Pretty new to Jamf and Mac management. Have been looking at the patch management process and focusing on browser updates, although what I'm discussing is applicable to any application update, not just browsers.What I'm seeing is some confusion among our users regarding the patching process. For example, user gets notified that there's an update available for Microsoft Edge. User initiates the install process. Browser closes, update begins.My question is: how does the user know the update has finished applying and they can safely re-open the browser? Is there a way to tell the application to restart after an update has applied? Curious to know how other admins/organizations are handling this. Thanks!

Hi all,Next month we will migrate from CA legacy to Device Compliance.The question isWhen the devices migrates to DC, what are the experience from the user side? do they get a prompt to enter their AAD password?If yes, can we avoid this prompt with SSO in place?Thanks

Hey,I'm trying to create a Smart Search, which lists devices with any Software title by Oracle installed. Is there an easier/better/future proof way than just adding every Application made by them? I found "Vendor" as an attribute, but does not yield any results.Any ideas?

The Jamf profiles on our devices (iPads) are set to "non-user-removable". Some of our students get to keep their iPads after they left our school and of course they want to have unmanaged devices without any restrictions and profiles.Is it enough to disown the devices in Jamf, move them to the trash and tell the users to "erase all content and settings"?Or is it neccessary to unmanage the devices first?Or in other words: does disown entail unmanage?

After installing KB5005623 on our Windows print server it seems to have broke printing from macOS to our SMB queues. Windows machines seemed unaffected as were macOS clients printing via LPR. We have heard that uninstalling it will restore printing from Macs. But we do have print servers at 50 sites and each would require an uninstall and reboot. If the Windows machines are still printing I'm wondering if there is something that can be done on the Mac side that will allow them to print as well. 

Hi all,Just wondering what you're doing in terms of macOS and iOS updates? Our Windows workflow is fully automated with a 7-day grace period before the computer will automatically restart to install updates. We really want to have something similar in place for our Macs but also iPhones/iPads if possible as they're lagging behind everytime a new update is released.Right now what we're doing is trying to educate personnel and push them to update their devices which is not ideal to say the least...Is there a way to force them to update without interrupting their work by giving them a grace period? Does anyone have any suggestions or workflows they currently use for this that they'd like to share?Thanks in advance!

I'm using Jamf Pro with some Macs and for some reason I have trouble getting a few M365 apps to update; specifically the Mac App Store versions of Microsoft Word, Excel, and Powerpoint. Interestingly, the Mac App Store versions of Outlook and OneNote update fine. I know the apps having issues are larger sized, but they should still work. I have tried removing and adding the apps to Jamf, removing the VPP option, and a few other things. I have also read about others having the same issue with Mac App Store M365 apps not updating.Anyone experiencing this issue? Any suggestions on how to solve the issue?

We've got a couple devices that after installing the latest updates of Sonoma are still showing RSR version (i.e. 14.1.2 (a)).  Does anyone know of a way to get this back to showing a true version of the OS that is running on the device?

Seems to be happening with every package I create and try to deploy. Attached a log below: Sending Wake On LAN command...Opening SSH Connection to 152.146.193.xxx...Accepting authentication method...Authenticating...Successfully authenticated.Verifying Computer's Identity...The MAC Address has been verified.Checking Operating System Version...Running Mac OS X 10.8.4 (12E55)Verifying /usr/sbin/jamf.../usr/sbin/jamf is current (8.7)Verifying /usr/sbin/jamfvnc.../usr/sbin/jamfvnc does not exist.Verifying /Library/Preferences/com.jamfsoftware.jamf.plist...Preparing Policy...Executing Policy 2013-07-15 at 11:20 AM | user | 5 Computers...Mounting afp://server/CasperShare to /Volumes/CasperShare...Installing Lexmark X945e Drivers.dmg...Error: An error occurred attempting to mount the package "Lexmark X945e Drivers.dmg".Unmounting file server...Submitting log to server...Finished.

Hi!Our users can use a specific guest WiFi to enroll their devices. This WiFi does not have access to any other sites than the ones needed for enrollment. The correct WiFi is rolled out via configuration profile.Is there a way to remove the guest WiFi automatically after the correct one is installed via that configuration profile? 

Hi,Does anyone know how to set up a policy thta triggers every 2 montths (or a specific time)?I want to set up a policy that tiggers a script that moves all of the files of the download folder to the trash (i already have the script), that is cus the computers are used by students that donwlaond multiple files for their projects, but rather that delete those files at the end of semestres y prefer to set up a policy that triggres the scrpit once every two months.Is it possible? Thanks in advance.

Hey Everybody,  I notice on my test machine where I am testing Jamf connect that the user always ends up as a standard user. How can we make it so that the user is an administrator? 

I'm curious if anyone has an extension attribute or script to detect the presence of homebrew anywhere on a device(not just the default install location)? Thanks for any help!

