Is there a macOS command-line tool available for JSON that provides parsing functions like xmllint?I seem to be able to find lots of validators and pretty-printers. But I need a tool I can run inside shell scripts to parse output responses from Jamf Pro's API.

Feel like I have to be missing something obvious here... but I can't seem to get this to behave. Trying to make an extension attribute that checks if homebrew is installed, and outputs the result of "which brew" if so.... pretty basic. This works perfectly from terminal both as my standard user and as root... but when jamf runs it... all that's returned to the extension attribute is "Installed: " with no file path listed.From terminal, i get what seems to be a proper output jamf should be happy with:sh-3.2# ./test2.sh <result>Installed: /opt/homebrew/bin/brew</result>Extension Attribute Code:#!/bin/bash if [[ $(which brew) != "brew not found" ]]; then brewstatus="Installed: $(which brew)" else brewstatus="Not installed" fi echo "<result>$brewstatus</result>" exit 0 

Disable Deleting Browser History in Google Chrome iOS?I have tried adding the following command to the payload:  <key>AllowDeletingBrowserHistory</key> <boolean>false</boolean>Is there a different key for iOS? Surely it can be done. I was able to disable Incognito with very little documentation. This must be possible as well.

Hey Jamf Nation,We are currently attempting to configure a few Macs in our Jamf Dev Sandbox. While we have successfully migrated most of our configurations to the sandbox, we have encountered an issue with the enrollment invitation file. Whenever we attempt to download the file, we receive an error message.Any ideas or suggestions?

In light of the new "Force a Computer Restart to Install macOS Updates" feature in Jamf Pro 10.38.0, I've decided to create a bash function that should make life easier for admins that want to force updates on M1 machines.Please refer to the screenshot below for more information on this feature.New to bearer tokens? Don't worry about it, I've already done the work for you. Simply fill in your api account data and let the function take care of the rest.  #!/bin/bash # Server connection information URL="https://url.jamfcloud.com" username="apiusername" password="apipassword" # Determine Serial Number serialNumber=$(system_profiler SPHardwareDataType | awk '/Serial Number/{print $4}') initializeSoftwareUpdate(){ # create base64-encoded credentials encodedCredentials=$( printf "${username}:${password}" | /usr/bin/iconv -t ISO-8859-1 | /usr/bin/base64 -i - ) # Generate new auth token authToken=$( curl -X POST "${URL}/api/v1/auth/token" -H "accept: application/json" -H "Au

Hi Folks, I am getting the Okta Login screen while trying to reset the local password using the recovery key in the lock screen window. FYI, I have disabled the network authentication in the Jamf Connect mobile config.  Any help on this would be appreciated. Thanks & Regards,Bhushan Hejmady

Looking for a potential way to run Safari in single app mode but have it like a kiosk setup where it doesn't cache any history/credentials/etc. This is on iOS for reference. Currently we are remotely wiping the devices nightly to clear out all data but looking for a more streamlined way of not relying on a reset each night.

In all of our years of using JAMF School with shared iPads, we have had to manually reset a large number of iPads with each update. Even with the last update! This took us three days of work with two people. What's wrong with you that after years you still can't figure out that the JAMF School update function doesn't work with shared iPads? We're going crazy with iPads here!And yes, we know about logging out users and clearing the cache before updating!Annoyed greetings from Germany

Dear Jamf, We are not able to login to Jamf and we kept getting a 404 error.  

For stolen computers I used to push out Prey and I'd be able to get location, screen shot, camera shot. The location is always sketchy in terms of being able to actually track a computer, but the web cam pictures and the screenshots were great in terms of being able to get names and other reportable information for the police.With latest systems though we need to give permission from the computer for camera access as well as screen recording access, which we can't do since it's no longer in hand.I know I can firmware lock the computers and provide a message to return the device, but it's more likely the computer will end up in the trash than returned.What is anyone doing now to track/recover computers other than locking and providing a message to return?Again, this is after the fact... I don't want to have spying software on my student laptops before the fact (for various reasons.)Thanks!  

Hello, I have four iPads that I can manage in JAMF or JSS. I can push apps to them, but I can't do other commands, such as change the wallpaper or load a configuration profile onto them. They are listed as not being supervised. So, how do I make them supervised? Thanks!

