Dear Community,we are switching from Meraki to Jamf and would like to trigger the "Erase all Content and Settings" function on our employees' Macs via the Meraki command line without the employee having to make an entry.Do you have any ideas on how we can implement this? I've currently found the following option:1. make the user an admin2. trigger the settingHere the employee still has to enter his user password:sudo dseditgroup -o edit -a username admin/usr/bin/su \\- "`/usr/bin/stat -f%Su /dev/console`" -c "/usr/bin/open '/System/Library/CoreServices/Erase Assistant.app'"

Is there a way to turn off the WiFi info button? Or at least limit it so that users cannot change the IP address to manual?

Hi , For some of our users jamf login window has stopped showing up, the users are only seeing mac user to login. OS version is Sonoma 14.0Jamf connect version is 2.30is anyone else having similar issue and can share a fix , i know re isntalling the profile might fix it but i dont want to perform last resort as first. Thanks,

Ok, Let me preface this by first stating that scripting is NOT my strong point.I'm attempting to install AWS CLI version 2 for all users per the instructions on: https://docs.aws.amazon.com/cli/latest/userguide/install-cliv2-mac.html#cliv2-mac-install-cmd Attempting to run the commands via policy result in an exit code 127. I've found a few posts about AWSCLI version 1, but none of the solutions seem to work. Any suggestions?

Hi, I'm looking to make a policy that will install AWS CLI, and have been running into a few problems. I originally tried via pip, but ran into permissions issues during the execution. I then tried via brew, however I am running into a roadblock there. Currently, I am able to successfully get brew installed via a script I found here. I then created another policy with the command 'brew install awsci', configured under files and processors-> execute comand, but get the response 'brew not found'. I accounted this to the command being run as root instead of the user, so I then tried to create a script (attached below) that would run as the current user. Unfortunately, it returned with: 'Script result: bash: brew: command not found' I am able to manually enter the command 'brew install awscli' from the logged in user via terminal, so I know that works...any thoughts on how to get this working completely via jamf? Thanks in advance

Today we are releasing a maintenance version of Jamf Pro. Jamf Pro 11.2.1 fixes the following product issue: Jamf Pro Server: Security Issues [PI116156] Resolved a broken access control issue for some enrollment workflows.   For additional information on what's included in this release, review the release notes via the Jamf Learning Hub. To access new versions of Jamf Pro, log into Jamf Account with your Jamf ID. The latest version is located in the Products section under Jamf Pro.   Cloud Upgrade Schedule Your Jamf Pro server, including any free sandbox environments, will be updated to Jamf Pro 11.2.1 based on your hosted data region below. Review this guide if you need assistance identifying the Hosted Data Region of your Jamf Cloud instance. If you would like to upgrade manually, navigate to https://account.jamf.com/products/jamf-pro and click Upgrade (Standard Cloud) or Schedule Upgrade (Premium Cloud) at the top of the page. Subscribe to product al

Hello everyoneSorry - I'm new to jamf.I need to create a policy that inserts a line in a config file.Do you have any ideas on how I should proceed here?Best regards

Hello,First time, long time.My organization has decided to move away from Carbon Black in favor of Falcon. I used CrowdStrike's directions and successfully created a config profile and a policy. Both have been tested and are working. My predecessor had created a policy to remove Carbon Black and it works as expected.My question - What is the best way to go about deploying this? My idea is to scope the config profile to every machine, create a smart group that identifies endpoints with the Falcon config profile installed, and uninstall Carbon Black. Then create another smart group that identifies endpoints with the Falcon config profile installed that do not have Carbon Black installed and scope the Falcon installation policy to the group. Once all endpoints have received the Falcon package, I will remove the old Carbon Black config profile.Is this the best way to do this or is there another method that you'd recommend?Thanks in advanced!

We have the problem that we cannot activate Jamf Trust on any of our Windows computers (all Lenovo devices).As described in the help, we install Trust via a "Generic UEM for Windows" installation.Trust is installed correctly, but activation does not work. We have also tried to insert the "Shareable link" directly into the application, but the same behavior, the message always appears, activation is not possible, please contact the administrator.But we cannot recognize any error. We have also tried different networks (Wifi & LTE) and also with cable.So it is currently not possible for us to roll out new computers, as protection by Trust on a Windows basis is currently not possible.We are currently working to identify next steps needed to move the case forward.

Hi Everyone  is there a way to push a url to all macbooks like webclip for IOS ? Thanks 

Hello, we use jamf pro to manage our macbook airs.One of our main concerns is we do not want students to sign in with a personal account when using chrome browser. I have been looking to see if that could be done using the google admin console and I have been told that I could create a configuration profile in jamf to do this. How can this be done with a configuration profile? Thanks

Trying to configure a login window message with configuration profile? Any ideas

Hello! I'm looking for a way to disable the audio on an iPad's lock screen. I'm having an issue where a student is watching a YouTube video with a timer set on a break, timer goes off, iPad gets locked, and the audio from the video that is able to still be played from the built-in player on the lock screen causes classroom problems. I've tried two Config Profiles that didn't work--one that restricts the Apple Music app, one that restricts AirPlay receiving--but I'm not even sure if doing this is possible. Would love to hear any solutions or insights anyone might have! Thank you.

