Hello !First of all, please excuse me if the questions are found somewhere else, but I can't find clearly the informations needed. Please note that I'm not familiar with API.As the basic authentication will be soon removed, I already disabled it in Jamf Pro. I checked all my scripts and it seems that it's working fine. However, I have some questions:1) I read that classic API uses JSSResource as part of the URI. And I have this example to get the department of a computer. I would like to change that so I can use the api/v1 URI but I can't find the exact path. Actually, I get the department this way:department=$(curl -H "Accept: application/xml" --header "Authorization: Bearer ${token}" "${jssURL}JSSResource/computers/serialnumber/${macSerial}" | xmllint --xpath "string (//computer/location/department)" -)How should I change this ? And first of all, is it still possible to do this way ?2) I use keywords in the position and room fields of a computer's inventory. It allows me to put those

Hi Team, We are trying to package the MindManager software but when user is trying to install the package it prompts for the license key. We would like this go as a silent install. Would like to know if there is a way we can avoid the License prompt window. Thank you,Paul +1 813-617-2521

Hi, I'm trying to package MindManager v22 (14), but when I try to test it out, it prompts me to log into an email MindJet account first before entering the license key. Is there a way to bypass for a silent install?We've packaged the v12 in the past and used the script below, but I can't seem to get it working for v22.Any help is appreciated.Mitch #!/bin/bash ##################################################################################################### # # ABOUT THIS PROGRAM # # NAME # MindManagerSettings.sh -- Set License and accept EULA # # #################################################################################################### # # HISTORY # # Version: 1.1 # - Philipp Reinheimer, 14.04.2018 # # #################################################################################################### #---Variables---# currentuser=$( scutil <<< "show State:/Users/ConsoleUser" | awk '/Name :/ && ! /loginwindow/ { print $3 }' ) #---Lice

New User Interface and Faster Loading for the Devices Overview in Jamf School We are please to bring to Jamf School a new improved user interface to view devices and deliver bulk action commands. This new interface can be turned on in the Jamf School Management System by navigating to; Settings > Appearance and then ticking checkbox next to New User Interface. This will then change the “Overview” section under "Devices" to “Inventory”.  You can change back to the original interface at any time by unchecking the box.  This change doesn’t just offer a new look but improved speed when loading devices. For schools with large deployments, this means you can manage your Apple devices in an even faster and improved manner with quicker  loading and bulk commands. This will be the default interface from 1st August 2022 but we encourage our Jamf School customers to turn on this new view ahead of the roll out date. We welcome your feedback as you test this ne

With the old interface, you were guaranteed that every column would fit the viewport width to 100%.With the new one, if you add more columns, it forces you to scroll left and right to see everything.Not only that, but there is a maximum number of columns allowed.Why enforce a maximum number of columns if the screen is just going to force a horizontal scrollbar anyway? Seems rather arbitrary to me, the whole point of a maximum number of columns would be to stop the horizontal scrollbar from appearing.

The new user interface for devices remembers the filter and even the selected iPads even if the filter is changed.  I accidentally erased 20 devices inadvertently before I realized what I was doing.  The previous interface did not behave this way.  Could there be some sort of UI toggle that disables this functionality?  I'd hate to forget what I had selected and erase or do some other function before it's too late. After the fact I did see there is a warning that says: "After filter, some selected devices may not display in the table.  Your previously selected devices will still be scoped."  I'd rather this not be the case. I always want to see what my scope is.  At the very least I should be able to deselect items that are in scope.  At least in Jamf Pro I can clear the filter and sort by selected to unselect items.  

Hello,I need to rename the computers using the Full Name that is set in User and Location.I have a script that renames using the login user but the name I need is the Full Name in Jamf.Any idea how to retrieve the Full Name ?thanks for your help.

Hi all. I have been tasked with changing the background image on the login window to reflect new company branding. I am looking for confirmation to see if anyone has been able to successfully do this in Monterey, and if so, how as I believe it is a protected system file and is not possible with FileVault enabled.I started testing with this older article Setting Screensaver, Lock Screen, and FileVault screen to same image (Mojave) as well as several posts found on the Apple community boards with no success. I am hoping to avoid disabling FileVault on hundreds of machines simply to change an image.Any guidance you can provide would be appreciated.

