I'm looking to make a set of options available to users via 2 policies in the Self Service app. 1 policy should allow the user to set a static IP address to the interface - I've written a script that inserts dummy values for now - this script runs successfully and alters the network settings as expected: #!/bin/bash # sets test IP settings for Ethernet networksetup -setmanual Ethernet 10.10.10.10 255.0.0.0 127.0.0.0  The other policy should set the network settings back to DHCP for that interface - I wrote a script for this, which does not work: #!/bin/bash # Set network settings back to DHCP networksetup -setdhcp Ethernet  This DHCP script reports as having run successfully (exit code 0) but the network settings on the device haven't changed. If I run the single line with the networksetup command locally, in Terminal, it completes and changes the network settings as expected.If I push the script out with a policy (as opposed to making it availab

Anyone gotta script that will automatically download the latest version of Dropbox? As the app is constantly updated, I'd like to have self service and enrollment policy that will always grab the latest version, but their download link does not lead to a specific DMG or package. With other apps I do this via CURL, but that doesn't seem to be an option here. https://www.dropbox.com/download?os=mac

Hello Everyone, Not sure why these config profiles I am using with Jamf connect are failing. Does anyone have a way to remove the failed commands? How can I run JAMF Connect and have no failed commands as the outcome   

I work for a small organisation with a dozen or so Macs and a couple of Windows machines. I think it's likely we could go all Mac soon as I hate having the mix.I need the facility to remote lock/wipe if a device is lost or stolen. I know that there is functionality in the AppleID but use of the AppleID is not universal. Most devices we own but some are BYOD.Our MSP is pushing us hard to adopt Intune which means a licensing uplift and a 'project cost' to set up the policies. We already have patch management through NinjaRMM.I'm thinking we could just use Jamf Now, licensed at $4 per device per month. Even if the MSP doesn't want to manage it, I could manage it myself.Does that sound like a sensible suggestion?

Hi JAMF Nation!I just wanted to start a discussion to see what others might be using. We are considering possibly deploying some Mac Apps (Full and Menu Bar) that would be useful for our end users or us as an IT Dept. One example we have deployed is the Support app in the JAMF Marketplace. This app gives our users and IT a quick overview of the machine, and it's all run from the menu bar. Just wanted to see if there are others out there that could be of use. Thanks!!

Hello all we are running into an issue where users cannot log in to their machines after upgrading to Sonoma. Its just a grey screen that shows a username and login prompts at the bottom of the window. Other times a black screen and we cant get past that. Anyone also seeing this when using JC and Sonoma?

Hello, have a problem with the performance on several MacBookPro with Apple Silicon. Simple actions like taking screenshots or opening some tabs in settings take up to 10 seconds after Jamf installation. The problem appears on Macs with high uptime like 23 days and everything works fine after reboot (everything works fine for about a week). I am not sure if anyone have such problem, but I am struggling to find the reason for this to happen. 

Good Morning, I know I will catch some flack for still binding to Local Active Directory (working on getting ready for JAMF Connect) but any of our macOS devices running Sonoma are not receiving password expiry notices on login or prompting for password changes on initial login with temporary passwords. I know there was a bug with macOS at release, but that is supposedly patched? The bind itself seems to function as normal for initial local account creation.  We're not doing anything fancy with the binds either. No UNC path, home drives, or drive mappings.  What could I be missing?     

Safeguarding personal information is a fundamental commitment to which we adhere at Jamf. Safeguarding isn’t just securing the data entrusted to us, but also maintaining compliance with various privacy laws and regulations. In our efforts to demonstrate our commitment, we are providing you all with the following important updates:   Jamf is certified to the EU-U.S. Data Privacy Framework, the UK Extension to the EU-U.S. Data Privacy Framework, and the Swiss-U.S. Data Privacy Framework. As part of these initiatives, we recently updated our Privacy Policy. Our current Privacy Policy is publicly accessible on the Jamf Trust Center Privacy Page or by clicking here. We’ve successfully communicated these updated changes to our valued customers, ensuring their awareness of the modifications.   If you have any questions or concerns, don’t hesitate to contact our Privacy team at privacy@jamf.com. For more information about our Privacy practices and to access a detailed overv

This is my script I run for new installs:#!/bin/shsudo echo $4 > "/Library/Application Support/JAMF/Waiting Room/com.sentinelone.registration-token"sudo /usr/sbin/installer -pkg "/Library/Application Support/JAMF/Waiting Room/Sentinel-Release-23-1-3-6816_macos_v23_1_3_6816.pkg" -target /This is my script I run for upgrades:#!/bin/bashsudo echo $4 > "/Library/Application Support/JAMF/Waiting Room/com.sentinelone.registration-token"sudo sentinelctl upgrade-pkg "/Library/Application Support/JAMF/Waiting Room/Sentinel-Release-23-1-3-6816_macos_v23_1_3_6816.pkg"I have two policies.  One that is Cache.  One that is installed Cached.  That is for both scenarios above.  I am getting nothing but failure.Is that something wrong with the scripts?  I don't have my error messages because I keep flushing them, but the cache one fails but I see where the file fully downloads.  That's all it's supposed to do.  The second script is supposed to install that file.

