Hey all, We are in a one-to-one for Macs in our district and have given instructions to parent on how to set up screen time on their children's MacBook Air's.  Our problem comes when a parent doesnt remove the screen time lock during testing.  Sometimes the screen time filtering gets in the way of testing apps and websites.   So we figured out a solution.  Log into an admin account on the students computer, go to System Settings/Users and Groups and click the i button for the students user account and click delete account, then choose "Dont Change the Home Folder". Now you must navigate to the user folder and remove the word "(deleted)" from the users folder.   Once complete log out and have the user log back in.  Screen time should now be disabled. This helps us deal with testing for specific students who need this feature disabled for tests.

Configuration profiles pending and failingCan update check in normally, but a large number of Configuration profiles pending and failing

I am having trouble using Jamf Pro to run the SUPERMAN script. It works for minor updates of 14.0 but not working on 13.6. Any Suggestions? 

It is possible to set a group picture in a device groups. The intention is to display this image as a header graphic in the Jamf Student/Teacher app in article style. But unfortunately only a placeholder (white space) is created in the app. The image will not load.  If I remove the image from the group, the white space within the app is removed again. Is it the wrong image format (PNG-8, PNG-24, JPEG)? the wrong image size? Or does this generally not work?     Another hint, "Ermitteln" is a very unfavorable translation in german. Perhaps "Discover: Entdecken" would be more appropriate.

Hey everyone, I am wondering if i could get some advice on setting up an API Script for JAMF School that will restart 2 specific iPads at a set time each day. What would be the code and do I have to run it on a Mac? I have seen a few older forums that have restart scripts but i could not get them to work with JAMF School. I would appreciate any help on this.

Geräte Passwort Löschen erlauben, ist nicht übersetzt.

We have apps assigned to students by department and building location. Yesterday and today, we have had two random students have their department and building removed and apps disappeared from their ipads because they were no longer a part of the building or department. This is in the middle of exam time when they need all their stuff to work correctly. What could cause that to happen? No one on our tech team has removed them from anything.

Is there a way to skip the "Choose your walllpaper setting" in macOS Sonoma when a new user logs in? We have set a standard desktop background that we want to use across all our computers.

Hi,I spoke with Apple and they believe this is a Jamf issue. In my IT team, we have received since yesterday at least 5-10 users complaining that their memory is consistently being used up within approximately 20 minutes of restarting. This is something that they have to keep doing throughout the day to use the computer before it warns again to start closing apps due to low Application Memory. Even without anything open, the memory pressure starts to get up into the yellow.There are a few processes we're seeing in Activity Monitor that spike into the GBs of memory used: ManagedClient, mdmclient, and MCXCompositor (this last one fluctuates though between a "normal" amount to then about 7GB for about 10 minutes, then back down).Has anyone else seen this recently? 

Hi,Does somebody did already some tests with Azure's new TAP (Temporary Access Pass) feature with Jamf SSO ?Are there some known issues or limitations ? Regards

Hi everyone, I'm having a somewhat urgent issue with 46 instructor desktop machines at our college. Somehow a configuration profile that was scoped to these machines created another random profile called 'General' that keeps replicating over and over, reaching 3900 unique ID installations of the same profile name on each of the desktops. I've never seen this before, and other than removing the scope I haven't been able to stop it trying to create more and more General profiles. It's causing users not to be able to log in, and reboots are taking 15-20 minutes even on new M2 Mac desktops. It's happening on Monterey and Ventura OS, Intel and Silicon. Anyone seen this before? Hoping I won't have to rebuild each of these machines. 

Hello, Has anyone discovered a way to enable this setting for exchange accounts? This would be helpful for all shared mailbox access but also for manager access of termed employees. Attempted a simple AppleScript with no joy. Thank you,

This is sort of in regards to the issue of being unable to upgrade Shared iPads seemlessly to iPadOS 17 as per https://support.apple.com/en-ca/105058. I'm looking into how iPads by default receive and apply updates. I understand there is a restriction profile that can be applied to defer software updates for up to 90 days according to https://support.apple.com/en-ca/guide/deployment/depd30715cbb/web.  The way I read it is that the 90 days takes effect from when the software update, in this case iPadOS 17, is released and not from when the deferral policy is pushed out. iPadOS 17 was released September 18, 2023 so 90 days from that date would be December 17, 2023.  So I'm wondering what's going to happen in regards to our Shared iPads updating.  After December 17, 2023 will iPads automatically start updating on their own?  What will happen if I apply a deferral restriction configuration profile?  Will it even make a difference? We are sitting down this coming We

Hi guys, We have has a couple of users determine that company portal stated "device is not managed" when they were on macOS 14.1.2.... BUT when they updated to 14.2 they were fine. Our compliance in jamf is set to 14.1.1 and above so that isnt the issue here.  Has anyone else seen this? it would help greatly! 

