf Pro API (not the classic), I'm trying to find out the best way to search for a specific device when you do not know the JSS ID.So far the closest I can find is searching by mac, or mobile device, and then parsing through up to 2000 returned items. We have about 10K macs and 18K mobile devices so that isn't a very quick process. I was hoping to  do it faster than that. The class API could search by serial number. Is that possible in the Jamf Pro API?

Hey everyone,I wanted to know if there is a way to remove the create account option when users migrate their account using jamf connect. 

We have a small number of users in our company who are now utilizing python for their daily workflows. With this in mind, we want to ensure that we are maintaining our security standards and see what Python pkgs these users are installing. Is there a way for us to list all of the installed Python pkgs in Jamf Pro?It seems like the native package list does not include these items. I have looked into attempting to build this out as an extension attribute, but am hitting some roadblocks. We are very new to Python, and any feedback would be greatly appreciated.  Thank you!

I'm on JSS 9.2 and I setup a smart group last week that looks for "Last Enrollment" using the "Less than X days ago" criteria. I have the value set to 2. I think its matching all machines with last enrollment being 2 days prior to when i setup the smart group. In other words, i setup the smart group on 10/26 and i still a have machines in the group that are 10/24. Today is 11/4. So, i just edited the value to 3 and save it. That caused all the ones that were more than 3 days old to disappear. But, i'm thinking the 3 day old enrolled devices that are there today will still be there tomorrow.

Hi I'm wanting to create a smart computer group in JAMF Pro, for any Macs we enrol after a specific date. This is so I can scope a policy I have created to only deploy to Macs enrolled on or after the date set in smart group. I cant see an option to do this, any advice or help would be great.Thanks

I've got an iPad that just refuses to check in. I've confirmed it's connected to Wifi and unlocked. I've also checked the APN in JAMF and Apple. Any suggestions?

Can someone tell me what Jamf Pro can do that Intune cannot for iOS devices?I am struggling to fin and documentation to support this online. thanks in advance for the support!