I’ve been asked by our support teams to see if there’s a way to automatically drop devices that haven’t checked in with Jamf within a certain timeframe (I.e. 30-90 days). In Config Manager on the Windows side, we have it set to 14 days. However, if we were to even set the device to unmanaged to drop out of Smart Computer Groups, when the device comes back online, it would have to be re-enrolled again.This is mainly an issue with things like security patches and zero-day vulnerabilities where it may show 100 devices out of compliance, yet 20 of those haven’t been online in 90+ days. So after pushing a patch via a policy, we still show 20 out of compliance and 2nd level has to engage the customers to see what the status of those devices is.How are you dealing with stale Macs and if/when they do come back online if the device is either unmanaged or the record is removed completely?

Good Morning So we have been using a .csv inventory preload with a script since we set up jamf a number of years ago, all of a sudden it is no longer renaming the computers properly. It is used to rename the machine to the asset tag, the asset tag shows up correctly in the jamf inventory if i do a search but it just will not rename. When the policy runs it says its completed, so i don't even have an error to research. I have no idea what has changed. I have checked the account username/password, tried deleting data from the preload and re-uploading a new sheet. What am i missing here Here is the script we are using. #!/bin/bash ## Enter the API Username, API Password and JSS URL hereapiuser="account"apipass="password"jssURL="https://quinnipiac.jamfcloud.com" ## Get the Mac's UUID stringUUID=$(ioreg -rd1 -c IOPlatformExpertDevice | awk -F'"' '/IOPlatformUUID/{print $4}') ## Pull the Asset Tag by accessing the computer records "general" subsectionAsset_Tag=$(curl -H "Accept: text/xml" -s

Has anyone been able to get mice to have right-click enabled by default? We are running lab machines with new users logging in all the time and would prefer they not have to enable that for themselves each time. I have seen (and tried) various solutions here on Jamf (scripts run in a policy) but have not been able to get it to work. I am interested if anyone has had any success?We use Logitech Mice in most of our classrooms, since the apple studio doesn't come with mice/keyboards and most of our users prefer them over the apple mouse anyway.

We use the Patch Management reporting in Jamf Pro to keep track of versioning for a lot of applications that use auto updates. However, since we moved some of our devices to the Chrome Beta/Extended Update Channel, we noticed that those versions show up as "Unknown" in the Google Chrome Patch Report.  Does Jamf have a way to keep track of these versions in patch management? or would I need to put in a Feature Request for that?

Every time I change an erroneous computer name on Jamf through "Search Inventory" the name eventually reverts back to "David's MacBook Pro" or something. Any ideas why this might be happening?

HI,I am having trouble deploying the Papercut Print Deploy Client.The two queues work fine. When I try to reach the correct port via the browser I get the hot green coffee.I followed the instructions from Papercut however my OS Version is Sonoma which doesn't have Managed Preferences so I unsure then how the plist you create is supposed to work.I tried to override the Server_Host value but adding it in Enabling and Print deploy and then putting in the FQDN of the server.I am getting This is Akward from the Print Deploy app on the Macs as they can't find their way back to the server.Does anyone has any suggestions to get around this issue please? Thank you in advance.

We are using Jamf pro, Jamf connect and Microsoft intune.We start facing a issue when user password expire and need to change password.Any specific thing I need to set in 365 ?ThanksEC

I've taken up to Jamf 300 and the training course resources used to be available here:https://docs.jamf.com/education-services/resources/Anyone know if the link has changed or if the materials are no longer publicly available?Thanks!

Is there a way to prompt users to allow Location Services after the Return to Service app runs? I don't see how the average user could be directed to go and set Location Services. I understand Apple still does not allow it to be set by default. Thanks for your thoughts.

Getting the notification that the Push Proxy Cert is expired. Been getting this for the last 2 weeks since the update to Jamf Pro Cloud Version11.4.2-t1713554080Went into Global > Push Certificates, clicked on Push Proxy Settings, clicked renew, and am watching the endless spinning.Logged into Jamf to make sure the account used to make the cert is correctDeleted the cert and re-added it with a fresh date, then next day got the alert againVerified connection in the Global > Cloud Services connection, updated credentials as wellAt a loss here how to fix this. 

I researched a few companies that integrates well with Jamf and ZenDesk. RefTabZluriOnetoOneIf any have any other suggestion to help better my work flow through out the day. Ideally we would use this system to also track our other devices such as chargers or etc. 

Looking for some guidance on how to suppress the Jamf Connect sign in window for a strictly local user account. In this particular work flow we have a few Mac's setup as Podcast stations using Hindenburg because of this there's only a local account on the machine called "Podcast" to preserve the application preferences. I would like to allow network logins on these machines (if possible) by leaving the Jamf Connect client installed. The issue I'm having now is when a user signs into the local "Podcast" account they're presented with the Jamf Connect "sign in" window which is causing confusing. I've gone over the various Jamf Connect keys but I can't seem to locate any options to suppress this window.Help! 

