Hi all,When building/enrolling a new Macbook into Jamf, we are getting an error saying "Jamf Connect Login, Expires 27 October 2022".  We used to get these errors when we ran out of licenses.  But we currently have 65 license and only used 59 and this error is now coming up.I'm pretty new to JAMF, so I'm not sure where to look.  All Tokens an Certificates are in date.Can someone please assist me with this issue?  Or where can I raise a call with Jamf?P.S.  We use Single Sign On with AzureAD.  Thanks 

Hello,We are trying to figure out if there is a way to automatically set the "Location" of our iPads in Jamf School. We have a naming standard where the device has the name of the building as a part of the iPad name. Using that we have created some Smart Device Groups to know which iPads need to have the Location updated. However, that requires manual intervention to change the location before we can assign the Owner. So, is there some way to utilize Smart Groups and the device name to automatically assign the device to a Location?Thanks, Tim

HelloAlmost half of the apps won't be installed. Status is Failed and we get an error: "Bag Load Failed, The Internet connection appears to be offline.Error -1009 kCFErrorDomainCFNetwork." Sometimes the error is -1001.The installation process won't be retried automatically and we cannot find a way to retry the installation without checking all iPads one by one.  

Hi Guys,We was using the below to give access date & time for standard user but after macOS ventura upgrade this command is not working /usr/bin/security authorizationdb write system.preferences.datetime allow If anyone having any other script please pass on to me  Thanks !! 

I saw an old post tried to resolve the issue, but unfortunately no solution was provided.My organization is based on Google Workspace, and we have to use Gmail, Google Calendar and Chat for work, so I have to manually set up the app shortcut for each user on dock, which is time-consuming, is there anyway we can deploy the app and then add them to dock like other apps via PPPC or Dock Master?Any suggestion will be appreciated!😊

This is the second time i've had this issue occur where an employee's machine rebooted for updates and failed to come back on. I managed to use the apple configuration app to fix the booting for the mac, but when try to pull up the recovery options or even turn it back on i get MacOs recovery key needed. Im using the key that jamf has in the encryption and its failing to unlock the drive. I've tried using the key for the mac that was used to revive the broken one incase it copied that encryption but no luck either.  Not sure if anyones run into this issue or found a solution, but id really hate to have to wipe and reimage another employees machine as that sets them back a few days.   

I ran into a weird issue with the erase-install.sh script. I got the script to run successfully a few times with other users in my department. On one laptop, I logged in and I got a keychain error. It wouldn't take any of my previous password and I created a new keychain. I launched the script via a Self Service policy and entered my password, and it took my credentials, downloaded the Ventura update and stalled on the Preparing Update screen for a very long time.. I broke out of the GUI for erase-install.sh and noticed in the log that the startosinstall said "startosinstall could not get authorization"  I ran the script again with another local account that has a token and everything worked as it should. Did something happen with my account, did I lose the token after my keychain reset? 

Hi, I am attempting to use the self-service app only for updating apps on iPadOS. However, because the apps we use are configured specifically for the end user we want to prevent them from being able to reinstall the app through self-service.Can reinstall be turned off? I was hoping it's in the app configuration settings but I can't find documentation for that either.

Hello All,Reaching out to the community to see if anyone has resolved the issue on M1 Macs with Snagit 2022 and the Audio component (Boot into recovery to allow system extension).I have a successful package for Snagit 2022 (Application and license file)I am looking for solutions for these problemsPPPC for some of the approvals. I could probably wing this with PPPC and try out a few settings.System Extensions for M1 - right now the user has to boot into recovery, lower the security settings, boot into macOS, accept the System Extension. You can then boot back into macOS recovery and elevate the security settings.  We cannot expect a C Level user to do this (or even any user to do this). What if a firmware password is on the device.Thanks all.

Hi Jamfs,Wondering if anyone else has seen this when opening Outlook on iPadOS. Current version is 16.7.2, running Jamf Pro on Perm. 

1. When a user is part of the admins' group, it will affect all MBs? meaning, an admin user will be able to log in and do anything he likes on all other MBs? 2. Is it possible to limit an admin user even though he is an admin?

Hello all you friendly Jamf admins! I've got a problem that's stumping me and my colleague, hoping somebody here can shed some light.Recently (starting last week), I have begun encountering an issue where running sudo jamf policy produces unexpected results. When run locally, policies will fail. They attempt to run, and produce the following output, using Firefox as an example:Installing Firefox ESR 115.4.0...Installation failed. The installer reported: installer: Package name is Firefoxinstaller: Upgrading at base path /installer: The upgrade failed. (The Installer encountered an error that caused the installation of fail. Contact the software manufacturer for assistance. An unexpected error occurred while moving files to the final destination.)This occurs with both Chrome and Firefox, both of which I recently packaged. This occurs with both Patch Management Policies and regular Policies. I created the packages in Composer from my Applications folder, with 755 root:wheel permissions,

Hi all,Long time lurker first time poster, I'm fairly new here, did my 200 a few months back! We use WhatsApp Desktop App on Mac fairly extensively, I was using Installomator to deploy it but had problems with the Helper Tool pop-up so I switched to deploying it via MAS. Now, WhatsApp released a new version which differs from the old one so I need to remove the old one and replace it with the new without too much fuss. I have both available to install on SS but new wont install over old, it just fails. Is there someway Standard users can remove MAS apps?Is there an way to script it to remove old and install new?Any other solutions?Thanks.

