Hey I seem to be having issues with end users being able to install osx updates on their macs managed by jamf, the users are prompted for the password to upgrade to 14.0 but won't accept the user's password when being prompted is anyone seeing this or have we set this somewhere in jamf pro. I am having to log them out login as admin and update the mac Thanks  

We have around 60 devices that are missing a bootstrap token. I was hoping to script it. My scripting knowledge is somewhat basic I was hoping someone could point in the right direction. Do some searching on here I found this    Would I be right in saying I would pass my admin account username and password in parameter argy 3 and 4 Assume that should parameter 4 & 5 in Jamf  right?   Has anyone sucessfully been able to script this with out putting the username and password in the script     #! /usr/bin/expect# Get required variables. Note that in EXPECT scripts, the variable arguments are one value lower (thus $argv 3 is actually $4).set adminName "[lindex $argv 3]"set adminPass "[lindex $argv 4]"#This will create and escrow the bootstraptoken on the Jamf Pro Serverspawn /usr/bin/profiles install -type bootstraptokenexpect "Enter the admin user name:" send "$adminName\\r"expect "Enter the password for user '$adminName':" send "$adminPass\\r"e

Does anyone have some EAs for Carbonite like when the last backup happened and the status of the backup? I have the one to just see the status of Carbonite but can't find any other data. #!/bin/sh carbState=$(/Applications/Carbonite\\ Endpoint.app/Contents/DCProtect/DCProtect.app/Contents/MacOS/DCProtect -getClientStatus | grep Client | awk '{print $3}' ) echo "<result>$carbState</result>"   

I was just wondering if it was possible to release devices in Jamf Pro instead of doing it through Apple School Manager?I don't see a way to do bulk releases in Apple School Manager.I noticed under the connection to Jamf in ASM (Settings > MDM Server Info) - we have 'Allow this MDM Server to release devices.' checked.Just wanted to see if there was a way of bulk-releasing devices in Jamf. Otherwise I will do them one-by-one in Apple School Manager.

Hello! I'm a relatively new user to JAMF and am so far very much liking it. One thing I'm scratching my head about though is the installation of Adobe CC plus-ins. I manage a bunch of college teaching labs and have been requested to install LottieFiles After Effects plugin as well as LottieFiles Animate Plugin. I've found this support document from Adobe but I'm having a difficult time determining how to make this work with an MDM. Any ideas?

When initiating a user enrollment it prompts for the device to Assign to user. Though I have created a number of users under Settings > User account and groups entering the username, full name or email address of any of the users is never accepted, and selecting the search option, i.e. the magnifying glass, the resulting drop-down list has no users. What value is meant to be entered in response to this prompt?

Hi Everyone, I am not sure if i am looking in the rights places or not, but i am trying to figure out if there is a way to have multiple users be supported/configured on one Mac Machine, with Jamf.  Anyone have suggestions? 

Is there a macOS command-line tool available for JSON that provides parsing functions like xmllint?I seem to be able to find lots of validators and pretty-printers. But I need a tool I can run inside shell scripts to parse output responses from Jamf Pro's API.

Feel like I have to be missing something obvious here... but I can't seem to get this to behave. Trying to make an extension attribute that checks if homebrew is installed, and outputs the result of "which brew" if so.... pretty basic. This works perfectly from terminal both as my standard user and as root... but when jamf runs it... all that's returned to the extension attribute is "Installed: " with no file path listed.From terminal, i get what seems to be a proper output jamf should be happy with:sh-3.2# ./test2.sh <result>Installed: /opt/homebrew/bin/brew</result>Extension Attribute Code:#!/bin/bash if [[ $(which brew) != "brew not found" ]]; then brewstatus="Installed: $(which brew)" else brewstatus="Not installed" fi echo "<result>$brewstatus</result>" exit 0 

Disable Deleting Browser History in Google Chrome iOS?I have tried adding the following command to the payload:  <key>AllowDeletingBrowserHistory</key> <boolean>false</boolean>Is there a different key for iOS? Surely it can be done. I was able to disable Incognito with very little documentation. This must be possible as well.

Hey Jamf Nation,We are currently attempting to configure a few Macs in our Jamf Dev Sandbox. While we have successfully migrated most of our configurations to the sandbox, we have encountered an issue with the enrollment invitation file. Whenever we attempt to download the file, we receive an error message.Any ideas or suggestions?

In light of the new "Force a Computer Restart to Install macOS Updates" feature in Jamf Pro 10.38.0, I've decided to create a bash function that should make life easier for admins that want to force updates on M1 machines.Please refer to the screenshot below for more information on this feature.New to bearer tokens? Don't worry about it, I've already done the work for you. Simply fill in your api account data and let the function take care of the rest.  #!/bin/bash # Server connection information URL="https://url.jamfcloud.com" username="apiusername" password="apipassword" # Determine Serial Number serialNumber=$(system_profiler SPHardwareDataType | awk '/Serial Number/{print $4}') initializeSoftwareUpdate(){ # create base64-encoded credentials encodedCredentials=$( printf "${username}:${password}" | /usr/bin/iconv -t ISO-8859-1 | /usr/bin/base64 -i - ) # Generate new auth token authToken=$( curl -X POST "${URL}/api/v1/auth/token" -H "accept: application/json" -H "Au

Hi Folks, I am getting the Okta Login screen while trying to reset the local password using the recovery key in the lock screen window. FYI, I have disabled the network authentication in the Jamf Connect mobile config.  Any help on this would be appreciated. Thanks & Regards,Bhushan Hejmady

Looking for a potential way to run Safari in single app mode but have it like a kiosk setup where it doesn't cache any history/credentials/etc. This is on iOS for reference. Currently we are remotely wiping the devices nightly to clear out all data but looking for a more streamlined way of not relying on a reset each night.

