I am unclear as to how to keep licensed Apps, like FileMaker Pro, up to date with "Apps" in the JSS. I found lots of good stuff like Adobe Reader and I see FMP in that list too but how does it handle licensing? Testing with Reader worked flawlessly. But its a free app. It would be nice to use that Apps - JAMF apps area to keep as many apps up to date as possible to avoid packaging etc. Can anyone point me in the right direction for that, video on TY or something? Cheers.. 

Has anyone been able to force the new manage backups in OneDrive? I can't for the life of me get it to work, using both PLIST and JSON. I can get it to force other settings but not the backups. Here is my configuration. Tenant ID has been removed for obvious reasons.  <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>DisableTutorial</key> <true/> <key>DefaultFolderLocation</key> <array> <dict> <key>TenantID</key> <string>Tentant ID Here</string> <key>DefaultFolderPath</key> <string>~/</string> </dict> </array> <key>HideDockIcon</key> <true/> <key>OpenAtLogin</key> <true/> <key>EnableAddAccounts</key&

We've got a Journalism cart that has about 26 MacBooks in it. Some issues popped up and I wanted to test clearing out the profiles daily because some students just don't listen and keep ~50GB in their profile even though they have external drives for their work.I have a pretty simple script that just makes sure to ignore our admin accounts and runs a..for a in $userListsysadminctl -deleteUser $aThis seems to work and the home folder is gone but the account is still technically there when you go into users and groups. So when we try to login the MacBook just hangs since there's technically an account still there but no home folder.These users are not secure token holders since only students use them so it's not that and they are Jamf Connect created accounts.Is this just not possible on M1s? They had Intel Macs before I got here and said they used this script all the time but now it just falls a little short with fully removing the account from the device.

Is there a way using the API to find the number of devices that has an app installed based on the app ID? I created a script to do it but I went off used VPP license but that takes every device its scoped to into count not the ones with it actually installed which is a much smaller number.Any help would be great and I will also include the script I created to at least find used VPP licences.Its rough I know, I am still learning how to script with API requests.import requests import json from datetime import datetime import xml.etree.ElementTree as ET import os import csv #This is the login for the Bearer Token username = "ussername" password = "password" url = "https://your_jamfcloud_server.jamfcloud.com/" bearer_token = "" token_expiration_epoch = 0 #This gets the Bearer Token and makes it usable def get_bearer_token(): global bearer_token, token_expiration_epoch response = requests.post(f"{url}/api/v1/auth/token", auth=(username, password)) response_json = response.json

We are MacOS 14.x and these started popping up. I feel like i am missing something here as I thought Apple had removed the need for admin elevation to update MacOS

What apps/scripts/product are you using to manage temporary admin permissions in your environment? I'd love to give Jamf Connect a try, but we're still using on-prem AD for authentication. I'm piloting Privileges, and its going well but my management wants a non-open source solution, even though it can be deployed from the Jamf App catalog. I mention Jamf Connect, and the response is that we're not moving to cloud IDP for the foreseeable future, so no go on that.

Now we have been working back and forth a bit to be able to push out a configuration to an iPad to automatically connect to Wi-Fi. We have got the configuration in place but when the device tries to connect to the network it just stands still and spins.   If we click the ⓘ on the right side of the SSID, turn off Private Wi-Fi Address and then click Join This Network.   After that we click Mode to change to EAP-TLS and then click Identity, there we see a certificate that’s not the one we want to se.   When viewing certificates under the MDM Profile on the device we see three certificates, the one we sant to se is the one without a name.   Does anyone have any advice to give and/or does know what could be wrong in this case?Happy Eastern everybody :)

Hi, We have a Configuration Profile pushing out our WiFi settings with certs currently, but recently the first batch started expiring. They get renewed, no problem, but the expired cert is left in the keychain. I'm trying to script the removal of them using the following script, so they can't be selected for the wireless profile. #!/bin/bash # Grabs the expired certificate hashes expired=$(security find-identity | grep EXPIRED | awk '{print $2}') # Check for certs if [ -z "$expired" ] then echo "No expired certificates, we're all good" else # Deletes the expired certs via their hash echo "Deleting expired certs" security delete-certificate -Z $expired fi exit 0 #success If I run these commands locally on the machine, then it works no problem, but via a policy it always fails with: 'Unable to delete certificate matching "XXXXXXXX..." Any thoughts? Is there a better way to manage certificates for WiFi profiles? ThanksChris

I recently took over managing our instance of Jamf Protect and its a mess. I linked it via API to Jamf Pro and pushed out the plan and newest agent. The problem is some of the devices have stale records and don't seem to update even after Jamf Pro installs the new config profile and agent. The device is checking into Jamf Pro regularly but not updating in Jamf Protect.Any advice on how to rectify this? I tried uninstalling and reinstalling the agent but that did not seem to work.

Hi everyone,I'm in the process of setting up our instance of Jamf School and I got stuck on the Exchange setup. I created a separate Profile for iOS devices for this and was able to add most of the information so the users could just type in their password to authenticate. The only thing I was not able to do in Jamf School was to add the "Domain", which is needed for the process. If I set up manually on the device, the "Domain" field says "optional", but it is indeed the only difference, that makes the process successful for me.Does anyone know of a way to implement this in the Jamf Profile?Best,Wadim

Hello, does macOS 10.13 keep an authentication log anywhere? I don't see the accountpolicy.log in /var/log anymore... so Im assuming Apple moved it into log facility? I need to audit a Mac for login success/fail attempts at the screensaver/login window. Any help would be appreciated!

Hey everyone,I wanted to know what smart group criteria I can use that once a brand new mac device gets enrolled with jamf it will appear in the smart group. 