I’m trying to push a default browser as an initial setting for the first time that a user logs into their machine. I’ve currently got a package working that installs a preconfigured com.apple.launchservices.secure.plist to each user’s ~/Library/Preferences/com.apple.LaunchServices directory. Right now that package works properly to set the default browser once each user has logged out and then logged back in but I haven’t been able to figure out which service I need to reload in order to get this to work as soon as the .plist is first installed.  Ideally the sequence of events would be:1) User logs in for the first time2) My preconfigured .plist is installed3) A postinstall script loads the newly installed .plist and sets the default browser immediately I pulled the command :/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/LaunchServices.framework/Versions/A/Support/lsregister -kill -r -domain local -domain system -domain userfrom this script https://gi

Subject really says it all.  None of my apps will install anymore.  Other remote commands work just fine (e.g. wipe device).  Any insight?  

Hello I am dealing with a strange issue.  We are testing Jamf Connect and on my test machine when I get up to the step that says "your okta password does not match your local account" It does not take my new Okta password I just had created for some reason it is taking my old Okta password.  

Hello Jamf Nation! We recently released tamper prevention for Jamf Protect. Tamper prevention safeguards the Jamf Protect application from being modified, disabled, or deleted without authorization.   Product Documentation For additional information, see Tamper Prevention in the Jamf Learning Hub. Thank you,The Jamf Protect team

hello all, im trying to fix a compliance error from jamf protect where you need to enable filename extensions does anyone know of a way to do this using a profile/ policy. 

We are using Dockutil along with this script to place an smb file share icon in the Dock. This is working just fine/usr/local/bin/dockutil --add smb://fs1.vcs.local/File Shares --label "File Shares" --position end What I want to do is check whether this item is in the Dock or not before running this command. Is there an Extension Attribute (along with a Smartgroup) to check if an item is already in the Dock?

Some of my employees are using Chromium based browsers like Arc or Brave.I'd like to have the ability to push browser extensions to all browsers used by my employees.Do you know if I can push extensions to Arc or Brave? If not, is it planned?

I've taken the introductory classes on Jamf Protect / Radar and gotten it setup. So far it seems okay, I have it on about a dozen machines. It shows installed, they show up in protect as active, seems to be working. Today on my main test unit, I've noticed I can hit I can't hit our print server due to being unable to authenticate. I also then see I can't see our network printers. I've seen it happen where its lost its trust relationship with AD, so I remove from domain, then try to rejoin. But it can't authenticate there either. Multiple reboots, different browsers, different accounts. Same thing.I start to assume maybe its Jamf Protect, but I connect to another unit that has it, and I'm able to hit the website and see the printers. So it seems just the first device affected. I try using VPN, connecting to wifi instead of ethernet, yet still same issue. No website, no joining domain. I device to wipe and rebuild, once protect is on it, same issue again. I then remove Jamf Protect. I'm

I work for an MSP and one of our clients is a school with around 150+ iPads over multiple campuses.We've recently made the move from Meraki to jamf and with 115 of them sitting in various states of OS versions, I don't seem to be able to get them past the update scheduled stage without getting hands-on with it and manually installing it.They're set to allow automatic checking for updates and scheduled times are outside of school hours. Pushing the install doesn't seem to override this and in a lot of instances, the OS doesn't seem to autonomously update as expected during the set time frame.

 Why or how does the “Clear Parent Restriction” work?We have found that as soon as the function is triggered via Jamf Portal, the student iPad loses the set restrictions of the parent app, but shortly afterwards the set restrictions of the parent app on the iPad apply again.And then you ask yourself, why doesn't the information arrive on the parent app that the "Clear Parent Restriction" command has now been triggered via Jamf?This means that the restrictions of the parent app always intervene.Is this a bug or was it not thought through? Or thought differently?What experiences have you done? Would that be a feature request?CheersPeter

I am having a very strange issue with an AD bound Mac that I am not sure why its happening or how to fix it. We have a user running a 2016 MacBook Pro 15" running 10.13.3 that is bound to our AD domain using the directory bind utility and up until recently have had no issue with it. But in recent weeks anytime this user reboots the machine, whenever he attempts to login to his AD account from the login screen his password is not accepted. But strangely after logging into a local account and logging back out the user is able to type in the same password that wasn't working before and it will allow them to authenticate. This happens regardless if the user is connected to the network or not. Their network account is configured as a mobile account so they didn't need to be connected to the network in order to login. They are also added to the FileVault user list of people that can unlock the drive. We are not sure why this is happening and cannot find anything definitive in the system logs