How can I force pin an extension in both Safari and Firefox for our users?   Additionally, how can i disable the built-in browser password managers for Safari, Firefox & Chrome for our users?            

I am attempting to deploy the AWS VPN Client app to computers logged into Standard user accounts. After opening the application and then selecting the Connect button, MacOS 14.3.1 requires the user to authenticate using administrator credentials. Canceling the credentials prompt generates a dialog window, “AWS VPN Client Helper Tool is required to establish the connection” When testing, I can connect the VPN to the host when entering the admin credentials. Once the admin credentials are entered, a new item named “AMZN Moble LLC” appears in System Settings > General > Allow in the Background.  I need the VPN to connect without the Standard user entering the admin credentials. The policy configuration:  An installer script runs after the package is deployed:#!/bin/sh for i in `ls /Users |grep -v Shared`; doperl -pi -e s/REPLACE_ME/$i/ /Users/$i/.config/AWSVPNClient/ConnectionProfilesDone   

Hi,  I have an extension hosted on Plasmo and I'm having issues deploying it to Chrome using PLIST.  When I try to install the extension I get this error "crx required proof missing"I found a few theads, like this one https://community.jamf.com/t5/jamf-pro/need-help-with-deployment-of-google-chrome-extension-using-jss/m-p/219275But still can't get it to work.  Any help would be much appreciated .Thanks

We have been using the method of converting pre-installed apps on iOS/iPadOS devices from unmanaged to managed for some time now. However, in 11.3, we see that these conversions no longer seem to happen even though the app is correctly scoped. Is this a new bug? Has anyone else noticed this?

I have been fighting composer for a couple of days and what's odd, composer works with .dmg files. I can create .dmg files, but if I choose to create a .pkg file, it fails. Further, if I try and take an existing, working .pkg file into composer and attempt to convert it to source, it fails to convert. I have uninstalled and removed all preference files. I have tried this on a VM, my Mac and another Mac. We have tried three different versions of composer. They are all doing this. This makes me believe an OS update could have borked composer. Anyone else having troubles lately?

I need help with a script to change computer name. I am using the DEPNotify Starter 2.0.1 script. I am using the Popup 3 label for the list of University Campus, Popup 1 label for the building, and would like to use the last seven of the serial number. If Campus is New York, and the building is Central Hall and the serial number of machine is 1234567, I would like that translated to NYCH1234567 I am currently using the script as a policy in DEPNotify policy array with a custom trigger. I would like to make it that as the User/Tech selects their Campus and the Building the device is assigned to, that it will use that as part of the computer naming along with the 7 digits of the serial number. !/bin/shset serial variableserial=/usr/sbin/system_profiler SPHardwareDataType | /usr/bin/awk '/Serial Number (system)/ {print $NF}'appendserial=echo "${serial:5}"fordhamname=APPLE${appendserial}/usr/sbin/scutil --set ComputerName "${apple}"/usr/sbin/scutil --set Loc

Happy Tuesday everyone!I've got a question hopefully some of you have encountered and overcome.We have a few computers with an account (local admin account) that have enabled secure tokens.  Unfortunately, we do not know that account's password (inherited problem).  Does anyone know if I can somehow leverage Jamf Connect/Jamf Pro/magic to create a different account (with an enabled secure token) or somehow change the password of the account with the enabled secure token?The machines aren't FileVaulted, and are still managed and talking to our JSS, so I can push whatever config profile/policies might help.Thank you!Nick

Hi all, try to make an PPPC with the PPPC Utility for the Wacom Center but one thing wont work and that is the com.wacom in Accessibility what am I missing? I control click on the file for the exact location add in the Utility and upload it to Jamf. (Two other settings in Wacom works but this one keeps asking for the password) thanks 

Hi Everyone. We set up our AD CS to issue certs for our devices in the DMZ as per documentation and all is working fine.We now have a requirement to not use that configuration however we need to use Azure Application Gateway as the load balancer solution. Has anyone achieved this?We have been testing and we had to create brand new certificate through our PKI infra however we are getting nowhere. The only encouraging thing is that we see the request hitting the load balancer and it also registers in IIS however it seems empty. I am sure there is something going on with the certs there but i can't for the life of me pinpoint where the issue is.AD CS is obviously creating self signed certs and if we use those certs the leaf there is no Root CA for that so it fails on the back end.Any insights on how to recreate those certs ? Technically it should be possible to make it work, is this correct?Thank you.

