Get Support
Recently active
Hi,I'm preparing deployment of the admin-by-request tool Privileges (https://github.com/SAP/macOS-enterprise-privileges), but I've run into a snag when I try to install it via Jamf.So, the package that I've made has the .app, the LaunchDaemon and the PrivilegedHelperTool, all according to the documentation, and they all install fine. But when I run it the first time, I get the following prompt asking me for adminstrator credentials to install the PrivilegedHelperTool again: If I enter them, it works as expected, but the problem is that I want a standard user to be able to install this without entering any admin credentials.Has anyone encountered this problem? I don't understand why it wants to install it when I've already pre-installed it via my package.
Hello, I believe I do soemthing wrong here:1. Installed fresh Linux 8.8 2. Installed java 11 devel3. Installed MySQL 8.36 4. run jamfproinstaller and: [2024-03-14 09:49:18]: Installing...[2024-03-14 09:49:18]: Starting Tomcat Installation...[2024-03-14 09:49:18]: Detected previously installed Tomcat...[2024-03-14 09:49:18]: Upgrading Tomcat service...[2024-03-14 09:49:18]: Reloading system daemon...[2024-03-14 09:49:18]: Enabling Tomcat to run at startup...[2024-03-14 09:49:18]: Copying backup of Tomcat (/usr/local/jss/tomcat) to /usr/local/jss/backups/tomcat/2024-03-14_09-49-18...[2024-03-14 09:49:20]: Copying Tomcat files...[2024-03-14 09:49:20]: Setting permissions...[2024-03-14 09:49:20]: Restoring /usr/local/jss/tomcat/conf/*.xml...[2024-03-14 09:49:20]: Transforming the server.xml...[2024-03-14 09:49:22]: Transforming the web.xml...[2024-03-14 09:49:23]: Restoring /usr/local/jss/tomcat/.keystore...[2024-03-14 09:49:23]: Restoring /usr/local/jss/tomcat/bin/sete
Hello Nation!Coming across a weird Jamf bug where some devices are having their user and location information disappear. For context, we fill in this information manually upon enrolling computers. Has anyone seen anything like this in their environment before and if so how did you deal with it?Thanks in advance!
Hi All, I wanted to share this with you, it's a bookmarklet. https://pro4tlzz.github.io/JamfHealComputer.htmlFollow the instructions on the page to add a button to redeploy the Management Framework on a computer device. If you like saving Jamf Policies / Smart Groups as XML then this may interest you as well https://pro4tlzz.github.io/ExportJamfObjectsXML.html Enjoy
Hi Everyone, Today's crisis is related to VMware Fusion. We have version 8.5 installed, however, we are finding out the license we used to install it is expiring in 5 days. We are working directly with VMware to acquire a new license to use on our Macs. The question is, does anyone know of an easy way to package up or push out the new license without the need of repackaging Fusion? Thankfully, this is only affecting a handful of our Macs. Thanks in advance.
We are pretty new to Jamf and still trying to understand the scripting. We have a renamecomputer script that we got as part of our onboarding for computers. Was working great till we started sending in the department on the user from Okta. So now the naming is off. I am pretty good at Powershell and C#, but bash scripts I am struggling with. Is there way in a bash script to look up a department value in like a switch statement?example if the department is "IT", then can you do something like this?switch (department)case "irs": value = 123case "IT": value = 987Any help or pointers to reference links would be great. I am not sure what the bash term would be to do that so if I can get someone to help with that, might be able to get this figured out.
Has anyone had success with the EraseDevice API call?I have the shell command: /usr/bin/curl --silent --show-error --connect-timeout 30 --request POST --user "username":"password" "https://site.jamfcloud.com/JSSResource/computercommands/command/EraseDevice/passcode/123456/id/#" but I keep receiving the error: <html> <head> <title>Status page</title> </head> <body style="font-family: sans-serif;"> <p style="font-size: 1.2em;font-weight: bold;margin: 1em 0px;">Unauthorized</p> <p>The request requires user authentication</p> <p>You can get technical details <a href="http://www.w3.org/Protocols/rfc2616/rfc2616-sec10.html#sec10.4.2">here</a>.<br> Please continue your visit at our <a href="/">home page</a>. </p> </body> </html> The user account making that API call has read, update, and delete permissions on the JSS Object, Computers, and it has the JSS Action, Send Comput
iPadOS 17.* with Jamf Safe Internet. Under VPN, DNS, & Device Management Content Filter reads Invalid. Anyone know what causes this and or how to fix?
