Hi, not sure where I should start troubleshooting, but for about a week or so (without any change, at least known to me - not the only admin unfortunately) user-initiated enrollments download a quickadd.pkg instead of a profile. Can't to seem to find the setting to change that? Any ideas?Thanks,Georg

Apple added a security feature into Ventura 13.0 for Apple silicon called "Allow accessories to connect" you can find it under System Settings > Privacy & SecurityYou can find the info in the link below under the "Accessory security" headinghttps://support.apple.com/en-au/guide/deployment/dep950aed53e/1/web/1.0 This has caused issues in our environment as we still use AD login and ethernet is required for deployment on the Mac.Apple has given us a solution to the problem in a well hidden MDM command that came out with Ventura.https://github.com/apple/device-management/blob/release/mdm/profiles/com.apple.applicationaccess.yamlHere is the MDM command I am pushing ou

I am trying to setup a configuration profile to auto setup the Apple mail app on the iPhone with our company Office 365 mail account. I have the configuration Exchange ActiveSync profile setup and it does do everything i'm looking for but one thing. When the user goes to open the Apple mail app it doesn't prompt for their password. The account profile is there and it's just missing the password part. I am relatively new to this platform so just looking for a suggestion that would help with this. I am really trying not turn on the ability of the user to login with there Apple account if at all possible.

Hello all! I am trying to reverse a script that was run when we setup a new Windows Print Server. We were having a tough time getting Mac's to print using printers hosted on the print server. We tried both SMB and LPT protocols and had no real success. I then tried the following bit of code to attempt to remediate the problem (occasionally we would get the "Hold for authentication" message when viewing the print job in the computers print queue):   #!/bin/bash for PRINTER in `lpstat -v | grep 'lpd://' | awk '{print $3}' | tr -d :` do lpadmin -p $PRINTER -o auth-info-required=negotiate done   This helped just a few people, but not everyone. What it did do was freak out all of our faculty that print. We are bound to AD for a variety of reasons, but they just couldn't figure out that the credentials that were being asked for were the same they use for literally everything else on their computer. After a few months of trying to figu

Hello,We have set a configuration profile to enable firewall and block all incoming connections. However this option has led to disable airdrop, airplay, and Bluetooth and caused them to stop working since they're all sharing features. Is there a way to block incoming connections except AirDrop airplay and Bluetooth? Thanks

Hello everyone,Earlier today I was helping a colleague at work who couldn't login on a M1 Mac. After Googling a bit I started in recovery mode, opened the Terminal and typed resetpassword. After changing the password and reboot it wanted to activate - after a while we got "Failed to create activation request".I Googled some more and now I have removed the Mac from my colleagues Apple ID but we still get the same error. Does anyone know what's best to do next? Is it possible to save the data in any way?

Im using Okta authentication on machines in my company. when using Jamf Connect Configuration to create the com.jamf.connect.login.plist, even when I check the box in the image below and reset the authchanger nothing changes on the login screen when I restart. I want to see if the macOS style login would be better for me to use than the standard Okta login screen. Not sure what I'm doing wrong. Every other option in the Jamf Configuration tool works so I know that I have the plist in the right place. I am using the latest version of Jamf Connect & the configuration tool.

Push certificates are being set up at https://markany2.jamfcloud.com/.When processing using Cloud Services connection, I entered jamf-mdm@markany.co.kr in the Jamf ID Email Address field, but the error "No assets found for this account" is occurring.

Hello Jamf Community! I'm making an extension attribute that basically tracks if a local user is at the Standard level or Admin level. I've ran the script in 2 test macs in our environment where one Mac is a Standard account and the other is an Admin account. For whatever reason, the extension attribute will always resort to "Admin" as the result. I've tried several things to trouble shoot this. Here's what I've done.  Originally the elif statement was an else statement I've switched the if statements where it would be != 'Yes', is_admin would be No. and vice versa. I've ensured these script worked by running the script in terminal for both test macs, and they should work.  Not too sure what is going on and I'm thinking it's just my jamf environment now. Does anybody have suggestions on what might be going on?  #!/bin/bash result='' # Get the current logged-

We've just encountered an issue where end users are able to delete Self Service from our fully managed iPhones and iPads, despite the option to do this being disabled in the Jamf Pro console. Has anyone else experienced this?    

Our MDM profile is current and in date, however we seem to be having issues on enrolment of devices that are being enrolled manually by end users who are not local. Has anyone seen this message before? Checked all local JAMF Pro credentials associated with our JAMF pro instance and nothing jumps out or seems obvious.We incorporate ABM, however some devices we have are purchased outside of Apple and ABM this is one of those any thoughts would be welcome.  Thanks  

Hi, We have been asked to look at the possibility of supporting Mac Bring Your Own Devices. Phones are easy enough, but how are people supporting Mac Bring Your Own Device? Most users will have admin rights on their own account. What stops them installing software, changing setting when it is a Bring Your Own Device on our network? Best wishes Michael

Blackground :We deal with lots of designers and video editors at my company and they can't do a proper white balance with True Tone. As far as I know, there is no MDM key to manage this setting. Solution :I created an Apple Script (embedded in a bash script) that will open and automatically click the right menus in order to turn off True Tone and Auto Brightness. It only works with an English UI but you'll find a French version on my website. It was written for macOS Monterey and Ventura. Scripts : disable_truetone_english.shBlog post : https://clementine.la/scripts/desactiver-true-tone-par-script/       #!/bin/bash ### # # Author : https://clementine.la #

I've configured Jamf Connect on my test machine following the Jamf documentation. However, during the login process, I'm not encountering the IDP login page to input the Azure Credentials.

