Is this possibe? Can force install the 2021 license but some users use an O365 license so want to make an smart group that only users with an 2019 license update to 2021 thanks 

We've got a small amount of Macs and use JAMF Pro to manage them.It seems that our Macs users have an issue where their prints are only printing in Color. Doesn't matter where they print from (which application), which device (happens on at least 3 different Macs), or to which printer.The printer in the main Mac office is the same make/model as elsewhere in the building. I'm told the issue may have started prior to this make/model anyhow, so it's not likely related to the printer itself.The same printers don't have any such issue when printing from our Windows PCs or Chromebooks.I'm not overly familiar with Mac management (due to the tiny portion of our environment they consist of) so I've had help with getting JamfPro setup to do things like deploy this printer to them.We've confirmed there's no apparent setting on the Mac that is helping - you can switch the print to "B&W" and it'll still come out in color. It shows B&W in the print preview.So..I'm at a loss as to where such

Our feet are currently on Ventura, with a few exceptions on Sonoma. We plan to migrate our devices to Sonoma in the near future. Due to Jamf Connect and Sonoma issues, we deployed 2.29.0 to our devices before our migration. I like to state our previous Jamf Connect Policy has the following Files and Processes Payload to ensure our devices default to the local login, "authchanger -reset -preAuth JamfConnectLogin:DeMobilize,privileged". When I created the new Policy with 2.29.0, I included this same payload. On our Sonoma devices, there really wasn't an issue during testing. I have shut down and restarted the devices a few times, and the default, Local Login, was the default. When Sonoma 14.1.2 was released and the devices updated and restarted, the Local Login was the default. But a restart after that first restart, those Sonoma devices are now doing the idP login, which we don't want. Has anyone else had this experience?

Our company recently installed Jamf on our Mac. Me and some colleagues on Sonoma are locked out of our accounts because a new password is required but the password is not accepted. In short:No Jamf installed. All is well.Upgrade to Sonoma. All is well. Install Jamf. Accept the certificate, check it out in System Preferences. All seems well.When the screen saver lock kicks in, try to log back in.A new password is requested. Enter it, in both fields. Password is rejected because "Your password does not meet the requirements of the server."Some notes:The built-in macOS password check shows all rules in green.I did try every password config that would make sense, no luck, and I don't think that's itI'm very puzzled about the need for "the server" to see my local admin password, WTF?! 

We are just rolling out new computers to our staff, the currently have MBPs with local accounts, on the new computers, we are adding them to the AD domain to ease with logins and password across our district. If we let them use Migration Assistant, they will create new users on the computer with their settings and files and not use the new account that we are trying to get them to use. We will assist them in moving their files, bookmarks,images and music over, but don't want them to use Migration Assistant. I have tried to rename / remove the app, I tried to restrict the app, nothing works. Any ideas?

Hey all! I have an issue that some of you can, hopefully, help with. Apple has made some changes to the way macOS handles screensavers and wallpapers over the last couple of iterations and, with Sonoma, I'm hitting a blocker when trying to deploy a policy to add an image and set the wallpaper to that image for all displays. This is how I currently have the policy setup: I created a package that adds a folder containing the image to to the system library I added the following script to run after the package was installed: #!/bin/zsh new_wallpaper_path="/Library/CompanyFolder/Company\\ Wallpaper/Company_Wallpaper.png" /usr/libexec/PlistBuddy -c "set AllSpacesAndDisplays:Desktop:Content:Choices:0:Files:0:relative file:///$new_wallpaper_path" ~/Library/Application\\ Support/com.apple.wallpaper/Store/Index.plist && killall WallpaperAgentI've executed the policy on my test machine successfully but when I had another user test for me, the package installed but the scrip

