I just upgraded to 10.2.1 and I'm drawing a blank for how I can brand our Self Service. I've sent the technical specifications of the icon and banner size to one of our graphic designers but without some samples of what is out there, we're kinda fumbling. I've had a couple ideas for just boring company logo over a photo of our building. Blah. I've had another idea for a banner image that I can change out with static alerts like holiday hours, company events, special software updates that need users' attention. But I don't know how they would look with the Self Service window at different sizes. Unfortunately JamfPro doesn't give us a sandbox to play around in to preview things. (I'm struggling to get a test server working at the moment) I know that the text overlay is white so our images have to have proper contrast for it to be seen, but I'd like to see some real-world examples. Let us see what you've got! :-)

I am running into an issue with a user that can't allow screen sharing, as I can RDP in due to accessibility's being disabled. I looked to the forms to see if I could find the PPPC for it.I did find something identifier "com.webex.meetingmanager" and anchor apple generic and certificate 1(field.1.2.840.113635.100.6.2.6]/" exists */ andcertificate leafield.1.2.840.113635.100.6.113]/" exists / and certificate leaf{subject.OU] = DE8Y96K9QPHowever after pushing it I came back with this error In the payload (UUID: 09DDCCB5-B571-4155-A60A-2229A4BD14DD), the key 'CodeRequirement' has an invalid value.Anyone able to assist me or point me to where I went wrong?

I have 10 iPads in front of me, all going to the same room at the same site. They are all identical, and in the same smart group receiving the same apps. All but 1 is accepting the push. The "black sheep" if you will, is the only one displaying this error "Sign into iTunes to allow "jamf..com" to manage and install apps. I have wiped the device, unmanaged it, deleted it, and re-enrolled it multiple times but I still get the same error. I have read other "fixes" about the app not having vpp checked but all of the other iPads are working (accepting all the apps) just fine.

Hello,I am finding that some apps are failing to install on iPads and the details listed are "Internal Error." Has anyone else encountered this? When I had apps fail to load in Jamf Pro I would wipe the iPad and re-enroll and they would all load. I was hoping to find a different solution in Jamf School. Thanks

Hello, I am working on a faster deployment for the end user but I am hitting a snag. We are manually creating the user account after the computer is set up. However, the problem is that Jamf is taking the admin Account and using that as the Fields for User and Location. Is there a good way that I can have the newest created account be imported and change these fields? (snapped a pic just to make it more clear).--This method is still in the testing stage so luckily zero headaches yet :D Just some extra info:No user account is created when we enroll the computer (Admin account is Added).I have chopped DEPNotify in Half. This way we can do the 30-40 minute install without the person needing to be here. Once the first half of DEP is installed, we create their account, i.e. appleguy13 and generic pw.Once they're here, we have them update the PW and run DEPNotify part two which grabs their name and computer name etc. However, I'm not getting this info imported in Jamf As alway

so before i delve into jamf and see if I can put some verbose logging on....I just caught a user upgrading to Monterey in place before we had our upgrade polices ready.  i did neglect to put a block on before hand as i have been swamped and forgot 😵 anyway, so i'm just testing a block now to stop any others launching the app if they download it, however it doesn't seem to be respecting it.  i have set it up like previous versions and the .jmf_settings got delivered and the new policy is in place:-    {      "jamfProID" : 30,      "shouldKill" : true,      "whitelistedUsers" : [       ],      "shouldDelete" : true,      "exactMatch" : true,      "message" : "Currently the upgrade to MacOS Mojave is not possible at this time, as it is still being tested against the managed build. Please contact the IT H

We are currently on a campaign to bring more visibility to Self-Service in our environment, since we have a lot of great solutions to common issues. My boss asked if I could get some usage statistics, which is easy for just about everything else in Jamf, but not for Self-Service. Odd, but it is what it is. I am aware there is a feature request open from 2012: https://www.jamf.com/jamf-nation/feature-requests/819/usage-statistic-reporting-for-selfservice. However, I am sure someone, somewhere has hacked a solution, so I am curious. How are you getting Self-Service usage reports to management? Assume that I have unlimited resources to implement your strategies.