Hi Team,How do i disable Firefox's diable HTTP/3 (network.http.http3.enabled).  I have to create a configuration profile and push it via JAMF to all of the end users. Can someone give me an XML template for this? i couldn't find it anywhere 

I'm in the process of trying to make our 3rd party updates easier in our QA environment. We currently have 12 smart groups setup for 12 apps. It's set to Patch Reporting - Less Than and the version we're deploying, and that group is set to the scope in the policy. We have 3 test groups we use, alpha, beta and uat. For each deployment date, we have to add to go in to each smart group and adjust it to add the group and then on the prod deployment, we remove all the test groups. I created a smart group that as all 3 test groups and labeled it deployment users, just set the operator to member of for the group I want to deploy to. I then created another group and added the criteria to member of the deployment users and then added the 12 packages below it. I set that as the scope for each policy, but when doing that, it shows my test mac pending for all the apps, but none are installed except Firefox which I'm testing with. I'm not sure what I'm doing wrong, but I would think it wo

We're moving off this to Jamf Connect, however I have continue binding for at least the next quarter. The device must exist in AD - part of the requirement to get past ISE on the internal wired & wireless network. The org runs a hybrid setup with on-prem AD syncing to Azure. Can't bind in prestage because it can't reach the controllers since the computer is off-net. We have situations where the bind policy fails on the first  runs - because the device hasn't yet connected to the VPN.  Once per computer with rerun on failure.   Configuration profile throws errors because it can't bind with the system off-net. I'm over thinking this and can't find a way to effectively bind a new out of box system. I appreciate any input.

Hello!My company is going through the early stages of a merger and we're looking at bringing the other company's Macs into our Jamf environment. This is a little premature since we haven't yet combined our LDAP or ABM but the powers that be are requesting it. I wanted to see if anyone has had any experience with having a second LDAP provider and ABM account connected to their environment or if what we're looking to do is not possible.

Hello everyonelooks like Jamf Pro iOS pre-stage didn't have the option to skip the appearance during the automated enrollment. Does any have this issue?

A couple of things are no longer working correctly during enrollment via DEP.  My prestage enrollment is set to skip everything except for Location Services. I then have a policy triggered by Enrollment Complete to run a script prompting to enter a computer name. This usually pops up while sitting at the Location Services setup. It then goes ahead and creates the local admin account and kicks off another policy to bind to AD.With Ventura, my script to prompt for a computer name fails with "Logged in user is not _mbsetupuser"  Has the setup assistant changed to use a different account?My other problem is that it doesnt sit and wait at the Location Services screen. It gets skipped and Location Services doesnt get turned on.Everything else, as far as I can tell, seems to be working. It gets enrolled, created the local admin account and binds to AD. I've searched Jamf Nation as well as other sites but couldnt find anything about _mbsetupuser being deprecat

Hi Everyone, I have written a script to download the Mac OS update in background but its suck on admin password and followed by the user interaction to save all file and click on restart button to install the update. but somehow script works till popup message display. below is the script to update update os #!/bin/bash loggedInUser=$(stat -f%Su /dev/console)jamfHelper="/Library/Application Support/JAMF/bin/jamfHelper.app/Contents/MacOS/jamfHelper"windowType="hud"description="There is a critical security update available for your Company issued computer. To perform the update, Click on 'UPDATE' below and the security update will begin to run. This update can take upwards of 45 minutes.  NOTE: Before clicking on 'UPDATE', save all working documents and Connected the Charger. 

It has been many years since I used Jamf and I am trying to determine the capabilities of Jamf Now.  Can Jamf Now be used to deploy Sentinel One agents?

One of our users complained that his machine is running slow after Jamf enrollment. "Hi there,Might just be a coincidence, but the performance of my Mac has massively slowed down and become very laggy since the Jamf install. During a call earlier my laptop just restarted." Unfortunately this is not the 1st person to complain about that.  The specs are :  MacBook Pro (14-inch, 2021)Processor Type: Apple M1 ProNumber of Processors: 1Total Number of Cores: 10Apple Silicon: YesArchitecture Type:arm64Operating System Version: 12.1.0Operating System Build: 21C52&nb

Hello,We have some document cameras that we issue to our users. There is a software that is recommended for the document camera here https://www.inswan.com/en/downloadWhat would be the best way to push this software to users laptop? Creating a PKG and adding it to a policy? What would be the steps to do this?Thanks

Alright so I am trying to set up Dropbox for a board meeting on a bunch of iPads, I am wondering if there is some sort of configuration that I could use to automatically have them sign in? Each device will be using the same account and it would be nice if I could skip the part of physically signing in to each device! Any suggestions!?