Hello Team,I am asked by manager that to make the Microsoft Copilot available as Dock item, as you know there is no separate app to install on macOS for CoPilot, so I created .webloc file which contains the URL https://copilot.microsoft.com with a CoPilot icon, but I am not able to place it on Dock by any command(Shell, Applescript), it is always showing me ? sign, any idea how to do it?

I am using Jamf cloud and  Microsoft Entra ID to login. User password will expire every 3 months.currently I run a script in windows to retrieve their password expire day and remind all mac user.I am thinking to add an user extension attributes and use api to update it daily.Then, run a policy daily to check if the date is less than 7 days Jamf will prompt a message to ask user to change the password .. Is it the way to go ?ThanksEdwin 

hey folks!I Need some help with my Script to trigger API Computer Command "Remote Device Lock"Purpose: I want a script which requests user input with "Computer Name" , get the Computer Jamf ID (this works!), and afterwords send the Remote Command "Lock Device" with this ID -> at this point I get a Error:Script result: <html><head><title>Status page</title></head><body style="font-family: sans-serif;"><p style="font-size: 1.2em;font-weight: bold;margin: 1em 0px;">Unauthorized</p><p>The request requires user authentication</p><p>You can get technical details <a href="http://www.w3.org/Protocols/rfc2616/rfc2616-sec10.html#sec10.4.2">here</a>.<br>Please continue your visit at our <a href="/">home page</a>.</p></body></html>Here are more Informations: I user the API Client&Roles Setting in Jamf, created a API Client with some Priviliges:"Read Computer Inventory Collection

I am looking for a pilist which has Adobe Acrobat feature lockdown settings in plist,

 As shown in the below screenshots, after clicking "Change Password" then authenticating, I am taken to a home page screen. I then have to scroll down and select "Change Password" again. When changing the password there, an error occurs. I am using Jamf Now's Jamf Connect option with Azure.    

Since the 11.2 update I can't seem to have the checkbox that says Show in Jamf Dashboard stick on Smart Groups and Policies and Config Profiles. I check it, go to the Dashboard and it's not there. Back in the group the checkbox is unchecked again. Have tried on a few different browsers. Other admin users reported the same. Anyone else seeing this?

We use Okta as our main identity provider, and I'd like to leverage that alongside Jamf Connect to get Zero-touch working in my environment.  is there any advice for disabling Nomad and getting Okta and JC working nicely together?

I have installed ADCS connecter to get PKI certs on mac devices.After everything correctly configured found that JAMF cloud is communication was rejected by ADCS connecter server. IIS logs shows error code 403.7 this error code generally talks about missing/incorrect client cert.when I looked into IIS settings from:"IIS>ADCSProxy website >Configuration Editor>system.webServer > security > authentication >iisClientCertificateMappingAauthentication" iisClientCertificateMappingAauthentication config is as below:Enabled --> FalseoneToOneCertificateMappingsEnabled-->TrueoneToOneMappings-->(Count=0)My question is it expected behavior? do I have to manually add the client cert details in IIS iisClientCertificateMappingAauthentication? Ideally certificate connecter installation should have been taken care of this.      

✨ Exclusive Offer: Free Jamf Health Check for the First 10 Registrants! ✨ Optimize your Jamf environment with a comprehensive health check, available at no cost for the first 10 people. This free service includes: • In-depth review of policies • Analysis of configuration profiles • Assessment of enrollment methods • Verification of certificate renewal dates • Evaluation of scripts & packagesDon’t miss out on this limited-time opportunity to ensure your Jamf setup is running at peak performance.Secure your spot now:Book Here

Our org has been using erase-install 33.1 off and on for full macOS upgrades but now we want all users on Sonoma 14.When testing on a (Intel) VM logged in as regular user, it runs through and finishes the update properly.  It also worked on about half the client Macs but also fails to work on a lot of other client Macs.  A common failure in the logs is:2024-08-16 12:16:11 | v33.1 | [get_user_details] user cancelled dialog so exiting...How are they doing this as it's set for no user interaction and I've done all the screenshots to track the procedure.  Is it hanging somewhere and the error is spurious?  The script is long and convoluted and I'm definitely not comfortable with scripting and therefore not good at interpreting it's errors.One user was not present for the procedure as they were out of town and later on when trying to upgrade their Mac manually in Software Update, it errored out twice with an 'internal error'.  Manually downloading the Sonoma install

Hi there, Jamf App Catalog is great at patching applications. The only caveat is the method that it uses to communicate with the end-user that an update is pending. Most of our users ignore or are unaware of the notification from Jamf App Catalog when a new update is pending and as a result complain of their apps getting abruptly closed. This is compounded by an ongoing issue of inconsistent notifications (an issue that has been open for a couple of years).   Is there a way to mitigate the above issue by maybe a passthrough of a notification to a prompt or dialog box that the user can interact with? All my attempts at trying to resolve this issue is cut short by there being no direct feedback on the local machine that is recording Jamf App Catalog interactions with the local machine i.e a log that can be leveraged to base notification triggers on a Jamf Pro policy and Notifier App.   I thought to leverage IBM Notifier for this task as it would be ideal. Except that once

 Greetings all,Until last JAMF Pro update i had no issue with the script below. But as of today, the script returning blank result without error. Any idea ?   APIUsername="" APIuserpassword="" JAMFServer="" EAID1=69 JAMFAPIToken=$(curl -X POST -u $APIUsername:$APIuserpassword -s $JAMFServer/api/v1/auth/token | plutil -extract token raw -) DeviceSerialNumber=$(system_profiler SPHardwareDataType | awk '/Serial/ {print $4}') curl -u $APIUsername:$APIuserpassword -H "Accept: application/xml" $JAMFServer/JSSResource/computers/serialnumber/$DeviceSerialNumber/subset/extension_attributes | xpath -e \\ "//*[id=$EAID1]/value/text()" 2>/dev/null 

Today I Setup up pool IPads with temporary guest user only on shared iPads and couldn’t install all apps. There was a lot of available space on the iPads. What did I miss?

