To those of already using Apple TV for digital signage, what product are you using? How do you like it? I was looking at Carousel and Kitcast since they both integrate with Jamf.If you have used, or are using either of these products, what do you like about it? What do you dislike? Thanks!

We have profiles set up to disable iCloud in Settings for our student macbooks, but some have figured out how to add their accounts anyway via other apps tied into iCloud.  Is there a script that will force the removal of an iCloud account from a DEP device?  I tried some of the old ones from 5-6 years ago and they no longer function.Second question, is there a way to detect what devices have iCloud accounts on them from Jamf Pro?

Hello everyone,Where digging for a good technic/solution for us to use or Macs with AD environment. What is important to us is Azure (Entra) login on our Mac computers, that you get access to a home directory in the AD environment, that it provides good and functioning SSO for Mac and that it is easy and convenient to change passwords when needed , so that it syncs with the AD environment.Plus (** not a must)Branding at login **Information in Finder when current password is about to expire **Easy to change password (that syncs) directly in Finder **The solution should be updated frequently and support the latest macOS fairly soon after Apple releases a new version without any difficulty updating if neededJamf Connect is one option, but can it do all above? Or does it exist any other alternative that fulfils this wishes?Hope to find good solutions and users with good knowledge about this in this forum. :)Is MS SSO plug-in for the Mac a possible alternative? What about the built in

I would like to create a script that will allow us to run and confirm that our core apps like Outlook, Teams and others are installed before we give the machine to our normal users.Any help is greatly appreciated.

i found out users on ventura cannot upgrade to sonoma but users on mac os monterey can is there a way to block users from installing sonoma who are on monterey? 

I've been working on optimizing our patch management process using Jamf Pro, and I'm interested in hearing about any strategies or workflows that have proven effective for your teams. Specifically, I'm curious about best practices for scheduling and deploying patches, as well as any tips for ensuring a smooth and reliable update process. Your insights would be invaluable!Thank you for your time and expertise!

Hi,I am quite new to JAMF.I've got everything working except of one attribute: departmentThe guy who was assigned to install JAMF with me said, there is only one way to get the content of this attribute.You need to statically add departments in JAMF, that are the same as the content of the department attribute.And it works.But why use Azure if you need to statically write down everything and always need to keep it up to date?There are many other AD attributes, that can be read via JAMF, why not this one and is there a way to fix this??Thanks for your advice.

Hello,I was following this post: https://community.jamf.com/t5/jamf-pro/centos7-jss-file-distribution-share/td-p/227536 And set up all for sharing, but now when I access https://jamfshare.mycompany.com/CasperShare I do have Forbidden message: ForbiddenYou don't have permission to access this resource. Any thoughts ???? 

Has anyone noticed in JAMF 11.0.1 - When you create a new config profile and click save - the payload has been removed ...Im trying to create a PPPC.. i enter the detail and click save and then the payload is removed .. 

Hey Guys!I'm looking to gather insights on the best practices for using a script to bench and store devices while also ensuring the removal of all essential settings, including management licenses, to free up licenses until the devices are reactivated. #!/bin/bash LOGFILE="/var/log/jamf_script.log" log_message() { echo "$1" >> "$LOGFILE" echo "$1" } log_message "Script started on $(date)" log_message "" invalidateToken() { /usr/bin/curl --header "Authorization: Bearer $token" --request POST --silent --url "$jamfProURL/api/v1/auth/invalidate-token" log_message "Token invalidated." log_message "" } trap 'invalidateToken' EXIT function sendToGoogleSheet { # Gather system details timestamp=$(date '+%Y-%m-%d %H:%M:%S') hostname=$(hostname) loggedinuser=$(stat -f%Su /dev/console) serialnumber=$(system_profiler SPHardwareDataType | awk '/Serial/ {print $4}') macosversion=$(sw_vers -productVersion) # Check for the presence of the j

Hi All,I currently have a user that is attempting to transfer a Keynote presentation to student iPads but is coming up with a "AirDrop Failed"  but when opening the Keynote IOS App, it appears to have successfully transfered without issue. I also confirmed that it is just Keynote presentations that are having issuesI have turned off all C specific restrictions that I am aware of in the config profile that our has organisation setup but am still recieving the message. I tested with multiple and internal and they are all facing the same issue but unmanaged devices do not encounter the same issue which makes me believe that issue lies with the restrictions set within our config profileOther than the functionality restristions that explicitly mention "AirDrop", Is there anything else that I may be missing in the config profile that could be causing this issue?