I've updated a few test machines to 2.28.1.  Since doing so, I'm getting this error.  We are using a conditional access policy with Intune Integration.   Worked fine before upgrading from 2.26 to 2.28.1.   Any ideas?  If I exclude my userid from the CA policy, it works fine.  My initial thought was to exclude the Jamf Connect app from the policy, but wanted to post this first.  Thanks in advance for any help.   Here is the Entra sign in log.  Here is the policy.  Only require 1 of the 2 checked.  It targets all cloud apps.  Here is my test machine in Entra.      

(seriously amateur scripter) looking to upgrade how we manage device naming.Our naming policy is not complicated, Department-Building-Tag#, and our current script requires us to maintain a separate list of data to populate a dialog box that lets the user select from the available options:set Department to (choose from list {"AAA", "BBB", "CCC", "DDD", etc.But that means anytime there is a change in department structures, we need to update the Jamf>Network>Departments information, as well as the script. I am hoping to use API commands to grab the current list of departments when the Naming Policy is triggered something like:departmentList=$(curl -su username:password\\"https://url/JSSResource/departments" \\-H "accept: xml/text" \\| xmllint -format - \\| awk '/name/ {print}' \\| awk -F '[><]' '{print $3}')This gets me the data in a list, but I can't figure out how to (or if it is possible to) prompt the user to select from a list just by calling the variable:...set Depa

Following a twit by Richard Trouton, I thought it would be good to implement sudo in Touch ID authentication for our developers as one of the benefits to Sonoma, since Sonoma makes the change persistent even when updates are made.If you are interested follow the link to Richard Trouton's Wordpress site (https://derflounder.wordpress.com/2023/10/14/enabling-touch-id-authentication-for-sudo-on-macos-sonoma/)However, upon implementation I needed an EA to check if the authentication had been enabled or not since I implemented two self service policies; one to enable and the other to disable.Since the policies are ongoing, I needed smart computer groups to exclude enabled computers when the policy was enabled and only present the disable policy and vice versa.this is the EA that I used which reports if Touch ID has been enabled or not-------------------#!/bin/bash# Check if the file existsif [ -e /etc/pam.d/sudo_local ]; then# Check if the specific line exists and is uncommentedif grep -qE

How can we disable auto update on Xcode build application from jamf pro

Link:https://swdist.apple.com/content/downloads/09/40/042-74906-A_ZJ5SVXD513/6yfe7yuiin4fwvc9ku04hq2fb7jqxjxv85/Safari17.1VenturaAuto.pkg

Hi everyone,I'm working on setting up an Apple Configurator 2 laptop, from which we can bulk restore and enrol Macs (over DEP). I take it others are already doing this, so I'm wondering if so, which Thunderbolt/USB-C hub have you been using, and what your overall experience with AC2 and Apple Silicon Macs has been? Thanks!

Ever since edge switched to the new 113 updater I have run into a few macs that edge refuses to update.I am already using the plist to update<dict> <key>updatePolicies</key> <dict> <key>global</key> <dict> <key>UpdateDefault</key> <integer>0</integer> </dict> </dict> </dict>And it works fine. The macs that have the issue I noticed the EdgeUpdater folder is locked out and therefore blocking edge itself from updating.Macs that are updating ok,  this folder does not have a permission block.I even manually updated to version 117 and it does not fix the folder permission and edge is still not updating.Not sure if anyone has run into this or if they have a way to fix the folder permissions using Jamf. 