Does anyone have suggestions on how to scope a configuration profile by network location?For example;  We have a configuration profile to bind to our Active directory and it fails when these devices can not reach the domain controller.    Not a great example as most of us are moving away from binding.Another example would be to allow Bonjour (mDNS) on a home network and disable it on the enterprise and public networks.     We have disabled Bonjour for a long time to reduce the visibility of our devices and their services, however when these devices go home disabling Bonjour may break features like finding shared disks, using screen sharing, and printing.

It's very glad to push the OS software updates with the recent software update feature through JAMF Pro.But it will be great to provide any tracking of these deployments, as once we push the software updates we couldn't track them and unknowingly deploying further deployments to the same target machines and it causes the issues with this feature. 

I'm in the process of updating our plotter drivers for our Z6DR.   I have taken the PKG out off the installer and uploaded to jamf. Im having some issues around deploying it if a user is logged in it install without any issues.However if no one is logged in It fails and I get this messageInstallation failed. The installer reported: installer: Package name is Universal_PostScriptinstaller: Upgrading at base path / installer: The upgrade failed. (The Installer encountered an error that caused the installation to fail. Contact the software manufacturer for assistance. An error occurred while running scripts from the package “Universal_PostScript.pkg”.)this just the installer as it come from HP as anyone see something smiliar when deploying print drivers   Thanks  

My organisation has recently procured Jamf, and it's a majority Windows org.I'm quite new to Jamf, but familiar with MDMs, and most of my day is spent using a Windows machine. We have a number of applications that we have API access to, and I've been successful in setting up API access within powershell using client credentials, and able to make basic GET calls, and some simple POST commands - such as creating departments, or categories. I have a list of departments I need to create, and want to also create smart groups for each of those departments, pulling in computers where the department is set to a specific value.I've created a smart group manually and able to GET the configuration options in an API output.My familiarity with API is using JSON for the POST calls, but looking at the GET output, it's an XML format, in a single string (weird to me, but maybe that's shell standard?)However, I cannot get it to POST and create a group, when I modify the specific options from t

I don't know how to upload an extension attribute, but, I wrote this as it came out of a need. The mere presence of MobileMeAccounts.plist doesn't tell you if someone is actively signed in to iCloud or not. However, the contents of that plist file will tell you if someone is or is not signed in to iCloud. This EA was tested in Catalina, and other versions may vary milage. This EA will print the email address used to sign in to iCloud. #!/bin/sh ## Get logged in user loggedInUser=$(stat -f%Su /dev/console) icloudaccount=$( defaults read /Users/$loggedInUser/Library/Preferences/MobileMeAccounts.plist Accounts | grep AccountID | cut -d '"' -f 2) if [ -z "$icloudaccount" ] then echo "<result>Null</result>" else echo "<result>$icloudaccount</result>" fi

Since we couldn't reliably do VPN only when offsite, we have Always-On VPN always-on for students, even when on-site. This has achieved many (but not all) of our objectives so far on managed devices - in terms of ensuring that internet traffic is always passing through the firewall. Enter Apple Classroom. Our firewall vendor (Cyberhound) uses strongswan. Even if we put a teacher on the same IKEv2 JSS-configured Always-VPN, they can't see each other. Any ideas? Could we have done something on the (or a..) VPN server to make VPN clients bridged to a common network? Is that even possible with IKEv2 VPN? Thanks

Im trying to convert a large number of admin accounts to standard accounts. On jamf nation, multiple people have been sharing this script below, but when I run it, it does not change any users from Admin to standard. Below is what I ran:with ###### being the local admin account on every device. #!/bin/sh adminUsers=$(dscl . -read Groups/admin GroupMembership | cut -c 18-) for user in $adminUsers do if [ "$user" != "root" ] && [ "$user" != "######" ] then dseditgroup -o edit -d $user -t user admin if [ $? = 0 ]; then echo "Removed user $user from admin group"; fi else echo "Admin user $user left alone" fi done When it finishes, the logs show 0, but nothing changes. I can change each laptop individually with #!/bin/sh sudo dseditgroup -o edit -d $username -t user admin but that isn't ideal. Am I doing something wrong? And I have seen the other posts about this topic and almost all share this same script with users saying it worked fo

Hello nation!I have been testing the Jamf Mac Apps feature to install/update Microsoft 365 programs and things have been well so far. There is just one thing I can't seem to  Unless I am completely oblivious to what is in front of me, I am having trouble understanding where one would find logs when software installs occur. It's been pretty good to me so far, but was wondering if I had access to logs for troubleshooting purposes.Thanks in advance!

