We are trying to setup some of our field iPads to have a passcode, but then restrict the user from being able to change the passcode.  We have a payload that requires a 6 digit passcode on all our iOS devices.  I tried a couple things and have not had the results we are looking for.First tried to set the Restriction->Functionality->Modifying Passcode to Restricted but when new devices enrolled they bypassed the prompt to set a passcode and the won't let the user go into settings to set one.Then I turned that restriction off and had someone put the passcode on one of those devices and then turned the restriction to restricted and they couldn't change it, but that's too manual for each device.Second thing we tried was to setup a smart device group for any device where the passcode compliance with profile was compliant hoping that a new device being enrolled wouldn't pop into this smart group until the passcode was set; set the Restriction->Functionality->Modify

Hello Jamf Pro users,I'm currently facing a situation where I need to update a specific app on only a select few devices within our organization. We utilize Jamf Pro as our Mobile Device Management (MDM) solution, and I'm looking for guidance on how to achieve this efficiently.Specifically, I want to understand the process of updating the app on specific devices using the Jamf Pro Administrator console. I have already identified the devices I want to update; however, I'm unsure about the steps involved in initiating the app update command and directing it only to those desired devices.

I'm encountering an issue with installing Sophos on a machine through Jamf Self Service, I've packaged Sophos using Composer, and the same .pkg works flawlessly when deployed through a Sophos policy to all devices. However, when attempting to install it through Jamf Self Service, the process appears to complete ("Done" message), but the app doesn't actually install on the machine and I'm seeking some guidance from the community. 

How can you export the Outlook 365 My Computer Archive files? I have a user that is migrating to a new Mac and wants to transfer these files from Outlook 365 on his old Mac to Outlook 365 on the new, but I do not see a way to export the My Computer archived files. In Outlook 2011 you can export and create a .OLM file but in the new Outlook i do not see it. Thanks

Just seeing if anyone has had success in deplying through Jamf Now a blueprint with a Custom Profile that has a DNS Setting payload.The Profile works find when installed manually but when it's deployed via Jamf Now isn't being enabled.

I know some of this has been covered once or twice before, but I'm VERY new to Jamf. I just recently started with this company and saw Jamf for the first time. Now, I'm basically the admin for an app I've only recently become acquainted with that manages computers running operating systems I've never supported in my short IT career. As you might imagine, I have a million questions, but I'll start with Mass Action commands.After a bunch of attempts, I finally got 2 machines to update from 12.6.0 to 12.6.1, but when I try and get them to Ventura, I get this in Jamf: Unsupported InstallAction for majorOS updateIt doesn't matter whether I've checked the option for majorOS update or not.I always choose the option to defer as I was tasked to do.When I run the mass action command, I see nothing on the target computers (no notifications etc) and after 5 minutes or so I get the failure result in Jamf. It's frustrating to say the least.This happens on an iMac and a MacBook.I have a third Ma

Hello, I am kind of walking into a weird situation here where I have been upgrading our jamf environment that has essentially been limped along for the last 2.5 years with no updates and I am trying to see if anyone might have experience implementing patchbot by chance? I want to give our workstations guys a more streamlined less hands on approach to patching so looking for options

Having a weird issue. After updating to macOS 12.3, right before the filevault login, I am presented with our PoilicyBanner, and I cannot click on the accept button. This is pre-OS right before FileVault login. I have to click the white text, tab, and hit return to get to my filevault login avatars. At this point, I can login and then am presented with the OS’s PolicyBanner. According to How to set up policy banners in macOS - Apple Support https://support.apple.com/en-us/HT202277 Expected behavior should be: If you use FileVault full disk encryption on your computer, the policy banner appears after the first user logs in, before the desktop appears. The first login is performed to unlock the startup disk. Present behavior: Computer startup boots to PolicyBanner that is stretched to the edge of the screen. You must click to focus and tab to Accept. Then we get FileVault login profiles. Enter password. Unit boots to PolicyBanner to check accept and continue, then to desktop.Anyone

Hi, A couple years prior to joining my current organization, they moved their On-Prem Jamf Pro to the cloud. While the JCDS is setup, it isn't the Master DP, with the master being an on-prem smb server shared between our two campuses. I plan on doing a replication and then making the JDCS the master. My question is, does it make sense to keep an on-prem distribution point? 

Hello all! For many months now, the audit log for EVERY one of the computers on my instance show 'Viewed FileVault Encryption Key' with my username. I am somewhat new to JAMF but a moderate technologist generally and have recently taken over the System Admin role at my company under a lesser title. I have very rarely viewed any of these logs and it would be arduous for a human to view them as often as the logs display. To me, this log raises brows and I have reported it to my administration counter part who has a very high level title but the response is its probably just me and are not concerned at all (no reason for this, no background to share). I am planning on setting up monitoring on the instance's server with wireshark but I also plan to build a three story tree house and thought it might be a better idea to reach out here in the meantime ; -) The server instance has gone through at least three version upgrades in the last few months led by my administration counter part and unr

Hi,  Is it possible to delete SSIDs via script that have not been connected to over 30 days? if so, can someone assist?   We are trying to see if we can make a self service policy so employees can execute it as needed Thank you,  

Trying to distribute an in-house app with a .ipa file.  The salesman who pitched JAMF Pro assured us multiple times that we did not have to have a paid Enterprise Developer program with Apple.  I'm starting to think they were wrong.Does anyone have any experience generating a provisioning profile without going through Enterprise?  Will AD-Hoc distribution work?I am the developer for the app.