Is it possible to proactively block application downloads through JAMF pro? For example, we determine and set up a whitelist of applications, and anything not on that list is blocked, rather than us finding it through our computer lists and removing it after the fact.

We're trying to initiate a Jamf Connect password change workflow from a policy, rather than from the Jamf Connect menubar item.I see there are options for opening menu items using URL schemes (open jamfconnect://) but there doesn't seem to be a Change Password option, and the action command (open jamfconnect://action/Change%20Password...) doesn't work.Anyone have a solution?

Does anybody have a way to look for Rapid 7 and it's version? it doesn't seem to put anything in the /Applications folder.

We are using apple business manager in my organazation.  Our jamf pro sync with azure ad , when we try to enroll a new mac os device its ask e-mail password but does not the accept . Because of that we cant pass this step and couldnt open the device.   

Good morning,I am having the hardest time trying to find where I disable Apple ID Login in Restrictions for Configuration Profiles for iPads. Can anyone point me to where that is? If it matters, the iPad OS I'm running is iOS 15.x.Thanks,llckhrt1

We are using Jamf Connect and Azure to sync accounts/passwords with MacOS.  The computers are not AD bound.  Is it possible to get Jamf to warn users when their password is set to expire (we have a company policy to reset every 90 days)? If not, what are other fellow admins doing in this case?

Reason for this post is to start a conversation around Jamf IDs.As of late, my Jamf ID is missing Organization email, organization association, certifications, as well as products.(Last I checked, I can still access support tickets sot this is a good thing)I reached out to support, and they had me create a seperate Jamf ID using my business email and I'm being told that this account will be tied to the organization.I asked for my Jamf certifications to be connected with my personal Jamf ID again.Is this really how we are doing this now?Having to maintain a private Jamf ID and work Jamf ID?There is a bit of discussion on this on Slack, however I wanted to share this information here, for those of us who are not using/not able to access Slack.

HelloAnyone here, which used the guide for the xcode installation from:Deploying Xcode on managed devices (jamf.com)everything works for me til i start to install it via self service. After downloading the pkgi receive in my log:no app at /Applications/Xcode.app, exiting I am using the script from:Configure Xcode post installation script with SDK download for Xcode 14 and 15 (github.com)#!/bin/sh export PATH=/usr/bin:/bin:/usr/sbin:/sbin xcodePath="/Applications/Xcode.app" if [ ! -e "$xcodePath" ]; then echo "no app at $xcodePath, exiting..." exit 1 fi # select Xcode xcode-select -s "$xcodePath" # accept license xcodebuild -license accept # install additional components xcodebuild -runFirstLaunch # add everyone (every local account) to developer group dseditgroup -o edit -a everyone -t group _developer # enable dev tools security DevToolsSecurity -enable # download platform SDK # all available platforms # xcodebuild -downloadAllPlatforms # update previously down

Hey so we use Jamf to deploy our Macs and recently whether it's a new Mac or one that's been wiped, we're unable to open and start OneDrive. Tried everything from uninstalling and installing from O365, installing from the microsoft page and so on. When running Onedrive I get an error saying Onedrive Couldn't Start, a system component is preventing OneDrive from starting. If I quit from Onedrive and try to start it again the error become We couldn't find the location of your onedrive folder, and the cycle repeats itself. Only thing I can find on the internet is involving Files on Demand.

Hi All,Just wondering .. Using the JAMF API - Can I check that prestage a macOS in enrolled in or part of? Rk

Hello everyone,I have received command entries from JAMF tech support to adjust our password policy that is reporting errors. I have been running these commands manually with a remote session with the user and it works. Is there a way to create Policies so that this will run without the user and myself involved? Reboot is not required but to run the commands requires user name and password in Terminal. On the user's Mac in Terminal run  sudo jamf removeframeworkOnce that completes stay in Terminal and  run  sudo profiles renew -type enrollmentAny help is much appreciated.  

Hi All, My end goal here is to force the local user (end-user) to update their password upon 2nd login (I will explain). Here is my current workflow for new hires (note: we don't have jamf connect) so I have to work with what I got.Current Workflow:1. Enroll the computer into pre-stage enrollment and let it cook.2. Create the local user (new hire) account in the create local account page in apple setup assistant. in this step we are manually creating a "temp" password 3. Log out of the current user's (local user) account and log into our jamfadmin account to finish manual set up steps (additional privacy permissions, re-naming hostname, enabling FV, etc)4. Log out of the jamfadmin account and shutdown.5. Deliver the laptop to the new hire with login information securely enclose. We leave it up to them to update their default password.So, with that being said, we now want to enforce our users to update their default/temp password to a secure one. After doing some research I ca