Hey everyone,  Anybody is using a script to rotate the EFI password on Intel Macs? I think having the same EFI password for all Mac fleet is not a good procedure!?  Any tips are very appreciated.

Hello Jamf Nation! This release is in support of the Apple Spring release. We have several exciting new features including beta MDM support for Apple Vision Pro, Self Service initial app detection, Support Digital Market Act app restriction, and more! You can find more information in the release notes when you enroll.How to join the beta: Enroll in the Beta Program under Product Feedback at account.jamf.com. Once you enroll you'll receive an invitation to join the Beta Forum, click "Join this group Hub" to gain access. Email beta@jamf.com with questions.The beta program is covered by the Jamf non-disclosure agreement; please do not share any information regarding your testing on any public forum, including the non-beta areas of Jamf Nation. Use the Jamf Nation Beta Forum or contact Jamf via beta@jamf.com with any questions. Thank you to all who participate in this program!

When creating a Settings > Global > Enrollment customization the Branding and Preview page shows the text box displayed with a scroll-bar, which is to be expected given the amount of text entered. However, during the enrollment process the user does not have the ability to scroll through the text so only sees the first part of what they are, in effect, agreeing to. Why is this?

Hello,We have set in a profile that a password expires after 500 days.Now we want to know how long the user has until he has to change the password.How can I find out when a password expires on a Mac?We currently have an extension attributes:#!/bin/bash #Shows the loggedInUser loggedInUser=$(echo "show State:/Users/ConsoleUser" | scutil | awk '/Name :/ && ! /loginwindow/ { print $3 }') #Returns the value of the date when the password was last changed or created setPassDate=$(date -r $(sudo dscl . -read /Users/$loggedInUser accountPolicyData | tail -n +2 | plutil -extract passwordLastSetTime xml1 -o - -- - | sed -n "s/<real>\\([0-9]*\\).*/\\1/p") +"%Y-%m-%d") #The Global Policy from Configuration Profile pwGlobalPolicy=$(pwpolicy -getaccountpolicies) pwGlobalPolicy=$(echo ${pwGlobalPolicy:32}) echo $pwGlobalPolicy >/private/tmp/pwGlobalPolicy.plist pwGlobalPolicy=$(/usr/libexec/PlistBuddy -c 'print :policyCategoryPasswordChange:0:policyParameters:policyAttributeExpir

Hi,We are using Parental Controls to default deny all websites except for a list of approved websites on our Macs (Parental Controls > Content Filtering > Limit Access to Websites by > Allowing access to the following websites only). Users only have access to Safari for web browsing.One of the issues we're seeing is that Safari will display the entire list of approved websites to users when they navigate a blocked page. That is they will see the "Opps! You can't see pages on this website" error page and then at the bottom of the page is a list of all approved websites.Is there a way to hide the list of approved websites?Thanks!

HiOur Jamf AE is being deliberately unclear on licence requirements when it comes to Jamf Connect.I was under the impression that we only needed one licence to add Jamf Connect to our Jamf Pro environment.He says we may need more but can't say why?!What is required?We have many machines added to our JAMF Connect pre-enrolment scope with no issue.Are licences required for each machine?

Hi.i need bulk appleIDsign up in business.apple.comAfter create user and sign in need phone number to verify.Is there a way that does not require a phone number?Or do you have a way to make Apple ID in bulk?

Hi, I am currently trying to replace Teamviewer 12 Host with Teamviewer 14 Host.I previously found a script on here and got it to work using Dropbox to host the PKG and Assignment files, as seen in the below script. Teamviewer have now bundled the Assignment file with the installer but trying to call this doesn't seem to work via Jamf. If I run it in Terminal, or from a local script file it will work but neither option works when calling from Jamf. I can continue Installing v12 and then running the v14 installer on top, which will retain the assignment but I'd rather it was installing cleanly on new devices. Run Assignment Tool (trying to run this directly from Jamf) /Applications/TeamViewerHost.app/Contents/Helpers/TeamViewer_Assignment -api-token *******-********************* -group-id g******** -alias "${ComputerName}" -grant-easy-access -wait 10 or creating a PKG to drop the Assign.sh file locally and calling it via the Jamf script sh "/Library/Applic

Upgraded on prem Jamf to the current version (10.22.1).Prior to the upgrade we were experiencing DP problems not only with large downloads but small as well. I repackaged Office and the new file name did not have spaces and that helped for a while. For some time now all downloads from the DP fail. With Jamf 10.22.1 I see the following error message: Error: Package was not successfully downloaded. -1202 Error: insertthenameofyourpackage.pkg is not available on the HTTP server. The DP is on a Mac running the Server.app with htttp/websites service.

Leverage switftDialog and Jamf Pro Policy Script Parameters to easily display engaging end-user messagesIntroductionUsing Bart Reardon’s swiftDialog and Jamf Pro Policy Script Parameters, creating engaging end-user messages is easy.When you really want to get your user’s attention, one of favorite options is --blurscreen, which “will blur the background of the display while dialog is showing.”Continue reading …

I have a configuration profile that adds our VPN configuration. I then have a policy that kicks off this simple bash script. open “/System/Library/CoreServices/Menu Extras/vpn.menu” All this does is check the box for "Show VPN status in the menu bar"This is the error that I'm getting.Script result: The files /“/System/Library/CoreServices/Menu and /Extras/vpn.menu” do not exist. When I run the command in the terminal it completes successfully.

