We just received our first M3 laptops. Wanted to see if these could be downgraded to Ventura, but it appears Apple has locked these to Sonoma. Not ideal, but that's not the real issue. I've only tried 1 so far, but after the auto-enrollment, the screen goes black with no cursor and doesn't respond. Reboot didn't help. I'm able to go to recovery, and am trying reinstall of Sonoma now. Just wanted to see if anyone has enrolled M3 Macs with Jamf yet. For context, this is a MBP 14 and we are on Jamf Cloud. If issue persists after reinstall of OS, I'll try another one of the M3s. Thanks in advance.

Hello All, I was looking for a way to deploy Nexthink browser extension on macOS for Google Chrome , MS Edge and Firefox.Nexthink team gave me link( https://docs.nexthink.com/platform/latest/installing-the-web-browser-extension) to download extension but I can see there is code too in their site, what exactly I need to do in JAMF? 

Can anyone help or provide guidance? I have a customer that is considering using the forced updates in the Jamf Pro 11 but wants some clarity in what the end users experience is. Does anyone know what the users sees on there computer if forced update is pushed out and what impact will it have on them? 

Hello everyone, I already configured this kind of launch agent in the past but actually I'm having a weird issue about not seeing the launch agent is running. On my test machine the Google Chrome is not up to date which means the launch agent has to start in 60 seconds to use googles software update agent to identify updates but I can't see the launch agent is running with launchctl list or even on my test machine via Google Chrome which should me give a notification to update it. I got no error or something like also when I try to start the launch agent by terminal.  <key>RelaunchNotification</key> <integer>2</integer> <key>RelaunchNotificationPeriod</key> <integer>3600000</integer>  That's the plist file which is stored in /Library/LaunchAgents/  <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

Hello! We are deploying some M1 iMacs, JSS 10.47.0 on prem. Machines are in Apple School Manager, they enroll and get profiles from the JSS, but no jamf binary is installed.Can anyone provide some hints on what to look for?I have confirmed there is no configuration profile 'requiring admin' (Application Restrictions payloads) but it seems to happening on all systems regardless of policies etc.

Hi, I'm trying to enroll the first of a dozen new MacOS computers. I go to our user-enrollment portal and everything seems good. It installs the CA, and the MDM profile, plus a couple of other profiles (JAMF notifications & Privacy Preferences). However, it is NOT installing the config profiles I have set up. I thought something glitched during the enrollment, so I tried to remove the framework and start over, but the jamf binary is not installed. From the docs: "The jamf binary is installed automatically after MDM enrollment is complete." I looked in /usr/local/bin where previously deployed computers left it, but the only thing there is something called RemoteUpdateManager. Doesn't sound like a JAMF thing, but I could be wrong. I tried the whereis and which commands and they couldn't find it. Note, the computer shows up in the list, and I can use the "Remove MDM" Profile" command and it does remove it from the computer, so they are tal

Hi Team,I am experiencing issue we have devices that listed on DEP , .Once powered  this will prompt the remote management windows , Enter my details  to have device enrolled via DEP.Device enrollment is successful but the , however whe i check in JAMF there is no except the details entered at the point of enrloment.I have checked system Preferences > profiles > and all profiles are listed .Because there is no communication, i switched to check if the jamfbinary is installed on the  client .I have run sudo jamf log and out put is "command not found" same when i run sudo jamf manage. Would you please advise how to have have this fixed. Kind Regards. Henry

Hey all, we've recently run into an issue where apps that have previously been installed either through the Mac App Store, then removed from our JAMF MAS apps are now prompting users for admin credentials in order to updat (See image). As you can imagine, this is causing quite the disruption for our users, who are not admins on their devices (And we don't run any kind of temporary admin permissions either). Has anyone else encountered this and, if so, what was your solution? Some notes:- We have plenty of VPP licenses (Around 500 for ~200 devices);- We use ABM to supply all VPP apps, imported from the old iTunes VPP. Previous licenses were purchased under this account, others bought with a new account under the same ABM.

Hi Everyone, Our Jamf user and location is being mapped with azure  but it seems the "room" "building" and "department" arent being generated when choosing a machine and under general choosing "user and location" but all other fields are being populated. Even though on the azure side we do see a room number assigned to a user... does aynone know how to get these synced up properly?   

Hello everybody,We need confirmation that a MacBook has been successfully wiped remotely and kindly ask for your advice on this matter. I found the Audit Logs of a MacBook, which has an entry like "Issued Wipe Computer Command." This is just a confirmation that a wipe command has been sent, but not confirmation that the machine has actually been wiped, am I correct?Just in case this matters: We have a mix of preStage-enrolled and user invited-enrolled machines.Best regards,Floh

Hi, I am wondering if there is a way to force Jamf App Catalog apps like M$ Office apps or web browsers to install on a reimaged device or when an update is avaialble 

As has been discussed in many feature requests, by having the /?failover page be available to sign into the Jamf admin page when SSO is enabled, Jamf has essentially defeated the main point of using SSO - enforcement of MFA. Being able to access the admin page externally with nothing but a username and password just isn't secure. We do have a locally hosted Jamf server so we do have access to all the Tomcat config files. What I'm looking for is any way to block/disable/break that "back door" of using the /?failover. Obviously firewalls and the like will be one area of investigation but I'm also looking for any ideas pertaining to the server itself. Is there anything in the Tomcat server that could be adjusted/deleted/broken that would prevent that /?failover page from being used?

