I recently added 20+ Apps and the Apps are going to be assigned to the same exact group of carts for a school. Is there a way to select multiple apps and scope out to devices/groups without having to click on each single App name--> Edit -->Scope --> Save --> Done (Rinse & Repeat) one by one? It's very time consuming let's just say that you forgot to scope out a group or a single device for those 20+ Apps. You have to go back and Edit the App scope for each single app. This may be a feature request but I haven't seen anyone requesting it. My vision would be a checkbox next to every single app and then you can define a scope to a that select group of Apps. [Thanks Everyone]

Sharing for awareness. If you are experiencing the looping Data Notice after updating MS AutoUpdate to v4.70 it is probably due to using a deprecated setting in your profile to configure MSAU. See release-history-microsoft-autoupdate. If you have the RequiredAndOptionalData value selected in your profile it will created the looping issue since the key is locked in the profile but the setting no longer applies. So even if the user clicks OK the acknowledgement will not be set in the preferences and the notice will appear again creating a loop. Issue can be resolved by changing AcknowledgedDataCollectionPolicy value to RequiredDataOnly and redistributing the profile.  

 Posting on here since Sophos has been less then helpful, We installed Sophos endpoint wither their Ventura Config profile and it looks like it works and is functional. However when I go to do an update on the computer while logged in as the local admin no password is accepted. Also when I go to More info and then install through that window it locks SophosEndpoint as the user name and no password I try works there. I've attached a screenshot of the weird login window I haven't seen before

i would like to push bookmark in safari using jamf pro config profile.I know we can push bookmark in chrome using jamf pro config profile (you just push it in xml).But does anyone know/have config profile for pushing bookmark in safari ?

Hi there, I've been trying to find a way to get an extension attribute in Jamf to look at "/Library/Management/super/super.log" for a line: Parameter Error: You can not use both the --deadline-count-soft and --deadline-count-hard options at the same time. You must pick one deadline count behavior. And report the result of true/false. I have a policy setup to uninstall and reinstall super from there.

We are looking to mass remove Teamviewer via a script as on deployment we made the mistake of just deploying through a pkg file and not indexing with a dmg file. I have tried 2 other scripts that I've found on Jamf forums but none of these have worked. The Teamviewer versions are v15 full on some and v15 host on othersDevices generally all running Big Sur but there may be some running Catalina Any assistance would be greatly appreciated

Hello All, after installing a bank app on a shared iPad, I am unable to launch the app and get the above error. This same app works fine on a single user iPad so I have a feeling it has to do with it being a Shared iPad.Has anyone run into this or have any ideas?

Hi there, Has anyone managed to get their historic backdoor local admin accounts that was created in prestage (not the management account '_jamf') working with LAPS? I currently have the p/w to all of the accounts and would like the passwords to start rotating. Reading the LAPS docs I haven't seen anything related directly to historic local accounts.

Hello everyone,Anyone know if there is a good comparison between Jamf and Intune somewhere - what each environment can/can't do and how long things take to accomplish in the different environments?In this case, it applies primarily to Mac. But iOS can also be interesting.

Vendor-provided Overview Thycotic Privilege Manager is an endpoint least privilege and application control solution for Windows and Macs, capable of supporting enterprises and fast-growing organizations at scale. The two major components are Local Security and Application Control. Using Privilege Manager, administrators can automatically discover local administrator privileges and enforce the principle of least privilege through policy-driven actions. Those policy-driven actions include: - blocking, elevating, monitoring, allowing - application quarantine, sandbox, and isolation, - application privilege elevation, and - endpoint monitoring Continue reading … See also Privilege Manager 10.8 Customer Demo macOS Agent Installation Agent installation is well documented and straight forward, however "it will take 15-30 minutes for newly installed agents to register in Privilege Manager." (As of this writing, the vendor's link to Terminal Commands to speed up the process appears to b

Hi all, does anyone have a working PPPC for this DLP application? We are not seeing FDA enabled as required using the PPPC configs  currently out there ( not even the one the company created)   TIA

Hello I am trying to create a local account with a policy. I went through the setup, assigned a test laptop to the scope. The account creates successfully but when I try to sign in i just get the spinning circle and get stuck on the login profile page.After some research I see that it might be related to a Filevault issue? Am I doing something wrong? Would writing a script be easier for this or would I still run into Filevault issues if that is the source of the problem?

