Good day! I need to uninstall Crowdstrike Falcon Sensor from some of our Macs. Crowdstrike's instructions to uninstall via Terminal are as follows: sudo /Library/CS/falconctl uninstall --maintenance-token Terminal prompts for user password. Password is entered. Terminal then prompts for "Falcon Maintenance Token". Falcon Maintenance Token is entered. Crowdstrike Falcon Sensor is uninstalled. I'm a script noob and can't seem to Google-fu my way to finding how to:1. Prefill a separate local admin user & password2. Add syntax that would allow the script to enter the Falcon Maintenance Token after it's prompted Is this even possible? Thanks so much!

Hi OTHER storage is currently at 130GB (half the HD size) But it's not clickable so not sure how to clean up. Is there a way to clean it up so we can recover some space? thanks 

I'm looking for advice on getting homebrew on new employee machines automatically. We have a work flow we would like to keep to as few clicks as possible. I am trying to get the process of pulling down XCode CLI, installing homebrew, adding cask, and then installing third party apps for new employee machines. I have the XCode CLI component down but having problems with installing homebrew and adding cask. Curious if anyone has a working script to make this happen. I am deploying this process through self service.

Hi all,I'm having an issue with an app that just does not want to install. I'm going to try to be SUPER detailed with this post, so please bear with me.The iPads we are using are company owned, and there is no Apple sign-in allowed on the devices. The app is Therap version 23.9, and its description says it's for both iPad and iPhone. It's a medical documentation app. The app works if it is installed on other iPads through the regular App store. I also had a similar problem installing the Zoom app, but I removed it from the blueprint and added it again, and it now works fine.The Jamf Now dashboard shows the app as being installed and managed. It does not fully install on any of the iPads we manage. The app does not show up anywhere on the iPad, even in settings, while other apps do.This happens every time, no matter what troubleshooting steps I have taken: when the device connects and syncs, the Therap icon on the iPad shows as installing (it does the faded icon "circle sweep" thing), t

Hi all,I need to update our local admin account password. I have heard of weird things occasionally happening where it will update for the OS, but not for FileVault. Has anyone else experienced this and have you found a solution or workaround?  I have used this command on some test machines:jamf changePassword -username btr-itadmin -password 'NEW PASSWORD' -oldPassword 'OLD PASSWORD'I haven't run into any issues, but I just want to see what everyone else has done for a situation like this.  

In 10.46 Jamf released the LAPS feature. This is currently only available via the API. With this bookmarklet I created you can get the LAPS password for a specific computer from a specific LAPS account from the Jamf Pro WebUI. Follow the instructions to add the bookmarklet and then run the bookmarklet after you've browsed to a computer record.Let me know of any feedback or issues you have.

Hi everybody,An app was broken on my machine, so I deleted it manually (perhaps that was a mistake).Now, if I go this way:Computers > Search Inventory > my MacBook > History > Mac App Store AppsThe app still appears under the list of "installed apps," even though I deleted it. How can I update that list?Best regards,Floh

I am attempting to utilize the built-in JAMF Pro connector available as a data source type in Power BI Desktop. I have entered the instance URL and service account credentials, and I am able to view the available tables.However, when I attempt to select a table, I receive an error message stating "unable to connect to the remote server." I have been informed that the service account has full read access. Should I investigate the roles assigned to the service account in JAMF?Alternatively, could this connector be known for having reliability issues or being faulty?

I have a policy called "Dock CleanUp" triggered at login, once per user per computer.Script works as expected except I always briefly get question marks for missing apps until thekillall Docksleep 5killall DockThen after the sleep the dock appears as desired.The apps are present before the sript is run. Is there anything obvious I'm missing? Thanks in advance for taking a look. Cheers Script is below:#!/bin/bash########## Clean Dock Up ###########sudo -u $(ls -l /dev/console | awk '{print $3}') /usr/bin/defaults delete com.apple.dock persistent-appssudo -u $(ls -l /dev/console | awk '{print $3}') /usr/bin/defaults delete com.apple.dock persistent-otherssudo -u $(ls -l /dev/console | awk '{print $3}') /usr/bin/defaults write com.apple.dock show-recents -bool false########## Add Apps to the Dock #########sudo -u $(ls -l /dev/console | awk '{print $3}') /usr/bin/defaults write com.apple.dock persistent-apps -array-add '<dict><key>tile-data</key><dict&gt

Hello all I am tasked with seperating our onboarding process for Contractors and Full time employees. We are using Onelogin as an LDAP server just as background info. I would like to use Smart Computer groups to achieve this What workflows or methods does everyone here use to seperate onboardings for employee types.

We're wanting to roll out activation lock to our devices so that if any devices are stolen and wiped the laptop is useless unless returned to IT and the bypass code entered.The documentation (https://learn.jamf.com/bundle/technical-articles/page/Leveraging_Apples_Activation_Lock_Feature_with_Jamf_Pro.html) states that:"The Set Activation Lock command allows you to enable Activation Lock on a currently enrolled device. This command can be sent to a single device using a remote command or to multiple devices using a mass action.". However upon reviewing the mass action commands available for a test device, it only allows the user to enable activation lock?We've been able to add this to our pre-stage profile so any newly enrolled devices are covered.Is anyone able to advise on this?

  Jamf Pro 11.1 introduces Jamf Remote Assist, macOS Onboarding, and a summary view for App Installers. Be sure to check out the Jamf Pro release notes for all of the exciting new features and enhancements. Take the quiz below to check your knowledge.     Thank you for your continued support and feedback!

