Every year we offer our graduating seniors the opportunity to purchase their school owned laptop. With that we have an off-boarding process in Jamf that is executed via Self Service by our Team to execute a script to do the following:Remove all licensed software.Unbind from Active directory and convert the Mobile account to a local one (cool utility found here).Remove the Jamf binary with "jamf -removeframework" and use the API to delete the Jamf record. This year as I test on some computers, I find it to be a bit buggy with errors and spending lots of time troubleshooting a process that has ben rock solid the last couple of years. Is anyone doing something similar and can share how you handle this type of situation? Perhaps it's time for some major cleanup of how I handle these.

Is Anyone else experiencing this? We have our screen saver set to come on after 10 minutes, and needs to be unlocked to get back into the device.  I have an Intel device that will not accept the "correct" password. Have to reboot it to allow me to log back in. 

Hi,How do I know from jamf whether the device is connected and communicating?Charles

Hi all, with the imminent deprecation of Jamf Admin app does anyone else experience very slow upload speeds for PKGs and DMGs using the web GUI interface?

Hi,I have a teacher who's using SONY headphones, so i wanted to push him the sony app.The purchased app is properly synced from ASM/VPP Store to JAMF.But when i load the device in JAMF school and want to "add" the app to the device, the app isnt not listed.But i can see the app under JAMF-Apps.What cant prevent an app to show up .

We've had about 5 students bring their iPads to us and say that all their apps have been deleted.Every app pushed out by Jamf is gone. Jamf shows that no config profiles are applied, no apps are installed, and there is no last inventory date - it's like it's become unenrolled except the management buttons are still showing, though clicking them does nothing.I'm not 100% sure but it does seem to have started with the 17.4.1 update.The students are sometimes using the iPads at the time - I don't see anything in the management logs to explain it - just that it uninstalls the apps.Has anybody else experienced this? Any advice?Thanks 

We know that it's possible to set a managed app configuration for iOS apps. But how can you do that with macOS apps? Can't find anything in the docs or the Internet in general for that. Our specific use case is that we want to use JAMF Teacher on macOS. Since we have an on-prem JAMF pro, we need to distribute a managed app configuration with the JAMF teacher app. No problems on iOS. But with macOS..? There's no place to even insert any app config for macOS apps (I think this is a hybrid app if it matters). Any advice?

Hey Jamf peoples. Is there a way to get jamf to run a local script without waiting to see the results of the script?  I've written up a pretty basic Jamf Helper script to aide with encouraging/forcing users to restart their computers. Because I set a long time out on the jamf helper window, Ideally I'd echo a script locally to the computer and then have Jamf start the script and immediately exit the policy.  When I test using an event trigger, the policy doesn't doesn't complete on Jamf's side until the local script resolves.  Is this possible without something like a launch daemon or launch agent? This is basically what I was trying to do: #!/bin/bash#variablesscriptPath="/Library/myOrg/restart.sh"directoryPath=$(dirname $scriptPath)mkdir -p $directoryPathtouch $scriptPathecho '#!/bin/bashorgIcon="/Users/Shared/MyOrgLogo.icns"helper=/Library/Application\\ Support/JAMF/bin/jamfHelper.app/Contents/MacOS/jamfHelperdate1=$(date "+%y%m%d")pmDate=$(da

Hey everyone,Are any of you experiencing issues connecting your MacBook to guest Wi-Fi networks like hotel or airport Wi-Fi? Some users are encountering error messages and are unable to pass through capital.apple.com.Any ideas on how we can resolve this issue?Thanks.

I am using the following script as a EA to pull up the users iCloud account name, this works fine but if the machine hasn't updated inventory, or, if the user hasn't created a iCloud account then its just blank, I would like the script to report None if the iCloud account doesn't exist, could anyone modify the script to accommodate this ? #!/bin/bash for user in $(ls /Users/ | grep -v Shared); do if [ -d "/Users/$user/Library/Application Support/iCloud/Accounts" ]; then Accts=$(find "/Users/$user/Library/Application Support/iCloud/Accounts" | grep '@' | awk -F'/' '{print $NF}') iCloudAccts+=(${user}: ${Accts}) fi done echo "<result>$(printf '%s ' "${iCloudAccts[@]}")</result>"

Hello All,I need a help to set proxy pac on mac devices through a config profile so that user cant change it.I built a config profile and under the payload proxies I choose automatic proxy configuration and provided my organization's proxy pac and then I deployed on my mac, I can see it did not set the proxy. How to do it and any issue will happen if I deploy thsi config profile at the time of enrollment as my organization's proxy passes network traffic through cloud Zsclaer and just after setting the proxy it ask for authentication with user's work email and password. Please tell me how to fix these two issues. Your help will be appreciated! :)ThanksAsif

We have implemented a setup of JAMF Pro with Jamf connect into our environment. We have a mix of standard and admin users, and then we have a process to do admin items as needed. One area is our Network items, standard users cant troubleshoot, forget networks, etc. This is obviously a massive issue, and being unable to connect to on travel or troubleshoot to get things moved along to the network, is creating massive productive gaps. From what I see, Apple really locks down some of this, but it makes no sense why its so locked down. Any work around? We really need ALL users, to be able to control their network settings. ESP, when they travel for company events. Thanks, 

How do you guys set it up? Building? Room number?  Department? Currently I have set up as just room number. is the a better way the set this up? Thanks!

