Has anyone had problems with Google Workspace failing authorization on a page refresh?This is the error we get. I've captured HAR logs and sent them to support and they've concluded "..this looks to be designed this way" so I'm asking Jamf Nation in an act of desperation if anyone else experiences authorization issues with Google workspace similar to this one while using JAMF Pro or have any idea what could be causing this issue.I have full access to the SAML request and Response and can share any other transaction errors upon request. 

 I already erased the disk. Mac asks me to connect to the Internet to activate it. I assume Mac doesn’t have any Jamf or MDM data. How could this Mac know it needs to re-install Jamf or MPM back?

Hi,We have an issue with templafy where SSO fails when we have the Microsoft Enterprise SSO plug in enabled. I removed the profile from my machine and SSO works.My question is does anyone know how to bypass or exclude SSO for Templafy as the documentation suggests you need the bundle ID but i do not want to exclude SSO for all office apps that may use SSO? Thanks in advance.

Is there a way to force the setting in Webex to automatically use webex for the "start call with" setting with a script or policy? There are some users that have this set to Facetime. In Webex, the 3 options available are Webex, Facetime and Microsoft Teams.I've found this plist that may have some power to change:  /Users/(CurrentUser)/Library/Preferences/com.apple.LaunchServices/com.apple.launchservices.secure.plist I'm unsure how to change these variables. I tried using the defaults command but no luck. Thanks in advanced!

We use Jamf Connect Menu to manage domain passwords on our Macs.  I had an end user this week report that the countdown of their password displayed a "-1" instead of the 20 something days they thought they had left.  I worked with Jamf Support and by the time the end user worked around to me for assistance, they had already changed their password and so, any logs which may have pointed to something helpful were overwritten and didn't help.  In light of that, I learned what Jamf Connect logs were most helpful in that situation and I created a script to gather them and upload them into Jamf.  I'd like to share it here in case others may find it useful also.  To be clear, I took what @kc9wwh (Josh Roskos) at Jamf had for uploading logs into Jamf and tweaked it to gather only the JC logs needed.  (Thanks Josh...! He deserves the credit.). I configured the script with encrypted password strings.  Josh explains all that on his post here: http

Hello Community, I have an issue with one employee's computer so I decided to solve it by deleting her computer from jamf then asking her to enroll again with an invitation link. After she installed jamf, her computer seems to have all profiles installed and shows that it is managed by jamf, but in Jamf Pro I cannot find her computer. I have asked her to run few commands in her computer terminal like : jamf recon and jamf enroll but they are not fixing the issue.  Any idea? Thank you, 

Hello All, This original topic (https://jamfnation.jamfsoftware.com/discussion.html?id=12584) is over a year old so I am creating a new topic. We want to block the students from running any applications from their folders. We created a policy to allow apps to run from the following locations:/Applications/System/Library//Library//usr/bin//bin/ We also disallowed the /Users/ folder As you can guess, we started receiving emails about blocked applications: SpotifyWebHelper - /Users/yourName/Library/LaunchAgents - Removed plistAdobe Updater - /Users/yourName/Library/LaunchAgents - Removed plist (This one was tricky because when you run the Updater through Adobe, it will run. But when the Updater is run from the Users Library folder, it is blocked obviously) Currently, I am attempting to locate "Printer Proxy". A student reported an issue when she tries to print to her home printer, the application "Printer Proxy" is blocked. If anyone is currently restricting Applications as we a

Trying to set up a new iPad this morning and many apps are not installing. Failing with an error of No license was found for app ........ Anyone else seeing this today?