Hi Jamf Nation, We’ve just released Jamf School 9.2.21 with exciting updates, bug fixes and enhancements including Support for Bootstrap Token Functionality. Jamf School can now automatically escrow bootstrap tokens sent by computers with macOS 11 or later during enrollment and computers with macOS 10.15 or later after enrollment. Bootstrap token eliminates the need to request additional authentication information when a network user logs in to a computer with a mobile account and the account does not have a SecureToken associated with it. After the bootstrap token is escrowed, it is requested from Jamf School each time an eligible mobile account logs in to a computer. The computer then automatically generates a SecureToken for the mobile account. After the user is issued a SecureToken, their account can be used for macOS services that require cryptographic privileges, such as FileVault authentication. In addition, if an Automated Device Enrollment profile

Here's hoping someone smarter than me can answer this:I have a client whose in-house developers have created a system of printing shipping labels from their intranet system. It uses Zebra label printers connected to the Mac Mini stations via USB and an application called QZ Tray by QZ.io. To deploy the app, one has to include a self-signed certificated called 'override.crt' embedded in the app bundle's Resources folder. Then when the app is launched for the first time, the logged in user must enter their password to accept the certificate. You can not change the username to use a different (hidden admin) account instead. It must be the username and password of the launching user. It should be noted that at no point does the cert show up in Keychain Access before or after this.I have tried using openssl to covert the .crt file to a .cer file and deploying it via a Configuration Profile in Jamf. When I do, the cert shows up in Keychain Access and the serial and signature match the f

good morning. we have an employee who was recently deployed a replacement laptop (it's enrolled into our jamf pro) after using migration assistant to transfer files over to this machine, it restarted on her but now is stuck in start up loop, where the apple icon will load to a certain point and restart. I've tried having her go into recovery mode, but once she gets there it asks for the device recovery key. Is this device unrecoverable because of this jamf error? please advise.

this morning it seems we cannot log into jamf pro. Even tried our local account and not able to login. I tried on my company  network and on wireless(verizon) network as well and still not able to login. are there any issues logging in? 

Hi,Working with the Jamf Compliance Editor for the first time with Sonoma. Got a dumb question.If we are modifying "ODV" values, do we just need to replace the $ODV entries with the number we want in all the fields?So for example, if we want 10 days for this 1.7 Control, it'd look like this?Mobileconfig com.apple.applicationaccess:enforcedSoftwareUpdateDelay: 10 

As the result of a technical issue with the Global Patch Feed used for the Jamf App Catalog, patch definition updates are unavailable until further notice. Do not attempt to add any new patch definitions to Jamf Pro during this time.Existing patch policies will continue to function as normal, and new patch policies may be assigned to existing patch definitions in Jamf Pro; however, new product versions will be unavailable.We are actively working on a resolution and will share an update as soon as patch definition updates are available. While we cannot give you an exact date, we expect the outage to last a few days.When patch definitions are available all updates will resume as normal.During this time, you may still use App Installers to manage software title updates in your environment. For more information, see App Installers in the Jamf Pro Documentation.

Hey Nation, we just started the Registration for our 250 Mac Devices to MS Endpoint Manager.Registration went successfully, I can see the Devices Compliant in Endpoint Manager.We just have 2 issues:1. most of our Users Sign In to MS Services, but it won't deliver a Device ID. Others do...  2. Some Users daily get the prompt for the Registration again (JAMFAAD). I understand JPRO and        Endpoint Manager proof of the integrity of the registration, and the activity of the device. But, every                 Day seems a bit too much, I guess (?)Thanks for some ideas!

Users that have already properly enrolled into Intune and completed enrollment continue to get pop ups of jamfAAD. I have verified in Intune that the device is enrolled AND the policy was completed successfully in JAMF. This pop up continues to run and request users to continue. This sometimes disrupts end user workflows or presentations while on a zoom call. Is there a setting possible in the profile where I can set the retry option to 0 if already successfully completed. I've tried flushing the logs, delete the device from Intune, then re-enroll the mac back but users still get prompted. Even when I've un-scoped the policy from the user they still get the pop up. Possibly coming form the Intune side? I'm open to any ideas. 

After installing Self Service (ver11.2.0-588) to managed iPad device, the app requests log in to JAMF Software Server.This happens iOS 16.6.1 and 17.1.1, then it's possible to access internet.Even after reseting iPad, reinstall App, it occurs.I have no idea to solve it.Help me.

I'm sure it's something simple I'm missing.I've downloaded the latest MSEdgePolicyTemplates and uploaded them into Jamf. I can successfully change settings so I know the profile is taking effect.  I can.1. Set HomepageLocation and HomepageIsNewTabPage.  So when someone clicks on the "Home" button it takes them to it.2. Set RestoreOnStartupURLs and have them apply when first opening Edge.3. Change RestorOnStartup to either Open the URL's as per point 2 above or restore previously open Tabs.What I'd like to be able to do is a hybrid of point 2 and 3.  When Edge is opened it restore previous Tabs but also opens the home page.  This would replicate our Windows environment. 

Issue: Register with Microsoft on iOS just hangs with spinning wheel icon after self service app update 11.2 Before when we select "Register with Microsoft" on the iOS device it redirects to Authenticator app, which then require the prompt to login, once that is completed, will return to the Self Service app and it would say "Device Registered". This no longer happens and the Register button just hangs at a spinning wheel.  

I am getting a dsconfigad: The plugin encountered an error processing request. (10001) when I attempt to use a Jamf policy using the directory option to bind a Mac to a new domain. The Mac was previously bound to another domain and was removed from that domain. The search field in directory Utility still retains the path to the old domain. Doing a dsconfigad -show does not come back with anything. I know this is an older error and I have not seen it recently. 

HelloI have an issue with jamf Protect not linking to jamf pro, i have followed all the steps recommended in the training however jamf protect is not connecting with ANY of the computers within its scope, however it is displaying connected users in the audit logs, does anyone know how to fix this issue