Hi, are there anyway for me to disable all other apps except Google Chrome for macOS Device.By default we have Apple Pages, Numbers, Safari etc. During exam, I only want students to login and only able to use only Google Chrome.Thank you

Consider this: A user has been using their personal iPad at a school and is now given a new, managed, iPad provided by the school. The user would like to use the new iPad as if it was the user's original one.The challenge is: How does the user get the new iPad set up so that it contains everything the personal iPad had, including all apps and their data? Because, when we try, it doesn't work.If the new iPad were not managed, this could be easily performed by Apple's Migration process (hold both near each other, or choose to restore from a backup). However, with this managed iPad, even though it starts the migration (nearby iPads) from the old to the new as usual, the iPad then recognizes that it's managed, downloads the profile and then sets it up as a default device, i.e. hardly anything is taken over from the personal iPad (no iCloud settings, no apps, no restoring of data from the cloud backup or from the other iPad).I am NOT an admin, but rather a friend who's trying to figure out

I have a mac book that freezes as soon as it connects to Wi-Fi. It works fine when connected via Ethernet.I don't see any alarming logs inside of console (however I'm normally a windows admin, so maybe I missed something).If anyone knows about this issue, please give me some tips. I'm only have this issue with one Mac, however I just re imaged the mac.

 Hello all,we had a break-in at one of our schools.Among other things, iPads were stolen. The police is already investigating.A few iPads have network access again and report to the Jamfschool server. The thief has stored his own Apple ID and installed apps. The IP address with which the iPad reports to the Jamfschool servers belongs to a hotspot.Is it possible to get access to the email address of the Apple ID via Jamfschool? Is it possible to access the files on the iPad in order to catch the thief in cooperation with the police?

Hi,The students sees a blue icon at the top of iPad if a teacher use the screen view in classroom-app to watch his screen. Is this possible to get rid of this icon? 

What might be the problem if only Apple apps like garageband and imovie are being sent to devices, but not anything else?They all seem to be throwing errors on the first attempt to install and stopping the whole queue. Then sometimes they will randomly work. 

Since I didn't find a solution for JAMF Pro to create QR codes for the parents. Is this something that only works with JAMF school? We'd like to prevent that students scan their device's JAMF Self Service codes with their smartphones to overwrite parent's settings.

So I am working to get Jamf Parent up and running and integrated with Jamf School, and i seemingly have done everything correctly. However, whenever a parent tries to scan the QR code to add their child's device to their Jamf Parent app, the message,"Your child's device cannot be found. Try again later or contact you child's school. Your child's school removed this device from the list of devices you can manage with Jamf Parent."How might I resolve this? I can't seem to find where I would add the device to a list that would allow the device to be managed by Jamf Parent.

Does anyone have Nudge experience? I would appreciate some help to get it set up. :)

Hello Jamf Nation, We have been having a really hard time silently installing LogMeIn as the Extension pop ups are still appearing despite adding all the necessary PPPC, System ExtensionS We have a policy setup that Installs the Client with the following script which works great: #!/bin/sh ############################################ # LogMeIn for Mac silent deployment script # In order to use, you must be a subscriber of LogMeIn Central # # To get a Deploy ID, log in to Central, click Deployments, then create a new one # Customize the settings as you see fit # The Deploy ID is part of the URL that is generated # ex. https://secure.logmein.com/i?l=en&c=xyz # xyz is the Deploy ID # # Tested on OS X 10.15.6 (Mojave) with JSS 10.23.0 ############################################ ############################################ # Set the deploy ID via command line argument # # DEPLOYID=$4 #Change to 1 if not using Casper Suite # echo "Deploy ID is: $DEPLOYID" #####

Hello Everyone,Im a very new JAMF user and ive been designated as the JAMF admin for my workplace. What im currently trying to do is to organize our devices (mostly ipads) we have on JAMF. Many of the devices have odd names and no building, department or any other labels. This makes it difficult to know who has the ipad and what it is being used for. I tried to send a lock screen message to all ipads for them to email me certain information but the message is very small at the bottom of the screen so I know no one is really going to see it. I was wondering if anyone had any idea on how I could reach the people with the ipads so I can get the information I need from them. Could I make the message on the lock screen bigger some how? Could I send a notification? any help would be greatly appreciated.Thanks.