Is there a way to disable automatic updates in Evernote through a configuration profile (plist perhaps?) in JAMF?  

In addition to not being able to add objects to our Dashboard, I just discovered that we can no longer create Computer Extensions Attributes that use scripts for the input. When I change the Input Type to Script, I see the text field for typing the script, but I am unable to type or paste into it.   I have found that I can’t even edit existing ones. The text field is not clickable to edit at all. Both of these bugs are pretty serious for us to maintain a healthy workflow. I'm also at the very beginning of a huge software deployment that is going to need dashboard visibility and EAs to ensure proper scoping, but now I can't do either.   

I'm curious if any others using JAMF cloud with the cloud distribution point are seeing issues with uploaded packages, or any size, taking 60 minutes to clear the "availability pending" notice?  This seems to have started with the 11.x updates.  For example, a 200MB chrome package took 60 minutes (almost to the second) as did a 6GB pre-zipped Adobe package.  It's as if the 60 minutes point is an internal timeout where it just gives up and assumes all is well.   The packages work and can be deployed, but I'm also seeing random machines that deploy the package, and others that will return package download errors.   It's as if the package isn't being replicated properly in AWS, and if a client happens to get the wrong backend, it's as if the package doesn't exist. I have a support case open but I'm struggling with the responsiveness of the agent. I get one email per day and that's it. 

Hello Jamf Nation! I am trying to identify the optimal way to deploy PKGs post-Sonoma update. Apple has gotten very liberal with their permissions pop ups, which for a single user is great, but as an organization is such a headache. Is there a setting or plist or something that can be deployed alongside a PKG that suppresses these popups? Apologies if it is a repeat question. I didn't see anything in a search that related.

Hello,I'm actually stuck with a company who has a Jamf Cloud platform and they need to distribute certificates from within their environment. The only point is that they don't want any inbound connections even in DMZ.I checked the options for SCEP and the ADCS Connector for DCOM protocol and all of them need an inbound on port 443.Any ideas how to do this ?Seems like Workspace ONE is able to do this with a connector contacting the server frequently to see if any certificates needs to be distributed but I didn't find anything similar with Jamf...Thank you !

What do Jamf folks think might be the pros/cons of using Account-Driven Device Enrollment vs Prestage Enrollment? I guess in the world of K-12 we are able to manage more in person so Prestage Enrollment works well for us.

I need to setup a few macs on a Windows eco-system. The Macs need to be connected to Active Directory but also the AD user must not be able to sign out of a managed apple id or create a local user account to sign in with their own personal apple id. Has anyone done this with Jamf?

Can someone help me with Figma? I can´t make a PKG file that works, or script. I need step by step tutorial how to do it. Thanks!

Hi all,actually i set the computernames in jamf via api. On inventory update it gets overwritten by the real name of the computer.Can i stop this without forcing the jamf name to the real computer name? In policie settings i only find a way to force the jamf name to be the computer name.Computer itself can be "Adams Macbook". in Jamf it should be/stay "MacBook Pro 12345". 12345 is the id from our hardware database.Greetings FrankGreetings Frank

Hello, I'm trying to figure out a way to deploy Google Drive pre-configured to sync specified folders (Desktop & Documents).  I found some documentation Google provides, but it doesn't have any information on this. Has anyone set this up before?Main goal to use google drive to sync files for users who log in without needing to do much but sign in to google. 

Hi Guyswe connected JAMF connect to Okta but after user enrollment we see the device name its Macbook how we can able rename that to user first and last name base on okta information 

Hello,I'm searching for a solution to an issue I'm facing with the JAMF Connect Login Process when changing the primary email address.Our identity provider is Azure. If we attempt to change a users primary address from eg.(john@company.com) to something else like (john.jones@company.com) and make (john@company.com) an alias for this account, Jamf Connect login will make a new account for this user as the new primary address does not correspond to the account previously created.Is there a way for this user to keep the same account while undergoing a primary address change?Thank you

Hey all, I'm running into an odd issue that wasn't a problem under macOS Big Sur, but is now under Monterey. I'm not sure if this is a brand new issue with 12.3 or if it was always an issue with older versions of Monterey. I hadn't noticed it before any Monterey systems got upgraded to 12.3.Basically I used to direct end users to enable the "Screen Recording" option in Big Sur in the Privacy tab of the Security & Privacy preference pane, for things like Microsoft Teams, so they can share their screen in the application. This was never an issue like I said. All our users are non-admins and they had access to this option without needing admin rights.Now with Monterey this option is greyed out unless they unlock the Security & Privacy pref pane, which of course they can't do, nor do we want them to be able to do.Has anyone else seen this with 12.3 or any version of Monterey? If so, have you figured out a solution? I was under the impression Apple didn't allow for enabling this opt

We have multiple dual-boot classrooms where students wanting to restart into Windows are prevented by the OSX admin prompt because other accounts are logged in. Has anyone come up with a way to get around this, so that standard users (students with AD accounts) can restart a Mac without having to force shut-down?

