We have been running Jamf on our computers since the launch of our company three years ago. From time to time we have computers that need to be removed from our system and I would like to know the best practices. Up to this point all my attention has been on getting computers enrolled.All our computers are in Apple Business Manager (ABM) and they are enrolled in Jamf using PreStage enrollment. This works well.When an employee leaves the company I lock the computer in Jamf before the computer is shipped back.When I receive the returned computer, I use the unlock code from Jamf to unlock the computer. I then release it from ABM. Next I select Remove MDM profile. Once I confirm that the profiles have been removed, I then delete the computer from Jamf.Is this the best, or at least, correct way to do this, or is there a better way?  

My company is in the process of getting users to self-enroll their existing MacBooks but we have a few individuals who are reluctant to do this, site various reasons why they won't.One is a concern regarding the amount of CPU/memory consumed by Jamf. Having looked at the processes running on my MacBook I can't readily identify which are associated with Jamf Pro. Is there a list somewhere of the processes that can/do run on macOS once registered with Jamf Pro.Another is that a user has highlighted a somewhat dated blog that casts doubt on the security of Jamf Pro. While I'm in the process of reading through the article and trying to establish if any of it is still relevant, if anyone has comment/view on it that they wish to share I'd like to hear it.https://labs.withsecure.com/publications/jamfing-for-joy-attacking-macos-in-enterprise

What is the recommended workflow for deploying MS Office to shared devices such as lab macs? We have been using the BusinessPro package along with the 2019 serializer but this seems to no longer work with the latest versions. We can switch to O365 licensing for computers used by only one person, but this is not ideal for lab machines as users will quickly hit the device limit for their Microsoft 365 accounts. Is there such a thing as Microsoft 365 license for shared devices like what is available on the Windows side? TIA

While going through JAMF 100 Course, i just came to see Jamf offers suites of application. Later saw a pic of somebody who has installed Jamf Pro as App which further had composer and 1 more application. Does someone know where these apps can be found and installed, it must have some .dmg file. Looking forward to hear from someone. 

I'm seeing this popup on some of our users devices since the upgrade to Monterey, but I'm not entirely sure what it's trying to do, and it seems like I need to know in order to prevent it from popping up by automating what it's trying to do. I think this is from trying to install FortiClient, but I'm not positive. How can I tell what it's doing so I can make this easier on our users?

Hi,I'm deploying JamF connect using Intune and struggling to get the login screen to appear at start-up. If I log in using the local user and then log out, the Azure login screen appears and it all works fine. What I can't get to happen is the login screen to appear at start-up.Where I'm at now is that at startup the regular macOS login screen appears and I can enter my credentials.Then the Azure login screen appearsThen the screen goes blank for 20-30 seconds and the Azure login screen appears again.Then I can log in, do MFA and I'm at the desktop. What setting might be triggering the initial macOS login screen so I can remove it and boot straight to the Azure login screen?Many thanks!

One of our educational app vendors fixed some bugs today on their IOS app.Their new version 7.6 shows at the App store, but 7.5 is still showing onJAMF at  ...jamfcloud.com/mobileDeviceApps.html on the  Mobile DeviceApps page.   How long does it normally take for the app updates to transferfrom Apple to JAMF?   Overnight?Tim

Greetings programs!If your org adopts OneDrive for managing user Desktop/Documents, you may run into issues of filename compatibility. I’ve written a couple scripts which replace forbidden characters with underscores (_). This approach uses zsh file globbing and the zmv function. Also included are updating file dates to align with issues with the FAT file system and Windows Explorer.https://github.com/atlauren/OneDriveKFMEnjoy! PRs welcome. 

I need the JAMF recommended workflow for the migration of Jamf Pro Windows Server 2012 R2 to 2016/2019. or in-place upgrade documentation

Hello all, I am running into an issue trying to deploy Cisco Secure Client v 5.1.0.136 & 5.1.2 where the bundled Duo desktop is causing a pop up to appear. Anytime the installer is pushed a security system cert trust setting pop up will appear. If you click cancel, the VPN installs as it should and there are no issues. I am trying to push these as silent installs so end users don't have to interact with anything, but I can't seem to find a way to do so. We are not DUO customers and just want to use the Secure Client VPN.I have been following this thread in my troubleshooting, so I am aware it is Duo desktop causing the issue. I have tried the steps in that thread regarding pushing out a Duo cert, but the pop up still keeps appearing. I have reached out to both Cisco and DUO about it, however neither have been very helpful. Cisco basically said DUO Desktop isn't supposed to be there even though it is and DUO wouldn't help since I wasn't a customer. I'm curi

Can anyone tell me what I'm doing wrong? I'm trying to write a script that checks the version of macOS so I can have it trigger a Jamf policy based on the version of macOS that the computer is running. I wanted to account for all versions of Sonoma and all versions of Ventura.  I keep getting "integer expression expected" errors. I used shellcheck.net and it didn't find any problems. I'm testing this in CodeRunner. I also tested it in Terminal. I thought I knew how to do this! I have even looked at some other scripts that I have that use similar syntax. They work. #!/bin/zsh macOSVersion=$(/usr/bin/sw_vers | grep "ProductVersion" | /usr/bin/awk '{ print $2 }') echo "$macOSVersion" if [ "$macOSVersion" -ge 14 ] && [ "$macOSVersion" -lt 15 ]; then echo "This Mac

