Get Support
Recently active
Hey everyone,I wanted to know if there is a way to remove the create account option when users migrate their account using jamf connect.
We have a small number of users in our company who are now utilizing python for their daily workflows. With this in mind, we want to ensure that we are maintaining our security standards and see what Python pkgs these users are installing. Is there a way for us to list all of the installed Python pkgs in Jamf Pro?It seems like the native package list does not include these items. I have looked into attempting to build this out as an extension attribute, but am hitting some roadblocks. We are very new to Python, and any feedback would be greatly appreciated. Thank you!
I'm on JSS 9.2 and I setup a smart group last week that looks for "Last Enrollment" using the "Less than X days ago" criteria. I have the value set to 2. I think its matching all machines with last enrollment being 2 days prior to when i setup the smart group. In other words, i setup the smart group on 10/26 and i still a have machines in the group that are 10/24. Today is 11/4. So, i just edited the value to 3 and save it. That caused all the ones that were more than 3 days old to disappear. But, i'm thinking the 3 day old enrolled devices that are there today will still be there tomorrow.
Hi I'm wanting to create a smart computer group in JAMF Pro, for any Macs we enrol after a specific date. This is so I can scope a policy I have created to only deploy to Macs enrolled on or after the date set in smart group. I cant see an option to do this, any advice or help would be great.Thanks
I've got an iPad that just refuses to check in. I've confirmed it's connected to Wifi and unlocked. I've also checked the APN in JAMF and Apple. Any suggestions?
Can someone tell me what Jamf Pro can do that Intune cannot for iOS devices?I am struggling to fin and documentation to support this online. thanks in advance for the support!
I've got users seeing a "Jamf wants to control system events" popup. I think this is from deploying my new Jamf Connect config profiles, but not entirely certain. Is there a way I can have the devices auto-accept this message? Users are confused about why it's showing up.
I'm trying to hide FileVault option from being offered in setup assistant during pre-stage, and when I go to customize what steps I want to show, it's greyed out and I cannot skip it. Currently testing on a Mojave machine, but we also are deploying Ventura machines. Looking at Jamf and Apple documentation it seems I should be able to block this, but I can't figure out why its not allowing me to.
I have searched for a discussion about this and not find this problem, so I am raising a new twist on and old issue. I am trying to advertise some printers in Self Service and cannot get the drivers. I have uploaded the ppd files and I have policies to push out the printers etc. The issue I have is getting the drivers up into JAMF. This is where it gets complicated. HP has decided to not make their drivers available. Instead you can only download an install assistant called Easy_Start.app which will go out and download the drivers for you, install the printer you need, then remove downloaded drivers, thus leaving you without a copy of them to use in JAMF. I need to find a way of packaging the drivers that got installed on my machine so that I can upload them to JAMF instead. I did try reaching out to HP customer support twice for help in getting just a copy of the divers but that seems to be impossible. I have been assured that nobody in the printer industry does that. You cannot do
Hello all,I am running into an issue with Jamf Connect when new users try to log in via the service. Initially, when a new user tried to log in, Jamf Connect would prompt them to sync their password with the service account that we have set up on our devices. I edited the plist to change the Migrate key from true to false, now when a new users tries to log in it will go directly back to our IdP login page instead. Any ideas? Thanks.
In the UI my users are _absolutely_ assigned computers, yet they do not appear in my API response. This shouldn't be a permissions thing. I'm very confused. Anyone seen this before?
Hello Jamf Nation! The Unified Logging feature has been added to Jamf Protect Offline Deployment Mode. Unified Logging allows you to use the same predicate-based filter criteria used with the Mac log command to collect relevant log entries from computers and send them to a security information and event management (SIEM) solution or to a third-party storage solution. For additional information, see Creating a Unified Log Filter in the Jamf Learning Hub. For Unified Log examples, see the Jamf Protect open source GitHub repository. Thank you,The Jamf Protect team
I'm looking to see if anyone has a configuration profile created that gives ALL Adobe Apps access to Desktop, Documents, Downloads, and External Media. We're managing classroom computers with the Adobe Suite and each time a new user logs and launches an Adobe application it asks for access to those folders.Thank you!
Hi,We have a problem with the VPN Internet filter from JAMF Safe Internet.Some students seem to have recently been able to deactivate the VPN connection in the settings.Interestingly, two connections are listed there: "JAMF Trust" and "JAMF Trust Networking"One that cannot be deactivated and one that can be switched off.Previously with JAMF Trust App this was not possible.Where should we start to investigate?Regards
Hey Everyone,I have a question, We notice in our Jamf Connect test that when we push Jamf Connect out to existing users computers they are coming up as standard users for some reason and I am unsure why. How can we have it where all users can be admins?
