Hi everyone,I'm trying to use MacOS Sonoma through the public Beta but with Jamf Connect it blacks screen. As soon as my macbook air M1 2020 boots up normally i get the jamf connect page. Now with sonoma i get few seconds of mouse and after that it black screen nothing is happening. i tried reinstalling sonoma and jamf connect not working. i tried to reset the authchanger through the terminal in recovery mode but it doesn't work. Do you have any idea?Thanks

Hi, Thank you in advance, Need script to change local admin name and password or only password in Mac system from Jamf. I have created policy to change admin password. also I tried with the script. but its not work for me.    

We're currently running Jamf Pro 10.48.2 (on prem) to manage our macOS estate (mainly MacBooks) and looking to update to Jamf Pro 11. We held off due to the implementation of LAPS, however we're now looking to complete the prep work to make use of that functionality.At the moment macs are AD domain bound and users get a mobile account. We don't currently make use of any Automated Device Enrollment or Pre-Stage Enrollment, but instead use User Initiated Enrollment with some manual pre-provisioning steps prior to device enrollment. One of those steps is the creation of a local administrator account. The way we provision and enroll will change in the near future when we move to Jamf Cloud and Jamf Connect. FileVault is enabled as part of the enrollment process, so the original administrator account created gets a secure token, as do subsequent users that log in.In Jamf UIE settings, the management account is configured, but with the same credentials as the local account that gets created.

The top actually says everything.We have th issue, that some parents set up their IPads with Apple Child IDs and gave it restrictions, which are active during school time. Is there an option to disable thos restrictions when the IPad is in school? Thanks

HelloI have macOSc Monterey in my companyI want to configure 802.1X ethernet (based on computer authentication), my macOS are bind to ADI have already made a configuration that works but the connection is not automatic.Is it possible to configure this connection so that it is launched when the mac starts?thanks

Hello everyone,  I wanted to know if there is a script out there that can essentially have a user go through JAMF Connect and have their computer information populate into our jamf pro server with their macbook name changed already or have their user and location information filled in  pretty much on my test mac where i am testing JAMF connect i go through the jamf connect window to login and on jamf pro my computer is there but it just says Macbook Air i would like for it to say jsmith-mac for example versus just Macbook Air  Is there a script out there that can enable us to do that? 

Hi Folks Has anyone had this issue when changing our local admin password via Jamf in the Local Accounts payload and choose 'Reset' I get an error stating 'Error resetting the password for user' I am using Jamf Pro 10.27Tested on macOS High Sierra & Mojave, just keeps failing. Has anyone else had this issue or have some sort of fix

We have an issue where some machines keep prompting the user that their IdP password does not match their local password and are given the option to sync. However, when you hit sync, the login popup is completely greyed out (as shown below).In all cases, we have verified that the password is in fact the same. I'm assuming this is cached somewhere and maybe needs to be cleared? Has anyone seen this?

Hi everyone,i am trying to deploy NoMAD via mobileconfig but I can't figure out how to tick the box for using Keychain. I have enabled all keychain settings I could find but without luck.. Thank you! 

Hey Everyone, I wanted to know if there is a way to differentiate admin and standard users when they login to their computer through jamf connect  I noticed when i log in i am set as a standard users is there a change i can make to have it where some users are standard and some are admins? 

Just checking to see if anybody has come across this. It's only happening on 1 out of 355 Mac's in our environment. When the user goes to our work homepage or any work-related page that uses SSO he gets the below. He say's if he connects to the VPN it works sometimes. I removed the info from the message. We have a tool rerun that supposed to reset SSO, but that doesn't seem to work. We use JAMF Cloud hosted on AWS.<Error><Code>NoSuchBucket</Code><Message>The specified bucket does not exist</Message><BucketName>xxxx</BucketName><RequestId>xxxx</RequestId><HostId>xxxx</HostId></Error>

We removed JAMF from a laptop but it failed to remove the MDM profile. Now, without JAMF on the machine, what is the best way to remove the profile?

We are trying to use Jamf Teacher (v6.2.9) to only allow certain apps during a Leason. When we run a pre-configured Leason, only some of the apps set to be allowed appear on the student iPads.Example: we allow MS Teams and Garage Band apps, but only MS Teams app appears, the Garage Band app is nowhere to be found. I have tested this on iPads with iOS 16.7.2 and 17.1.0, yet many of apps (all on the latest version) do not appear on the Student iPads when set to Allowed.

When a user with a managed iPad starts Self Service, the app complaints it should be linked to a Jamf Pro-server. And you can't do anything with the app. See screenshot (Dutch localization):This is weird, because the iPad is listed between the devices in Jamf Pro.I do notice two pending commands from yesterday and the day before yesterday (inventory update and a time zone settings update).I tried to quit self service and relaunch: did not work. I also switched the iPad off and back on.What could be wrong? Edit: could it have to do with the license? I get this notification now (I'll ask my boss about this):Device count exceeded Purchase additional licenses.

