So here is what I am trying to do; let's see if I can get some assistance because I don't think it is working correctly.Background InfoStatic Computer Groups:1 - Name > This group has X computers assigned.2 - Name > This group has X computers assigned.3 - Name > This group has X computers assigned.4 - Name > This group has X computers assigned. Smart Computer Groups:Created a couple groups to look at these Static groups; Members of 1 but not in 2,3 or 4.Members of 2 but not in 1,3 or 4.Members of 3 but not in 1,2 or 4.Members of 4 but not in 1,2 or 3. So the logic I was using is the following; but not sure if it is outputting correctly. AND/OR CRITERIA OPERATOR VALUE(Computer Groupmember of1andComputer Nameis2)or(Computer Groupmember of1andComputer Groupmember of3)or(Computer Groupmember of1andComputer Groupmember of4)Not sure if that makes sense; tried to export it, but the paste is over 20k characters.

I need to setup a new config for single app mode kiosks. These will be locked into a single app. I need to build in this config a process for performing maintenance, App update, OS update etc. In the past I ran into issues with apps not updating if locked into single app mode or not upgrading the OS pretty much ever. I would like this to be as automated as possible. Any recomendations?Is it possible to have a smart group based on time of day? Maybe it removes and readds the app lock profile based on time of day?

Hello! I am new to Jamf platform and my knowledge to Jamf administration is not enrich. I'd like to see the advises from experienced and excellent members of the Jamf Nation for the following case in my current company. I'd greatly appreciate any recommendations or insights or alternative solutions you might have regarding our situation.We're working on implementing Jamf for our staff who are based overseas. To do this, we're considering providing MacBooks to them. However, we've run into a problem while trying to figure out how to deliver these MacBooks due to import restrictions and regulations in different countries. This obstacle is making it difficult to send MacBooks from Singapore to the destination countries.As an alternative, we're exploring the idea of buying MacBooks directly from local IT vendors in those countries. These vendors shall handle everything from purchasing the MacBooks to setting them up with Jamf MDM and decommissioning them when needed. Thank y

Hello All,I can see one configuration profile is there in my JAMF Pro console which is read only and signed(It is doen by previous SME), and I can't read the payload of the configuration profile, if I click on Edit button it is asking me to remove the signature, please let me know if I click on "Remove Signature" and see the payload and modify as per my requirement and save it to rdeploy all computers with new changes made then it will create any issue?    May I know how to sign such configuration profile from scratch level and what is the purpose to sign it?

Hello,We have been working on upgrading Sonoma, but we have encountered an issue. We are unable to assign volume ownership to the local users. As a workaround, we are considering making them local admins through silent actions. We are wondering if it is possible to elevate standard users to admin accounts using configuration profiles?Thanks!

I have an issue where Macs (ARM and Intel) on macOS 13.5 do not get the Jamf binary after enrolling (ADE or manual) and appear unmanaged in Jamf Pro (on-prem 10.48.2). Macs on 13.4.1 and below (inc latest Monterey 12.6.8 have no issues at all). MDM commands are fine, no issues.The Macs effected do not have the ‘Allow Jamf Pro to perform management tasks’ checked. Enabling this and rebooting the Mac can, on a few instances get the binary installed (after about a 15 min wait ) and run my post DEPNotify policy (enrolment complete trigger), but not always. Looking at older forum posts, I see in the past people have experienced similar issues.Tried the following...Enable user-initiated enrolment - (already enabled) have tried with it disabled, still the same.Checked sysdiagnose logs – I do see this but confirmed we have no Restriction Config Profiles with ‘Require admin password to install or update apps’ checked.[com.apple.appstored:AppInstall] [MNFE60849E9/com.jamfsoftware.enrol

We are moving from on prem to Jamf Cloud soon and I would like some sort of infographic that shows the differences between the two and why we are moving. I've looked here and online but haven't found anything. Does such a thing exist? Thank you

