There used to be a "More" menu item under which one could find scripts. Where are they now?

Greetings all. Recently we started encountering an odd issue with our OneDrive deployment. Up until the last few weeks of last year, OD had been fairly stable, but we started getting a few tickets of “OneDrive won’t start” or similar issues.  Running the nested ResetOneDriveAppStandalone.command usually fixed it, however when I started digging into it, I started encountering a very strange issue. The OneDrive directory created in the CloudStorage path is being given ownership to our Jamf service account. EdC@TestBox ~ % ls -la ~/Library | grep Cloud drwxr-xr-x 3 JAMFAdmin staff 96 Mar 31 2022 CloudStorage I’ve started working backwards through various types of testing. First building a box and not installing OneDrive - nope, still does it. Next was removing my KnownFolderMove profile - Nope.  At this point, I can’t find what is causing the creation of our CloudStorage path, but once I do, I suspect that’ll be why it’s getting ownership from our Service Account. 

Hi everyone, Running some tests here and have a question. I currently have Google Chrome setup as a Mac App that installs automatically on all the devices in our environment. If I uninstall it manually, how long will it take before it automatically reinstalls again? Currently I have set the distribution so that it installs automatically on all systems and therefore it isn't available in Self Service. Without it being available in Self Service the end user could install it from the internet but I was hoping there was a way to have it done by Jamf because I am under the impression that if it's installed from Jamf then the updating works better later on. Does anyone have any experience with this and can you advise me on best to push out individual apps in situations like this or if it's alright to simply have the end user install Chrome from the web without any concerns about it not updating properly later on. Thanks!

Hello everyone,I hope you are doing well. I have Okta integrated with Jamf through Jamf Connect, I am wondering is it somehow possible to pass user's Full Name or at least Username in Okta to Jamf / Mac.What I am trying to do is to change computer name to be the same as the name of the Okta user.So far my closest success to this was to create script that takes username or alias(alias has precedence) of the currently logged in user and sets it as computer name. Code is below: #!/bin/bash admin1="admin1" admin2="admin2" # get username of the currently logged in user username=$(/usr/bin/logname) # get currently logged in user's alias if alias is not available, username will be used instead alias=$( echo "show State:/Users/ConsoleUser" | scutil | awk '/Name && ! /loginwindow/ { print $3 }' ) # If logged in user is not one of local admins that are for IT personel if [ $username != $admin1 ] && [ $username != $admin2 ]; then if [ $username == $alias ]; then

Hello, Using hybrid joined Azure, we appear to have an issue with our Conditional Access configuration between Jamf and Entra. We have configured Jamf Device Compliance with a Compliance Test Group and an Application Group, the connection verification status: Success between Jamf and Intune is confirmed and partner compliance management configured.A group of test Mac’s in Jamf have Company Portal and Intune integration policies installed and they are registered in Entra We have configured Conditional Access policies in Intune and targeted all cloud apps but when we run the CA policy we are locked out of Cloud Apps because according to Entra Sign-in logs the Mac is non-compliantAm I missing something?

Experimenting with Self Service and noting that if an application is installed, albeit I'm just testing with Chrome, through the Self Service app and then deleted it is not possible to reinstall the app through Self Service a second time. For Chrome, it initially displays Install which changes to Open when successfully installed but doesn't revert to Install if the app is removed. How can the option in Self Service be reinitialized?

Hey everyone! Does anyone have any insight as to how I could set up a smart group to show me computers with a software update status of "unknown". We have seen a few machines with this status that aren't getting prompted for updates with the DDM software update commands and are thinking this could be the issue. Any help here appreciated!

How/where do I set that Sonoma has to be up-to-date during automated enrollment? Can't find anything in the GUI>

Not sure what I am doing wrong here. I have created a Supervision Identity in JAMF Pro. But when I try to add it to my keychain, the password I provide is invalid. I've deleted and recreated the identity many times. Any idea what is going on? 

Hey all, got an issue that I can't find answers to. I have no restrictions on anything in ABM and JamfNow in terms of app store access. Users can log into the app store but can't download anything. What am I missing?

Version: 12.1 MontereyProcessor: M1 ProLast Inventory Update:01/12/2022 at 12:27 PMLast Check-in:01/12/2022 at 12:26 PMSupervised: Yes What are my troubleshooting steps to get these to go through. Let's collab.  

Hi All,Do we have the .pbit for the Jamf Pro.I have referred to the this link,But unable to find the JAMF Pro .pbit help me if anything is already there ?  https://github.com/jamf/powerbihttps://www.youtube.com/watch?v=DDbDbOfABTM

Since the JAMF Cloud update over the weekend, I see all clients now have the JAMF Remote assistant binaries / apps etc installed and a launchdeamon running.. We do not have it enabled in JAMF.We cannot have remote access apps / binaries installed without testing and passing security etc. There is no way to disable this 'functionality' of auto installing (I've asked)There are no official uninstall processes at the moment (I've asked) This is a very very bad idea installing this automatically.