We ran into an issue where one of the higher-ups within our organization was having printer troubles and one of our technicians remotely logged into their Mac with the managed admin credentials. The higher-up took issue with this as the user's account does contain sensitive documents and they're not a fan of the possibility that anyone in our department is able to remotely log in using the Screen Sharing app. Any ideas on how to designate Jamf Remote Assist as the only RD software and possibly disable or remove Screen Sharing capabilities without completely disabling RD? Ideally, the end-user would have to allow the screen sharing session and the Screen Sharing app allows any user to connect if they have the correct admin credentials.

Is there a way for Jamf to get the current Private MAC address of a Supervised, managed iPad?NOT the hardware MAC address!I've used Extension Attributes for other things for IMacs, but this one seems a bit curlyI have a bunch of iPads and the Wi-Fi config hasn't got disable randomisation ticked and I didn't want to just update the Wi-Fi profile without trying to find some way to look up the iPad by current MAC address first.Thanks for any suggestions!

Hi all, i have a small package (.pkg)that installs FortNAC persistent Agent, the trigger is "Once per computer" this works perfect. Now there is an update for this package (.pkg) what is the best way to update this package?So remove the old package and add the new package to the Policy but how do I reset that this policy run again?or turn off this policy (and later remove) an make a complete new policy with the new package? thanks

Hello, I'm trying to figure out how to change the "Hostname" and "Local Hostname" of our fleet of MacBooks to use the Serial number instead of the name of the computer that ends up being the name of the employees, which is not great for privacy and security.I tried many scripts from Jamf Nation and also Github but can't get any to work.I don't want to force users to have their computer name using serial number tho, just hostname and localhostname.Do you guys have a solution for that? Thank you

Learn how to provide your users more detailed feedback for standard Jamf Pro Self Service policies with a proof-of-concept script from Bart Reardon, the creator of swiftDialogBackgroundEarlier this week on the MacAdmin’s #swiftdialog channel, Drew Diver asked if it were possible to use swiftDialog as a status bar for Jamf Pro’s Self Service.“Ah, the Holy Grail …” was my reply.@bartreardon may just have delivered (once again).Continue reading …

¿Cómo puedo configurar Jamf Pro para que solicite el nombre del equipo al iniciar o finalizar el proceso de configuración del sistema operativo, de modo que el equipo tome el número de inventario asignado y, al aplicarse las políticas de Falcon y Netskope, ya aparezca con el nombre real?      

We have been using this script likely stolen from somewhere without source for a few years now to configure the nomad launch agent. The python bits need to be updated and unfortunately I don't know python which is making it a tad bit complicated to update. Any advice would be much appreciated.  loggedInUserPid: looks to be printing the user ID which is simple enough to translate to bash.launchctlCmd: I have not the foggiest what this does to try to translate it.**We are moving to JAMF connect later this year.  #!/bin/sh ## postinstall #*============================================================================= #*==============================å=============================================== #* REVISION HISTORY #*============================================================================= #* Date: #* Author: #* Solution: #*============================================================================= pathToScript=$0 pathToPackage=$1 targetLocation

I have a bit of a stupid question. Why doesn't the Enrollment Method display for Computers in the Device Record? For example, in the screenshot below, you'll see the enrollment method is blank for a computer that passed through Prestage like normal.But for mobile devices, the enrollment method properly displays in the inventory record.This in no way seems to effect any function within Jamf. I'm just wondering why this is and if its the same for everyone. Thanks!

We have recently ported over our Mac Apps to the Jamf App Catalog, but are running into a bit of a snag.  The initial deployment went great, but we have had a few users manually remove an application that was pushed out via the Jamf App Catalog.We created a new JAC deployment for the application, and made it distributed via Self Service, but the status on those computers are "Unqualified for App Installer".  I am assuming that this is because it thinks it already has it from the initial deployment?  Is there a local file that it keys off of for the install status?  Is there a way that I can override this?Thanks

Hi Everyone, I am planning to implement JAMF-LAPS (Local Administrator Password Solution).I have a look of this https://github.com/red5coder/Jamf-LAPS?search=1I just want to gather everyone feedback on this one.Also, I would like to seek help if anyone has implemented this before and can guide me on how to implement this approach using Jamf Pro cloud? Thank you,

I have GLDAP working for our main domain, but I'd like to add and additional google domain for secure ldap logins.  Is this possible?

Hello!I am currently trying to install Veeam via JAMF and I am using the instructions from this post: https://community.jamf.com/t5/jamf-pro/deploying-veeam-agent-for-mac-using-jamf/m-p/246434#M230724The agent is installed & gets full disk access but does not import the configuration for the backup job. Is there an updated install instruction?

Hi all,We need to stop personal iPhone/iPad from connecting the work macs. We have tried deploying this one: https://github.com/jamf/jamfprotect/tree/main/device_controls/restrict_mobiledevices_syncing_with_finderThis one is actually effective partially in stopping Finder to do the sync with iPhone. However, in Photo.app and Image Capture.app, there's still personal device.Is there a specific preference domain or key we will apply to stop all iOS/iPadOS from connecting to the work mac?