With the recent package apocalypse I wanted to check that our clients had installed all Apple software updates and not just the ones listed in our local SUS. It was mentioned in the #osx-server irc channel that you can use the --CatalogURL parameter with softwareupdate command. So I wrote the following simple extended attribute that uses softwareupdate -l and the --CatalogURL parameter to directly query Apples update servers and not the software update servers specified by MCX/JSS etc. #!/bin/bash sucheck=`softwareupdate -l --CatalogURL "http://swscan.apple.com/content/catalogs/others/index-lion-snowleopard-leopard.merged-1.sucatalog" | grep -c "Software Update found"` if [ $sucheck -gt 0 ]; then echo "<result>Updates</result>" else echo "<result>None</result>" fi

I recently upgraded to the Jamf Pro 11.1.0 Beta version and have come across a few issues that I'd like to discuss and seek assistance on. Here are the problems I've encountered:After the update, I noticed that some configuration profiles are not applying correctly to devices. Has anyone else experienced similar issues? The inventory updates seem to be delayed after the upgrade. Previously, it was almost instantaneous, but now there is a noticeable lag. Is this a known issue? I appreciate any insights, tips, or solutions that the community can provide. Let's collaborate to make this beta version as smooth and efficient as possible.

I would like to enforce being locked to a single Wi-Fi. The issue is, each device is going to be on a different network. Can I manually set up to lock each device to a single network I specify?

I'm looking at the macOS onboarding tool and wondering what the major differences are between this and prestage enrollment. thinking it might be just the fact that we can control what apps, profiles and policies get installed AFTER enrollment. Am I wrong?

Hey everyone,I want to setup auto-selection for a client certificate in Safari.I already figured out how do auto-select in chrome and firefox but from my research, seems like there isn't a simliar, easy, native way in Safari.I saw that setting an identity preference between my client cert from keychain to a url/dns/service is possible.Basicly my goal is for safari to select automatily the ame client cert for all of it's traffic.The best solution I found was using TLD's: "*.com", "*.net" but it requires quite a a lot of objects and inefficient.I have tried the following but all of them didn't work: security set-identity-preference -c <CN name> -s "*" security set-identity-preference -c <CN name> -s "*.*" security set-identity-preference -c <CN name> -s "https://*" security set-identity-preference -c <CN name> -s "https://*/" security set-identity-preference -c <CN name> -s "https://*/*" P.S: I know it isn't very secure but i still want to

just tried connecting to Jamf support, the guy that was connected tried to tell me that "many users are unaware of the Jamf status" page........ @jamf11please, FOR THE LOVE OF GOD....get your support team some better training!!!!!!!

I'm currently working on configuring Jamf Pro for our organization, and I've run into a bit of a roadblock. Specifically, I'm facing an issue with user authentication. Has anyone faced this issue before?  

Update 28 November 2023: Cloud upgrades are scheduled for the weekend of 8–9 December (details below). We appreciate your patience. Today we are releasing Jamf Pro 11.1. Highlights include: Jamf Remote AssistYou can now use Jamf Remote Assist to securely initiate a remote session to manage computers and help users troubleshoot issues. Jamf Remote Assist is a screen-sharing feature for both on-premise and cloud-hosted environments. Using the Jamf Pro interface or the command line, Jamf Remote Assist sessions allow you to connect to an end user's computer even when the user is not on the internal network. macOS OnboardingYou can now use macOS Onboarding to easily configure and deploy content on computers for your end users. You can choose which policies, configuration profiles, and applications are automatically installed on end user computers when Self Service for macOS opens for the first time on a computer.   For additional information on what's included in this release, review

We have a requirement in our organisation to run some machines on mojave due to software limitations.I can get a machine to enroll and it installs the profile in systems prefs, but it doesnt download and install self service.i have logged into jamf cloud and down loaded it manually from the self service tab, but it says that version is only compatible from 10.15 onwards not the required 10.14i then tried to download it using "/bin/level2/selfservice.tar.gz" or something like that, but when i launch self service i just get a spinning progress icon on the self service screen, eventually saying "Cannot reach a Jamf MDM Server"help

Hey guys,I was wondering if anyone had setup a Jamf Connect Login and GoogleId workflow that doesn't require you 2FA every time you login into your laptop? Disabling 2FA on the google side is not an option for us. Saving cookies on the browser would solve this issue but they seem to clear everytime a user tries to login into their macbook.Any help would be appreciated! 