Hi, we have a MacOS we enrolled via configurator app and now have it in Jamf. It clearly is getting the profile as settings are restricted, user is set up as standard, profiles are there etc. But most management commands are missing. Also can not run any jamf commands, as there is no jamf in usr/local/ at all. I run sudo jamf version and get jamf command not found This is what management commands looks like for this mac very limitedwhile others have more:already tried wiping it and reinstalling MacOS as well. No dice

We are trying to setup some of our field iPads to have a passcode, but then restrict the user from being able to change the passcode.  We have a payload that requires a 6 digit passcode on all our iOS devices.  I tried a couple things and have not had the results we are looking for.First tried to set the Restriction->Functionality->Modifying Passcode to Restricted but when new devices enrolled they bypassed the prompt to set a passcode and the won't let the user go into settings to set one.Then I turned that restriction off and had someone put the passcode on one of those devices and then turned the restriction to restricted and they couldn't change it, but that's too manual for each device.Second thing we tried was to setup a smart device group for any device where the passcode compliance with profile was compliant hoping that a new device being enrolled wouldn't pop into this smart group until the passcode was set; set the Restriction->Functionality->Modify

Hello Jamf Pro users,I'm currently facing a situation where I need to update a specific app on only a select few devices within our organization. We utilize Jamf Pro as our Mobile Device Management (MDM) solution, and I'm looking for guidance on how to achieve this efficiently.Specifically, I want to understand the process of updating the app on specific devices using the Jamf Pro Administrator console. I have already identified the devices I want to update; however, I'm unsure about the steps involved in initiating the app update command and directing it only to those desired devices.

I'm encountering an issue with installing Sophos on a machine through Jamf Self Service, I've packaged Sophos using Composer, and the same .pkg works flawlessly when deployed through a Sophos policy to all devices. However, when attempting to install it through Jamf Self Service, the process appears to complete ("Done" message), but the app doesn't actually install on the machine and I'm seeking some guidance from the community. 

How can you export the Outlook 365 My Computer Archive files? I have a user that is migrating to a new Mac and wants to transfer these files from Outlook 365 on his old Mac to Outlook 365 on the new, but I do not see a way to export the My Computer archived files. In Outlook 2011 you can export and create a .OLM file but in the new Outlook i do not see it. Thanks

Just seeing if anyone has had success in deplying through Jamf Now a blueprint with a Custom Profile that has a DNS Setting payload.The Profile works find when installed manually but when it's deployed via Jamf Now isn't being enabled.

I know some of this has been covered once or twice before, but I'm VERY new to Jamf. I just recently started with this company and saw Jamf for the first time. Now, I'm basically the admin for an app I've only recently become acquainted with that manages computers running operating systems I've never supported in my short IT career. As you might imagine, I have a million questions, but I'll start with Mass Action commands.After a bunch of attempts, I finally got 2 machines to update from 12.6.0 to 12.6.1, but when I try and get them to Ventura, I get this in Jamf: Unsupported InstallAction for majorOS updateIt doesn't matter whether I've checked the option for majorOS update or not.I always choose the option to defer as I was tasked to do.When I run the mass action command, I see nothing on the target computers (no notifications etc) and after 5 minutes or so I get the failure result in Jamf. It's frustrating to say the least.This happens on an iMac and a MacBook.I have a third Ma

Hello, I am kind of walking into a weird situation here where I have been upgrading our jamf environment that has essentially been limped along for the last 2.5 years with no updates and I am trying to see if anyone might have experience implementing patchbot by chance? I want to give our workstations guys a more streamlined less hands on approach to patching so looking for options

Having a weird issue. After updating to macOS 12.3, right before the filevault login, I am presented with our PoilicyBanner, and I cannot click on the accept button. This is pre-OS right before FileVault login. I have to click the white text, tab, and hit return to get to my filevault login avatars. At this point, I can login and then am presented with the OS’s PolicyBanner. According to How to set up policy banners in macOS - Apple Support https://support.apple.com/en-us/HT202277 Expected behavior should be: If you use FileVault full disk encryption on your computer, the policy banner appears after the first user logs in, before the desktop appears. The first login is performed to unlock the startup disk. Present behavior: Computer startup boots to PolicyBanner that is stretched to the edge of the screen. You must click to focus and tab to Accept. Then we get FileVault login profiles. Enter password. Unit boots to PolicyBanner to check accept and continue, then to desktop.Anyone

