Does anybody have a script that can be run on a network account, to automatically add it to the sudoers file? We have several developers that will need to work with some code and use some sudo commands, that we do not want to have Admin access I'm aware this is splitting hairs somewhat

How to enable App Store app installation for users using managed Apple IDs via ABM? I have federation set up with Azure AD in ABM

Any way to disable or block all notifications from safari and only allow notifications for certain sites? Thank you!

Today we are releasing Jamf Pro 11.0. Highlights of this release include: Jamf Pro Interface RedesignThe Jamf Pro interface has been redesigned to improve clarity and ease of use. The redesign includes new sidebar navigation, larger font sizes, greater contrast between font and background colors, and adjustments to the padding and alignment of various elements. These accessibility improvements make it easier to read text and scan information quickly when using Jamf Pro. Account-Driven Device EnrollmentYou can now use Account-Driven Device Enrollment to enroll mobile devices with Jamf Pro. Account-Driven Device Enrollment allows administrators to enroll institutionally owned mobile devices with Managed Apple IDs, simplifying the enrollment process. Note: Account-Driven Device Enrollment requires mobile devices with iOS 17 or later, or iPadOS 17 or later. StateRAMP StatusJamf has attained StateRAMP Ready status for Jamf Pro. For more information, see StateRAMP Compliance in the Trust C

Jump-start your users’ on-boarding experience with SYM-Helper, a stand-alone macOS app to help MacAdmins more easily deploy Setup Your MacContinue reading …

Hello,I would like to know how to unenroll broken mobile devices in a clean way?I have no way to turn the devices on, or others have broken screens.I'd like to reset them and unenroll them to give them to the scrapyard.Do you have a procedure for this?Thanks in advance for any answers!

Hi - Simple question here, I'm just wondering if I can enable the self-service desktop app for just a subset of our users. We just recently deployed JAMF and I didn't have this turned on at the time. I'd like to flip it on now, but I'd like to do some testing and get things in there, and communicate what the new icon is before it shows up on everyones computer. Can I deploy it via policy or profile? Because it looks like a global setting.. Thanks!

How do you all keep an inventory on your devices? What do you use as an asset tag in Jamf? I am looking for a better way to track our devices.

Is there a way to create an extension attribute in JAMF under the 'Users' section that can also be displayed in the 'Computer' section? Currently, if I create an extension attribute in the 'Computers' section to mark a machine as 'Remote,' it applies only to that specific Mac and not to the user. Is it possible to make this user-specific information visible in the 'Computer' section as well?

Hey, I have one Mac's Recovery is locked with a very long password. I never configured this thing and I'm not sure how it happened. How can I fix it?

Today we are releasing a maintenance version of Jamf Pro. Jamf Pro 11.0.1 fixes the following product issues: [PI111089] Simultaneous PATCH requests to the /v2/mobile-devices/{id} endpoint in the Jamf Pro API no longer cause configuration profiles and provisioning profiles to unexpectedly reinstall. [PI113020] Improved the memory footprint of the Set Wallpaper remote command. [PI113193] In environments integrated with Microsoft Intune and using Single Sign-On extension, Jamf Pro no longer incorrectly reports some managed computers as “Deactivated” or “non-compliant”. [PI114175] The Jamf Pro installers now include Apache Tomcat 8.5.95 to mitigate vulnerabilities identified in Apache Tomcat 8.5.93. [PI114369] Jamf Pro user accounts with “%”, “&”, or “+” characters in their password can now successfully log in again. For additional information on what's included in this release, review the release notes via the Jamf Learning Hub. To access new versions of Jamf Pro, log into Ja

I successfully created and tested the autofill for office logins located here. However, Teams does not seem to play by the same rules. Has anyone had any luck uploading a plist for teams to autofill the user email?

Anyone else noticing strange formatting in Jamf email alerts? Seems they redesigned them during the update this past Friday.Getting strange characters and really poor formatting. Hard to read.