We have an app called Spaces Edu loaded on all of our iPads. The app is set to automatically update itself both in Jamf and on the devices. I can see that the version of this app in Jamf is the most current when compared to the information in the App Store. Recently we have discovered that the app is not updating on some of the devices. Most of these devices have stopped communicating with Jamf. I can resolve this but here is the strange part.I discovered one iPad that did not have this app. I assigned it to the Scope and the app loaded to the device. The strange part is that the version of the app that loaded was not the most current and not the version that is in Jamf.Any thoughts would be welcome.

I am working on printer deployments and have a question. I can push the HP or Xerox printer drivers to a machine, however the files are usually in .gz format. This is an issue since Casper wants the PPD file. Is there a more direct way to get the ppd sent to the machine? Do I need to script this, or am I making this harder than it needs to be? Thanks for any help!

How do I re-enroll, using Automated Device Enrollment, a MacBook that was factory reset by a user on being issued a new MacBook. Looking to repurpose the device for another user, but when booting it up it goes through the standard user experience rather than MDM.The device is still listed in Apple Business Manager and associated with the MDM server, and in Jamf Pro in the corresponding PreState Enrollment set-up it is listed as being in Scope. Despite this it doesn't appear to be running the PreStage Enrollment.

Hello there! I'm having an issue where items I set to be available in Jamf Self Service are not appearing. It doesn't seem to matter if it's iOS or macOS apps or policies--I check to make them available in Self Service, and if it's a policy I ensure that the Check In is set to Recurring. They do not populate. I tried the Installation URL from the Self Service tab but it results in an error from JSS: "This item is no longer available." As far as I can tell, it definitely is, but clearly I've got something wrong somewhere and I've hit a wall so I thought I'd ask Jamf Nation for help. Any ideas are much appreciated!

We have a Jamf Pro cloud set up to use entra 365 SSO for authentication. I would like to use the Teacher App to set up classes and students and potentially Apple Classroom - any advice before I get started ? 

Dear Community! We have approximately 30 devices that were previously enrolled into jamf that still trying to communicate with the Jamf server that was shut down one year ago. We are using Mosyle since and some of the devices were obviusly enrolled in jamf first. Does anyone know how to make them stop to communicate? ITs not causing any trouble to be honest but strange after all all configuration profiles were long erased from those devices.  Thank you for your help again! 

I have a use case where I want to apply proxy as localhost i.e. 127.0.0.1:3128 for both http and https but i want a few domains (ex: *.jamfserver.com, *.google.com) to be bypassed from the proxy. I tried this setting manually and it works fine. But when i created a configuration profile and tried to push the  same, Im not seeing the bypass taking effect but all domains are going thru proxy server. PFA screenshots of manual configuration (where bypass domain from proxy worked after a restart) and the configuration profile created on JamfServer which is not bypassing when pushed to target machine.Mac OS under use: Big Sur 11.4Jamf server version: 10.30.3-t1624643096 

I need to re-register a Jamf Cloud (Jamf School) account for use with a two-Factor Authentication app, after a 2FA app backup failed and the binding was lost.I am able to get in using text based 2FA, but I would like to re-enable the app based function.There doesn't appear to be a way to unbind the Jamf login from a previous 2FA app instance?

So, I've gone to Apple School Manager, and searched for the JAMF School Student appIt comes up fine, and says it's for both iOS and macOS. So i've purchased licenses.However, in JAMF the VPP license only appears to come through as an iOS app - there's nothing listed for VPP for macOS devices, and when I add the app manually it tells me that there under the 'Managed Distribution' tab of the app this messageContent not available to assign to computersI'm guessing Apple has changed something with ASM and you can't do what you used to do and only buy licenses for the Mac version, or JAMF isn't recognising that the license is for both.Should I log a support ticket with JAMF?

Hi there, I've been trying to get an extension attribute read to push the the following changes using a policy: /usr/bin/security authorizationdb write system.preferences.network allow /usr/bin/security authorizationdb write system.services.systemconfiguration.network allow /usr/bin/security authorizationdb write com.apple.wifi allow For example how would I read 'system.preferences.network' and report if it is not in 'allow' state? This is to scope a policy that will push the above to devices reporting 'system.preferences.network' to not be in 'allow' state.

Greetings, our company uses Entra ID for IAM. We are trying to get compliant for CMMC and need to use Entra profile credentials to start logging into our macs and need those logins to be traceable. I tried setting up setting up some of the configurations and honestly Ive had to jump from one article to another trying to figure out what needs to be done. Does anyone know of any resources, videos or step by step guides that can help me achieve what I should be doing? We also want to utilize Intune as our MDM platform and use JAMF to trace the identities and their activities on the MACs. any guidance on this would be greatly appreciated. Thanks  

My apologies if this was covered in another thread - just trying to figure out if there is a quick and easy way to adjust the user icon at login for JAMF Connect. I dont mind setting it as a static Icon - but prefer it to be custom to my company rather than just a silhouette. Thank you in advance! 

Is there a way to disable automatic updates in Evernote through a configuration profile (plist perhaps?) in JAMF?  

In addition to not being able to add objects to our Dashboard, I just discovered that we can no longer create Computer Extensions Attributes that use scripts for the input. When I change the Input Type to Script, I see the text field for typing the script, but I am unable to type or paste into it.   I have found that I can’t even edit existing ones. The text field is not clickable to edit at all. Both of these bugs are pretty serious for us to maintain a healthy workflow. I'm also at the very beginning of a huge software deployment that is going to need dashboard visibility and EAs to ensure proper scoping, but now I can't do either.