Hi, We've recently moved from an on-premises server to the cloud.  We are using on-premises Active Directory for LDAP services and were hoping to move To Azure AD at some point.  We brought this up during the migration to the cloud and the JAMF tech who was assisting with the migration said that there was no path to upgrade from where we were with on-premises AD to where we wanted to be with Azure at that time. Since then, I've been looking around the forums trying to get more information.  In the older documentation (up to v10.29), I can see a blurb that says "To ensure your existing LDAP workflows (e.g., scoping or user accounts and groups) continue to work correctly, you will need to migrate your configuration when the migration assistant is available in a future release of Jamf Pro. Adding the Azure AD integration prior to migration may break your environment." This warning doesn't appear in the documentation after v10.30.  We're in the cloud on v

Hi guys,im new to jamf and actually having a problem with a device which i am using for testing.Actually its not able to get this phone into jamf....it worked once (27.11). For documentation purposes i startet the process again. It shows up in Apple Business Manager with the latest timestamp (today 4.12). I switch MDM server to our server but nothing happens in jamf. It still keeps entry in pre-stage from 27.11. Thats probably the reason why the process cannot be completed again. I cannot find any option to delete a single device from pre-stage. The only option i get is to delete our pre-stage profile.Any idea what i can do?Greetings Frank

Computers will not enroll today, when we enter any username and its password (Active Directory) it gets stuck 'retrieving enrollment profile' then returns to the login screen as if the username and password are incorrect, no errors. We verified usernames and passwords (including reseting passwords in Active Directory) and used multiple accounts with the same results. We do not recall any notifications for service interruption or have seen any outage reports as of today 11/29/23.The last time we were successfully able to enroll a laptop was 11/20/23

Hai community,I am considering switching from Windows laptops to a Mac provided by my organization. However, they have informed me that the device management software, specifically Jamf, which they intend to install on the Mac, may significantly slow it down. I value Mac's performance and reliability and want to make an informed decision about this matter. Is it true that installing Jamf or any other device management software on a Mac could noticeably affect its speed and overall performance?Thank You.

Is there a script or EA we can use to see when the last time Jamf Connect checked the sync status of the password and what the results were?  

I have a test JSS server that was running 9.22 and installing the Wireless configuration profiles so I could start testing my profiles and policies to make sure everything would be working when we upgraded our main server to version 9. Everything was working fine until I upgraded my test JSS server to 9.23 then the wireless configuration profiles would fail saying "Some required information in the profile is missing." I've recreated the JSS certificate, un-enrolled and re-enrolled the computer, tried different fresh installs of the OS, I also downloaded the profile to install it and it still came up with the same error. This configuration is scoped to all computers. I'm testing a user initiated enrollment, so once the enrollment is finished the computer can then access our wireless. The machines I've tested this on are a MacBook Air (11-inch Mid 2013), an iMac (21.5-inch, Late 2012), and an iMac (Late 2009). The MacBook Air is running 10.8.5 and the iM

Hi all,I'm trying to setup BYOD User Enrolment. We already use Jamf Pro with a set of school-issued iPads, and have iPad licensing. Now I want to add BYOD MBPs to the equation...Fairly simple question, but I'm having trouble finding the answer: What license do I need for Jamf Pro to enrol both iPads and MacBooks? Is BYOD User Enrolment still free/unlimited, or was that just free during the pandemic?Thanks.

Hello everyone,I'm currently encountering a difficulty and would be grateful for your assistance. I'm attempting to determine which clients have iCloud Drive activated, particularly with the synchronization of desktop and documents.I've conducted thorough research online and within this forum, but it seems that the solutions provided are not applicable to the newer versions of macOS.Could anyone offer guidance or suggest an effective method for the latest macOS versions (Ventura, Sonoma)?Any help would be highly appreciated.

Trying to figure out if Protect can provide similar insights to system, file, network events that Microsoft Defender ATP can provide.Have just stood up Protect and wired it up to pass data into Splunk, but feel that this does not give the same level of insight into what is happening on the device as compared to ATP/Windows.ATP has a timeline feature that allows you to drill down into each step a user makes on their system. This is crucial for our InfoSec team to be able to analyze alerts.We are hoping that Protect can give us more insight into what is happening on our growing Mac fleet. Any advice is welcome and appreciated.

Hey everyone!Thanks for taking some time to look over this post. I am currently working on getting a webloc file deployed to each user's desktop on their Mac. This is turning out to be more difficult than I imagined. I was wondering if anyone has had any experience with deploying something like this?!I have tried creating a package that stores the weblog file in a temp folder, but I can't figure out how to get the file copied over to every user's desktop folder. If anyone has any suggestions, I am open to hearing them! Thank you!

Hello I was wondering if there was any way to disable the automatic run of safe files in safari using a configuration profile/policy, I can't find a setting for it and need to disable it for compliance reasons.

Disclaimer, while I work for Code42 software, these were built for internal use and are not part of the product. Hey, I wanted to share some extension attribute scripts I created for Code42 Incydr (Professional, Enterprise, Horizon, and Gov F2. - or more generically the Code42-AAT.app). A shoutout to @MLBZ521, as I used some logic from their scripts. A bit more specifically. there is logic built into these for local logging if you need that.  I hope others can find these useful.  First is a script to validate that the Configuration Profile that is required to run the app is in place. This is a great pre-deployment check to make sure the application will run properly after install.  #!/bin/bash # set -x ############################################################################################################## # Script Name: incydr_mdm_check.sh # By: Perrin Bishop-Wright / Created: 8/16/2022 # Version: 1.0.1 / Updated: 8/16/2022 / By: PBW

Hello All, One mac user reported that he is not able to sign into Nomad, how can I do the troubleshooting to find the cause?Others users are able to sign into Nomad, so it seems like related to mac device not related to deployment through JAMF. Any idea will be appreciated. Thanks!

Hey everyone, If you're like me you're probably having trouble tracking down how to get Jamf Remote Assist Session logs/details. I did a quick writeup on how to get some of the information when you want to audit the logs. It's a bit clunky but overall much better than nothing.

I want to know how SUPERMAN works and how I will deploy in Jamf.I built a policy and added the SUPERMAN script and added the script parameter in my policy, I executed on mac But I dont know how it works for Apple updates, how it will evaluate the pending updates and install it on end point.Should I create another policy to evaluate the pending Apple updates and deploy on end point?