Having a problem with an iPad that enrolls without a problem but when I launch Self Service it gives me the following screen. Any suggestions as to why this is happening?  Thanks

Just recently took over as MDM admin for Jamf Pro and we have no endpoint security on our IOS devices. I think it's too late in the year to get purchase approval for Jamf Protect. We have an M365 license right now and deploy the O365 mobiles apps to our IOS devices. We have zero Intune integration with mobiles right now.Question is can I deploy the Defender app in its default state and at least get some endpoint protection vs what we have now (ie nothing)?Will it even do anything if it doesn't have integration with a MSFT based central management system?ThanksRob

Currently on 10.39. After upgrading, we noticed that the Jamf App Catalog no longer shows as an option under Mac Apps, nor are the ones I already had set up. Was this feature removed? Do I need to roll back to 10.37?

I'm having an issue with configuration of an older device that was previously manage with our old Apple MDM PRIM server. I've assigned this iPad to JAMF through the ABM but it doesn't show up in the pre-stage enrollment on JAMF. I think the device is "looking for the old MDM which no longer exists. Apple configurator doesn't seem to recognize this particular iPad; I think it is due to the old configuration. Can someone offer advice on how to remove or reset the device to allow reconfiguration? 

When Docker installs on a machine, it asks the user for root privileges to finish its installation process after you start it the first time. In our environment, we decided that it's best users don't need to enter any sort of credentials to finish the installation of an application. So, via a trail of troubleshooting steps I found online and some trial & error, I was able to put together an installer that does not need root privileges to finish its installation. Use the following directions to create a version of the installer that does not require Admin Rights. If you are already familiar with making JSS policies and using Composer, check out the TLDR section at the bottom. Download Docker For Mac Mount the Docker DMG Open Composer Click on New Select Normal Snapshot Click Next Name the Snapshot and click next Once the Snapshot has finished creating, drag the Docker application into the root Applications folder Open Applications, and then open Docker Docker will post an intro

Howdy everyone, has anyone had any issues installing Cisco Secure Client in Ventura after packaging in composer?

Afternoon All How is everyone handling the recent 13.6.2 update seems its not for everythingNOTE: The Ventura 13.6.2 update is not a unified build & only for specific models13.6.2 (22G2321)MBP M3 14"iMac M3 2iMac M3 413.6.2 (22G320)MBP M2 Max 14"MBP M2 Max 16"MBP M2 Pro 14"MBP M2 Pro 16"MBP M1 Pro 16"MBP M1 Max 16"MBP M1 Pro 14"MBP M1 Max 14" I assume a smart group would be best approach not sure whats the best way to capture all devices affected.or is the old software updated workflow able to handle this.Thanks  

i tried that:<restricted_software> <general> <name>Restrict High Sierra</name> <process_name>Install macOS High Sierra.app</process_name> <match_exact_process_name>true</match_exact_process_name> <send_notification>true</send_notification> <kill_process>true</kill_process> <delete_executable>true</delete_executable> <display_message>High Sierra is not yet supported, check Self Service after public release.</display_message> <site> <id>-1</id> <name>None</name> </site> </general> <scope> <all_computers>false</all_computers> <computers/> <computer_groups>24</computer_groups> <buildings/> <departments/> <exclusions> <computers/> <computer_groups/> <buildings/> <departments/> <users/> </exclusions> </scope&

In Self Service for iOS 11.2.0 a change was made that requires both the MANAGEMENT_ID and UDID keys in the Preferences field on the App Configuration tab for Self Service for iOS. If you are experiencing an error, confirm that both keys are present in the app configuration.We are working on a resolution that will allow either one or both of these keys to be present in the app configuration.

Hi.I would like to deploy a policy on all devices that prohibits connection to unencrypted Wi-Fi.Is there a way to accomplish this?

Hello Jamf People! Anyone else having issue with their 4th gen Apple tvs not waking up once they go to sleep? They will not wake up when we are trying to airplay to them and will not wake up with the remote. All Apple TVs are DEP enrolled. tvOS 10.2.1JSS9.99.0-t1494340586

Hi Everyone.  I have a profile deploying to a test iPad.  The profile contains only a the following Airprint payload: .76 is a Printer Pool being shared on an iMac running Sonoma, wired ethernet.30 is a fairly new Ricoh printer, wired ethernetipad is of course wifi, on the same subnetI can print to the pool and printer from my laptop without issue (also on the same wifi)The ipad cannot.  In fact even though the profile is indeed showing up on the ipad (Settings > Device Management), the printers are not listed when in an app, e.g. Chrome, Safari, etc.  I would think that even if the printer was having an issue, they would still be listed (a opposed to being discovered over Bonjour).  For example, if I open Chrome, browse to a website, click the Share button, click print, click No printer selected pulldown, the only printer listed is the .30 ricoh that the ipad found via discovery on its ownThanks for looking! 

Hello all!This is something of a follow-up to a previous post of mine. We are starting the process of convincing our IT Security and Leadership teams that allowing our Macs to download OS updates from Apple is a better alternative to downloading/packaging/deploying the OS.app ourselves. To strengthen our case, I'm looking for resources to back up the claim that softwareupdate --fetch-full-installer is no longer recommended by Apple. I feel like I've heard from multiple people that the download/package method is going to be deprecated "soon" and that it can introduce problems that wouldn't be an issue if the Macs download the updates themselves, but I'm struggling to find any documentation from Apple or reputable third-parties on this. There's plenty on the how of managing OS updates via policy or mass action, but scant information as to why this method is superior to downloading and packaging it ourselves. Indeed, Jamf still recommends the download/package method for major OS releases.