Hi all,I did an export of a SIS to Jamf School, which worked fine and the students and teachers now all have an account within JSS. How can I sync those users so they also exist as Apple School Manager accounts/Managed AppleIDs? I know it has something to do with the SFTP function, but couldn't quite figure it out.Thx!!

Safari 17.2.1 - Ventura

We have an issue regarding the latest Safari Update. It shows up in the Inventory "Software Updates" Part of the Clients but there is no Option to install it in the Software Update System Preferences on the Client site. There is no Safari Update listed. We use the following Configuration Profile to manage Software Updates: ########## <dict><key>PayloadDescription</key><string>Configures restrictions</string><key>PayloadDisplayName</key><string>Restrictions</string><key>PayloadIdentifier</key><string>com.github.erikberglund.ProfileCreator.abc</string><key>PayloadType</key><string>com.apple.applicationaccess</string><key>PayloadUUID</key><string>abc</string><key>PayloadVersion</key><integer>1</integer><key>enforcedSoftwareUpdateMajorOSDeferredInstallDelay</key><integer>90</integer><key>forceDelayedMajorSoftware

Dumb question I know, but I can’t find a straight forward answer for some reason

I m trying to find out Global protect VPN Connection status and have to enforce users to get authenticate

Hi Guys im config the jamf radar and i need to add some websites to exception group we blocked for all users how can able do that 

Looking through the documentation, I couldn't find a way to easily remove the ConnectWise Control Client. Created the script below to help anyone who uses the app. Please add your control client's unique id where the "x's" are.   #!/bin/bash # Brandon Woods # August 2021 # This script uninstalls the Connectwise/Screen Connect client. No reboot required. # Unload Connectwise LaunchAgents sudo launchctl unload /Library/LaunchAgents/connectwisecontrol-xxxxxxxxxxxxxxxx-onlogin.plist sudo launchctl unload /Library/LaunchAgents/connectwisecontrol-xxxxxxxxxxxxxxxx-prelogin.plist # Remove Connectwise LauchAgents sudo rm -v /Library/LaunchAgents/connectwisecontrol-xxxxxxxxxxxxxxxx-onlogin.plist sudo rm -v /Library/LaunchAgents/connectwisecontrol-xxxxxxxxxxxxxxxx-prelogin.plist # Quit Connectwise Application sudo killall ScreenConnect Client # Remove Connectwise Application sudo rm -rv /opt/connectwisecontrol-xxxxxxxxxxxxxxxx.app # Check for remanants of Connectwise Lau

Just got a "thanks, but no thanks" email after interviewing for a Jamf-related dream job, so I'm wallowing tonight in my disappointing year of looking for a new position. Don't mind me.About me: Got my Jamf Certified Expert (Jamf 400) late in 2022 (also Jamf 370). Last three years Jamf administrator for 5000+ devices (500 MacBooks, rest mobile devices), 10 years of IT experience overall. Have an extensive GitHub with many examples of Mac/Jamf code. A dozen other IT certifications. Working on a Masters in IT.What I was looking for: I work in the public sector, so I'm likely underpaid for what I do ($65k-$70k). Trying to find a new, better paying job working with Jamf or another Apple MDM -- and more importantly, new challenges.

We've been testing Jamf's return to service and Remote Wipe  mass action commands on our iPads and we run into some kind of bug where apps that are set to "auto-deploy" are being installed and removed multiple times during enrollment. This takes what should be a process that takes a few minutes to 20 minutes. I'm not sure if We've boinker something up in the scoping or if this is just a by-product of handling this through MDM. I don't notice the same behavior if we do a recovery mode wipe of the device through Finder.    

I am testing the JAMF Safe Internet, and so far it is good.. except I need it to do something that I'm not sure it can do, or I'm not configuring it correctly.My Pre-K through 2nd students only need to access allowed websites. So if I block everything, and then put in custom rules for the allowed domains, that should work, right?Not the results I'm seeing. Things are still getting blocked by the default rules, which should be overridden by the custom allow rules?

Anyone know how to implement these from Apple?   https://developer.apple.com/documentation/devicemanagement/schedule_an_os_update   Any working advice would be appreciated please. Not sure if these commands are to be used in a config profile, that's my guess, but I have been unsuccessful so far. There are command and response, not sure how all this gets implemented. Please advise. Thank you ;-)

Hello All, I am very new to Jamf pro. Getting trained on it. I am looking for a policy or configuration profile which can demote the local admin user/ account to a standard one. We do not have AD. Everything controlled by Jamf proAny help would be much appreciated!!! Thanks!!

I've been having some trouble updating the iMac's to the most recent macOS patch 13.6.2 with JAMF. I usually restart the computers just before I send the remote command and I do see the series of commands queueing and completing in the computers history but then the update never goes through. I did this for around 16 of our computers that we have and its the same problem for all of them and they just never get updated. Any solution?

