Anyone have a script or extension attribute to pull this info, I am looking for the type of display connected i.e. Cinema, thunderbolt, other?

I have a team of people using Final Cut Pro. This team is very sensitive to updates to FCP and their tools (as it should be) so I need a way I can make FCP available to them in Self Service - and when they want/need to update they can in self service.I am sure other admin face this. Anyone have a "recipe" I can follow?

We are deploying Cisco Anyconnect with Umbrella on our fleet of 1000+ machines. Our secops team has dictated that the firewall must be set to block all incoming connections. We cannot get Umbrella to show protected with this firewall setting enabled. When we turn it off, Umbrella works great, but incoming connections are allowed. Has anyone got it working WITH the incoming connections blocked?

Hello All,Need a help on base64 encoding for Nudge for icondarkpath iconlight path screenshotdrakpath and screenshotlightpathif I use a .jpg or png and use base64 command to generate a base64 code then what I should do with these big string generated by base64 CLI? Should I paste the big string in the path in my config profile instead of the path of .jpg or png file on end point(Mac) ? Or I should do something else? Please guide me, I dont push the .png/.jpg on mac through a JAMF policy.

Both our cloud hosted Production and Dev instances are having errors with SSO starting today.  Anyone else experiencing this issue?  I just submitted a ticket into Jamf Support.  Checked with our web team and nothing has changed on their end.  They dug into the logs and came up with this:Finally was able to find a message in the Shibboleth IdP logs.  Based on the SAML metadata, the request from the service must be signed but it is not.  This is a setting at the Jamf service and my guess is that it was changed.

I try to add shared mailboxes on a managed iPhone in the Outlook App. The Exchange is hybrid On Premises and M365. But the Shared Mailbox option is missing on my devices.If the devices are unmanaged or managed by Intune, the option appears.Is there a config parameter missing to enable the function in Jamf Pro?

We are trying to modify our com.google.chrome.plist to allow two extensions to be installed by end users.  We block all extensions in our .plist file by using the "*" wildcard under "ExtensionInstallBlocklist", and have now added the "ExtensionInstallAllowlist" policy with a string containing the two extension ID's.  The chrome://policy page shows that both of the policies are OK so they are being recognized and should be working, however, when installing those two extensions they still say they are blocked by the administrator.  The Chrome policy description page shows that blocking all extensions and allowing specified ones is the way to only allow just certain extensions.  Is there something I'm missing here?Here is our plist, website url's have been removed:<?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>B

Hi All,We have been working on setting up Device compliance with EntraID for a while and had everything in place to begin rolling it out this week, everything was working as expected with devices being marked with the correct compliance.  As of Friday all of our test devices were marked as non-compliant and registering devices now seems to take significantly longer than usual, almost as if it's waiting for a 24hr sync before the devices are marked as registered in Intune and marked as non-compliant.  This seems to coincide with the timing of our update to Jamf Pro 11.Devices and users are in the correct groups and everything still appears normal from a setup perspective.Has anyone else had similar issues?Thanks,Ryan

Hi,If the devices are enrolled via UI method, the activation lock is not working on the devices to unlock them.Jamf informed us If the activation lock has been enabled THEN enrolled into Jamf Pro the activation bypass code will show but will not work in this case. The only way to get that machine unlocked is going to apple What should be the workaround apart from reaching out to Apple?

Hello i am in the process of mass deploying Checkpoint endpoint agent via jamf, how to enable full disk access via JAMF in system preference. Thank you in advance. 

Hello,I am testing Account driven BYOD enrollment, but am running into an issue. The iOS device is enrolled with a Managed Apple ID and the Corporate account shows in Settings. Everything appears to be OK until Self Service installs and I receive the following error in Self Service:"ERROR__ALERT_TITLEThere was an error enrolling your device: ENROLLMENT_STATUS_-FAIL.Please Contact your IT Administrator"Once I clear the error, Self Service is empty and no assigned apps are there. So it does not appear to be registering with the MAID for some reason. I look under Users>VPP Invitations where I have a test invitation to automatically register users with MAIDs and skip invitations. But the the Usage, it shows the test user status as "Invitation Incomplete."Can anyone point me in the right direction to clear this up?Any assistance is appreciated.