Hi all, Looking for if anyone has had this issue in the past and how it was resolved if so. This week I updated our Jamf Pro Instance to 10.43.1 and have been having issues with enrolment ever since. It's worth noting our environment is hosted On-Prem and in an air-gapped network so has no access to the internet whatsoever. If I try and enrol a new device via User Initiated Enrolment and access the enrolment URL, I am greeted with the login window as normal. Any LDAP user is allowed to enrol devices. The initial stages of the process work as normal, until the final stage where the 'Download and Install this package' message is displayed. If I am trying to enrol with a standard LDAP user account, when pressing the 'Download' button I am redirect to '<Enrolment URL>//flatpackagedownload and a message is displayed 'HTTP Status 403 - Forbidden' and I can't go any further. The stranger part is if I initiate the enrolment using an Admin LDAP user, when pressing the 'Down

I had a Mac that lost its connection with JAMF. I ran the following command on the machine, sudo Jamf enroll -prompt, and the machine started reporting into JAMF. The issue is that it will not push down any new Configuration Profiles and the "Management Commands" option is missing. I have tried to run the following commands to see if I could resolve any of these issues but nothing helped.sudo jamf -removeFrameworksudo jamf reenroll -promptsudo profiles renew -type enrollmentI also tried to do a manual enrollment but since the old "MDM Profile" is still on the machine it will not install a new one and I can't remove the old "MDM Profile" since it was enrolled with DEP. Is the only option I have is wipe the device?

Hi folks,I was looking through the logs on several iPhones in Jamf Pro today and noticed a pattern in many devices. I see a long list of apps installing themselves on established iPhones. Then I look back a few days and see the same list of apps installing themselves. These are the same apps and app versions, installing themselves over and over again. Of course during those times, the user has several icons on their home screens that are busy reinstalling, and that could make some unavailable for quite a while if outside WIFI range.Any thoughts on why this would be happening? I checked multiple department affiliations, so it isn't just one department profile. It's almost as if the device is not acknowledging the installed app list and thinks it needs to keep installing apps repeatedly.Thanks in advance for any ideas,Rob

Hi Everyone,I put together a policy to allow users to self-initiate MacOS updates from Self Service without the need for a local Admin to authenticate using the erase-install.sh tool ( https://github.com/grahampugh/erase-install) However one issue in our build is that when updating MacOS to a newer version, it breaks Jamf Connect as noted here  - (Re-enabling_the_Login_Window_after_a_Major_macOS_Upgrade)I'm bouncing around a few ideas but I'm wondering if there is an easier way to have the system, upon reboot completing a MacOS update, automatically re-enable the login window.Its important that we retain the flexibility of having users initiate the MacOS update on their own time and while there are many ways to push the jamf connect fix, they lack the automation i'm hoping for. Thank you in advance. 

Has anyone else seen this? We have seven buildings with three grades using iPads, and around two classes per grade per building. 28 iPads per class means we had to touch a lot of devices. About 1000 iPads.  We have a Configuration that includes the SSID and password, so what happened? It only happened to the iPads that have a more restrictive Configuration Profile.  Has anyone else had a similar experience? Bill

I tried uploading new packages, old packages I knew that worked and nothing is uploading today. So frustrating! Does anyone know what's going on?Just getting this error:Upload failed: undefined

I have "purchased" the free app Record It from ASM and then assigned the app to a static group.  This app has an in-app purchase option to allow longer recording time.  We do not need the longer recording time, so we do not plan to make the in-app purchase.  When the student installs the app from self service they are asked to verify their Apple ID.  The Apple IDs are managed, so the students are not able to complete this.  I can go to settings and enter the password on the individual iPad, but the app still does not install.  When I look back in self service, the app is just spinning.  If I close self service and open it again, I am given the option to install the app.  Again, it only spins and does not install.  Any suggestions would be greatly appreciated as I am new to jamf.

Hello Folks, We have stumbled upon a weird one in our environment. We have devices that have updated to macOS Sonoma (14, 14.1, and even 14.1.2) that are having issues accessing certain websites via Google Chrome—Safari is working as expected. It is not our entire fleet of individuals, and what is even weirder is some of these folks are able to connect to these services when on our office wifi, but not at home (various ISPs). The websites that we are seeing issues with are Atlassian-run, notably Confluence and Jira. This one is really kicking us in the behind. Thus far we have completely nuked Google Chrome (Library file, etc.) and reinstalled with it prevailing. Looking around online we see a handful of similar issues but it looks like either there is no resolution or people just stop replying to the Reddit threads, etc. We reached out to Atlassian just to see what they would say and unfortunately we were simply asked to just restart our endpoint devices having issues.

We just switched to JAMF Now from Apple Business Essentials. In ABE the users signed in with a managed Apple ID, which allowed me to centrally view which employee was assigned to each device in ABM. In JAMF Now, all I can see is the list of iPad devices with serial numbers.What is the best way to track device assignment in JAMF Now?Will this require tracking manually in a spreadsheet? We have around 75 devices.

Free and Paid Options for Capturing macOS Screen Recordings Introduction Documentation. Takes. Time. A lot of time. Including screencasts in your documentation not only enhances the final product, but is frequently the best way to communicate the often complex steps required to successfully complete a given task. The following are free and paid options for recording the screen of your Mac. Continue reading …

Hi there, Does anyone have a script to sign out of Apple ID? We intend to restrict Apple ID usage and have another one to do offline backups of apps that are linked to the Apple ID like Notes, Sticky Notes etc.

I'm looking to make a set of options available to users via 2 policies in the Self Service app. 1 policy should allow the user to set a static IP address to the interface - I've written a script that inserts dummy values for now - this script runs successfully and alters the network settings as expected: #!/bin/bash # sets test IP settings for Ethernet networksetup -setmanual Ethernet 10.10.10.10 255.0.0.0 127.0.0.0  The other policy should set the network settings back to DHCP for that interface - I wrote a script for this, which does not work: #!/bin/bash # Set network settings back to DHCP networksetup -setdhcp Ethernet  This DHCP script reports as having run successfully (exit code 0) but the network settings on the device haven't changed. If I run the single line with the networksetup command locally, in Terminal, it completes and changes the network settings as expected.If I push the script out with a policy (as opposed to making it availab