It seems like every time i try to make Custom Settings for a config profile, no matter how I make the plist file (xCode, VSStudio, manual creation, Jamf Pro spits out : JSON format is incorrect. I'm really confused at what I'm doing wrong.It will accept an actual JSON format, but then nothing populates in the form editor or Plist preview panes.What am I doing wrong? How should i go about making custom settings for external apps?Thanks in advance! Here is a sample from my OneDrive config profile<?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>AllowTenantList</key> <string>TenantID</string> <key>BlockExternalSync</key> <true/> <key>DisablePersonalSync</key> <true/> <key>DisableTutorial</key> <true/> <key>FilesOnDemandEnabled</key>

I am simply trying to repackage some drag and drop apps as flat packages using Composer. We do this so we can use them in our provisioning workflows via Jamf Pro.  Note: I have tried composer 10.44 to 10.48 and get the same results. Using FileZilla as an example: That is pretty much it. No postinstall, but I am signing with my developer installer ID.   I have tried to notarize and staple the .pkg's, but Apple does not like something in the .app file so I get "Invalid Package".   I have tried all kinds of things to try and clear any security flag, but nothing seems to work.  The only thing that does work is control clicking and selecting Open, then open anyway.   That does not work when attempting to deploy to thousands of computers.  Our help desk will get overwhelmed with calls.  I have tried all of the following to fix the issue via script (kitchen sink from various how to's I found):   # disable gatekeeper su

So way, way outside my comfort zone, but feeling this days the importance of stretching myself I think I've a highly relatable topic for JNUC 2024 pertaining to the experience of being a Macadmin in a very Windows world, and all the trials and tribulations arising therefrom. I've submitted both my proposal and introductory video, and working from my outline following is what I've come up with:Good morning/afternoon! My name is Chad Jones. I’m currently the Jamf/Mac endpoint administrator for the City of Phoenix. This is a role I’ve held for about 3.5 years. A little about me: my professional infotech experience stretches back a quarter century to February, 1999, when I assumed my first desktop support role. Within eighteen months I was promoted, and then again about 2.5 years later. Twelve years of my career was spent directly supporting the needs of our executives and elected officials (Mayor, Council, and City Manager). I routinely received kudos for my technical acumen, ability to e

Perhaps someone has done this before, I didn’t really search around for it before I put this workflow together. As we know, the jamf binary does not use APNs, so we haven’t had a way to “send a push command” to call the jamf binary for things like ‘jamf recon’, ‘jamf policy’, etc.. Until now. Sorta. Here is my workflow for achieving this. Create a LaunchDaemon that watches for a particular Managed Preference (MCX) plist Run a script via the LaunchDaemon that reads the MCX file for the jamf verb (recon, policy, etc) Create a Configuration Profile with the “Custom” payload to push the MCX file Scope the Configuration Profile to a Static Group Add a Mac to the static group to force a call to the jamf binary via MDM/APNs The LaunchDaemon File Name: /Library/LaunchDaemons/com.yourdomain.daemon.mdm_trigger.plist <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/Pr

Looking for some help please as - I am not getting any help with Jamf Support at this moment and the case is at a HIGH level. We are new to Jamf School this year and transfer over from Securely MDM.  The issue is Teachers are not seeing any of the default settings in the JAMF TEACHER APP - Nor are they seeing their classes.  We are a school district made up of 5 buildings - ALL SIS info is imported into ASM from Infinite Campus - Teachers and students are assigned their correct building in ASM and the class right now shows 25 students and an instructor that class. Also, everything looks to be right as the groups and classes are set up correctly in JAMF SCHOOL but when the teacher opens up the JAMF TEACHER APP nothing is showing in their layout.  Here is what i see or I think it is an issue - Organization - Settings - ASM - Sync Settings - there is a box to be checked under that setting called "ALLOW TEACHERS in ASM to use JAMF TEACHER - When I select that - I get an

Since updating some of our iPads to iPadOS 17.4 I've noticed guest sessions on Shared iPads taking nearly a full 3 minutes to login. On iPadOS 17.3.1 and older, guest sessions log in and are good to go in about 15-20 seconds.  Has anyone else observed this behavior? 