We are a University with Apple School Manager and Federated Apple ID setup, devices managed by Jamf Pro. Recently we've seen an issue with new users signing in to our shared iPads. They sign in with the federated account details fine, are prompted to create a passcode as normal:Then, when logged into the iPad, when the screen locks then the prompt to enter their passcode to unlock it is not the same as the normal federated one, its a numerical keyboard only, so they have no way of entering the alphanumeric passcode they just created:I've found that resetting the users passcode within School Manager resolves the issue. But its not a workable solution to have to do this for an entire class during a teaching session. Has anyone else experienced this issue?

What is the proper way to automatically enroll a new device into a Static Group during prestage enrollment? I'm using Sonoma 14.4.1. Currently I have to do this manually after the end user boots up the machine. There are policies configured to a certain Static groups new devices needs to belong in. 

Hi Jamf community,I'm looking for a Jamf content filtering solution that will work on just a handful of iOS and Mac devices - currently 3.Jamf protect looks perfect for this but has a 25 user of 50 device minimum and can only be deployed through Jamf Pro which has similar minimums. Jamf Safe Internet looks great too and can be purchased per device but I don't think this can be deployed through Jamf Now.Is it possible for an individual/family to use Jamf School and apply Jamf Safe Internet? Are there any other solutions that you know of?Thanks!

HiWe are in the process of removing local admin rights for users machines. We are trying to figure out how to install command line tools, such as xcode, from self service. The issue we are foreseeing is authentication. We want to write scripts to take care of these installs and wanted to see if anybody else has dealt with something like this and may have some tips.

This post was originally posted to my personal blog, which you can find by following this link. With Jamf Pro 10.49 admins can now use OAuth client credentials flow for authenticating to the product's APIs. The documentation for the new API Roles and Clients can be found here. The implementation is straightforward: Go to Settings > System > API Roles and Clients Create an API Role Select all of the applicable Jamf Pro API role privileges it should grant. Create an API Client. Select one or more API Roles to assign to it. Enable the API Client. Generate the Client Secret. You can now use the client ID and secret to obtain access tokens. This shell example below is taken from Jamf's developer docs. curl --request POST "${url}/api/oauth/token" \\ --header "Content-Type: application/x-www-form-urlencoded" \\ --data-urlencode "grant_type=client_credentials" \\ --data-urlencode "client_id=${client_

Hello, sorry for my bad english. I'm searching for a solution: students can change DNS setting and skip our UMBRELA configuration.I'm looking for something that can prohibit DNS changing when they are on our network, but when they are outside, they can do if they want.  Could you help me whit this one? ThanksBR

Estoy enfrentando un desafío en mi compañía relacionado con la personalización de los equipos que operan con macOS Sonoma. La política de la empresa requiere que el sistema operativo refleje los colores corporativos, y el color naranja, que está disponible en la configuración de 'Aspecto' de macOS, es nuestro color representativo.Para implementar esto, he creado un archivo .plist que se distribuye a través de un perfil de configuración, con el objetivo de que todos los equipos de la compañía adopten este color de acento. Adicionalmente, este perfil también está configurado para que la barra de desplazamiento se muestre de manera permanente.A pesar de haber intentado todas las modificaciones posibles, no he logrado que estos cambios se apliquen correctamente en los equipos. ¿Alguien podría asistirme con este problema?A continuación, adjunto el código del .plist que he estado utilizando:<?xml version="1.0" encoding="UTF-8"?><!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "h

To All, we are looking for a way to import 400+ computers into JAMF Pro, Any help would Great

Hi All,Just wanted to see if we are still in the same boat where we cannot install or manage In-App purchases for iPads etc.. Is it still the same that because we go through Apple School Manager for the apps, there is no way to get the In-App options?Thanks!

Hello Jamf Nation!We have several exciting new features including new Login functionality, Managed Software Updates enhancements, Packages page redesign, and more! You can find more information in the release notes when you enroll.Starting with the Jamf Pro 11.6.0 Beta, we will be deleting any Jamf Cloud Beta instances that have not been accessed for more than 90 days. Once a beta instance is deleted, it is not recoverable. If you would like to retain your existing beta instance, please log into your instance within the next 30 days. You can find your instance at account.jamf.com >> Feedback >> Jamf Pro Beta.If your Jamf Cloud Beta instance is deleted, you’re always welcome to create a new one in the Beta section of Jamf Account. Please email any questions to beta@jamf.comHow to join the beta: Enroll in the Beta Program under Product Feedback at account.jamf.com. Once you enroll you'll receive an invitation to join the Beta Forum, click "Join this group Hub" to gain access.

Trying to renew our DEP server token before it expires, have logged into Apple School Manager and clicked on the MDM to download the token p7m file, then tried to upload that file to the expiring instance and it says "The file received is not valid"Any Suggestions?

Hi Everyone,I've been doing some testing with the Mac OS onboarding feature and getting mixed results.  On first login with newly enrolled Macs I see Self Service launch as expected but the Mac OS onboarding screen doesn't kick in.  I've checked that all polices are set to be available in Self Service, frequency set to once per computer with no other trigger enabled and I've made sure all required polices are ticked in Mac OS onboarding.  I've made sure Mac OS onboarding feature itself is enabled and "Launch Self Service when done" is enabled in User initiated enrolment.  I've seen some success with leaving the Mac for 10-15 minutes then relaunching self service which kicks Mac OS onboarding in to life but it's not consistent.  Any help greatly appreciated.