I am trying to get this script to work for this extension attribute. It's just not pulling anything in Jamf Pro. But when I run the same commands in terminal on the local machine, as root, it works. Any suggestions?
Hello, Our instance was upgraded to Jamf Pro 11.2.1 this past weekend. Now I'm unable to command click (on Mac Chrome/Safari) or Control Click (PC Chrome) links and have them open in a new tab, instead they are opening in the current tab. I do this ALL OF THE TIME. Please fix asap. (this is still working in non-jamf browser windows) thanks, chris
As anyone moved between Josh's LAPS project. And the Jamf implementation of LAPS?I've found myself in a situation where the former was implemented, and we need to move to a system with vendor support.I'm trying to find out if it'll continue to work on the existing machines if I switch the install package policy off.
Howdy!I am trying to install an app called SwitchResX on some Macs to allow more control over resolutions for the end users. All my other apps have been installing fine within Self Service, but I can not get this one to install at all after setting it up in Composer and then deploying it. The only difference is this app does not install in the Apps folder but in the System Settings/Preferences on the Mac. Are there any additional resources or things I should look out for when trying to install this type of application?
Hi, I have been having some issues with using the Jamf Connect Notify Screen feature. I have been using the Notify feature for a few months now and it had been working fine. Recently however, about a month ago, half way through the Notify slides/script, the screen will go black for about 10 seconds and then it will go back to the login screen. After you log back in, the notify slides become out of order and sometimes repeat slides. I have Notify set to run for about 45 minutes to make sure that all applications download before the user reaches the desktop and even with this issue, everything still gets downloaded.Things I have tried doing;New prestage - thought maybe server issueOld prestageNew packageOld package - a package that worked before and doesn’t nowMaking sure no conflicting policies or config profilesMy question is has anyone ran into this issue before and how was it resolved?Jamf is still new to me, so if I forgot any information, please ask and I will provide.I will provid
Just done some test to understand the behaviours of Prestage admin LAPS. Here’s the details:1. Prestage admin is setup with static password. LAPS is off. No Jamf management admin is set up.2. Enrol Mac A3. The admin account is confirmed that it is created in Mac A.4. Turn on prestage admin LAPS.5. Enrol Mac B6. The admin account in Mac B is created. Its password is rotated once enrolled and confirmed it is rotated after being viewed in Jamf Pro 1 hour later.7. Mac A LAPS remains off. Password is not viewable in Jamf and not rotated. This is my test result in Jamf Pro 11.3, not sure if it is the same in your environment? And how can I enable prestage LAPS for Mac A?
I'm thinking this is an easy one but I'm having trouble finding this information. Does anyone know what settings would determine whether or not you get the Delta upgrade of Full App Installer when checking for Mac OS upgrades in the system settings? When I log into a Mac, it serves me the 5-7GB delta upgrade file that doesn't require admin credentials to run. When one of my co-workers logs into the same computer, it forces him to get the full app installer through system settings. My suspicion is it's something to do with update deferrals in our Restrictions config profile, which my account is exempted from. If anyone knows it would be greatly appreciated.
Hello all,Forgive me if this is an obvious thing I'm missing. I'm trying to configure our MAU to automatically force apps to close when the user initiates an update from the popup notification. Right now, initiating an update will hang if the app is open. I believe it will eventually force the apps to close once the final deadline is reached, but users would like the aps to close if they assent to the updates before the final deadline. Any guidance would be much appreciated. Thanks in advance!
Is there a way to either create or assign an admin account as the "management account" after enrollment? We were told by Jamf to turn off that feature in the user-initiated enrollment settings due to the recent issues that setting presents when enrolling (PI113195 - Account Creation is skipped if a management account is enabled under UIE on Mac OS Sonoma).Obviously this isn't ideal but since we've had to turn it off, wondering if we can create an admin policy on newly enrolled machines and somehow make that the management account? Hoping that can be done. Creating the account is easy but unsure if able to tie it as the management account ¯\\_(ツ)_/¯
Does anyone have a script or know of an agent/daemon that I can use or edit to alert for when a user clicks on - request admin privileges on Jamf connect?
Earn a cool badge and Jamf Nation Reward Bytes for your published articles. We’re looking forward to your submissions!