Hello All. I've been installing a configuration profile that sets up our wifi SSID and associates it with a machine certificate via the AD Certificate section. It associates the cert with the wifi config (so the user doesn’t get prompted) and overall has been working fine for quite some time. I have one issue though. New networks place the network at the end of the preferred network list. Simple fix: should be to re-install right? Nope. The configuration profile places the network at the end of the Wifi Preferred Networks. I want it to be first. There doesn’t seem to be a way to re-order it unless I remove the wifi network, then re-add it. That's fairly trivial to script, but that breaks the association with the computer’s certificate and the user now suffers. Does anyone know how to programmatically re-order SSID preference without breaking the cert association OR how to add wifi and associate it with an existing machine cert so that the user isn't prompted? Th

I have seen several discussions on this topic but so far following them I have not been able to get rid of the Cisco AnyConnect Socket Filter PPPC pop. I have a few configuration profiles for AnyConnect following other people and Ciscos generic documentation and it looks like they have installed correctly. However the popup persists. Anyone got any ideas? https://www.cisco.com/c/en/us/td/docs/security/vpn_client/anyconnect/anyconnect49/upgrade/AnyConnect_macOS_BigSur_Advisory.html#_Toc52277857

Pretty much as the title states (I have opened a ticket with support this morning just in case). Here's what I know5 ipads migrated to jamf pro in the last weekconfig profiles are not being pulledthere is a pending "device update" commandAll device records in Jamf (e.g. apps, management) are simply blankThese ipads are in ABM, and are assigned to jamf proI have successfully migrated <10 other ipads within the last week and had no problemsInitially, these devices were not erased from jamf Now and were still checking into JN despite being assigned and pulling info from JPNo amount of factory resets changes anything  Any thoughts/ideas/pointers from the community? 

We are just getting set up with Jamf Protect and are running into an issue with deploying Airtame. We are using Jamf Pro and following the instructions here https://help.airtame.com/hc/en-us/articles/5213653434909-Mass-deploy-the-Airtame-app-on-macOSThe package seems to be running a script to install the audio drivers that is being blocked by Jamf Protect. When we disable Jamf Protect the audio drivers install fine. Can someone point us in the right direction to whitelist this process?

Today we released Jamf Connect 2.31.0. This release includes the following changes and improvements: Removal of Support for macOS 11.x Jamf Connect no longer supports macOS 11.x. Computers with macOS 11.x or earlier will be unable to install Jamf Connect version 2.31.0 or later. Any automatic update workflows configured in your environment will no longer apply. Other Changes and Improvements Users can now enroll their mobile device with Duo Universal Prompt via Okta Identity Engine in the Jamf Connect login window web view. Users who authenticate locally with a Kerberos ticket will no longer experience logs that indicate the Kerberos authentication is incomplete prior to beginning network authentication. Resolved Issues [PI112919] The Tenant ID (OIDCTenant) and Custom Okta Authorization Server (OIDCAuthServer) settings now appear as intended when a Jamf Connect login window or menu bar configuration file with these settings configured is imported to Jamf Connect Configuration. [PI1

Does anyone know if there is a way to determine if a system extension is user-approved versus one approved by MDM? We'd like to remove some applications that have a mix of ways the system extension has been approved during/prior to installation, and would like to craft different uninstall methods to make sure we remove each type.

Hello everyone is there a script out there that determines the user's log-in time for when they have successfully logged into Jamf Connect? I believe I would need to create an extension attribute for this sort of request.  After I have created the extension attribute, We would then want to create a smart group in Jamf based on the created Extension Attribute. 

After the authorized reseller successfully enrolled the iPads into my Apple Business Manager account, I proceeded to release them to the Jamf Pro Cloud server. However, I am currently facing an issue as the iPads are not appearing on the Jamf Pro server, indicating a synchronization problem between Apple Business Manager and Jamf Pro. I've used the same server for other iPads that were manually enrolled, and they appeared on the Jamf Cloud without any issues. Any guidance on resolving this syncing discrepancy would be greatly appreciated.

Hello, I am working on standardizing and limiting distraction of our end users by removing most of the Apple Bloatware from the dock. Which I have limited access to what apps can be used so they are useless being on the dock too. I'm stuck on getting some default apps removed from the Dock. So in the management setting I have set dock items with their path for example: (file://localhost/Applications/FaceTime.app/)Here a list of apps I removing:FreeFormNewsRemindersApple TVFaceTimeMapsMessagesI was able to have it successfully add Google Chrome and Drive to dock but not remove Default Apps. What I have currently handling the removal is a standard jamf policy listening to login events. I am using the built in "Dock Items" payload. To figure out what was going on I pushed the policy manually with verbose and it is pushing out a bunch of errors of "No Dock found"verbose: No dock found in //System/Library/User Template/English.lproj/Library/Preferences/verbose: No dock found in //Syste

Hey everyone. So we're finally in the process of getting our fleet upgraded from Monterey to Sonoma and we have certain developer tools we use from HomeBrew for our internal code/projects. When the tools are installed, we've got a couple of errors that the tool "was blocked from use because it is not from an identified developer". The tools in question are:heptclibzmq-local.dylibtrilIn addition to those being blocked, trying to open Tril triggered another warning of that "tril cannot be opened because the developer cannot be verified. macOS cannot verify that this app is free from malware". And then the only options that appear, unless you right-click on the app, are "Move to Trash" and "Cancel". Is there a way to get an identifier from these tools like those ".com" hidden files so I can whitelist them for our users? Like how you can use a configuration profile to verify certain system extensions? Thanks!

Hello, I need to run a command for current user. I tried with script but it work for root account. I need the run this command for current users.defaults write com.google.chrome IncognitoModeAvailability 0

I recently got a Jamf Pro trial, it tells me that in order to create push certificate, I need to sign a CSR using my Jamf ID, but when I click on the link it just says that I don’t have any products on my account. Any solve for that?