Hi, not sure where I should start troubleshooting, but for about a week or so (without any change, at least known to me - not the only admin unfortunately) user-initiated enrollments download a quickadd.pkg instead of a profile. Can't to seem to find the setting to change that? Any ideas?Thanks,Georg

Apple added a security feature into Ventura 13.0 for Apple silicon called "Allow accessories to connect" you can find it under System Settings > Privacy & SecurityYou can find the info in the link below under the "Accessory security" headinghttps://support.apple.com/en-au/guide/deployment/dep950aed53e/1/web/1.0 This has caused issues in our environment as we still use AD login and ethernet is required for deployment on the Mac.Apple has given us a solution to the problem in a well hidden MDM command that came out with Ventura.https://github.com/apple/device-management/blob/release/mdm/profiles/com.apple.applicationaccess.yamlHere is the MDM command I am pushing out to our fleet as a Application & Custom Settings payload if anyone is interested.Bundle ID: com.apple.applicationaccess <?xml version="1.0" encoding="utf-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0">

I am trying to setup a configuration profile to auto setup the Apple mail app on the iPhone with our company Office 365 mail account. I have the configuration Exchange ActiveSync profile setup and it does do everything i'm looking for but one thing. When the user goes to open the Apple mail app it doesn't prompt for their password. The account profile is there and it's just missing the password part. I am relatively new to this platform so just looking for a suggestion that would help with this. I am really trying not turn on the ability of the user to login with there Apple account if at all possible.

Hello all! I am trying to reverse a script that was run when we setup a new Windows Print Server. We were having a tough time getting Mac's to print using printers hosted on the print server. We tried both SMB and LPT protocols and had no real success. I then tried the following bit of code to attempt to remediate the problem (occasionally we would get the "Hold for authentication" message when viewing the print job in the computers print queue):   #!/bin/bash for PRINTER in `lpstat -v | grep 'lpd://' | awk '{print $3}' | tr -d :` do lpadmin -p $PRINTER -o auth-info-required=negotiate done   This helped just a few people, but not everyone. What it did do was freak out all of our faculty that print. We are bound to AD for a variety of reasons, but they just couldn't figure out that the credentials that were being asked for were the same they use for literally everything else on their computer. After a few months of trying to figure out why Mac's couldn't print, I stumble u

We have enabled Azure AD as a Cloud Identity Provider, as well as Azure AD SSO. We also have some iPads assigned to a Prestage that features an Enrollment Customization that includes an SSO Authentication pane. The pane is displaying as expected on the device, and I can sign in through that pane using my Azure AD credentials.We have enabled "Collect user and location information from Directory Service" under Inventory Collection settings.However, the "User and Location" portion of the device inventory remains blank. We've gone through multiple wipe and re-enrollment rounds with this device, as well as an "Update Inventory" MDM command... nothing.Jamf Pro’s documentation says that assigning a user to a computer or mobile device can be done “during user-initiated enrollment (LDAP users only)” - does this not include the Cloud Identity Providers such as Azure AD? Or do we have something misconfigured somewhere?

Hello,We have set a configuration profile to enable firewall and block all incoming connections. However this option has led to disable airdrop, airplay, and Bluetooth and caused them to stop working since they're all sharing features. Is there a way to block incoming connections except AirDrop airplay and Bluetooth? Thanks

Hello everyone,Earlier today I was helping a colleague at work who couldn't login on a M1 Mac. After Googling a bit I started in recovery mode, opened the Terminal and typed resetpassword. After changing the password and reboot it wanted to activate - after a while we got "Failed to create activation request".I Googled some more and now I have removed the Mac from my colleagues Apple ID but we still get the same error. Does anyone know what's best to do next? Is it possible to save the data in any way?

Im using Okta authentication on machines in my company. when using Jamf Connect Configuration to create the com.jamf.connect.login.plist, even when I check the box in the image below and reset the authchanger nothing changes on the login screen when I restart. I want to see if the macOS style login would be better for me to use than the standard Okta login screen. Not sure what I'm doing wrong. Every other option in the Jamf Configuration tool works so I know that I have the plist in the right place. I am using the latest version of Jamf Connect & the configuration tool.

Push certificates are being set up at https://markany2.jamfcloud.com/.When processing using Cloud Services connection, I entered jamf-mdm@markany.co.kr in the Jamf ID Email Address field, but the error "No assets found for this account" is occurring.

Hello Jamf Community! I'm making an extension attribute that basically tracks if a local user is at the Standard level or Admin level. I've ran the script in 2 test macs in our environment where one Mac is a Standard account and the other is an Admin account. For whatever reason, the extension attribute will always resort to "Admin" as the result. I've tried several things to trouble shoot this. Here's what I've done.  Originally the elif statement was an else statement I've switched the if statements where it would be != 'Yes', is_admin would be No. and vice versa. I've ensured these script worked by running the script in terminal for both test macs, and they should work.  Not too sure what is going on and I'm thinking it's just my jamf environment now. Does anybody have suggestions on what might be going on?  #!/bin/bash result='' # Get the current logged-in user current_user=$(whoami) # Check if the current user is an admin is_admin=$(d

We are starting to use Figma and their installer is a stub installer which is a pain. They give some very base instructions for deployment. We want to use architecture specific builds and there is a "script" for accessing those. My scripting is very basic and I need a little help with getting the resent version acquired from one command into the argument for the download command. I can run them individually without issue manually replacing the latest_version with the "latest_version"here are the commands provided.latest_version=$(curl -fsSL "https://desktop.figma.com/mac/version.txt")intel_url="https://desktop.figma.com/mac/Figma-${latest_version}.zip"apple_silicon_url="https://desktop.figma.com/mac-arm/Figma-${latest_version}.zip"I'm missing how to get what is echoed for latest_version into the curl for each architecture. This is what I tried without success. echo latest_version=$(curl -fsSL "https://desktop.figma.com/mac/version.txt") | curl -O -k https://desktop.figma.com/mac/F