Hello community.We have upped our Jamf Connect licence count as we have added more Macs to our estate.When we upload the new JC licence file into Jamf Pro which option should we take here and why? Distribute to All Choose "Distribute to All" to distribute to all computers in scope, including computers that already have this profile installed.ORDistribute to Newly Assigned Devices Only Choose "Distribute to Newly Assigned Devices Only" to distribute only to computers in scope that do not currently have the profile installed.
At the Jammies, Jamf's customer appreciation awards, we highlight and celebrate our customers who exemplify our Jamf values and demonstrate innovative use of our solutions. There are four awards: Fast Start, Innovative Thinker, Legacy Builder, and Adoption Advocate. Each award has its unique application and questions related to the specific information we want to hear from you about, so take a moment to look them over to align with which award best fits your experience(s). Visit our Jammies informational page for an overview of the awards, the applications, and the timeline. And do not forget to mark your calendars; the application deadline is July 28, 2023.
Since the 10.19 JSS update -or the 10.15.3 macOS update- something has broken where any Macs enrolled show up unmanaged. This applies to both DEP and user-enrolled Macs. I have the management account configured in both the PreStage enrollments and User-Initiated enrollments settings. I end up manually assigning the management account and then it's all good. I didn't have to do this before. Any ideas what might be happening or where to find a log that might say what's going on?
For some time our InfoSec guys have been giving me no end of heartburn due to near-continuous changes to the security architecture of the enterprise. Within the last year there have been no less than at least 14 security-related initiatives rolling concurrently.I've experienced deployment failures, profile corruption, inability to auth via SSO depending upon network attachment...To that end I've spun up a JPro server on prep, and just to make it fun (it's just for testing) it's running on macOS Sonoma 14.4.1:Jamf Pro Summary: Created 2024-04-08 07:03:48 by admin==========================================================================================Installed Version 11.3.0-t1707837736Hosted ............................................ false----------------------------------------------------------------------------------Managed Computers &n
Hi Jamf Nation, Our sincere apologies to any of you that attempted to join the Jamf Event live today. Unfortunately, our third-party event platform experienced technical issues, causing some participants to be unable to join the event live. Below is the recording links and other resources so you can catch up on anything you missed. Apologies again and thank you for being part of Jamf Nation! Hope to see many of you at JNUC this fall… the countdown begins! Video Resources: For commercial organizations: https://www.jamf.com/resources/videos/jamf-event-commercial-2024/ For educational organizations: https://www.jamf.com/resources/videos/jamf-event-education-2024/ Blog Resources: For commercial organizations: https://www.jamf.com/blog/2024-jamf-spring-event-recap-comm/ For educational organizations: https://www.jamf.com/blog/2024-jamf-spring-event-recap-edu/
I haven't needed this information for a few years; I used to see it when I signed in, but that was before the website re-design. (C'mon, Jamf! Don't make it hard for me to give you my money!)
How do I run a report that shows total purchased licenses and total devices?
The pursuit of higher education has become more accessible than ever before, thanks to advancements in technology. One such field that has seen a significant rise in online education is nursing. Earning your nursing degree online has emerged as a viable option for individuals seeking to enter or advance in the nursing profession. This article explores the various aspects of online nursing education, highlighting its benefits, challenges, and why it's a worthwhile option for aspiring nurses.Introduction to Earning Your Nursing Degree OnlineGone are the days when attending classes on a traditional campus was the only way to obtain a nursing degree. With the advent of online education, prospective nurses now have the option to pursue their studies from the comfort of their own homes. Online nursing programs offer the same quality education as their on-campus counterparts, with added flexibility and convenience.For some individuals, the prospect of pay to take nursing course onli
The demand for qualified nurses is ever-growing, yet traditional methods of education often pose significant barriers, especially geographical ones. However, with the advent of online nursing classes, these barriers are being effectively bridged, revolutionizing the way nursing education is delivered and accessed.IntroductionOnline nursing classes have emerged as a game-changer in the field of healthcare education. They offer an unparalleled level of flexibility, accessibility, and convenience, making it easier for aspiring nurses to pursue their education regardless of their geographical location. By leveraging technology, online nursing programs have made it possible for students to overcome the limitations posed by distance and physical location.Advantages of Online Nursing ClassesFlexibility in Scheduling One of the primary advantages of online nursing classes is the flexibility they provide in scheduling. Unlike traditional brick-and-mortar institutions, online programs
Has anyone had any luck in building out a Title Editor application for Chromedriver? (https://chromedriver.chromium.org/downloads)I am trying to see how doable this would be if we installed Chromedriver in the "usr/bin" folder. Any guidance would be greatly appreciated!