We introduced a notification capability for App Installers deployments in September 2022 and have continued to refine these notifications since that time. The original intent was to present a notification to the end users that as closely resembled the particular app that was being updated as possible. Unfortunately, we were unable to present a consistent notification experience which has led to end user confusion.Issues with the current process:Notification icons – For some applications we can show an original app icon, while for others we need to replace it with a generic “exclamation mark” icon. This may be confusing for the end user.BundleID for additional configuration profiles – If the Install supporting configuration profiles checkbox is selected, apps with a BundleID different than com.jamf.appinstallers.notify are configured to show permanent notifications (Alerts alert type). Because this setting is forced by the configuration profile, an end user cannot turn it off. As a resu

Hi all,I'm relatively new to using MDMs and to Jamf School, so forgive my ignorance.  Is there a way to push Google email accounts along with the password to iPads?  Many of the students at the school I work for forget their passwords on a somewhat regular basis.  From what I've been able to find on the topic so far, this is only possible with Jamf Connect?  I have also tried looking into using certs, but that seems to only be an option with Jamf Pro? Any help is greatly appreciated! Josh

Hello Everyone,We are adding Active directory certificate for users. But sometimes jamf remove the configuration profile automaticly. Why does JamfPro do that?     

Hello AllIm trying to create an Extension Attribute that searches the JAMF log in /private/var/log for a particular word (an error code) and if its there to report a positive or negative.  Any idea of the scripting for this?  

Hello All!We are running a policy that resets the password on a particular account every month.  Its works on some machines but doesnt work on others. The policy returns the logs and lists this error on the machines it DOESNT work on:Script result: Setting username for API updateSetting password for API update 2024-04-02 09:13:09.326 sysadminctl[24327:1393264] ### Error:-14167 File:/AppleInternal/Library/BuildRoots/a0876c02-1788-11ed-b9c4-96898e02b808/Library/Caches/com.apple.xbs/Sources/Admin_sysadminctl/addremoveuser/main.m Line:377 2024-04-02 09:13:09.327 sysadminctl[24327:1393264] Operation is not permitted without secure token unlock. Im trying to get an idea of how many machines this error is happening on. I thought that this error would be documented in the jamf log in /private/var/jamf so I figured I would make an EA that searches that log for the error, but I came to find find out that the error is NOT documented in that log or any log on the Mac (as far as I can see

Is there any way we can clear safari tabs at the start of each school day in Jamf School? It would be helpful to stop students caching websites before the profiles switch over to school mode.Thanks

Details Executing Policy Install Cisco Secure Client 5Downloading Cisco Secure Client 5.1.pkg...Downloading https.jamfcloud.com/jcds/downloads/Cisco%20Secure%20Client%205.1.pkg...Verifying package integrity...Installing Cisco Secure Client 5.1.pkg...Installation failed. The installer reported: installer: Package name isinstaller: Installing at base path / installer: The install failed. (The Installer encountered an error that caused the installation to fail. Contact the software manufacturer for assistance. The package is attempting to install content to the system volume.)

Unable to add screenshots?

Today we are releasing Jamf Pro 11.4. Highlights include: Compatibility with visionOSManagement capabilities are available in Jamf Pro for Apple Vision Pro devices with visionOS 1.1 or later based on testing with the latest Apple beta releases. Restrictions Setting for European Union Digital Markets ActYou can prevent users from installing alternative marketplace apps and marketplace-hosted apps on supervised devices with iOS 17.4 or later. Global End User Experience Settings for App InstallersYou can use the new App Installers settings page to customize the end user experience for all App Installers deployments in your Jamf Pro instance. You no longer need to individually configure end user experience settings for each App Installers deployment. However, you can still customize the settings for each app separately.   For additional information on what's included in this release, review the release notes via the Jamf Learning Hub. See the latest release notes video for a brief

We're rolling this out next week. Anyone have issues and if so, what were they?

Looking to pass custom scopes to jamf connect using entra ID. I've attempted to add it a few times, but am doing something wrong. Everytime i attempt to use the scope, the app breaks. Wondering if anyone else has gone through this process!

We encountered a problem with our APN certificate; it was mistakenly replaced rather than renewed. We had to track down the previous Apple ID to renew and restore it, preventing the need to re-enroll all devices.Additionally, an automated enrollment token expired. A technician uploaded a new token from our Apple Business Manager account and created a new pre-stage profile, assigning all devices to it. However, the old token still appears in settings > global > automated enrollment, marked with a yellow alert and a "sync failed" message; the last sync for both tokens occurred one minute ago.A iOS device was wiped for re-enrollment and is now stuck on the remote management screen displaying"Jamf Pro enrollment issues, the configuration profile could not be downloaded the MDM server certificate is invalid."Although initially enrolled with the now expired token, it was assigned to to the new profile using the non expired automated enrollment instance. No devices remain assigned to th

Greetings all,We are in the very earliest stages of setting up Okta.  I'm currently working on configuring our JSS Dev environment to use Okta for SSO.I'm working directly with our internal Identity Management team who manages our Okta instance.  They setup the integration on the Okta side, but I have no idea how they went about it.In the JSS dev, I've enabled SSO using Okta, added the necessary metadata URL provided by the IAM team, etc.When attempting a login, I am presented with the expected Okta user name screen, followed by the password screen, suggesting that the login process is working (and I've received notifications of a successful login), but then directed to an error message:Safari can't find the server.Safari can't open the page "https://https//<mysandbox>.jamfcloud.com/saml/SSO" because the Safari can't find the server "https".Note the extra "https// in the Url.The Okta team says everything is OK on their end, and I've reviewed the JSS SSO settings with th