  It’s here! In Jamf Pro 11.0 the interface has been redesigned with a modern look and feel that improves clarity and ease of use. We’re excited to share many of these new features and enhancements that are part of this release.     We hope this resource continues to provide additional details to support your use of the features in this release. Thank you for your continued support and feedback!  

Hey,I would like to use Jamf to deploy security & privacy settings for the org.For example:turn the Camera on for Google Chrome & Zoomor turn screen recording on for Google Chrome & Zoomhow can I configure it? thanks!

Hi All,I have created a new enrolment process using Jamf Connect and SYM.This is now via a VM so I need a solution to capture the enrolment process for documentation and training purposes.What is the best creative method to accomplish this. This is a physical machine which I am working on. ThanksSimon

I recently received an alert that I had reached the "Valued Contributor II" rank in Jamf Nation. That's nice, but what are all of the ranks and how does one reach them? I don't think I've ever seen anything introducing us to these ranks. I'm always happy to contribute to the discussion and help others as much as I can.

We just had a round of passwords expire and now some of our users use their old AD password to get past the FV2 login screen, then use their newly reset AD password to get into the OS. How do we get the passwords to sync back up? I saw the apple solution to use a sudo touch command to delete the cache and let it rebuild, but that has not worked for us yet. Any other tips or trick on getting them back in sync?

We have several macbooks (Monterey and Ventura) that cannot boot anymore and are asking for a recovery key. After filling in the key an reinstallation doesn't work (error), only a complete format and reinstall solves the issue. Some users are able to get to the login screen after entering the recovery key at boot but then the macbook reboots back into the recovery mode. We tried safemode, logging mode etc. All the options that we could find couldn't prevent a complete wipe of the disk and reinstallation. We suspect this has something to do with a patch policy with an Safari 17 update but we are not sure. 

Hello Everyone, I like to ask if anyone uses the USB hub to restore multiple Apple Silicon Macs (like 5-7) using AC2. If you do which brand hub and specific cable? We already using Cambro Nix Thunder Sync 16 for iPad.Also, I can use the DFU blaster to put the Apple silicon Mac in DFU mode instantly one by one. just wondering if there is a faster way to do this. Thank you in advance for all the responses

Hi, We rolled out SentinelOne a couple of months ago, now we noticed users disabling SentinelOne underLoginItems>Allow in the Background in the system settings.  What is the best way to disable this? 

Hey there I am having the hardest time getting Autopkg set up to help Automate my teams workflow. I thought adding the Autopkgr gui would simplify how I set up and manage Autopkg, but it did not. I followed all default commands and even tried adding our SMB on prem server to Autopkg but Packages and groups are not able to be created and uploaded to my jamf pro. Any help will be greatly appreciated at this time.

Hello all,I have created a configuration profile with the values given below (https://learn.jamf.com/bundle/jamf-connect-documentation-current/page/authchanger.html) but unfortunately nothing happens. But when I distribute the command as policy the login window is reset. Policy Command (does work) :Configuration Profile (does not work) : I would be happy about some feedback 

Hi All!Prior to my current role, Bluetooth restrictions seemed to be all or nothing. Either users were free to connect to various Keyboards, Mice and Headsets or not at all.Now I have a mandate to allow specific, vendor approved Keyboards, Mice and Headsets...but nothing else via Bluetooth.What is your preferred method of managing BlueTooth devices in macOS/Jamf?  BlueTooth must be enabled but not discoverable and auto-pairing/file transfer type functionality needs to be disabled. 3rd Party Product? Config Profile? Script? Some combination of the 3?

Good morning all, We manage about 100 iPads spread out among campuses over a 100-mile distance. To my knowledge, no Teamviewer or equivalent would allow for screen sharing or control remotely from one location. I know that Apple has software that can do it when you call support, but I was curious to know if anyone has a workaround or anything I could have missed. Thank you!