I have a computer that is enrolled but MDM Capability is No and under Management, Management Commands are missing. I tried to re-enoll it via enrollment URL but that didn't make a difference. Any ideas?

Hi All,  I'm looking for some advice with configuring Shared iPads with Jamf School.When we set the Automated Device Enrollment Profiles IOS setting of our iPad's as a shared device and we do not apply Only allow temporary sessions, we do not have the ability to allow guest users to sign in as Guest is not shown on the lock screen.When we set the Automated Device Enrollment Profiles IOS settings to only allow Temporary Sessions, the end user cannot sign the iPad's into iCloud, and participate in Apple Classroom.Is there a way to allow the Guest account to Sign in to to iCloud to facilitate the end users being able to join a class that is hosted at our location?  then, once they log off, the next user can use the Guest account and sign in to join their class and so on?Any advice would be appreciated as i am quite new to Jamf School.

Is there anyway to run particular script when pushed a particular configuration profile to a system?use case: on some Mac jamf policy check-in policy stalled due to unknown issue, we have to ran killall command then run jamf policy command. so planning to run these commands via script with help of configuration profile. when a particular configuration profile pushed the command should run.

As Cisco is phasing out just Umbrella we have to create a package using their secure client instead.  Whilst I have followed the instructions here (https://docs.umbrella.com/deployment-umbrella/docs/customize-macos-anyconnect-installation#prerequisites) to customise the installation on a single machine, I have been completely unsuccessful is creating a package from the customisation.  Has anyone done this and if so could they share what they did?  It does not help when the help documents refer to the product as anyconnect still, and some of the documents online I did find about building a package in Composer refer to xml files which do not exist in the updated secure client...so I am stuck on this.Many thanks!

Hello, I would like to enable an admin account that gets filevaulted during enrollment and gets a securetoken and recovery key. What is the best way to do this via Jamf?

I am running into an issue with a script where the new API token is expiring before it finishes.  I know there is a way to renew the token with a keep-alive command, but I'm not having any luck getting the syntax of the command correct.  Does anyone know how to renew an active token in the new API?  Thanks for your help!

I've been trying to use the api/v2/mobile-devices/detail endpoint to get data on all mobile devices registered with Jamf. I have already done the same for computers using api/v1/computers-inventory, but for mobile-devices there is a bug.When calling the mobile-devices endpoint with sections IOS and LOCATION, I get a 400 response back. The request looks like this:api/v2/mobile-devices/detail?page-size=1000&section=IOS&section=LOCATIONThe response returned says "INVALID_REQUEST_PARAMETER_TYPE, Invalid value of request parameter: section, Required type: java.util.Set".If I do the same with sections GENERAL and HARDWARE instead, I get a 200 response with the data I want.api/v2/mobile-devices/detail?page-size=1000&section=GENERAL&section=HARDWAREGiven that sections that exist on the computer endpoint work while others don't, it seems like the endpoint might use the same enums for sections as the computer inventory endpoint despite the sections on the object being different.I

Hello everyoneI currently have JAMF Connect with Entra deployed on my MACs.And I noticed that when locking the screen, only the User + Password option is offered to me, and TouchID is not offered even though it is authorized in the options and a fingerprint is configured.I can't find any more information on this subject.Do you have any tips?Thanks!

Hi Jamf Community,Our users are notorious for not shutting down their Macbooks nightly, which leads to countless issues and occasionally Jamf stops checking in or sending inventory. Currently I have a smart group that finds users that haven't rebooted in 5+ days. I have this smart group scoped to a policy that notifies the user and forces a shut down after 120 minutes, unless the reboot themselves. The problem is, if the laptop isn't checking in or the policy fails, the shut down never occurs as the policy remains pending and the laptop remains forever disconnected from Jamf (until we get our hands on it).I am hoping to find a way to force shutdown or force restart any laptop that hasn't been rebooted in 5 days regardless of it's connection to Jamf. My thought is this needs to be a Policy rather than a Profile and needs to be sitting waiting on the device so that it can execute even when offline or failing to communicate with Jamf.Any ideas?Thank you!

