I might be overthinking this...?I downloaded the 2023 version of the Avid Complete Plug-Ins Bundle and went to package it in Composer. Then I realized each plug-in is its own .pkg file, within a .dmg that unzips into a folder. Rather than having to manually install about a dozen plug-ins one by one, I used a post-install [shell] script. This is essentially the script (except each plug-in has its own line- I tried using a for-if loop and for some reason it didn't work, so I just did it this way):sudo installer -pkg //path/to/package.pkg -target //folder/where/it's/goingSo I realize it's really primitive, but it works- only after the installer completes, the original folder within the package (containing the plug-ins) is still on the Desktop- and it's not empty. So I'm figuring that this script duplicates the folder in order to install it in its proper destination..?I initially tried doing this using Snapshots but it took way too long. My other thought was simply to scope the packag

with Jamf 10.50 pro cloud now, we have JAMF laps using JAMF api. (https://learn.jamf.com/bundle/technical-paper-laps-current/page/General_Requirements.html)however, i do have 2 question.1. Can we define the password requirement for JAMF laps? Lets say I want so that the password will only have 15 characters and it only have upper case, lower case and number. can i define this?2. I had a look of this post. (https://community.jamf.com/t5/jamf-pro/retrieve-laps-password-straight-from-the-jss/td-p/297146) and I was wondering can we parse/escrow the password from JAMF LAPS to some extension attributes? By doing this, any admins who can login to jamf pro portal would be able to see the admin password. 

Hi All, I wanted to share this with you, it's a bookmarklet. https://pro4tlzz.github.io/JamfGetLapsPassword.htmlFollow the instructions on the page to add a button to retrieve the LAPS password straight from the JSS for a computer device. You can also reissue Jamf Pro Management Framework straight from the JSS with this bookmarklethttps://pro4tlzz.github.io/JamfHealComputer.html Enjoy

Hello Jamf Protect Community, I received an alert with the Description: JamfProBinaryModified.... Jamf Pro Binary Modified or Removed. Below I will copy information from the first two pages of the of the alert. Has anyone encountered this before and if so what resolution did you come to with it? It seems to be related to the appstore but I'm not sure why exactly this is happening and why Jamf Protect isn't simply marking this as Informational if that's what it is.----  Summary Page:JamfProBinaryModifiedThe Jamf binary is responsible for most of the actions taken by Jamf Pro. It is located at /usr/local/jamf/bin/jamf (alias at /usr/local/bin/jamf). If this file (or its alias) is moved or damaged, Jamf Pro will be unable to perform remote management actions. While an attacker might theoretically disable Jamf Pro to subvert its security controls, this detection is aimed at the end user disabling Jamf Pro without authorization. This detection alerts when the Jamf Pro binary

I'm trying to make an adjustment to the Outlook app for iOS and enforce Biometrics for the app. I have tested the following settings and know they work on a net new app deployment:<dict><key>com.microsoft.outlook.Auth.Biometric</key><string>true</string><key>com.microsoft.outlook.Auth.Biometric.UserChangeAllowed</key><string>false</string></dict>I'm trying to understand if I add this to my existing App that's deployed across all my iPhones currently if they will just update and enforce biometrics, or will I have to uninstall and then deploy the new app with the settings added?

I am looking to see if there is anything like the Make Me an Admin script that will work in macOS Ventura.  The current script does not work in Ventura. I don't get any report of errors just doesn't make the account an admin account. I do know about Privileges. I wanted something I can control the time the account is an admin. I only want to allow the accounts be admin for 30 minutes.

Testing Scheduled updates and this seems to work as advertised. I set a time and the device updates. But.. I cannot find a way to stop the update or change the date or time once sent? Sending a revised date / time via the beta Software Updates does not override the previous command.Removing plist lists for software update makes no difference and this is all DDM / jason.. Anyone dug further? 

Just wondering if any have managed to get the single sign on extension working with Google Chrome and Teams.  I can get SSO working in Outlook, but not in Chrome and teams, where I need to enter both Email adress and password when opening first time. 

We have a good number of mac devices are connected to internet, speaking to JAMF console and have the proper APNs connectivity but still JAMF is not deploying the pending configuration profile, if it is deploying then it is also slow, do you think if we have a good number of config profile created for deployment then it might be slow, or it has different causes? What is the resolution here?

Hi there,we are in the process of migrating users from one Office 365 tenant to another, and as part of the process we need to reset all Office apps running on macOS devices enrolled also in a new Jamf Instance. However, I am having some when resetting all Office apps on macOS devices. The old OneDrive volume is still visible in the side bar favorites in Finder. I can get everything else working using Office-Reset and an additional line that I am running to remove the OneDrive folder from the user's home directory, but I can't get the old OneDrive volume removed from the side bar in Finder. I have even tried uninstalling and reinstalling OneDrive. Please note, I only want to remove a specific OneDrive volume from the Finder sidebar  without affecting other favorites using a bash script, so resetting the plist is not an option for me as it will affect other favourite settings.. so far I have tried the below two scripts, but neither of them seem to do t

Are there any known problems with the 17.1 update and especially Apple TV (no 4K)? tvOS 17 pushed to our devices without problems, installing 17.1 delivers the following error "Jamf School cannot determine the OS update status. The update likely failed on the device."

Uploading any packages via the web interface immediately fails when clicking "Save" with a message, "Package failed to upload". Tried different browser, different computers, different PKGs, all the same result.The packages are not large or exotic. Any ideas?