Hello, We are trying to deploy 80 Gen4 Apple TV's and want to use single app mode to display our logo. Are there any resources or guides on how to develop an in house app that would display a white background with our logo in the middle? I'm not an app developer so anything that I can read to help guide me to my goal would be fantastic. Thank you,Nicholas

Hello !I didn't find a suitable answer anywhere, but found the same subject: app store apps don't update on some Mac computers. What I would like is to know how can I check what happens and how Mac Apps App Store work to install and update apps. Where are the logs, when does Jamf checks an applies the updates or installations, etc... Recently, I have the problem with NFC Tools for Desktop and Microsoft Office 365 apps.What I tried is: disable then enable the Mac app, remove the scope then add it back, disable the assign content purchased in volume then enable it back too and of course a mix of everything. Of course, I save after each modification. I even tried trough the Self Service but if the app is installed, it only shows open, not update. But I think that it's how it works. And if I delete the app, it doesn't install back when I click on the button in Self Service. The scope is correct because the app appears if I switch from automatic install to Self Service.And if I let it to in

When comparing Jamf Pro with Intune, what do you miss the most about scripting when using Intune?We are a small shop and management want us to go to Intune.We do a lot with smart groups, self-service tasks and variables via policies with scripts.This won't work if I read it correctly.Any other caveats or down sides?

We are using Jamf Device Compliance with InTune.Following this tech paper we have it working fairly well. Technical Paper: Integrating with Microsoft Intune to Enforce Compliance on Mac Computers Managed by Jamf Pro 10.43.0 or LaterWhen the end user goes through computer registration and JamfAAD opens they are prompted to "Always Allow" "Microsoft Workplace Join Key". This is expected and documented here. (Although it would be great to have a smoother workflow)Our issue is the certificate in the login keychain for Device Compliance is not trusted for some reason. (See attached image)The cert seems to be issued by "MS-Organization-Access" I don't have that CA and our Azure folks don't seem to know about it either.Thoughts?Eric   

Hello Everyone,I am at my wits end here and might need some more brains to figure out what the issue is. I am not fully sure if this is the right forum for this topic either, but I am giving it a try... We have set up the Device Compliance in Jamf Pro for several weeks/months now and started to slowly onboard our macs.What we did: We have a mac user group in our AD which is being synced to Azure. Created a Mac App via Jamf Catalogue to roll out the company portal to specific devices onlySet our two Smart Groups for Compliance and Applicable Macs. This checks if the Company portal is installed and applies our Configuration Profiles and Policies. Policy: run Jamf manage and apply the Microsoft Device Compliance Configuration Profile: Applies the web view (According to: https://community.jamf.com/t5/jamf-pro/jamf-intune-macos-device-compliance-mac-not-being-added-to-intune/m-p/292367/highlight/true#M260024)We also have a Microsoft SSO CP in place.&n

I would like to change the current user account name from "Administrator" to "Robert" in one mass command to all MBP's (preferably silently in the background). I think a config profile could do this but not sure how. JAMF PRO 11.1

Hello, I've created a script to to see if any employees have more than 1 mac and then tie it to an extension attritubte. I've done an API get curl to pull information from a computer advance search I've made and then assign it to a list. The list then compares to another list that pulls google chrome emails that is tied to their work email. The script is working on my end, but it does not post anything to the extension attribute. Is there anything in my script that is preventing to post? If a user has more than 1 mac, I just want it to say "yes" in the extension attribute. Any input is appreciated! Thanks in advance to everyone.  user_list=() ########################################################################################## # Curl command only retrieves the email addresses of this advanced search group. # Command will api-GET the contents of the Advanced search EmailList=$(/usr/bin/curl -X GET -s -H "Authorization: Bearer $api_Token" "$jssURL/JSSRes

I have a random MacOS popup that has started.I have tried watching the mail log file to try to figure out what is causing it but nothing shows up.I have verified I do not have a virus or malware.It pops up 3 times in a row then goes away for awhile if you keep hitting cancel....but it comes back.Where else, other than the system.log can I look to figure out why this is happening?

We pushed out the standalone installers to people that didn't run the update themselves, and on some machines we noticed that Jamf is reporting it as a version lower than 17.1.2 despite the install being successful and when checking "About" within Safari it in fact shows it as 17.1.2 (or 17.2). I have an extension attribute that checks CFBundleVersion in /Applications/Safari.app/Contents/Info.plist and even that still reports the older "17615.1.26.101.8" number associated with 16.4 on Ventura.

We are having intermittent connection in Jamf today. Sometimes we get a message in Self Service that it cannot connect to the MDM server or sometimes we get an invalid username or password when logging in to it. We are also intermittently not able to see policy history in the Computer record. Anyone else reporting this?

Today we received an unexpected app drop from Cisco ID'd as "Cisco Orbital." So I'm racing to test a config profile in order to trust it in security & privacy so that doesn't prompt my end-users. Found this link which contains the info Cisco provides after taking time around mid-day today: https://www.cisco.com/c/en/us/support/docs/security/amp-endpoints/216089-advisory-for-amp-for-endpoints-mac-conne.html#anc9But I haven't had time to build it yet. If anyone out there has run into the same issue, would appreciate the feedback. 

I've learned that it's possible to inject new configuration to MDM managed application using MDM so that the managed app configuration changes that are pushed down from an MDM server appear in NSUSerDefaults.This capability is described here : https://developer.jamf.com/developer-guide/docs/application-and-custom-settings Then I can add an observer to be notified of any changes occurs in NSUserDefaults.The app configuration will be stored in the following key:com.apple.configuration.managed A usage example can be look like this :if let managedConf = UserDefaults.standard.object(forKey: "com.apple.configuration.managed") as? [String:Any?] { if let serverURL = managedConf["serverURL"] as? String{ return serverURL } }However, what prevent another entity from modifying the configuration outside the MDM... as I understand NSUserDefaults are writable even from terminal so there's no limitation to just push new configuration which are unauthorized.an example of