Hi We're trying to deploy the latest version of Jamf Connect 2.29.0 to all of our users who are currently running a much older version of Jamf Connect.  Please excuse the newbie question but how do I convert the Jamf Connect 2.29. DWG file into a PKG file? This guide is very useful if you already have a PKG file, Should I just follow this guide but not include any custom images (we're not bothered about custom branding), you don't need to upload the DWG file within this process so I'm unsure how the Jamf policy will know to install version 2.29.0 of Jamf Connect when I add it as a package?ThanksTom 

After I was finally able to convince our InfoSec to open the proxy and firewall to allow VPP, I tested it by doing an automatic install of Slack, then a Self Service install of IP Scanner onto a couple Macs. it worked fine. Yesterday I decided to install both those apps onto a couple more Macs via the same methods. I scoped the computers to both apps (I have assignments to spare for each). However, both install methods are failing. With the automatic install, absolutely nothing happens. I can find no log entries on the local Macs to indicate anything at all has even attempted to happen. I enabled debug logging on the JSS and saw these 2 lines: Sending new 'InstallApplication' command to 'UserPushToken [ID=404, Name=cmcintosh]' computer: 'COMPUTERNAME' and Not installing MacApp [ID=12, Name=Slack] for Computer [ID=323, Name=COMPUTERNAME] because not VPP assigned So I read that to mean it is TRYING to tell the Mac to install but it thinks the app isn't assigned.... but it IS! I di

Hey Everyone, i am having issues with JAMF connect configurator i am trying to do it where a user will login with their company email and password they sign in then get presented with the okta login window so they can sign in and authenticate but no matter what i do that window does not pop up any ideas?  

Due to an unexpected issue (PI115107) with the upcoming release of macOS 14.2, all customers must update to Jamf Connect version 2.29.0. For Mac computers with macOS 14.2 or later and a version of Jamf Connect earlier than 2.29.0, all users who start up, restart, or logout of their computer will encounter a black screen and be unable to continue using their computer. As long as the affected computers are connected to a network, policies can install the updated version of Jamf Connect and successfully restart the computer. To access new versions of Jamf Connect, log in to Jamf Account with your Jamf ID. The latest version is located in the Products section under Jamf Connect. For instructions on how to upgrade, see the Jamf Connect Documentation. Reach out to our support team for assistance if you have questions. Thank you,The Jamf Connect team

I have a profile that is just for setting a home screen on specific iPads, it worked initially but now when trying to apply it to a few new devices I get the following error:The profile “Home Screen (version:10)” is invalid. / The payload “Home Screen (version:10)” is invalid. / The field “Icon” is invalid.These iPads are running iOS 17.1. A couple of older iPads that I already had the profile applied to were on iOS 16 at the time. but they are throwing up the same error now they are updated to iOS 17.This profile also contains a webclip with a custom icon applied, could this be the issue?

We are managing iPads for Education and a small hand full of Macs as Caching Servers for our City Administration. We were thinking about doing some certifications but it seems the focus is on Jamf Pro. At least the Jamf 100 seems to contain things that could Help us managing Out growing number of devices. Any experience from other Jamf School admins in this?

Hi,I am new to Jamf Pro and have been asked by a school to come and administer their system. The previous IT manager had knowledge of it but that seems to have gone with him.We are having a lot of challenges but we suspect that our logins to not have the correct privileges. For example when going trying to create a policy and going to packages, if I select package settings, I get a 403 error. Equally in settings, computer management, I only see 'Inventory display', nothing else.Thanks for any input,Adam

Hi Guys, we recently just deploy exclaimer in our business. And I deployed Exclaimer Signature Agent for our macbook users. (our macbook users use outlook). my question is that how do we supress this pop up from exclaimer agent as most of our user keep getting this popup everytime they restart their macbook. 

We have Garage Band available on Self Service. Non-admin users are able to download and install it just fine. However, the first time it is launched it pops a dialogue to download the "Essential Sounds Download" which our users also need. It downloads the package but then pops a security dialogue requesting an admin username / password to complete the install. Has anyone found a way to allow this to run for non-admin users?

We're loving the new features with MacOS Sonoma, Apple has for the most part fixed the broken update commands which were hit or miss before, we'd often have 30-40% of devices actually updating from the command.We have a small set of devices (approx. 10) that are currently on MacOS 14.0 but are not sticking to their MacOS 14.1 update deadline which was pushed out for an enforced date of a few weeks ago.The devices in question are checking in as normal and receiving new policies and providing inventory updates as expected. 95% of the other devices are working to the deadline and updating as expected which.Has anyone else experienced this before I open a case with Jamf Support?

FYI folks, the new Self Service seems to have impacted the "Register with Microsoft" process. When performing the registration process the prompts to "open authenticator", "open self service", and "you are now registered with microsoft" are no longer displayed. The registration is successful, but since the "you are now registered" is no longer displayed, your users may be confused and try to redo the registration process. I created a case for this just now. Thanks to everyone for posting the fix for the other issue (MANAGEMENT_ID) with 11.2 release of Self Service. That was super helpful in fixing our environment very quickly!