Hi, A couple years prior to joining my current organization, they moved their On-Prem Jamf Pro to the cloud. While the JCDS is setup, it isn't the Master DP, with the master being an on-prem smb server shared between our two campuses. I plan on doing a replication and then making the JDCS the master. My question is, does it make sense to keep an on-prem distribution point? 

Hello all! For many months now, the audit log for EVERY one of the computers on my instance show 'Viewed FileVault Encryption Key' with my username. I am somewhat new to JAMF but a moderate technologist generally and have recently taken over the System Admin role at my company under a lesser title. I have very rarely viewed any of these logs and it would be arduous for a human to view them as often as the logs display. To me, this log raises brows and I have reported it to my administration counter part who has a very high level title but the response is its probably just me and are not concerned at all (no reason for this, no background to share). I am planning on setting up monitoring on the instance's server with wireshark but I also plan to build a three story tree house and thought it might be a better idea to reach out here in the meantime ; -) The server instance has gone through at least three version upgrades in the last few months led by my administration counter part and unr

Hi,  Is it possible to delete SSIDs via script that have not been connected to over 30 days? if so, can someone assist?   We are trying to see if we can make a self service policy so employees can execute it as needed Thank you,  

Trying to distribute an in-house app with a .ipa file.  The salesman who pitched JAMF Pro assured us multiple times that we did not have to have a paid Enterprise Developer program with Apple.  I'm starting to think they were wrong.Does anyone have any experience generating a provisioning profile without going through Enterprise?  Will AD-Hoc distribution work?I am the developer for the app.

Today we are releasing a maintenance version of Jamf Pro. Jamf Pro 11.1.3 fixes the following product issues: Jamf Pro Server: Security Issues [PI115630] Updated the Jamf Pro installers to include Tomcat 8.5.96 to mitigate a known vulnerability (CVE-2023-46589). Jamf Pro Server [PI115037] When computers or devices are enrolled in environments with enrollment customization and SSO configured, the Click here to proceed with enrollment button on the final enrollment pane was replaced with a progress bar that says, “Downloading MDM profile”. This change prevents failed enrollments. [PI115634] Computer configuration profiles with a Security and Privacy payload no longer lose configured settings, causing blank or null values in the os_x_configuration_profiles database table. As a result, Jamf Pro no longer sends repeated configuration profiles with unique identifiers to the computers in scope.   For additional information on what's included in this release, review the release notes

Hi all. We have a local Jamf Pro server. Anyone know what to look for in the log file to find the date and time a Jamf Pro update was done?

I've had some free and paid Mac Store Apps setup for distribution for a long time and for a long time they have worked just fine. Now, all of a sudden, they're not always installing on a newly enrolled iMac. Is there any way to trigger an automatic install of Mac Store Apps?

I am trying to set up Single Sign-On for Generic OpenID Connect using Duo Mobile. I have configured Jamf connect to talk to Duo and after logging into the MFA it asks to sync the network password with the local account but i get an error message that the requested grant type "password" is not supported. Has anyone got duo Mobile to work with Jamf connect?

Hi All!We are experiencing problems with access to the "VPN & Device Management" menu.We use an app called Zscaler that creates a VPN configuration to protect and filter all connections from each device (iPad).Our high school student users are breaking our settings by removing the VPN profile so they can freely browse outside of the filtering.We want to restrict the use of this menu to prevent users from being able to modify the security presets established for the use of educational devices.

looking to the community for recommendations on keeping tabs on Apple updates.My org is strict about keeping things up to the latest version within 30 days.What sites/ RSS feeds, etc do you use to track upcoming updates?