I've recently started as an Apple Admin and we use the Google Suite as much as we can. Gmail, Docs, Sheets, Drive, etc. We also manage our iOS devices with JAMF Pro, but we use Google's MDM for BYOD devices (access to Drive and Gmail on personal devices). The problem with this is that if someone wanted to access any of those things on a company owned device (one managed by JAMF Pro) they couldn't, because 2 MDMs can't control the same device. I'm wondering if anyone else out there has this same setup and what they are doing to get the best of both worlds; security for BYOD devices if someone "goes rogue" and we need to remove access to everything as well as all the great features JAMF Pro can offer for our company owned devices. Thanks!

Anyone integrating their JSS with Aruba ClearPass?Pros / Cons ?Ty!-Lionel

I have followed the Microsoft SSO Plugin guide here: https://learn.microsoft.com/en-us/mem/intune/configuration/use-enterprise-sso-plug-in-ios-ipados-with-intune?tabs=prereq-jamf-pro%2Ccreate-profile-jamf-pro but appear to be getting errors when Jamf tries to apply the profile. The error i get is:"Profile Installation Failed / The payload type “com.apple.extensiblesso” is not permitted to be installed for the system in multi-user mode." Is this something that just isnt possible with a shared iPad or is there a bit of extra config I need?

I was always under the impression that managed Apple TVs required a MDM remote command to initiate a tvOS update but I recently noticed most of my fleet has automatically updated to tvOS 17 on their own.  Is there a way to prevent this as this causes disruptions in the classroom?

Hello all! I've been having mixed results with Jamf Software and Patch Management for installing applications on user computers. With Jamf Software it took several hours before the first computer had the software (Grammarly Desktop) installed. A day later 1/3 of the 60 computers had it installed and now 3 days later there's a handful of computes where it's still pending, even with several successful checkins. Patch Management seems to randomly skip updates. Is creating a software package (and then a new one with each update) the most efficient way to manage applications?

Working on deploying KFM with a Silent Opt In. Happy to say this has worked perfectly on Apple Silicon based machines. The config profile deploys, OneDrive is restarted and KFM goes to work in the background.But on Intel machines, the Silent Opt In doesn't seem to work. Instead youre presented with this message. These are the KFM settings I have enabled: Here are the PPPC settings   

So I have a provisioning sequence that happens to all mac enrolled via DEP. The issue is once the configuration profiles that installs the WiFi 802.1X certificate is also set to auto-join and it breaks the continuation of the installation of the reset of the applications. I was wondering if any one has any suggestion that could assist me. I need to auto-join at some point to the WiFi network. Thanks

How are you guys using AppleTVs at your various facilities? What are the displays like? What information are you hosting?

Working on deploying KFM with a Silent Opt In. Happy to say this has worked perfectly on Apple Silicon based machines. The config profile deploys, OneDrive is restarted and KFM goes to work in the background.But on Intel machines, the Silent Opt In doesn't seem to work. Instead youre presented with this message. These are the KFM settings I have enabled: Here are the PPPC settings   

Hello i really need some assistance on setting up auto device enrollment or someone to explain me the process this is my first time doing this and i am super confused and lost not sure if anyone can get in a call with me via zoom or google meet i would just find talking through it and showing you my screen would be more convenient for me  but any help or guide on this would be very helpful (: 

Hello, can someone tell me what the best practice is for re-assigning Mac Mini hardware to any functional account or another employee.. The employee had left the organization, so we had to re-assign with any re-enrollment. If we re-assign, does it affect any login issues or any

Hi Team I am going a bit crazy. I am pushing this with JAMF Pro to some test machines and i get 2 popups. One is correct and the other is like this image. I have tried deleting all the config and post install scripts and redoing them but i cannot seem to identify whats happening? I get one that looks correct and the above also shows on the same machine at the same time. The JSON Config as well as the PLIST etc are all the default with NOTHING changed except the required versions and dates as well as switching to simple mode.

Just curious if anybody is able to get the Teams meeting link added when toggling to Teams Meeting or is it just not an option for MacOS. I went in to Calendar options and configured add online meetings and selected Teams. I've tried signing out of Office and teams. 

So I have an EA set to list who's logged into iCloud in Settings courtesy of @YanW  (thank you!). #!/bin/sh ## Get logged in user loggedInUser=$(stat -f%Su /dev/console) icloudaccount=$( defaults read /Users/$loggedInUser/Library/Preferences/MobileMeAccounts.plist Accounts | grep AccountID | cut -d '"' -f 2) if [ -z "$icloudaccount" ] then echo "<result>No Accounts Signed In</result>" else echo "<result>$icloudaccount</result>" fiDoes anyone have scripts for seeing who's logged into Messages, Photos, Music, etc?  We have some of it banned via profiles, but would like to catalog who snuck in.