Greetings,Just inquiring about User and Groups in Jamf Pro. I am getting around to creating groups for the few users we have in Jamf Pro, no we have not hooked into our AD or Azure AD instance due to convoluted issues which at some point I hope to deal with... Anyway, in terms of permissions if a User Group has tighter permission set than the user assigned to the group, I am assuming the tighter permissions wins out?So as an example if a user has the ability to edit Smart Groups but the group they are assigned to denies that, then the user will not be able to edit Smart Groups?Thanks,-Andrew

In an effort to document our environment, I'd like to get an export of the config profiles and what settings are in place and pull them into an excel document or something similar for reference.  Does anybody have any thoughts on how to do this? 

since implementing jamf connect, we keep randomly getting 403 forbidden errors after trying to login (we use azure). has anyone else ever run into this before? we're not sure if it's on the jamf side or the azure side that's causing the issue.

I am experimenting with shared iPads and ran into the following issue that I get the message that it doesn't have any free space. Doesn't matter if I give a user 50 GB or 1 GB. During the last try it actually locked me out telling my I can't sign in because admin has to assign new free space. The only option I found sofar is in the MDM profile where I can assign new space but to make that change work I always had to erase the device.Also I couldn't log in with a user I created. Always got the message old password please contact admin.Thanks in advance

Hi,I am currently budgeting for next year, and in the coming months we'll start using Jamf School more. I might have some money over, so I am thinking about getting the Jamf 200 cert since it looks like the one that has the most value of 200 and 240.We are a education customer (bought Jamf School from education reseller) and I was wondering if someone knew about the discounts that Jamf informs about on the site for education customers?

Hello,We have numerous printers that are in Self Service and install correctly. Once the computer has installed the printer the printer disappears from Self Service and is no longer an option for the user to install or reinstall. Currently it is set to "Once per computer".I can see that you can change the frequency of the printer install to once a week, day and so on, but I am not keen on the printers being constantly installed.Is there a way for the printers to still show in Self Service even though the printer has already been installed on the MacBook? I would like to keep the printers there just in case someone deletes it or it needs to be reinstalled. Thanks :-)

We have recently started using Apple Classroom on our student MacBooks. The students have already figured out that disabling bluetooth interferes with classroom working. Has anyone figured out a way to force bluetooth on or check to see if bluetooth is disabled and turn it back on? I know that there is an option in configuration profiles to restrict bluetooth on iOS devices, but have not found this option for macOS devices.

We have encountered a situation with a company Mac that a previous user was using, they left the company some time ago. The issue at hand is that the user's Apple ID is still associated with the device. Additionally, it appears that a firmware password has been set on the device, which we do not have access to. This has rendered the Mac unusable.In my current role at Jamf, I am relatively new, so I appreciate your patience if this is a basic question. Is there a method to discover or reset the firmware password? We do have access to the ex-employee's computer account as a local admin.Additionally, how can I prevent such situations in the future? Can Jamf store firmware passwords, if yes, how? The Mac model in question is a MacBook Pro (13-inch, 2020, Two Thunderbolt 3 ports) with an Intel i7 processor.Thank you everyone in advance.

Anyone able to set screensavers on Catalina. I had below script that worked fine for Mojave - but for Catalina it does not #!/bin/sh # Get user logged into console and put into variable "user" user=`ls -l /dev/console | cut -d " " -f 4` osMajor=$(sw_vers -productVersion | awk -F"." '{print $2}') osMinor=$(sw_vers -productVersion | awk -F"." '{print $3}') sudo -u $user defaults -currentHost write com.apple.screensaver CleanExit -string "YES" sudo -u $user defaults -currentHost write com.apple.screensaver PrefsVersion -int 100 sudo -u $user defaults -currentHost write com.apple.screensaver showClock -string "NO" sudo -u $user defaults -currentHost write com.apple.screensaver idleTime -int 120 if [[ $osMajor -eq 14 ]] && [[ $osMinor -ge 2 ]]; then sudo -u $user defaults -currentHost write com.apple.screensaver moduleDict -dict moduleName -string "iLifeSlideshows" path -string &#

So, here's a weird one. And of course, it's my luck it happened to our CTO. Brand new M1 Pro Macbook Pro, out of box, hits our PreStage. He provides credentials, accepts TOS (provided using an Enrollment Customization), then it starts downloading and installing Profiles at the Remote Management pane in Setup Assistant. It's here he claims the Mac just rebooted and came back to a login screen. Of course, since no users were created, no credentials will work here. Soft-bricked. I see the machine in inventory. MDM stuff all seems to be working fine, but no Check-In times, no Policy logs, nothing that would be provided by the Jamf framework. We're on 10.35, Mac is on 12.0.1. Thankfully not having a SecureToken user isn't the massive PITA it was in Big Sur, so it's at least not impossible to get back to start after this, but any ideas as to what might have happened? macOS kernel panic during some profile installation? 

You're invited to join me this Friday, 1-Dec, noon MST for Rocketman's monthly LaunchPad - The Jamf Admin Meetup.We'll be discussing Setup Your Mac with SYM-Helper.app.