Hello,We're deploying MS Defender, but need some help with how to remove or hide the "Exclusion" option from MS Defender user interface, if it's possible. My current configuration "MDATP MDAV configuration settings" appears to enable to exclude a default path, but I prefer to not have "Exclusion" option available or visible. 

Hi Folks. I've been put on the job of designing Jamf configuration profiles and policies for my environment. Jamf is totally new to me so I'm starting from the ground up with their Jamf training modules. The infrastructure has already been put in place by the main campus techs at our university. They've already made me a production environment for our college, so I feel that most of the heavy lifting is already complete.Could you share any thoughts that would be helpful to me while I go through this process? What are best practices for working with the MDM? What are mistakes you made? How should I start off on the right foot? Are there any crucial best practices that I should know about from the start? Etc. etc.

It pays to stay at JNUC until the very end. The last session at JNUC 2019 gave me the inspiration to finally solve the issue of finding duplicate computer serial numbers using Splunk. This is extremely helpful in finding computer records after a computer has had a mainboard replaced by Apple. The Serial Number is the same, but a new JSS Computer ID is created. Download the .tgz here:https://www.splunk.com/en_us/download/splunk-enterprise.html#tabs/macos*The .dmg didn't seem to install properly for me, but the .tgz did. Create a read-only user in JamfPro that Splunk can use to access an Advanced Search. Create an Advanced Search whereCriteria "Managed Is Managed" or "Managed Is Unmanaged".Display: Serial Number, Computer Name, and JSS Computer ID. Install the Jamf Pro Add-On and configure it with your instance and the Advanced Search:https://splunkbase.splunk.com/app/4729/ Use this code and set a 1-hour Window: sourcetype="jamfmodularinput" | stats count, values(computer.Compute

Recently new MacBook Pros have been presenting an empty dock after user enrollment. I cannot find any setting that would make this happen. Seems to only happen on brand new computers and not re-provisioned computers. Jamf Pro Version11.2.0-t1705676508

Optimized to leverage SYM-Helper (1.1.1), Setup Your Mac (1.14.0) leverages new features of swiftDialog (2.4.0) Introduction Apple's Automated Device Enrollment helps streamline Mobile Device Management (MDM) enrollment and device Supervision during activation, enabling IT to manage enterprise devices with "zero touch." Setup Your Mac aims to simplify initial device configuration by leveraging swiftDialog and Jamf Pro Policy Custom Events to allow end-users to self-complete Mac setup post-enrollment. Continue reading …

Just upgraded to Jamf Pro 10.5. When I run a quickadd.pkg or enroll via Jamf Recon, everything works perfectly except running jamf commands from the terminal. I run any of the following commands the terminal returns with "sudo: jamf: comand not found": sudo jamf reconsudo jamf policysudo jamf enroll -promptsudo jamf manage Has anyone else run into this issue? I'm using the thin image method, so the quikadd.pkg & recon are vital to my process. OS is currently High Sierra 10.13.5

We have an environment that already is set up for Apple devices.  I don’t know anything about how it is setup or what any of the configuration looks like.  My question is how do I enroll a new iPad into the application Jam Pro and is there a limit on how many devices can be setup? I think but I am not sure this application houses two departments' worth of devices mine and another department, and I am not sure how to differentiate between mine and theirs except by the serial but as far as I know, there is no information telling me what our serial’s numbers are.  So another question how can I tell which are mine and which are not, it seems like they are all dumped into the same area. These iPads are brand new out of the box, usually with iPad previously managed when they were wiped during the iPad setup we would get to a point where you would put in a username and password to connect to the MDM at which point I am guessing the MDM config would sync to the device?

I'm attempting to create a script to remove .app files from User's trash bins. I have the following script that is returning "No such file or directory."  #!/bin/bash# for each user in the /Users folder that is (!)not the Shared folderfor dir in /Users/[!Shared]*do# Create a variable with just the users nameloggedInUser=$( scutil <<< "show State:/Users/ConsoleUser" | awk '/Name :/ && ! /loginwindow/ { print $3 }' ) # Delete app files from the currect user's trashrm -R /Users/${loggedInUser}/.Trash/*.app # For logs or viewing progress--shows when the users trash has been emptiedecho -e ".app files removed from Trash for: ${loggedInUser}"doneHas anyone done something like this?

Hello everyone!I've added a MAC via BYOD and user auto enrolment, but the Self Service portal won't deploy despite enabling/disabling setting and forcing policy updates on the MAC.I can't find any trace of a deployment attempt in /var/log/jamf.log. Do you have any leads or ideas?Thanks a lot! 

Update 5 February 2024: Cloud upgrades are scheduled for the weekend of 16–17 February (details below). We appreciate your patience. Today we are releasing Jamf Pro 11.2. Highlights include:  Dark Mode SupportThe Jamf Pro interface now has a dark display theme option. This alternative color scheme provides the same high contrast between text and background colors for maximum readability, but inverts the light and dark colors in a way that some may find more comfortable to view. Manual Update Workflow for App InstallersJamf Pro now includes a manual update workflow for App Installers. This change gives you more control over the App Installers deployments in your environment by allowing you to test a version on a small group of computers before applying it to all computers. Jamf Remote Assist Session LogsYou can now view Jamf Remote Assist session logs in the Jamf Pro interface.   For additional information on what's included in this release, review the release notes via th

When creating a new Extension Attribute, I don't have the option to set the input type to "Script" I've been trying to create a smart group based on "uptime," but each guide that I go over says to set the extension input type to "Script"Am I missing something? Am I in the wrong place?Thank you! 