This may not be specifically about Jamf School but looking for a general recommendation and I think Jamf School users would be most likely able to relate.Our school division is trying to re-use older iPads which use iOS v12.5.7 as the latest OS. The iPads are being used for communication devices for limited use cases. Places where only 1 or 2 apps are needed so we can lock these apps down.The use case I'm trying to address is where teachers need to lock the app down to a video library where only the 5 or 6 videos can be accessed and nothing else. If the students in this case have access to any other apps they will get distracted and sometimes combative.One idea was to use something like Microsoft Stream in Single App Mode but it isn't compatible with iOS v12.5.7. It works in Google Chrome and I'm currently looking into using Chrome Browser Cloud Managment along with a content filter to lock the student into Microsoft Stream web version. I don't really pref
Today we released Jamf Connect 2.34.0. This release includes the following changes and improvements: Updates to the UI of the privilege elevation feature in the Jamf Connect Configuration app include consistent spacing between various elements, and related settings are grouped together visually. The Disable RSR Watcher (DisableRSRWatcher) key is no longer available in Jamf Connect or the Jamf Connect Configuration app. To access new versions of Jamf Connect, log in to Jamf Account with your Jamf ID. The latest version is located in the Products section under Jamf Connect. Product Documentation For additional information on what's included in this release, review the release notes via the Jamf Learning Hub. Thank you!The Jamf Connect team
Hello Everyone, is it possible to forbid the user to log in with his private Apple ID ? I already found a script to get out which AppleID is logged in but we want to restrict that the User is only allowed to login with the company Apple ID...Thank in Advance.
Hi All,I have never done this before, but I am trying to upload an iBook that I download from the App store (free book). Every time I attach the file to upload it to my cloud distribution point, it is complaining that I am uploading a ibooks.zip file. It is looking for just .ibooks, .epub, or .pdf. Does anyone know a workaround to this? Is this a way to convert ibooks to PDF? I have looked around online but I do not see any tools that actually work. Maybe this is a bug on JAMF's end?Thank you
Hey, y'all! I'm baffled and after much internet searching I need help!Our current setup is Mac lab computers bound to AD so that students can log in with their network accounts (also have a single local admin account). This creates a mobile user profile. I have a configuration profile with the following settings: Login Window / Window / Login Prompt: Name and password text fieldsLogin Window / Options / [x] Enable external accountsOn Ventura, our Mac lab computers would show the name and password fields when the screen was locked. If I remember correctly, it would show name and password EVEN IF the user hadn't logged out.Since Sonoma 14.1 or something, this is no longer the case. If a user leaves a computer and the screen times out and locks, it only shows the last user's profile picture, name, and password field, with no option to change this. I keep thinking this will magically return to the way it worked on Ventura, showing the name and password fields on the lock screen and lo
Hi there !Currently got a frustrating bug in Jamf Pro as it happens as soon as I log off (manually or via auto logout).I'm used to the interface in english but since the version 11 of Jamf and the new interface with translations, it keeps ignoring my setting to keep the interface in english and shows me french as soon as I login.Computer language is french, Chrome is used and empty cache/private navigation/Firefox got same issue.Timezone in Paris/Monaco does not change anything. How to reproduce:On top right corner lick on Account Settings when logged/Language & Region/ set language to english, save and logout.When I log back interface is back in french even if setting is still in english. Workaround:Set langage to french (but anything should work I think), save, set it back to english, save, interface back in english until next logout.Hope it can be fixed soon !
I've been trying to created a managed folder of bookmarks/favorites deployed via Configuration Profile to Microsoft Edge. It isn't available via the JSON custom schema. I've uploaded this plist, borrowed from Talking Moose, using the com.microsoft.edge domain. This info outlines how the setting should work:https://docs.microsoft.com/en-us/deployedge/microsoft-edge-policies#managedfavoritesMaybe I'm missing how to make the setting "mandatory".Thanks for any help.
Earn a cool badge and Jamf Nation Reward Bytes for your published articles. We’re looking forward to your submissions!