Has anyone experienced this and if so what was your fix.This seems to be limited to our HP printers.Issue started with MacOS 10.13.6 for us. Any help is greatly appreciated.

Hi all,Following instructions https://learn.jamf.com/bundle/jamf-pro-documentation-current/page/Supervision_Identities.htmlat the point where I need to need to import the certificate into Keychain I get an error password incorrect: Double-click the supervision identity ( .p12) file.When prompted, select the System keychain from the Keychain menu and click the Add button.Enter the local administrator password.Enter the password for the .p12 identity certificate.Any idea how to solve this?

We're going to start testing a new VPN solution at my company, and I've been asked to come up with some Mac specific test cases. What are some of the things you check off in testing, aside from ensuring connection to the JSS is working properly, Self Service is working, and any other items that are VPN dependent (in our case, Kerberos SSO).

If I have a class of iMacs, is there a command way or using Apple Remote Desktop, that I can remotely log in all iMacs at once using the same user. The iMacs already have the users created of course. Our iMacs don't have automatically log in enabled. Students can also log in using their individual AD logins.But sometimes, I would like to log them all in using a same local accounts and quickly show things to the students. Once logged in, I can use Apple Remote Desktop to bring up the same App.Thanks.

Hi Everyone, Has anyone come across a device dropping compliance after an OS update? We have seen this with macs on Sonoma primarily. If a machine is being updated to 14.3.1 for example, and our compliance is set to 14.3 and above… it drops the compliance. Not all machines, but some do. this is also integrated with intune. anyone heard of an issue like this? 

Hi all,I've been poking around to try and find a method in changing the password change popup notification message. Unfortunately, I've not found a lot of success. We only have the Jamf Pro product and do not have Connect. Does anyone have an article or resource to point me toward in finding a solution to edit this message? 

Hi there, We're currently using Installomator/swiftDialog scripts to handle patch management in our environment on Jamf Pro. We noticed some behaviour from the end-users, specifically how they tend to ignore the prompts for most application updates. There are some key applications that when we push updates to, must get updated as soon as possible. What solutions do you use for this? What I had in mind was a means to "nudge" end-users to update followed by a separate workflow to kill app process and update.

Hi, We have a custom colour set for Word which is in .xml format which we copy to a location but we're looking for a way to set this as default. The set as default option is on the design ribbon in word.  I have tried using composer to capture changes to see what file its updating but i haven't had any success, could someone point me in the right direction please?  thanks

Hi all looking for some information to make an PPPC for automatic graphics switching on Intel Macbook 2019 (so the user can change this) (for some reason there is an flicker on the screen when you working on the battery)thanks 

Hi,I am trying to delete a Managed Local Administrator Account from a number of our Macs via Policy Push. Of the number of devices this policy is targeting 6% are failing and the log simply states 'Unable to delete User ****'. When manually performing on any of the 6% via terminal and triggering the cmd 'sudo jamf policy' a permission prompt appears requesting terminal to have 'File and Folder' Access. Once permitted the account is deleted however my question is why are these devices different to the rest of the devices in our fleet?I have reviewed devices that successfully ran the policy against the failed devices and I do not see any differences in their configurations i.e. enrolment, policy's/profiles applied.Has anyone experienced this issue before or have any insight that may help identify whats preventing 100% Policy success?

Hi thereI need to deploy a new M2 Air, the device is enrolled on ABM and the Jamf server as the MDM server. Issue I am facing is that it fails the handshake and reverts back to an unmanaged setup. I did see the time on the Mac is incorrect even after changing to different regions, I suspect this might have something to do with it. If I try to change the time from terminal I require the 'Setup User' password which is an unknown so I can't go down this route.Any suggestions would be appreciated

Hello All,Please help me a payload to upload in jamf pro to grey out "Launch Automatically after login" option under DisplayLink.Thank you. 

I have a 5 member cluster: 1 database, 3 client tomcat nodes, 1 admin console. If I bring memcached into the equation, I am able to add at most one extra Ubuntu server to support memcached. What kind of memcached configuration settings would be optimal for my environment? We currently have about 6000 1 to 1 DEP enrolled iPads and about 500+ Macs. I am planning on some but not a great amount of expansion...a thousand iPads or less. Do I need two memcached servers or is a single one sufficient? I don’t want overkill but I don’t want to ask the VMWare guys for more than a single additional VM. Thoughts or input? Can’t move to a Jamf hosted solution though. Sorry tagged post wrong with netinstall and it won’t let me change.