Hello All,I'm researching other solutions to deploying cert-based WiFi authentication via Jamf Pro for our office Macs. I'm familiar with the AD CS connector, but our cyber security team will not open network traffic to ports 443, 8443, etc. I don't believe Jamf Pro provides a block of secure IPs that can be used, so we need to find an alternate solution. What other solid solutions are available to us that will allow Jamf Pro to provide cert-based WiFi authentication?

Team,We are experiencing an inventory update issue with 3 Intel Jamf-managed machines. Whenever we run the "sudo Jamf recon" command to execute the inventory update policy or from the self-service, we encounter the following error at the end: "Error running recon: Unknown Error - An unknown error has occurred."We have thoroughly checked all the configurations and reviewed a few logs, but we have not found any challenges. The Jamf Support team has also investigated the matter, but we still haven't been able to identify a possible solution.Furthermore, we tried completely erasing and reconfiguring the affected machines. During the initial configuration, the inventory update ran successfully without any errors. However, after a few hours, when we attempted to run "sudo jamf recon" or perform the inventory update from self-service, the issue resurfaced.Are there any others who have experienced a similar issue, particularly with Intel Macs? We would appreciate any insights or assistance in

A pair of scripts to help Jamf Pro admins easily display actionable, custom branded macOS Notifications Introduction One of the more welcome features of swiftDialog 2.4.0 is actionable, custom branded macOS Notifications. When leveraged with Script Parameters, Jamf Pro administrators can easily display custom branded macOS Notifications to their users. Continue reading …

When a Device is going through the user initiated enrollment jamf is scoping extra policies and configuration profiles that are not actually scoped to the device in any way. When the device is enrolled during prestage enrollment this does not happen. Our policies are scoped to smart computer groups which are set up by device name, the devices are not in any of the wrong policy groups nor has a name close to any devices. Is there anywhere to find out why the user initiated enrollment is scoping all these policies to the devices?

Hi , For some of our users jamf login window has stopped showing up, the users are only seeing mac user to login. OS version is Sonoma 14.0Jamf connect version is 2.30is anyone else having similar issue and can share a fix , i know re isntalling the profile might fix it but i dont want to perform last resort as first. Thanks,

Hello,we have several iPads at school which were purchased before using jamf as MDM.I now want to enroll them into jamf using Apple Configurator. After following the steps described in jamfs support documents (https://learn.jamf.com/de-DE/bundle/jamf-school-documentation/page/Apple_Configurator_2_Enrollment.html) I am now stuck when trying to select one of our prepared Automated Device Enrollment Profiles in jamf. Here's what I did:Enroll the device via Apple Configurator using a blueprint as described above ✅Change the MDM server of the device in Apple School Manager from Configurator to our jamf server ✅Device shows up in device inventory now, is marked as supervised and can be managed ✅...but...The device does not show in the list of devices when I click on "devices - automated device enrollment profiles". And since I know no other way to do so, I now cannot select a different enrollment profile from one of our prepared profiles inside jamf, I am stu

Today we released Jamf Connect 2.32.0. This release includes the following changes and improvements: The Renew Kerberos Tickets (AutoRenewTickets) setting is now available during the Jamf Connect configuration process in Jamf Pro. The Kerberos Timeout (Timeout) setting is now available in Jamf Connect Configuration. See Kerberos Integration for more information.   To access new versions of Jamf Connect, log in to Jamf Account with your Jamf ID. The latest version is located in the Products section under Jamf Connect. Product Documentation For additional information on what's included in this release, review the release notes via the Jamf Learning Hub. Thank you!The Jamf Connect team

 When trying to add https://apps.apple.com/us/app/home/id1110145103 to some iPads I get the usual, "go get a volume license OR download it directly and let local iCloud accounts get it for free." Well, I dont want local iCloud accounts so I want to go get the license... ...but over in biz manager I can't seem to find this app, no matter how I search! Anyone else figure out how to deploy it?

I wanted to check the current gatekeeper status using a bash script preferably to find out whether the status is set to:1. App Store2. App Store and identified developers3. AnywhereBy running below commands will enable Gatekeeper with "App Store" only and but does not help to change it to "App Store and identified developers"  spctl --master-enable defaults write /Library/Preferences/com.apple.security GKAutoRearm -bool true  Kindly suggest how to achieve both these tasks.

I am running into an issue with my company's Mac's not launching the application nomad version 1.2.2. I have tried removing and did a clean reinstall. Reinstalled Rosetta. Also tried launching thru terminal. Is this not compatible with Sonoma? I have attached the error I see when attempting to run with Terminal.zsh:  illegal hardware instruction  /Applications/NoMAD.app/Contents/MacOS/NoMAD -v

Hi allWe have mac suite with 31 devices. Ech device has like 150gb or so used up by students profiles. 1gb -5gb per user.What is best way to delete these? can it be done via jamf pro? If it can delete on log off or after days it be better to avoid doing manual work thanks

Does anyone know if it is possible to enable MFA authentication to also disable screensaver lock (without touchID)?Normally the user has to enter their account password (local or idP Password) or their touchID (within 48 hours) to disable the screensaver lock.
Is it possible to enable MFA authentication in addition to login after the screen lock?
I ask this because it is important for security reasons. MFA authentication should provide a "second" layer of security in case the account password is hacked or stolen. If the computer is in screen lock mode, a malicious person can unlock the computer with the user's stolen password without a second check.It would be good if the OTP pin, already configured with offline MFA, would be also requested for screen lock mode.

I have been using krypted's MakeMeAnAdmin script. It works great for elevating standard users to admin users and demoting them back to standard users. I cannot get the script to generate a log. Does anyone have an updated fully functioning version of this script available?

Users cannot log in to their device after logging out or rebooting. Sometimes the login works, but currently it happens very often that users receive the message Invalid Response Code 401. The Sign In Logs in Azure looking good too. Did any of you had this problem already and if so, how did you solve it?