Hi guys, how we can enable Enhanced Protection in the Chrome browser via JAMF? I tried some Plist files but its not working on my end 

Hi there,We have got currently about 200 iPad enrolled in Jamf School. We had decided to upgrade to JAMF Pro and have already set up an instance. I needed help on what could be the ways to move these iPads to Jamf Pro. Thanks

After several years of more or less being neglected Jamf has announced they are archiving NoMad. I figure NoMad is worthy of a moment of remembrance. How did you guys use NoMad and how many of you still use NoMad?   Strangely enough we used NoMad to make the domain bound life easier giving our users by giving a more stable way to update passwords and map network drives, never mind NoMad was designed to be used without domain binding. We moved off NoMad about 3 years ago.  https://www.jamf.com/blog/jamf-to-archive-nomad-open-source-projects/

Hi, How do you force an Xprotect version update? Trying: softwareupdate --background-critical outputted the following: softwareupdate[92845]: Triggering background check with forced scan (critical and config-data updates only) ... But running: defaults read /Library/Apple/System/Library/CoreServices/XProtect.bundle/Contents/Info.plist CFBundleShortVersionString shows an older version of XProtect For our labs we updated to 10.15.7 using the Combo and Supplemental PKGs but the Xprotect version remained an old version. We like to control the software update process so we have everything unchecked in Software Update Not sure if that has something to do with Xprotect being unable to update even when running softwareupdate --background-critical from the Terminal.

Hello community. Latest release of JAMF pro 10.48 introduces software updates with a new user experience. has anyone already done some test with this new feature? any particular point of attention here before sending this out? are there any regarding Macs that are not running the latest major version of macOS? Big Sur, Monterey.. Many thanks to all for any heads up that can spare time 😃. 

Hello, I'm trying to install Cisco AnyConnect with only the VPN and Dart portion of the package using ChoiceXML. However, when I extract the ChoiceXML from the Cisco AnyConnect.pkg and modify it so it would only install the components I need, I get an error saying "/path/Anyconnect_Choices.xml either could not be found or is malformed. I verified that I have the right path, which is the tmp folder. I also tried to run it from another location (desktop) and same error so I know it's not a path error. See my script below: installer -showChoicesAfterApplyingChangesXML /tmp/anyconnect_choices.xml -pkg /tmp/AnyConnect.pkg -target / Also, below is the modified choice XML file <?xml version="1.0" encoding="UTF-8"?><!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"><plist version="1.0"><array> <dict> <key>childItems</key&gt

Hello, Has anyone managed to enforce Teamviewer to start with system and lock it? We do have a company license for it, but even customized, users are still able to change this setting What I tried so far was to create a plist file to enforce it, but it does not work:Preference Domain: com.teamviewer.TeamViewer<?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" " http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>AssociatedBundleIdentifiers</key> <array> <string>com.teamviewer.TeamViewer</string> </array> <key>ExitTimeOut</key> <integer>10</integer> <key>KeepAlive</key> <true/> <key>Label</key> <string>com.teamviewer.service</string> <key>ProgramArguments</key> <array> <string>/Applications/TeamViewer.app/Contents/MacOS/TeamViewer_Service</string>

Hello Folks, I am uploading push certificates on the jamf account, In the process of creating I used csr later on jamf account. Once I signed the csr and got the "JAMFSignedCSR.plist" and used this on identity.apple.com, I got an error "Invalid certificate signing request". Is there any solution to this problem?

Hello,I am new with Jamf. We are currently using Nudge to make our user update their mac. The problem is that actually most of the time, there is no update on softwareupdate being shown. We made a deferral update for Sonoma but some mac are on it.For example, this user is on 14.1.2 while the 14.2.1 is available since almost 3 week but doesn't show. I used the command softwareupdate -l to check every day with a policy but nothing appear. (We reboot 2 to 3 time the mac and still nothing)  Does anyone got the same problem and was able to fix it? Thanks for your help  

Hi so i have APN certificates expiring with a former employee who setup our devices and I created a jamf distribution email /apple id for in the future we can renew easier and if I leave someone else will be able to renew.What happens to the devices when the apn certificates expire?Will I no longer be able to see devices until I re enroll them?Thanks

How Can I disable mirroring hp screen on macOS ? Displaylink driver is useless. screens are connected usingHi all,Monitor: 2 x HPE27ED G4 QHDConnection: Test 1: Monitors linked to each other by Display Port cable and one of them is linked to Mac using Usb-c cable.Test 2: Monitors linked to Mac using g Usb-c cable each: only one monitor can make displayNo docking station to test.Anyone else struggling :) ?

Hi,is it possible to map the azure user extension attributes 1-15 to Jamf?I am able to map all of the user attributes to Jamf except these!Thanks in advance

We've been using the Apple solution - How to set up policy banners in macOS – Apple Support (AU)To apply a policy banner at login since we started using Jamf Pro.Recently we implemented Jamf Connect which as you know uses the policy banner.What I'm seeing though is the policy banner is appearing before filevault login (which everything I've read says shouldn't happen).  It then appears as it should in Jamf Connect.It's only happening on Apple Silicon and only since Jamf Connect (I'm sure it's a coincidence), but wanted to see if anyone else is having/seeing the same issue?

Hi All,When I try to update the push notification I get this error anyone has any idea why I'm getting this?Didn't change anything in my server except to update the server from 2012 R2 to R2019. That was the only change I did for my server.When I Download the signed CSR from Jamf Nation and upload it to the Apple push certificate portal I get this error. Thanks