Hello everybody,i'm trying to configure Outlook for Mobile Devices. I used an Extension Attribute "userPrincipalName" to pull UPN from LDAP "Active Directory". Extension works fine in Jamf but when i put it in Outlook-App as:<key>com.microsoft.outlook.EmailProfile.EmailUPN</key><string>$EXTENSIONATTRIBUTE</stringI get everything fine except for username, "@" Symobl in Username, which comes from UPN, is wirtten in Hex codefor example:Username should be: somebody@somedomain.combut i get in Outlook: somebody@somedomain.com (    @ replaced by @    )How to get it without replacing? what i'm doing wrong?  

hey there, I was wondering how can we make our office 365 apps like Word, Excel, Powerpoint etc to be able to switch other Microsoft account? right now in our jamf Mac environment, I don't see the switch account option. Not sure where to look. 

Hello, I found some duplication in the inventory which looks like ghost record. It shows up in the list but never opens; and I am not able to delete it in JSS web interface. Is there any easy way to delete computer inventory record via Terminal by ID #? Some command like: sudo jamf delete_computer ID=XXX Or should I deep down to MySQL? Any suggestions are highly appreciated!

Hey everyone, we are using Displaylink in our Jamf environment and set it up via the guide from synpatics. (https://support.displaylink.com/knowledgebase/articles/1965404-how-to-deploy-displaylink-macos-software-with-jamf)Now to the problem: Around 80% of the time when a new mac is setup and runs the displaylink policy, the policy "seems" to fail (the policy log claims it has "failed" and we even get the concurring mail "an error occured while running the policy "Install DisplayLink Manager".") However... DisplayLink Manager is installed successfully every time. The error message is the following: (The installation failed due to an error. Contact the manufacturer of the software. An error occurred while executing the scripts from the "DisplayLink Manager Graphics Connectivity1.9-EXE.pkg" package). Maybe someone heres has had a similar problem and can help :)

Hi all,I want to deploy a Mimecast Outlook Plugin and wanted to get some insights on how we can deploy a .msi file on Jamf to enrolled Macbooks. I don't have much experience with Jamf, and wanted to test out what is the best possible way to do this. Thanks in advance!

In our environment we use user certs for Cisco AnyConnect. I'd like to have a policy that runs on recurring check-in that alerts the user if the cert is about to expire so that they don't lose VPN access. I thought I had this working but I think I'm running into issues accessing the user's keychain. I can understand why that's a touchy thing. However, what's curious is that I can access the user's login keychain when running the script via Self Service or if I run the policy via the command line. However, when the script is triggered via check-in, it seems to have issues accessing the user's keychain. Even doing a simple "security default-keychain" is struggling. Here's some example code: #!/bin/sh # Let's set a log file to write to logFilePath=/tmp/test.log # Get date/time stamp and kick off log file dateTimeStamp=$( date ) printf "!! Script Execution Date/Time Stamp = $dateTimeStamp !! " >> $logFilePath

Hello All, I am looking for a solution to display end user's account after restarting the mac, we have total three local accounts including user's account, I want to make the end user's account at display login screen so when user will restart the mac user will put his password only to login. Others two accounts will be hidden in login screen, any way is there in JAMF? User's account is having 503 UID others two are UID 501 and 502

Hi, I would like to confirm if my settings are correct?I have choose the defer to 90days and I uncheck App Updates and Software updates.My assumption was my devices will still be able to update to 13.6.2 but not Sonoma but it seems most of them detect Sonoma.Am I doing something wrong?

The TItle says almost all of it.Hello people,After I converted the Slack application, which does not offer native PKG format, using composer, I get the following error:installer: The installation failed. (The Installer encountered an error that caused the installation to fail. Contact the software manufacturer for assistance. The package is attempting to install content to the system volume.This Policy works fine on my PC but does not work on colleague's. I will take a look at more details tomorrow from /var/log/install.log, and will post them here. We both use M1 chip, but mine is MacBook Pro, and she has MacBook Air. Not sure if this makes any difference. The latest OS and updates are applied.Anyway, if anyone has any idea in the meanwhile why this does not work, I would appreciate the help, because I have lost 2 days trying to make this work. :)Thanks in advance!  

I'm using Jamf Pro, and from what I've read online, the Jamf Management Account is optional, i.e. we only need it if we want to enable FileVault using policy (we don't). But then again, the documents say that the management account is needed for Macs to considered managed by Jamf Pro. I want to manage Macs via Jamf Pro, but I don't need to enable FileVault using policy (we do it via configuration profiles) - so do I still need to create management accounts, or not? Additionally, some of my managed Macs seem to have the management account password gone out of sync with the Jamf server. Running the Jamf Management Account password rotation policy fails.Does it have any actual impact, if I don't need to use the management account (i.e. enable FileVault via policy), and I can just leave it be?If not, what's the right way to get the management account password in-sync with the Jamf server again?

Hi everyone, I am stuck at this step: https://www.youtube.com/watch?v=4vCzG_Zdelkuntill 04:19 everything is allright. (Server token is uploaded and in: (Settings/global) Automated device enrollment I see the MDM server and also 2 computers assigned.But when I go to: Devices -> PreStage Enrollments (See 06.48 of the video) I dont see the same. I see: I am new to JAMF Pro and am stuck at this point.I hope someone can explain why I am unable to do the steps shown in the video.kind regards

I need to run an activation script as administrator after my pkg installs. I've successfully created the install pkg, in the self service center, it runs, executes, then fails. I've been able to run the pkg and the script manually on the mac, it prompts for the su administrator pwd. Not sure how to script the pwd prompt. Any help would be greatly appreciated. script:su administrator sudo bash -c " if [[ -f /usr/local/qualys/cloud-agent/bin/qualys-cloud-agent.sh ]]; then /usr/local/qualys/cloud-agent/bin/qualys-cloud-agent.sh ActivationId=##### CustomerId=########; else /Applications/QualysCloudAgent.app/Contents/MacOS/qualys-cloud-agent.sh ActivationId=##### CustomerId=#####; fi"