Hey all,I have a request from the business side of our operation and tbh i'm not very sure where to start!It has two parts to their request - "We need 'Printer Name' hostname to be resolving from 'Mac Address' - MAC addressLater we need the script that queries currently installed printers on a Mac machine and runs removal of them and re-installation using hostname." If i look into our current printer setup within Jamf, it looks pretty standard - they are added by IP (i.e. ipp:x.x.x or ipd:x.x.x). I'm sure i could work out the script part in the end, but really i have to idea how to enlist a printer in Jamf (and self service) through DNS rather than IP. Has anyone had any experience with this in the past?Many thanks!

Hi there,I'm looking at starting to leverage the Mac Apps tool in Jamf (Computers > Mac Apps > Jamf App Catalog). My only concern is that there doesn't appear to be a way to specify the application version.For example, if Slack just released version 4.36.138, we would like to roll that version out to a specific few users to test to make sure that nothing breaks company wide. Once that is confirmed we would then like to be able to push that version out to the whole company.Moreover, should something break down the line, we would also like the ability to revert back to previous versions (essentially maintaining historical versions of each app that we support).With our current process, we can do this through patch management, but that still requires the individual packaging of each application through Composer. It's very possible that I'm missing a step in this, but I can't seem to figure out how to do this via the Mac Apps feature.Any guidance would be greatly appreciated, thanks!

Hey All,I am taking over as JAMF admin for my organization and running into a worry, our renewal for our APN is coming up in a couple of months and our rep sent me a video on how to renew it. While watching the video I saw that if I use a new AppleID to create that APN that's different from the prior one it will break communication. What does that entail, the user no longer works for our company and it is under their email. Is there a way to assign a new Apple ID without breaking communication or am I out of luck with this?

So we have Google LDAP connected to Jamf. It's working great for populating User & Location information, etc. However, I'd really like to leverage 'Directory Service User Group' to scope stuff. It just doesn't seem to be working. I've tried to do some reading and I've found people saying it's unreliable. When I go to Cloud Identity Providers > Google LDAP > and do a lookup of myself or others + and also search for a group name - it correctly returns that I'm a member of ___-staff group. There's a specific policy I want to exclude for this staff group. I can go to exclusions for this policy > Directory Service User Groups > search for the staff group I'm apart of > it finds it, and I add it. After doing that, I still see my computer as pending like it's still in the scope. User & Location info is accurate, my local account matches LDAP user name, etc. How are people future-proofing scoping? My other option is to hand-build Departments in Jamf that match Departm

Is there a way to update Outdated Devcies? I have a lot in my Jamf Pro dashboard. Any tutorials or walkthroughs would be super helpful!

Are there any tools for retrieving and downloading existing scripts that are currently stored on the JAMF server? 

So we have file maker pro with some automation through applescript, and our newer macs arent prompting us to allow this automation.  Is there a way i can push this allowance through jamf? 

Hello, I wanted to know how we can push out an app to Users we know need it and to users that may need it.

Our security team has some questions about the Jamf check in process and I have been unable to find the specific details regarding a switch. The command is: "/usr/local/jamf/bin/jamf policy -event CLIENT_CHECKIN -stopConsoleLogs" and the switch is "-stopConsoleLogs". Does anyone happen to know what exactly this switch does and why Jamf would want to stop the console logs? Thanks!

hi there, we have issue with the jamf connect new version not updating. and i was wondering can we manually download as dwg file and install manually? since the mac users aren't able to conenct. they do have the newer license added. 

Hello, I'm trying to figure out a way to restrict users from deleting the profile under the VPN & Device Management -> Mobile Device Management.It really wouldn't make sense for the users being able to remove the management after being supervised and managed.I went through the restrictions under the blueprints but I couldn't find the one to restrict this.Heard about the prestige enrollment but I don't know where I can access that, if there is one for Jamf Now. Thanks.

Hey all, Quick rundown is that users log into the machines using Active Directory accounts and it creates a mobile account upon login. What I am looking to do is delete the user cleanly while also removing the shared information. I am aware that I can use sysadminctl to remove the user and alot of the information to move forward. The current issue is that this wasnt done previously and was using dscl to remove the user and then an rm command to remove the home folder. I am currently trying to remove the remainder of the users off of the computer which is the SharePoint and Group in Directory Editor to clean these up to move forward without a complete image. I can do it manually in terminal using the full filename. I will post what I am currently trying to use to remove the information. It may not be perfect but I am running into issues with the commands. Please let me know if there is anything that can be done to correct this or any insight. Also if I have anything completely wr

JAMF seems to think that my iPad has a different version of an app installed depending on where in JAMF I look for this information. The iPad itself reflects 13.9.1, but the Smart Device Group that filters on "App Short Version" doesn't capture this device because the "Short Version" under "Inventory > Apps" shows "13.4.1". If I check under "Management > Apps" it shows the correct version that is installed. How do I get the Smart Device Group to match against the field under "Management > Apps" and/or get Inventory and Management to match? Thank you  

i am starting to lose my mind a bit here.I am attempting to rename a few PCs that didn't get renamed during enrollment to: firstName lastName - serialNumberTo my understanding, there is a policy setting under maintenance to "Reset Computer Name" that should allow me to fill in the Computer Name field in the Inventory and it'll update the computer's name upon checking in.However, when I tried that on a test computer, instead it renamed the machine to "Macbook Air"I see that there's a simple script that can be done:jamf setComputerNameI can also add a switch to it, i.e.: jamf setComputerName -useSerialNumberBut I can't find any confirmation as to whether I can use multiple switches at once.I would like to, ideally, know why the Reset Computer Name policy isn't working, but failing that I would like to be able to have a command that is basically: jamf setComputerName -useFullName " - " -useSerialNumberAny help would be greatly appreciated.