In all of our years of using JAMF School with shared iPads, we have had to manually reset a large number of iPads with each update. Even with the last update! This took us three days of work with two people. What's wrong with you that after years you still can't figure out that the JAMF School update function doesn't work with shared iPads? We're going crazy with iPads here!And yes, we know about logging out users and clearing the cache before updating!Annoyed greetings from Germany

Dear Jamf, We are not able to login to Jamf and we kept getting a 404 error.  

For stolen computers I used to push out Prey and I'd be able to get location, screen shot, camera shot. The location is always sketchy in terms of being able to actually track a computer, but the web cam pictures and the screenshots were great in terms of being able to get names and other reportable information for the police.With latest systems though we need to give permission from the computer for camera access as well as screen recording access, which we can't do since it's no longer in hand.I know I can firmware lock the computers and provide a message to return the device, but it's more likely the computer will end up in the trash than returned.What is anyone doing now to track/recover computers other than locking and providing a message to return?Again, this is after the fact... I don't want to have spying software on my student laptops before the fact (for various reasons.)Thanks!  

Hello, I have four iPads that I can manage in JAMF or JSS. I can push apps to them, but I can't do other commands, such as change the wallpaper or load a configuration profile onto them. They are listed as not being supervised. So, how do I make them supervised? Thanks!

Hi guys, how we can enable Enhanced Protection in the Chrome browser via JAMF? I tried some Plist files but its not working on my end 

Hi there,We have got currently about 200 iPad enrolled in Jamf School. We had decided to upgrade to JAMF Pro and have already set up an instance. I needed help on what could be the ways to move these iPads to Jamf Pro. Thanks

After several years of more or less being neglected Jamf has announced they are archiving NoMad. I figure NoMad is worthy of a moment of remembrance. How did you guys use NoMad and how many of you still use NoMad?   Strangely enough we used NoMad to make the domain bound life easier giving our users by giving a more stable way to update passwords and map network drives, never mind NoMad was designed to be used without domain binding. We moved off NoMad about 3 years ago.  https://www.jamf.com/blog/jamf-to-archive-nomad-open-source-projects/

Hi, How do you force an Xprotect version update? Trying: softwareupdate --background-critical outputted the following: softwareupdate[92845]: Triggering background check with forced scan (critical and config-data updates only) ... But running: defaults read /Library/Apple/System/Library/CoreServices/XProtect.bundle/Contents/Info.plist CFBundleShortVersionString shows an older version of XProtect For our labs we updated to 10.15.7 using the Combo and Supplemental PKGs but the Xprotect version remained an old version. We like to control the software update process so we have everything unchecked in Software Update Not sure if that has something to do with Xprotect being unable to update even when running softwareupdate --background-critical from the Terminal.

Hello community. Latest release of JAMF pro 10.48 introduces software updates with a new user experience. has anyone already done some test with this new feature? any particular point of attention here before sending this out? are there any regarding Macs that are not running the latest major version of macOS? Big Sur, Monterey.. Many thanks to all for any heads up that can spare time 😃. 

Hello, I'm trying to install Cisco AnyConnect with only the VPN and Dart portion of the package using ChoiceXML. However, when I extract the ChoiceXML from the Cisco AnyConnect.pkg and modify it so it would only install the components I need, I get an error saying "/path/Anyconnect_Choices.xml either could not be found or is malformed. I verified that I have the right path, which is the tmp folder. I also tried to run it from another location (desktop) and same error so I know it's not a path error. See my script below: installer -showChoicesAfterApplyingChangesXML /tmp/anyconnect_choices.xml -pkg /tmp/AnyConnect.pkg -target / Also, below is the modified choice XML file <?xml version="1.0" encoding="UTF-8"?><!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"><plist version="1.0"><array> <dict> <key>childItems</key&gt

Hello, Has anyone managed to enforce Teamviewer to start with system and lock it? We do have a company license for it, but even customized, users are still able to change this setting What I tried so far was to create a plist file to enforce it, but it does not work:Preference Domain: com.teamviewer.TeamViewer<?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" " http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>AssociatedBundleIdentifiers</key> <array> <string>com.teamviewer.TeamViewer</string> </array> <key>ExitTimeOut</key> <integer>10</integer> <key>KeepAlive</key> <true/> <key>Label</key> <string>com.teamviewer.service</string> <key>ProgramArguments</key> <array> <string>/Applications/TeamViewer.app/Contents/MacOS/TeamViewer_Service</string>