I have a strange issue when I am deploying a configuration profile in order for the login window to display name and password text fields instead of user icons on a Sonoma device. With the profile I created installed, upon restart it still shows our local admin account icon and does not display the username and password fields but when we login to the local admin account and then log out, then the username and password fields are displayed correctly instead of user icons.  This only works until the computer is rebooted. As soon as the computer is restarted again it goes back to displaying the local admin user icon again and no username and password field. Has anyone run into this on Sonoma? Is there another payload I am missing besides the login prompt payload being set to name and password text fields? My goal is to have the computer boot to username and password fields so that users can login using LDAP credentials upon boot.

I see a number of post on here with help about setting up AnyConnect with an On-Prem-Server. I am new to Jamf, and am using the cloud DP. I cannot for the life of me, figure out how to get Cisco AnyConnect with Umbrella to install via Jamf. I tried doing a snapshot and that did not work, but I don't know why. I have worked with Cisco and at this time, they do not know how to support Jamf Cloud. Their instructions, I don't know how to make that work for the cloud. These are the instructions they sent me: Mass-Deployment-Using-JAMF-Casper-Suite I need help, please and thank you!

we had a Mac that was locked remotely for security reason with passcodeso each time user turns on he had screen asking for passcode. We had to remote wipe this device to erase org data on this Mac. 1 device was locked with a passcode available with us as admins2 we had sent remote wipe command while user was still locked for passcode3 as soon as we provide unlock passcode to user, he logged in to his Mac and within a min device checked in and executed wipe command4 device rebooted to internet recovery screen but failed and had showed message "Your computer is disabled .try again in 15 minutes""This device is not approved for use on the (org name ) network. Please contact your IT department to remediate"5 device is seen 'Unmanaged' in jamf and management tab has no options availableuser tried to access recovery mode but it loops back to same error messageI suspect firmware is locked but device is not anymore managed in jamf so can't do any action from jamf any suggestion will

Today we are releasing Jamf Pro 10.49. Highlights of this release include: New API Roles and Clients SettingsThe new API roles and clients functionality in Jamf Pro provides a dedicated interface for controlling access to the Jamf Pro API and the Classic API. Local Administrator Password Solution EnhancementsYou can now use the local administrator password solution (LAPS) feature in the Jamf Pro API to manage local administrator account passwords on computers via the Jamf management framework. This method for implementing LAPS supplements the existing method for managing the local administrator account passwords via an MDM command.   For additional information on what's included in this release, review the release notes via the Jamf Learning Hub. To access new versions of Jamf Pro, log into Jamf Account with your Jamf ID. The latest version is located in the Products section under Jamf Pro.   Cloud Upgrade Schedule Your Jamf Pro server, including any free sandbox e

I posted this in the macadmin Slack & kind of forgot to post it here...Just a 1st crack at it, but, I put this in Self Service so users can run the networkQuality tests. It gives the user the choice to run the parallel or serial testIt shows a progress screenIt displays the results at the end of the test in a dialogYou may need to set AppleScript PPPC exceptions but these osascript commands for the most part on recent versions of macOS should be fine without them. Enjoy!P.S. macOS Monterey only as far as I know... Sorry. #!/bin/zsh filpth='/System/Library/CoreServices/CoreTypes.bundle/Contents/Resources' tsttyp=$(/usr/bin/osascript -e "choose from list {\\"Download + Upload Speed\\", \\"Video Conferencing\\"} with title \\"Network Quality Test\\" with prompt \\"Please select test type to begin:\\"") case "$tsttyp" in 'false' ) exit ;; 'Download + Upload Speed' ) icnsnm='GenericNetworkIcon' option='-sv' ;; 'Video Conferencing' ) icnsnm='GroupIcon' op

Hi! i have a question to an Jamf GURU :)Is it possible to automatically add phone number to an iPhone via Jamf? Would be very nice if I could get an answer soon :) Thank you! 