Phone worked fine with Jamf prior to resetting. Now it is posting SCEP server returned an invalid response error code. 

Hi there, I am looking for some help. I searched but did not find any hint, regularly people search for a solution to prevent the use of private Apple IDs on Macs, and I am looking for a solution to re-enable it for certain devices.We have a configuration profile in place with Restrictions and the respective Functionality settings that prevent all computers from adding private apple ID. In the Scopes, the device groups are linked that are allowed to bypass the restrictions. Again for such, the allow list is also a configuration profile.This worked quite well for the past three years - now out of the blue I can still see that the private Apple ID is registered on the device, but the majority of services stopped working, and when clicking on the Apple ID in System settings, everything is grayed out and a message on top says "Account changes are restricted by a profile."Does anyone have experienced similar or know a solution to recover?

Afternoon Jamf nation  I have recently @mosermat process here https://community.jamf.com/t5/jamf-pro/build-a-custom-macos-dock/m-p/264565 It working great if I use my admin account however for standard user I recive this message in the log filetdenton is not in the sudoers file.Has anyone seen this before    log file output belowdockutil-variable = /usr/local/bin/dockutilsleep-variable = /bin/sleepcurrentuser-variable = tdentonThe dockscrap file is set to /Users/tdenton/dockscrap.txtNo dockscrap found. Continuing to build the dock!Removing all Dock Itemstdenton is not in the sudoers file.This incident has been reported to the administrator.tdenton is not in the sudoers file.This incident has been reported to the administrator.adding /System/Applications/Launchpad.apptdenton is not in the sudoers file.This incident has been reported to the administrator.adding /Applications/Self Service.apptdenton is not in the sudoers file.This incident has been reported t

We have just discovered that by default the Status bar in Safari is disabled for some reason. We are doing our Phishing security training and are helping staff identify phishing and spam by hovering over links for example. Unfortunately, if they use Safari, that does absolutely nothing. So, I created a script that should enable it, but it doesn't appear to be working and was wondering if anybody else has come across this and how they addressed it. Here is my script; #!/bin/bash defaults write com.apple.Safari ShowStatusBar -boolean true exit 0 *edited for bad grammar

Hi All, I have a tool that needs to be deployed by region. I am trying to figure out a way to query Global Protect via script to determine the GP gateway that a user is currently connected to? I was hoping I could get this information via an extensions attribute. But, that didn't provide the information either.  Has anyone else been able to obtain this information and have it show in JAMF Pro? 

I thought I would share a workflow for enabling auto-login for Macs with pre-stage and JAMF Pro on Big Sur+First the tools you'll need: 1. MacUserGenerator app 2. Payload-Free_Package_Creator.pkg3. JamfConnectMetaPackage postinstaller.sh4. Jamf Pro Pre-stage setup like this.5. Jamf Composer installed6. Apple Developer ID Installer cert or a Jamf Pro Self signed cert to sign the pre-stage pkgs.Self Sign how to guide is in hereSteps:1. Create the auto-login account with MacUserGenerator.app file and export as python script.Make sure you check the two check boxes below.2. Use the payload free package creator and add the python script from step 2.3. Open Jamf Composer and create a blank pkg.    A. The pkg is created from step 2    B. Add post-install script and add this script and update the path and pkg name  JamfConnectMetaPackage postinstaller.sh   C. Create the pkg and sign and add to your pre-stage.4. Done! Now

Hi Everyone I know a way in windows to block an SSID to show in my computer via CMD script👇netsh wlan add filter permission=block ssid="SSID NAME" networktype=infrastructureif I run this command in windows, my neighbour's SSID won't even show in my wifi list  I tried so hard to find something similar for Mac but no luck, can someone tell me if this is possible and how ? Thanks Arman 

I am attempting to remove our guest wireless network (SSID) using WPA2 personal from all machines in my environment. I have scoured through JAMF Nation, in search of posts looking to achieve the same. I was able to find a handful of useful discussions but none were fully applicable to my current requirement. Some posts had suggested achieving this in a configuration profile and supplying a bogus password so the machine is never able to connect to the network. I would like to remove the guest wireless network from all machines rather than fully implementing an all out ban from ever connecting to it again. In short, I'd like to accomplish the following: Create a smart computer group which inventories all machines with the guest network SSID. That is, all machines that have the guest network saved as a preferred network. Remove the SSID from all machines in this smart computer group. Please let me know what your thoughts are and if this is best approached with an extension attribute

Hello I have a very dumb question. What is the most common way users deploy jamf connect in their org? we are doing it where we have config profiles and policies setup and we scope it to a users computer and through pre stage enrollment is that the common way to deploy jamf connect? Are there other ways to deploy Jamf Connect I saw you can download a config profile directly to the computer 

We have Office365 federated with Okta. When I use the Jamf Connect Configuration app with my Azure application everything works fine. I get tokens. However now that I've deployed it using a machine that's not a fresh install I enter my credentials at the Jamf Connect window and I don't get sent to Okta then it says my credentials are incorrect. Is this expected? Will this only work with a freshly wiped machine like in the Jamf connect training? Edit: It seems Jamf connect is unable to handle federated Azure so I'll likely be switching to Okta.

Hi, I have an issue with one specific app (Flash Academy) that I am trying to roll out in my schools network. When a user tries to load flash academy it immediately crashes and sends them back to the home screen. The app doesn't work on any iPads, both the app and iPads are fully up to date. No issues occur with any other app. The app works absolutely fine when I remove the JAMF profile from the device. Any ideas?