I've seen a few tricks for getting what  calls the Marketing Model name of a Mac in Terminal. One uses the last 4 characters of the serial number in a curl command, e.g., documented here...This seems to work (it requires the -l flag on curl) but it may stop working because of changes to  serial numbers. However, there is no need to use curl to get this information (even if that is how it's done in the background...)It is available on Intel Macs if the com.apple.SystemProfiler.plist exists. This .plist is created when the "About This Mac" menu item is opened.It is available on  Silicon Macs in ioreg output.Clicking "About This Mac" in the  menu launches the "About This Mac.app" located in /System/Library/CoreServices/Applications/ so it can be launched from a script with the open command.The "About This Mac.app" executes the "System Information" process. You must close "About This Mac" with a different command than the one you use to open it...The Mac Market

Hi all,I had an issue where the jamf binary stopped working (although not deleted). I received the error "command not found" when trying to run sudo jamf recon from command line. I ran a jamf API (jamf-management-framework) which fixed issues with running jamf commands in terminal. However, no policies will run in Self Service. the status bar spins, but nothing happens. When I look at the device record in jamf, it doesn't show a record of the policy being run. Please let me know if you have any suggestions.

Hello Team,I want to block two commands (sysadminctl  and  dscl) on mac devices through JAMF. Please let me know if I can do it through config profile, I can change the permission(000) by a script/command and run it via a JAMF policy but users are admin and very smart so that they will create another users via commands, so I am planning for config profile so that they cant run or change anything to make run on macs. Any idea will be appreciated. Thanks!

Adobe's products can be a challenge to deploy, manage, and integrate into high-stress production environments or the chaos of a classroom lab. Does it take a skilled ninja with a mastery of Adobe's alphabet soup (AAMEE, AUSST, APTEE, RUM, and xDA) and JAMF Software solutions to survive? Or does it take meditation on how you can become "one" with the optimal production workflow? Jody Rodgers, Senior Product Manager from Adobe, will be shaving heads or sharpening swords depending on your path. We will be working through what it looks like to use the Adobe tools in conjunction with the Casper Suite, and be examining successful workflows, and sharing what Licensed Software, Application Usage Reporting, and targeted deployments can do to assist in your organizational endeavors! Bring your questions, and we will put any resources here after the presentation! Thanks! wudi

I have created a SelfService policy that executes open -a "About This mac.app" in Self Service. We would like to have the app open directly into the "Storage" tab, so that users can identify/delete largest space hogs (Clicking on "Manage..." does that). Our managers like the colorfulness of that window, otherwise we'd launch "Storage Management"). Is there a way to get that tab open directly when the user clicks on the icon in Self Service? This is what we currently have.    Thanks, E  

Has anyone noticed this? For the last few weeks, I have noticed that editing the scope of profiles using Safari is very slow. It starts after I click Edit and try to add or remove computers or groups in either Targets or Exclusions. The first thing I thought of was that I use an ad blocker. I made sure that it was disabled for Jamf cloud. It is. If I try editing the scope of profiles in Edge or Chrome, there is no issue. I have been a Safari user since it was released as a beta app in 2003. I prefer to use Safari, and I only use Edge when necessary for sites that I use for work. I'm very stubborn about my preferred apps so I really don't want to have to switch to using Edge for Jamf Pro. I have tried this on my work MacBook Pro and my personal MacBook Pro. It's the same issue.

Is there a way to have all Mobile Device Apps under Devices have the "Assign Content in Volume" option checked if available?  Doing a migration from Xenmobile and assigned all the relevant apps but forgot to initially check the box.  Was trying to see if there was an option to do this without going back into each app (100+ apps).Thank you!

Other than deleting them, does anybody know if there is an alternative method to unmanaging devices that are shown as managed that are no longer contactable (Remove MDM Profile -  will not work here) in JAMF?Reason is we would like to keep the inventory.Thanks 

We're trying to populate user and location data on our iPad devices - But it doesn't seem to work.We have Azure setup as our Cloud Identity Provider. The test function confirms the lookups & mappings are working properly.  We have an Enrolment customisation that points to our SSO Azure authentication - This is then set on our pre-stage enrolment.  When a device goes through setup - The users are prompted to sign in. We expected the user & location data to be populated - But it doesn't. 'Collect user and location information from LDAP' is ticked under inventory collection settings.Has anyone got this to work? Not sure what we're missing.Cheers