I've been having some issues whereby JAMF Composer just seems to hang during the after snapshot on some software. It makes it through the initial indexing phase fine, however it looks like it hangs while adding files to the package staging area. It hangs on a different file each time, it is not consistent, but it is usually a file within the .app I am packaging. When I cancel creating the package source, it will usually spit out on error stating that it "can't communicate with the helper application." I've tried changing a few settings, namely I've whether or not the executables in the package require rosetta, but to no avail. (for the record, this software is advertised as being fully silicon-based, so there should be no requirements for rosetta).Anyone have any ideas? I am wondering if I just want to throw up my hands and try making the package completely manually. I have been very frustrated with composer lately, but I digress.

Has anyone been able to get Goodnotes working on the iPad via Jamf Pro?  I've received an Education License from them, but I'm unable to get it to push out to our ipads.I've tried adding the settings listed at this link to the App Config without any success.https://support.goodnotes.com/hc/en-us/articles/6543387103503and I've also looked at this article to see if any of this could help.https://support.goodnotes.com/hc/en-us/articles/6859707661455-Installing-GoodNotes-for-Institutions-via-JAMF-SchoolI've been back and forth with their support, but it seems like they have more experience with Jamf school settings and not Jamf Pro.Any help would be appreciated, thanks

Hello,I can't find a way to add the new licence for the goodnotes 6 app.The manual from goodnotes (https://support.goodnotes.com/hc/en-us/articles/7353742669455-Install-Goodnotes-for-School-Business-or-Enterprise-via-Mobile-Device-Management) is only for jamf school / simpleMDM or jamf pro."To add your license key via MDM software, you will need to create a property list file (.plist file) containing your license key and upload it to the Goodnotes app using your MDM software. [...] Navigate to the section called "Managed Configuration" (this name may vary slightly in different MDM platforms)."I can't find anything resembling "managed configurations".I contacted goodnotes already, but maybe some of you have had similar problems and can give me a hint. Thanks a lot, Maura

Hi all. Looking for a fast way to verify a device is enrolled before shipping. We often receive Mac's to a central location before shipping-on to end-users around the world. Our supplier has a mostly-automated means of DEP-enrolling Mac's into Business Manager. But a part of that process still involves manual-input (the Organisation ID primarily) which can occasionally lead to a device arriving with us not enrolled into ABM. Is there an app/solution available for iOS whereby our logistics team can scan the Serial No barcode on the side of box to verify if that device serial is present in Jamf Pro and/or ABM before shipping the device? Thanks in advance.

Hello,I received this message from Jamf Pro Server :jamfim.lfz.ch Infrastructure Manager instance has not checked in with the JSS. What does this mean? Is it critical? Can you help me with any action I need to take? Thanks !

What permissions are required to use the Search function for mobile devices?  Trying to add this for our service desk but when I have the test user try searching nothing is returned.

Is it just me or is the inventory field for "Last Inventory Update" kind of decorative only? We have Macs which are on a shelf in stock and not been online checking into Jamf Pro for months but the "Last Inventory Update" claims they were updated today. That's a little misleading and not at all useful. It may well be when Jamf tried to check on them and got no response but why report it? What good is that information? Maybe telling me when it was last successfully inventoried would be useful. Anyone?Thanks,- Scott

What method are people using these days to either force push an update (for a lab for example) or allow users to update their OS from Self Service.This process use to be very simple to do but with multiple Apple changes over the last few OS versions I haven't been able to get it to work properly.Any help is appreciated, thank you!

I'm seeing so many job postings wanting someone familiar with deploying Jamf and ther hosting servers through some automated method usingChef or Ansible. I've built bare metal servers and installed all of Jamf manually ... but have never done it in an automated fashion. I've never used Chef or Ansible.    I'm a noob with CI/CD and DevOps.  I Short of RTFM for those products - does anyone have a good site or articles to help jump-start me in how that would work?  'm looking for any resources on deploying Jamf via Chef or other automated methods.

Hi,I have two Macs that have Declarative Device Management: Not enabled and I think they should actually have it enabled.They are on macOS 14.2.1 and 14.3.1 and are enrolled in Jamf 11.4.1Is there anything I can check or force them to have DDM enabled?