Today we are releasing a maintenance version of Jamf Pro. Jamf Pro 11.1.3 fixes the following product issues: Jamf Pro Server: Security Issues [PI115630] Updated the Jamf Pro installers to include Tomcat 8.5.96 to mitigate a known vulnerability (CVE-2023-46589). Jamf Pro Server [PI115037] When computers or devices are enrolled in environments with enrollment customization and SSO configured, the Click here to proceed with enrollment button on the final enrollment pane was replaced with a progress bar that says, “Downloading MDM profile”. This change prevents failed enrollments. [PI115634] Computer configuration profiles with a Security and Privacy payload no longer lose configured settings, causing blank or null values in the os_x_configuration_profiles database table. As a result, Jamf Pro no longer sends repeated configuration profiles with unique identifiers to the computers in scope.   For additional information on what's included in this release, review the release notes

Hi all. We have a local Jamf Pro server. Anyone know what to look for in the log file to find the date and time a Jamf Pro update was done?

I've had some free and paid Mac Store Apps setup for distribution for a long time and for a long time they have worked just fine. Now, all of a sudden, they're not always installing on a newly enrolled iMac. Is there any way to trigger an automatic install of Mac Store Apps?

I am trying to set up Single Sign-On for Generic OpenID Connect using Duo Mobile. I have configured Jamf connect to talk to Duo and after logging into the MFA it asks to sync the network password with the local account but i get an error message that the requested grant type "password" is not supported. Has anyone got duo Mobile to work with Jamf connect?

Hi All!We are experiencing problems with access to the "VPN & Device Management" menu.We use an app called Zscaler that creates a VPN configuration to protect and filter all connections from each device (iPad).Our high school student users are breaking our settings by removing the VPN profile so they can freely browse outside of the filtering.We want to restrict the use of this menu to prevent users from being able to modify the security presets established for the use of educational devices.

looking to the community for recommendations on keeping tabs on Apple updates.My org is strict about keeping things up to the latest version within 30 days.What sites/ RSS feeds, etc do you use to track upcoming updates?

We are a school district with staff setup as standard users on their Macbooks. We do not allow the App Store because, by law, we have to approve apps to protect student data. I just found out today that our M1 Macbooks that have been updated to MacOS Sonoma are completely bypassing any "Restricted Software" settings in Jamf. So users that update are able to open terminal, the App store, etc. even though the restrictions are setup and were working on Ventura. We are on Jamf version 10.49.0 so I don't believe the update is the issue. Any suggestions are appreciated!

Hi All, I'm looking at deploying Android Studio through Self Service for non-elevated users. I've uploaded the dmg file, and written a script to move the .app file to /Applications on each users machine. The package is dependent on JVM, so I've also packaged the JDK and have deployed that. My current challenges are: Once deployed, users are prompted with a message that this application was downloaded from the internet. I've tried using the spctl to add a label but to no avail... #!/bin/sh spctl --add --label "Android Studio" "/Applications/Android Studio.app" spctl --enable --label "Android Studio" On the first launch of Android Studio, the application downloads and installed supporting artefacts. One of these requires elevated rights... Has anyone packaged Android Studio and is able to provide any tips? Thanks, Jaems

Hi there,Recently, I have to publish some pdf by using eBook module. I have done this before many times without problem. However, I got "availabiltiy pending" message under the eBook entry I've made and the pdf won't publish to the iPads that I have included in scope. The status keeps pending. Please help. Thanks.Gary

Hey Everyone,I am trying to disable Edge updates via MAU, but they keep going through MAU and its conflicting with Jamf App Installer updates, specifically around re-opening the app after an update. The process just hangs and never fully re-opens, you can't quit the app via the dock either, it needs to be Force Quit from the Menu Bar option. I am using the most recent MAU 2.0 and Edge isn't even an option anymore. I disabled the EdgeUpdater updates via keystone and set the MAU option to disabled on the Edge config profile. My old MAU profile had Edge Updates set to change freeze and they still occurred. Any ideas? 

Hello everyone, I am just wondering if there is a script out there for iOS which I can roll out in the app config, which will auto fill the "hostname" for filemaker go 19? This would be a massive help if there is due to having over 1.7k devices on site. Or if anyone knows where i can get the plist config for filemaker go 19 I have gone to the location for it, but cant seem to find it! <home>/Library/Preferences/ Any help would be great CheersChris.

Hello,While testing Jamf App catalogs apps via self-service, I noticed that if the app is deleted from a Mac, the deployment status in the App catalog does not change, and it still shows as installed. While going through the FAQs, I noticed that it mentions that the app will not re-install, but when the new version is released, it will be installed back on.My question is, does that only apply to apps set to auto-install, or does it work the same way for apps installed via self-service? 

Guys,We are using systrack for end point analytics on Macs. Post installation of Systrack agent, we configured profile in Jamf pro of lsiagentd to get allowed on full disk access. After successfully sync between Jamf and device, profile getting installed successfully, but under 'Privacy and Security' it's not getting enabled. Kindly advice.We tried with bundle id as well as path, no luck. Below is the code requirement we received from systrack.identifier "com.lakesidesoftware.lsiagentd" and anchor apple generic and certificate 1[field.1.2.840.113635.100.6.2.6] /* exists */ and certificate leaf[field.1.2.840.113635.100.6.1.13] /* exists */ and certificate leaf[subject.OU] = SQL6SRUA2Y