When did the Jamf ID password policy change?I could not log in to my jamf account today.It looks like the password needs to be changed to at least 15 characters and include upper and lower case letters and numbers. Thanks.

HelloWe have three Ipads that are running an app in single app mode. It needs to remain in single app mode as it's a health app so we don't want students having access to the Ipad. There are a few other challenges. If the screen locks, the app logs out, so we can't have the screen lock for at least 8 hours. The cases that the dept bought block access to all the buttons. I had hoped that Jamf might be able to have a command or script that would power down the Ipads or put them to sleep at 5:30pm and wake them up at 7:30am but I'm not seeing any functionality like that. Any ideas? 

Hello, I am trying to upload a package for a document camera application. I created a package via jamf composer, I tried uploading the package to jamf pro to create a policy to push the app, but i receive an error saying "upload failed: undefined" Did I do something wrong when composing the package?  Thanks

When using the new software update feature (BETA), how do you know if something is happening? If I understand this correctly, even if you choose to "Download, update and install", this is done through DDM, am I right? Is it also so that declarations are "invisible" in the command history? If yes, how do I track deployment progress? I selected a group that contains iOS 15-17 devices. Even on the iOS 15 devices, I can't see any ScheduleOSUpdate commands. Shouldn't there be such commands as DDM software updates aren't available in iOS 15 or am I missing something? Same thing for macOS BTW, I chose a group that contains macOS 12-14 machines, still no visible trace of activity there.

I need help.  Hello I am looking to deploy Jamf Connect to existing users computers.  We have Config profiles and policies setup and scoped to our test machine.  But when we scope our test device nothing happens no matter how many sudo jamf policy I run jamf connect does not appear on our device.  There is also the option with Mac Apps which seemed to work just took a while for it to reach our test machine. The only thing with the Mac Apps the menu bar appears which is good but it does not have our company logo when we sign in through the menu bar it has the jamf connect generic logo. 

I recently had a test MacBook Air on which I had deployed Jamf Protect and also used Jamf Compliance Editor to generate CIS Level 1 controls for macOS Sonoma - all via Jamf Pro.Jamf Pro, Jamf Protect and the CIS Level 1 controls had all been successfully deployed and were operating on this laptop.As mentioned in the subject, the laptop battery ended up going flat. I therefore had plugin it in for a while to get enough charge to turn it on. Nothing unusual so far. The laptop as a result had also had its clock reset, again nothing unusual so far.When booted the Mac did not do a successful NTP sync to reset the clock correctly. This could be argued as being unusual. I am presuming this is because it was trying to do a secure e.g. SSL connection and because the clock was years incorrect that failed - certainly the web browser failed to load websites because of this and also the Jamf Pro agent was not able to sync to the Jamf Pro server for the same reason.Now where it gets more interesting

We have had a cloud instance for a while now, and we've only been managing machines in our region, we're taking over the management for another region soon, and would like to use Sites to manage those. Having created a new site, one for ourselves and one for the other region, I see that all existing config, devices, policies and settings fall under the Full Jamf Pro default site. We haven't yet added any settings for the new region or any machines, so right now I'd just like to move all existing data into the site created for our region. Does anyone have a checklist of all the things that need to be attributed to a site? Or any other clever ways of doing this?   

Hi,We need to deploy a browser extension for a software called Torii.For Chrome, it was pretty straight forward.However, for Firefox, I was unable to follow along the documentation here - https://support.toriihq.com/hc/en-us/articles/5148326594203-Deploy-the-Firefox-ExtensionIs there any documentation on how to deploy firefox extensions with Jamf Pro? I couldn't find anyThanks!