Hi , We have recently updated our VPN and would like to update our host address for all macbook across the company through JAMF. I know we can package the profile.xml with cisco any connect installer and assign the profile to everyone but we dont want to go that path. Is there a way we can update the host address on all cisco any connect instances for all users much simpler way via jamf ?Thanks,

Hi everyone,I found some previous articles regarding a similar issue of a device being encrypted (shows on the device as encrypted) and JAMF Pro showing it has the Recovery Key. But JAMF Pro also shows it is not encrypted. I have been able to fix this by manually running the command sudo fdesetup changerecovery -personal and then doing a JAMF Recon. I wanted to script this, so I created a script to be run from self-service, but it just spins forever. I believe because it needs me to provide a username and password for an account that has rights to Filevault. How would I prompt for that in my script? #!/bin/sh# Change the recovery keysudo fdesetup changerecovery -personal# Force device to check into Jamfsudo jamf reconexit 0

I was having trouble getting ANY VPP apps to deploy on Big Sur machines. I discovered that in Big Sur, in the "Restrictions" configuration profile, I had to UNtick "Require admin password to install or update apps". This was not needed in Catalina, but VPP apps will not deploy on our Big Sure Macs unless this box is unticked. See attached screenshot. Hope this helps someone!

I package Figma desktop application after download the app as .dmg via composer and deployed thorugh policy with no issue. It was working fine on macOS Monterey but after upgrade to Ventura it is not working saying corrupted. I also tried to re-install from policy still get same error. But if I right click the app icon from docker and click "open" a new window pop up from there if I click open again that will launch Figma desktop and this need to do for the 1st time after upgrade. Any suggestion for that. Any one know how I can kipp Figma process running that way i will script to remove the Figma App from /Applications folder and re-install to see that resolve the issue or not.

Hi,  I am trying to deploy a new plist from JAMF but this one contains <array> and it failed to deploy.here the example :<?xml version="1.0" encoding="UTF-8"?><!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"><plist version="1.0"><array>  <dict>    <key>organization</key>    <string>company1</string>    <key>display_name</key>    <string>C1</string>    <key>onboarding</key>    <false/>  </dict>  <dict>    <key>organization</key>    <string>company2</string>    <key>display_name</key>    <string>C2</string>    <key>onboarding</key>    <false/>  </dict></array></plist> if I remove array ti

Good Afternoon!I'm not sure if someone could help me figure out what is going on with this. We are currently deploying the CrowdStrike Falcon Sensor in our environment, and have a policy that pushes out the install package and a script. The install package works without issue, but we are having some issues with the script.When the endpoint is licensed already, the script returns a failed status code and a status message as to why it failed in Jamf ("ERROR: The machine is already licensed"), but does not return that message in the script so we can tell it to succeed in the case that it is already licensed. #!/bin/sh # THIS SCRIPT LICENSES THE CROWDSTRIKE FALCON SENSOR RESULT=$(/Applications/Falcon.app/Contents/Resources/falconctl license "$4") echo " OUTPUT: ${RESULT} " Which results in the following:Script result: Error: This machine is already licensed OUTPUT: Any idea what is going on here?

Hi,every now and then I come across a Mac which stopped communicating with the Jamf server and Apple's MDM.As our MDM profile is non-removable I have the question how to uninstall it? Sending the MDM-removal command obviously will not work nor jamf removeMDMProfile.Any ideas?

Hi all,I have a machine consistently producing the error below in the jamf log - does anyone have any info that might help?jamf[925]: Error Domain=NSCocoaErrorDomain Code=4099 "The connection to service named com.jamf.management.daemon.binary was invalidated from this process." UserInfo={NSDebugDescription=The connection to service named com.jamf.management.daemon.binary was invalidated from this process.}I've pasted the full loop of log entries below (starred out username).For context, the 'Google Chrome - Install & Update' policy is one of a few similar scripts that use Installomator (plus variables) to install some apps not on the Mac App Store.jamf[10839]: Checking for policies triggered by "recurring check-in" for user "*******"... jamf[10839]: Executing Policy Google Chrome - Install & Update jamf[10839]: Checking for patches... jamf[10839]: No patch policies were found. jamf[10839]: Error Domain=NSCocoaErrorDomain Code=4099 "The connection to service named com.jamf.manag

Does the new feature macOS Onboarding support Jamf App Installers? Why Using Installomator etc. for Basic Apps like Office365 and so on. But in the Settings of Onboarding there is no way to include App Installers or am looking wrong? And when I am going to use the new feature, do I have to put the policy in Self Service for initial Setup?

Hello,We're deploying MS Defender, but need some help with how to remove or hide the "Exclusion" option from MS Defender user interface, if it's possible. My current configuration "MDATP MDAV configuration settings" appears to enable to exclude a default path, but I prefer to not have "Exclusion" option available or visible. 

Hi Folks. I've been put on the job of designing Jamf configuration profiles and policies for my environment. Jamf is totally new to me so I'm starting from the ground up with their Jamf training modules. The infrastructure has already been put in place by the main campus techs at our university. They've already made me a production environment for our college, so I feel that most of the heavy lifting is already complete.Could you share any thoughts that would be helpful to me while I go through this process? What are best practices for working with the MDM? What are mistakes you made? How should I start off on the right foot? Are there any crucial best practices that I should know about from the start? Etc. etc.

It pays to stay at JNUC until the very end. The last session at JNUC 2019 gave me the inspiration to finally solve the issue of finding duplicate computer serial numbers using Splunk. This is extremely helpful in finding computer records after a computer has had a mainboard replaced by Apple. The Serial Number is the same, but a new JSS Computer ID is created. Download the .tgz here:https://www.splunk.com/en_us/download/splunk-enterprise.html#tabs/macos*The .dmg didn't seem to install properly for me, but the .tgz did. Create a read-only user in JamfPro that Splunk can use to access an Advanced Search. Create an Advanced Search whereCriteria "Managed Is Managed" or "Managed Is Unmanaged".Display: Serial Number, Computer Name, and JSS Computer ID. Install the Jamf Pro Add-On and configure it with your instance and the Advanced Search:https://splunkbase.splunk.com/app/4729/ Use this code and set a 1-hour Window: sourcetype="jamfmodularinput" | stats count, values(computer.Compute