Hi everyone,We're looking to harden our Jamf Pro environment and have a few questions before we proceed. Right now we have SSO turned on and pointing towards our IdP and it works fine. However in the Options section of Single Sign-On we have the following:Allow users to bypass the Single Sign-On authentication TICKEDI'm looking to turn this off, my question is will our break glass non-directory user account work still at the Failover URL we have generated?Enable Single Sign-On for Self Service for macOS TICKEDLeave this as-isEnable Single Sign-On for User Authentication during Enrollment UNTICKEDI'm looking to turn this on - will this redirect users to our IdP login page when they enrol a Zero Touch device?Enable Single Sign-On for Account-Driven Enrollment UNTICKEDAlso looking to turn this on, but it sounds a lot like the option above so my question is what is the difference?Once we have made the above changes, there's one more thing I'm looking to change if possible - in Enrollment c

Hello! We are in the process of implementing Cisco ISE in our environment. We are at the very beginning stages and are doing some information gathering for how we will configure ISE for all of our separate device types.We are using the "Essentials" session licenses for Cisco ISE so we are not able to integrate MDM capabilities directly into ISE and will instead be using certificate-based authentication against ISE to allow MDM devices onto the network. We would be using ADCS to pass out the certificates to the devices but were unsure how this would exactly work to pass local certs from our ADCS server to non-domain joined devices. I've seen this doc: https://learn.jamf.com/bundle/technical-articles/page/Integrating_Jamf_Pro_with_Cisco_ISE_3-1.html but just wanted to make sure that the processes in that doc are allowed with our basic license level and also if this doc is hitting the areas that are in question for me. What are other people doing to get the c

Hello Everyone,As per our company standards we need to disable the Safari profiles and Password Syncing with iCloud on macOS Sonoma, we have tried with some plist but that didn't work and does anyone has plist to block or disable the Safari profiles to iCloud. Attaching the screenshot for reference. 

We successfully upgraded our on-prem environment to 11.0.1 last week and have noticed an odd issue with a number of machines showing no values for any extension attributes. Out of about 2000 current machines, it only appears to have affected about 180 or so. Manually running a recon on the machines has fixed most of them and I created a policy to just run recon as a process (not from maintenance) adn that seems to be slowly whittling them down and getting most of them back. Anyone else seen anything like this?

With the rollout of Jamf Pro 11, my cloud tenant updated without issue. However after using the new updates for a few days, I'm becoming slightly annoyed by the change in color palettes.  Policy status (the 6% below) are brighter color palettes.  The Patch Management Statuses colors are what appear to be the pre-Jamf Pro 11 color palette.  It's semantics, I know, but when my dashboard is full of policies and Statuses that I use for at-a-glance updates, it's very noticeable. I know this isn't where you post feedback, but I know Jamf watches the forums. 

Can someone explain the Profile Identifier and how to find it?

Hi all,We're trying to hide the "Your screen is being observed" message on the lock screen while using ARD. This message also appears when using a DisplayLink dock:We've tried the command below, but it doesn't affect the lock screen:/System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/Resources/kickstart -config -clientopts -setmenuextra -menuextra noIs it possible to hide this?

Hi, So finally getting rid of an old Xserve, the data is being moved to new Windows Servers. Does anybody have a script that I can run on Snow Leopard Server that can tell me all the files and folders with over 256 characters as this will cause issues with the Robocopy. Thanks

We have folder restrictions on student's laptops. Anyone knows the location to this Photoshop PSCustomHook that I can whitelist?

My school is facing a management issue where many students are using Google Chrome's extensions feature to download VPN software. Is it possible to disable the installation of extensions from the Web Store on all student computers using Jamf Pro? Also, is there a way to disable the Chrome auto update? 

Going to upload the new device token and getting an error message "The File received is not valid".  Anyone got any ideas?  Sync is now failing due to downloading a new Token.

Wondering if anyone has come across this before; I've done a fair bit of searching, but haven't found anything. I’m trying to make a signed package for Jamf Connect Notify with a cert made against the Jamf CA (need to shoot off a support ticket for that one, but that can wait), but Composer crashes with it, and I’ve isolated it to the following:If I make the package in Packages, import and then try to convert it to source in Composer, Composer crashes at the end of itIf I make the package but edit the postinstall script to be #!/bin/sh prior to building, it will import/convert fine, but if I then edit it in Composer to be zsh, it crashes immediately upon saving.It seems that Composer cannot handle #!/bin/zsh at all - I've tested this with versions from 10.48 through to 11.0.1, with the behaviour repeating. Has anyone else come across this behaviour before? Very frustrating, as it's holding up getting the Notify panes tested. (M2 MBA, Sonoma 14.1, Composer 10.48 through 1

I have been working on deploying Connect Fonts and wanted to share my experience.Extensis has tools for installing the plugins.https://help.extensis.com/hc/en-us/articles/6290207443227sudo "/Applications/Connect Fonts.app/Contents/Resources/plugin-installer" [ --install-all | --uninstall-all|--uninstall-obsolete]And more info here.https://help.extensis.com/hc/en-us/articles/5628781808027-Remotely-deploying-Connect-Fonts-Desktop-Mac The problem is even after running the plugin-installer command through Jamf, the users were still getting prompted to install the plugins. And since our users are not admins they are not able to install them. Further the users were greeted with a startup wizard part of which prompts them to install plugins. Also Extensis suggests a method of packaging up their software in their knowledge base. This DOES NOT work since the app and the plugins within the app are quarantined from the DMG they provide. Here's the script I came up with.#!/bin/bash#