I am working on a script that will produce an alert message using Swift Dialog if CrowdStrike has logged any malicious behaviors. This is meant for my support team who may be helping one of our users find out if CrowdStrike may be responsible for an issue they are having. I created a Self Service policy that runs the script. I was given this command from our CrowdStrike rep: log show --predicate 'process == "Falcon Notifications"' --last 1h I used this command to create a variable: detection=$(log show --predicate 'process == "Falcon Notifications"' --last 1h | grep "malicious behavior detected") If I simulate an incident of malicious behavior, the phrase that follows grep will appear in the log. Therefore, when I echo "$detection" it will output a result that contains that phrase. If the log doesn't have that phrase, the output of $detection will be nothing. Later in the script, I have a conditional statement:   if [ "$detect

Dear Community,we are switching from Meraki to Jamf and would like to trigger the "Erase all Content and Settings" function on our employees' Macs via the Meraki command line without the employee having to make an entry.Do you have any ideas on how we can implement this? I've currently found the following option:1. make the user an admin2. trigger the settingHere the employee still has to enter his user password:sudo dseditgroup -o edit -a username admin/usr/bin/su \\- "`/usr/bin/stat -f%Su /dev/console`" -c "/usr/bin/open '/System/Library/CoreServices/Erase Assistant.app'"

Is there a way to turn off the WiFi info button? Or at least limit it so that users cannot change the IP address to manual?

Hi , For some of our users jamf login window has stopped showing up, the users are only seeing mac user to login. OS version is Sonoma 14.0Jamf connect version is 2.30is anyone else having similar issue and can share a fix , i know re isntalling the profile might fix it but i dont want to perform last resort as first. Thanks,

Ok, Let me preface this by first stating that scripting is NOT my strong point.I'm attempting to install AWS CLI version 2 for all users per the instructions on: https://docs.aws.amazon.com/cli/latest/userguide/install-cliv2-mac.html#cliv2-mac-install-cmd Attempting to run the commands via policy result in an exit code 127. I've found a few posts about AWSCLI version 1, but none of the solutions seem to work. Any suggestions?

Hi, I'm looking to make a policy that will install AWS CLI, and have been running into a few problems. I originally tried via pip, but ran into permissions issues during the execution. I then tried via brew, however I am running into a roadblock there. Currently, I am able to successfully get brew installed via a script I found here. I then created another policy with the command 'brew install awsci', configured under files and processors-> execute comand, but get the response 'brew not found'. I accounted this to the command being run as root instead of the user, so I then tried to create a script (attached below) that would run as the current user. Unfortunately, it returned with: 'Script result: bash: brew: command not found' I am able to manually enter the command 'brew install awscli' from the logged in user via terminal, so I know that works..

Today we are releasing a maintenance version of Jamf Pro. Jamf Pro 11.2.1 fixes the following product issue: Jamf Pro Server: Security Issues [PI116156] Resolved a broken access control issue for some enrollment workflows.   For additional information on what's included in this release, review the release notes via the Jamf Learning Hub. To access new versions of Jamf Pro, log into Jamf Account with your Jamf ID. The latest version is located in the Products section under Jamf Pro.   Cloud Upgrade Schedule Your Jamf Pro server, including any free sandbox environments, will b

Hello everyoneSorry - I'm new to jamf.I need to create a policy that inserts a line in a config file.Do you have any ideas on how I should proceed here?Best regards

Hello,First time, long time.My organization has decided to move away from Carbon Black in favor of Falcon. I used CrowdStrike's directions and successfully created a config profile and a policy. Both have been tested and are working. My predecessor had created a policy to remove Carbon Black and it works as expected.My question - What is the best way to go about deploying this? My idea is to scope the config profile to every machine, create a smart group that identifies endpoints with the Falcon config profile installed, and uninstall Carbon Black. Then create another smart group that identifies endpoints with the Falcon config profile installed that do not have Carbon Black installed and scope the Falcon installation policy to the group. Once all endpoints have received the Falcon package, I will remove the old Carbon Black config profile.Is this the best way to do this or is there another method that you'd recommend?Thanks in advanced!

We have the problem that we cannot activate Jamf Trust on any of our Windows computers (all Lenovo devices).As described in the help, we install Trust via a "Generic UEM for Windows" installation.Trust is installed correctly, but activation does not work. We have also tried to insert the "Shareable link" directly into the application, but the same behavior, the message always appears, activation is not possible, please contact the administrator.But we cannot recognize any error. We have also tried different networks (Wifi & LTE) and also with cable.So it is currently not possible for us to roll out new computers, as protection by Trust on a Windows basis is currently not possible.We are currently working to identify next steps needed to move the case forward.

Hi Everyone  is there a way to push a url to all macbooks like webclip for IOS ? Thanks 

Hello, we use jamf pro to manage our macbook airs.One of our main concerns is we do not want students to sign in with a personal account when using chrome browser. I have been looking to see if that could be done using the google admin console and I have been told that I could create a configuration profile in jamf to do this. How can this be done with a configuration profile? Thanks

Trying to configure a login window message with configuration profile? Any ideas

Hello! I'm looking for a way to disable the audio on an iPad's lock screen. I'm having an issue where a student is watching a YouTube video with a timer set on a break, timer goes off, iPad gets locked, and the audio from the video that is able to still be played from the built-in player on the lock screen causes classroom problems. I've tried two Config Profiles that didn't work--one that restricts the Apple Music app, one that restricts AirPlay receiving--but I'm not even sure if doing this is possible. Would love to hear any solutions or insights anyone might have! Thank you.