Hi everyone,i am trying to bind the home folder for our users automatically but we don't use the typical home folder field in AD.We instead have a folder in a share called like the user login name.I have seen the NoMAD Shares help site https://nomad.menu/help/nomad-shares-menu/ and it list some variables which are supported but doesn't clearly states what they do and I did not found a way to print the variables to see what they actually refer to.  this is my config:<dict> <key>PayloadDisplayName</key> <string>NoMAD Shares</string> <key>PayloadIdentifier</key> <string>com.github.erikberglund.ProfileCreator.15379620-191B-4449-BAB1-513D17129D0D.menu.nomad.shares.EBFEE259-96B4-4782-A77C-F8ECE6BD6677</string> <key>PayloadType</key> <string>menu.nomad.shares</string> <key>PayloadUUID</key> <string>EBFEE259-96B4-4782-A77C-F8ECE6BD6677</string> <key>PayloadVersion<

Hi Chaps, I have a need to disable the Defender AV socket filter.'mdapt system-extension network-filter disable'The above works fine when i run locally albeit with a Sudo command.Jamf scripts is unable to run this, Is anyone doing anything similar or have any thoughts on this.I've tried to invoke a currently logged in user prior to running the command without any success Thanks,M 

Hello all! Access to the personal Beta instances you are able to request when you join the Jamf Pro Beta Program will be unavailable for an extended period of time over the coming weeks for maintenance. We'll let you know when they're back online! Thanks as always for the feedback provided and participation in the program!

Hi all,I am currently facing a challenge and would appreciate your assistance. I am trying to identify which clients have iCloud Drive activated, specifically with synchronization of desktop and documents.I have conducted extensive research online and within this forum, but it appears that the solutions provided are not applicable to the newer versions of macOS.Could anyone provide guidance or suggest a method that would be effective for the latest macOS versions (Ventura, Sonoma)? Any help would be greatly appreciated.

Hi All,We successfully deployed Jamf Connect with the onboarding help from Jamf.  We will deploy in full this summer.  We've been using Jamf Connect on about 20 faculty and student loaners in the meantime.I also configured Jamf Connect to update automatically and it worked for a time.  The Deployed version is 2.19.0.  Most of our devices got that version, but it hasn't updated since.  Anyone have any ideas? I setup automatic updating in Settings -> Jamf Apps -> Jamf Connect.  I was unaware if I have to do anything additionally like download the app or do something in Patch Management.  My understanding was set it to automatically update and that's it. 

Our organization had an issue with our certificate expiring, but it was tied to an applie ID for an ex-employee so we had to create a new certificate under a new ID. Then the trouble began...  We were able to renew the certificate, then push out to our devices (iPads) to re-enroll them. Some accepted it, others did not.  For the devices that did not accept it, they are now unable to communicate with the JAMF server to push updates, apps, etc. Our organization is a bit different as we manage the devices by serial numbers, not Apple ID's (we have high turn over) I have tried soft and hard reset the devices in the hopes they would come back online, but no luck. We have been in contact with JAMF support directly, and they have recommended for us to wipe the devices via the device and then have them re-enroll. Because our company uses these devices for mission critical applications, we cannot do this easily and have a workforce that is spread out geographically

HI All, i am using Composer 10.46 and macos is on Ventura. while i convert pkg to source it gives error failed to convert source. anyone facing same issue ?any help is appreciated.

Hi folks, struggling to find an answer for this.We have a number of machines unable to run Big Sur, so I wish to deploy a script on all of these devices that remove these devices from support. I've achieved similar in the past where I can actually remove all the local jamf components, licensed apps etc.. and also delete the JSS record for the specific device using an API call. However, looking forward, I'd like to keep the JSS record available as they may contain encryption keys that we want to keep a hold of.Basically, I'm looking for a way to "Unmanage" these devices by unticking the "Allow Jamf Pro to perform management tasks" checkbox for each machine through the API, as I believe this will free up licenses:I've had a look online, and found some instances that I believe provide a resolution but I can't get anything to de-select this checkbox. For example :https://community.jamf.com/t5/jamf-pro/script-to-remove-management-through-api/m-p/233611https://community.jamf.com/t5/jamf