Is there any official way to study/review the Jamf 200 course materials without actually being present for the class? I'm asking because I've taken the course before but didn't pass the test and I want to be more prepared the next time around. I am planning on taking the course but not until probably next year at this point. Thanks everyone!

Hi,I am unable to block Google Drive app using Restricted Software in Jamf ProI have tried "Google Drive", "Google Drive.app", "Google Drive*" for process name but none of these works.Previously, adding "Backup and Sync" for process name was blocking the app.Please let me know if you have any suggestions or workarounds.Thanks!

Hi,We are having a weird issue in our environment. Few users are not able to complete Intune registration. While triggering Intune registration from self service app, Company portal is prompting for authentication in a loop. After 3 times, it would eventually fail.troubleshooting tried so far:-Deleted device from AAD-Deleted device from Intune-Removed company portal cache and also re-installed company portal app-Deleted the device from JAMF, removed MDM profile and re-enrolled the devicePer sign-in logs in AAD, there is a success for company portal sign-in. Just wondering if you have experience similar issue ? Any troubleshooting would be helpful. Thanks! 

I have a task assigned to me. install Square app on 1 device in Jamf Pro. I've added the application to Apple Business Manager. What is the next step? I just need to push this app to one device in Jamf Pro. I don't yet see the app available in volume content and understand it will take another sync cycle? After it does sync. what are my next steps?  Apologies. Newbie to Jamf pro here.  

Hi everybody, Please, Can you tell me if it's normal that I can't boot on Apple Internet Recovery with the adapter Belkin white USB-C/Ethernet (F2CU040) on MacBook Pro (2017). it's working with the same adapter but with MacBook Pro 2016 versions ... We've tried with black Dell adapter multi-ports (DA-200) too but with no success (on MBP 2017). Thanks for your help.

Hello! I manage my school's Jamf Pro instance. My users would like to use the Shortcuts app to create custom shortcuts, but when they open the app they get this message:"Restrictions Enabled - certain apps, features, or services can't be seen or used when Restrictions are on. To use this app, turn Restrictions off."From what I can tell, I haven't restricted the Shortcuts app at all, and all other apps I've deployed with SelfService work fine.Does anyone know which setting I should change to fix this? Some googling has suggested the "Allow Unrestricted Shortcuts" setting but from what I can tell that setting is deprecated, or at least no longer showing in Jamf pro. Thanks a lot! 

This is such a weird thing, and it's likely a glitch of some kind, but I would like to see if there is a workaround or a way to prevent this from happening. This happens only on computers with a brand-new install of Sonoma, not any earlier OS versions. Once I connect to the internet and allow enrollment to begin, the computer completely blacks out and cannot be resurrected without a nuke and pave. If it weren't for the touch bar lighting up, the computer looks and acts completely dead.Whenever I install an earlier OS, it works exactly as it should. Enrollment completes and the user has a fully functional computer. They can then upgrade to Sonoma without issue. It doesn't black out the computer. Has anyone else experienced this? The first time it happened, I chalked it up to it being an older computer, and didn't really think much of it or investigate. But it has now happened twice more on brand-new machines. 

Hi everyone,I’m converting from DEPNotify to Jamf Connect’s native Notify function and I am struggling with Jamf Connect not executing my script, instead displaying the generic “Reticulating splines Again…” message. I have rebuilt all configuration items multiple times to no avail and have opened a support ticket with Jamf but their recommendation of a metapackage with permissions that do not match their documentation did not resolve the issue. I feel like I must be missing something and hope that someone here can point me in the right direction. Any assistance you can provide is greatly appreciated!Configuration:-macOS 14.3.1-Jamf Connect 2.32.0-Using unmodified sample script found at jamfconnect/scripts/Notify/Jamf-Connect-Notify-Script.sh at main · jamf/jamfconnect · GitHub-Sample script packaged with Composer, signed with Jamf Pro built-in CA, and deployed to /Users/Shared/jamfconnect/Jamf-Connect-Notify-Script.sh-Both /Users/Shared/jamfconnect/ folder and Jamf-Connect-Notify-Scrip