 We are using dockutil to reset the dock. But it stop working on Sonoma 14.1 Is anyone else facing the issue ?Sharing the script we use   #!/bin/zshwhile ! pgrep -x Dock; dosleep 1done## currentUser=$(/bin/ls -l /dev/console | /usr/bin/awk '{print $3}')currentUserID=$(/usr/bin/id -u ${currentUser})currentUserPath="$(dscl . -read /Users/${currentUser} NFSHomeDirectory | awk -F ': ' '{print $2}')"currentUserDockPath="${currentUserPath}/Library/Preferences/com.apple.dock.plist" until [[ -e "${currentUserPath}/Library/Preferences/com.apple.dock.plist" ]]; do    echo "waiting for default dock.plist before making customizations"    sleep 1done /usr/local/bin/dockutil --remove all --restart "${currentUserDockPath}"/usr/local/bin/dockutil --add "/System/Applications/Launchpad.app" --position beginning --no-restart "${currentUserDockPath}"/usr/local/bin/dockutil --add "/System/Applications/App Store.app" --after "/System/Applicati

Hello, I set up the following four webhooks for testing within my JAMF server (Global Management -> Webhooks), they are as follows: Notify on MobileDeviceEnrolled (JSON)Notify on MobileDeviceUnEnrolled (JSON)Notify on JSSShutdown (JSON)Notify on JSSTartup (JSON)REQUEST.BIN TEST (JSON) These tie into our Microsoft Teams chat client, specifically using the 'Incoming Webhook' connector. The URLs provided are accurate and triple checked. Any of these events that occur generate a webhook, which was verified with REQUEST.BIN, however, I am not notified in Microsoft Teams. JAMF Support initially had me change the Webhook from XML to JSON, but there was no success. Any suggestions?

Does anyone have an idea of how to get FF to load policy logs correctly? If i load firefox on any computer I can view every category under history, but policy just shows a blank pane. This issue has persisted for months so I keep going back to Chrome/Safari, but I thought I'd here to see if there is a work around or if there's something I'm doing wrong. Issue persists w/: no plugins enabled (i.e. ad blocker)in private browsingfresh installwindows and macon several different networks (home, work, hotspot, vpn)

We have recently started getting M2 Macbooks into our company.I have smart group which should pick them up based on it been a laptop.the Machine in question is Macbook Pro 16-inch 2023 It doesn't seem to be, surely Macbook should cover all Macbooks right?I'm I missing something.

Hello, I need to set a Test server for Jamf Pro. We are using JamfPro as on-prem. Can i use my licence key for test server? How can you do this?

After the update was run on our cloud I can no longer view groups for computers or devices when logged in on an iPad.  The icons in the bottom left are not visible so there is nowhere to click to view the group members.  The groups are visible when viewing on a computer.

I have an open case with Jamf on this, but I wanted to see if anyone else has seen this issue. Over the past two weeks, we are seeing a huge increase in users receiving Jamf Connect notification that their Okta password is different from the password saved in Jamf Connect and that they need to sign-in to Jamf Connect again. Normally, this only happens if the user's password gets changed remotely. However, in all cases, the user's password has NOT changed. The bigger issue is that this will continue every time JC checks the password again. Sometimes is happens just a few times and go away, other times it will go on all day. Needless to say, my users are getting frustrated. Anyone seen this issue?

This is an odd one but I figured I'd share the fruits of my labors.  I was faced with a testing situation where I needed to fill up hard drives to reduce the amount of free space. I had to test pre-install conditions where there might not be enough free space on a hard drive - I can't test that unless a drive is almost full. I couldn't figure out how to quickly fill up a drive so I wrote a script to do it.  As written it can create files of 1GB, 5GB, 10GB, 50GB, and 100GB, but you can modify this to meet your specific needs. In the AppleScript selector window, I have added the approximate time it takes to create each size (CodeRunner is great for this). Obviously that will depend on the hardware it's run on. The script will create files on the desktop of the currently logged in user with the size in the filename and append a number to the end if there are duplicates. These generated files could also be used for the purpose of testing upload/download times to and from servers.