Hi everybody,Is there a way to automatically re-enroll devices after a wipe command that are not managed by DEP (so no preStage enrollment)? We have some older devices that are not managed by Apple Business Manager (unfortunately) and are enrolled through user invitation.Best regards,Floh

Evening All I have spent the best part off 3 months backwards and forwards with jamf support. Over why bootstrap tokens don't always get escrowed back to jamf pro during our enrollment process.My team off 3, have manual been through our 300 labs devices, to tidy up any machines that dont have a bootstrap token escrowed to Jamf. We did setup and extension attribute to try populate a smart group but this wasn't very reliable. It does seem this information isn't getting back to jamf during a inventory update.I'm still no closer in finding the root cause. As anyone else experienced this type of issue? I'm also after a script to create bootstrap token on the fly. As I'm moving onto sorting out our staff Devices next and don't want to recall them if I can help it.Thanks in advanceTom

It seems like using Jamf Protect's Custom Prevention Lists feature is a better way to block/restrict applications than Jamf Pro's 'restricted processes'.Restricted Processes only goes off of the name, which could be changed to evade the blocks in place.But with Custom Prevention Lists, you can choose Team ID or bundle/signing ID which is more effective.The problem is, in my initial testing, it's only blocking 1 of 3 apps. I've tried both Team ID's and Bundle ID's with the same behavior. All three apps download as .dmg's with .app's inside of them.I'm using codesign -dv /Path/To/.app to get Team and Bundle ID's.ProtonVPN.app works as expected. I get a 'ProtonVPN Has Been Blocked' Jamf Protect message.However, mirroring the same exact steps, neither Epic Games Launcher.app or Steam.app get blocked. They're both launching just fine still.Again I've tried Team ID's and Bundle ID's with the same behavior.I've ran a sudo protectctl checkin, still same behavior.Because it is working for

Has there been any update on a way through the Jamf Pro website to view policies that are scoped to a group?  I've seen mentions of a feature request for that and such, but all post are multiple years old.  I was hoping maybe there was a way to do this without looking at each policy individually.Thanks

Hi,since monday, we have a weird issue. We have two clients, who re-enrolled themselves automatically. One on monday, one on tuesday. We tried to find similarities, but the only thing we found is, that the IDs are close together (44 & 46). Both MacBooks are in use and haven't been restarted for some day. So the re-enrollment appears to be totally random. "Last Enrollment" gets set to the actual date.Could this maybe has something todo with the "MDM Profile Expiration Date"?jamf.log:   Mon Jan 09 10:18:48 MBP0110 jamf[8235]: Removing existing launchd task /Library/LaunchDaemons/com.jamfsoftware.task.bgrecon.plist... Tue Jan 10 08:34:27 MBP0110 jamf[10088]: The SSL Certificate for https://XXX.jamfcloud.com/ must be trusted for the jamf binary to connect to it. Enrolling computer... Tue Jan 10 08:34:32 MBP0110 jamf[10107]: Skipping trustJSS command... Tue Jan 10 08:34:35 MBP0110 jamf[10107]: Error creating user: An account with the user name jadmin already exists.

Hi, I have a script which i try to run trough Self Service using SwiftDialog. Script works fine when tested on local machine, but not when run trough JAMF. Can someone send me in right direction ? Script :  #!/bin/zsh PrintLog="/Users/Shared/.AS/Logs/Print.log" if [ -f $PrintLog ]; then echo "______________________________________________________________________" >> $PrintLog echo "######## Print Installer RUN ON: `date +%d.%m.%Y:%T` ########" >> $PrintLog echo "Printer Installer log already exists. Continuing to Install...." >> $PrintLog sleep 3 else echo "______________________________________________________________________" >> $PrintLog echo "######## Print Installer RUN ON: `date +%d.%m.%Y:%T` ########" >> $PrintLog echo "Printer Installer has not run before. Creating master log now...." >> $PrintLog mkdir -p /Users/Shared/.AS/Logs/ sleep 3 fi # Use dialog to capture user input userInfo=$(dialog \\ --bannerimage "https

Our users' are unable to login to their Macs after completing the Jamf Connect login prompt. After doing so, they get a splash screen of our Zero Touch deployment which the load bar bounces back and forth and does not move forward. This is odd because we have not seen this issue before, and this splash screen only occurs when users setup a new Mac, it is not supposed to re-occur at any point after the Mac has been setup. We have tried having users reboot, log in without being connected to a network, re-install/update the OS, and the same issue still occurs. At the moment, the only thing we have been able to do is wipe the Mac to get users back online, which is not ideal. Any one else seeing this issue??     

On Jamf-managed Macs, i want to implement a full-screen agreement that appears whenever a user restarts their machine. This agreement should display after the login screen and require the user's acknowledgment before they can proceed to the desktop. Need a advise how we can achieve this  

I’ve got a Mac Studio enrolled in Apple Business Manager, then into a JSS.For some reason I’m still seeing this prompt to enable system extensions. Any ideas why this is?The device is checking in, policies & inventory run, and there are no stuck management commands. I have not noticed this before with any other devices from ABM and Jamf Pro.The extension attribute for “Enrolled via Automated Device Enrollment:” reports yes.

Has anyone else see some of their custom icons for their Self Service policies disappearing? Some, not all, of my icons aren't just switching to the default, but when I go to fix that situation the custom icon isn't even in the list of those available anymore. I'm not entirely sure exactly when this started, but it seems to have begun sometime this summer. 

Hello All,Can we create a Advance Search or a smart group to list of Not or Either latest version of an application.Tried this combination but result null.Application Title    has      Microsoft Outlook.appandApplication Version    is not    Latest VersionNot sure where I'm doing wrong. 

Our Jamf Pro managed iPads are setup to only have Jamf Self Service deployed, not the app store.The Jamf Self Service-app had the setting "Allow users to remove app (iOS 14 or later)" enabled, and some user removed the app. Is it possible to redepoy the app to the iPad, or do I have to wipe the device to do this?(I unchecked the "Allow users to remove app") 

Hello all, I wanted to know if there is a way or an easy way to have computers automatically named when a user goes through the JAMF automated device enrollment i did it on my test machine and it just says "Macbook Air" i would love it for me to enter my organization email and password then when the downloading of apps is finished go to jamf and see my computer name synced with JAMF pro