This is a more Apple discussion then Jamf - but guess there should be some admins with knowledgeIt is regard to Managed Apple ID - where we as company has 2 scenarios1.Company owned devices, where users have created an user@company.comThey use it for work as they don´t want to use their own private apple id on a company device. Data storage is according to company rules only onedrive 2 BYOD devices, where users typically use their own private email address as apple idOverall as I understand the primary benefit of managed apple id, is on BYOD, where you can enroll it with a managed apple id - and still use the private apple id on the device for all private.But what benefits is there on a company owned device to use managed apple id ? - I know some talk about data should not be stored on a privat create company account - but if they instead create a apple id on any created outlook/gmail account the data is still out of company reach.I miss some golden points why managed Apple ID cou

IssueI am unable to upload any packages when I go to Settings > Computer Management > Packages > + New.I click on choose file and select the .pkg file I want to upload, click save, and it will just continue to display "Uploading" without ever actually uploading the package. TestingI have tried to recreate the Cloud Distribution Point. It is using Jamf Cloud as the CDN. If I run a connection test it shows successful "The cloud service was successfully contacted". I have tried uploading different packages with different sizes. Nothing too large. I have tried other package formats like .dmg as well. Tried uploading with different browsers, different accounts, different networks, different computers, different OS's but still no luck. 

Hi All,Total Jamf newbie here. I would like to know if any of you have had any experience with JAMF Connect and DFS shares. Obviously it is stated in the documentation that this is not supported. Have you got any workarounds to avoid binding the Mac to the domain?Also how about printing? Is it easy to integrate with any SaaS printing services?

Hi there,Recently (within the last 3 months) we've noticed that devices would randomly stop checking in for weeks at a time. We have confirmed that these devices are connected to stable internet that is not blocking connections between the device and Jamf. The particularly odd behaviour is that after a 2-3 week delay the device would then just checkin as per usual and then continue the same trend of not checking in again.This behaviour is seemingly intermittent without any obvious reasons as to why it's happening. Usually to force a checkin I would have to use the Jamf Pro API to force re-deployment of Jamf Pro software binaries on the device this however does not resolve the issue permanently. The device continues to follow the above mentioned trend.

Hello Community,  I am using JCE to upload configuration profiles automatically to our computers.  and for getting the client ID and secret, I believe its done through creating a new API Role, but I am wondering what are the least necessary privileges needed for this role. any one has an idea?  Thanks,

Hello Community, I have three managed computers that have their firewall status as not enabled though the profiles concerning enabling the firewall are installed. anyone have an idea? Thank you,

Hi All. We noticed a lot of network bandwidth when using the Mac Apps installers via Jamf, and abnormally large sizes for application updates, such as Microsoft Excel. I asked Jamf Support in a ticket how big the update was for Microsoft Excel, going from 16.76 to 16.77 [for the Jamf Mac Apps installers], they said it was 1.23GB. But when using MAU (Microsoft AutoUpdate), the update size is much smaller (less than 100 mb).Another user commented on this a few years ago, but it was in reference to Jamf Patch Management (not Mac Apps installers). That link to that thread can be found here.Within that thread, the user links to a Mac Admins site, which showcases how big the current updates are for all Microsoft apps: https://macadmins.software/updatesize/You can see the update size for Excel is under 100mb, and nowhere near 1.2gb. It may be possible that Jamf is using the updater PKG provider by Microsoft, which by itself is around 1gb. If you scroll down on this page, under Update pac

Hello togehterI just ran into an issue where I updated to Jamf Pro 11 and after that I could not log in anymore. There is an issue if the password has special characters. But the hot fix is already on the way:This behavior has been documented under the PI114369 and it looks like passwords with special characters like % & or + will not work on Jamf Pro 11. Next week we will release a 11.0.1 hotfix, which should resolve the issue, but until it is released, I would recommend using passwords without special characters.

Just started using Jamf Pro and Connect. In anticipation of upgrading some users from existing non-Jamf Macs to new Jamf Macs, I tried a migration assistant test on a few brand new MacBook Air M2's. On the source Mac, migration assistant sits on a "setting up" screen for 5+ minutes before kicking back to the login screen. I confirmed this to be related to Jamf because I successfully got migration assistant working with a non-jamf MacBook Air M2. Any help or advice is appreciated. 

Is it possible to completely disable iCloud all-together? I know we can disable elements of iCloud in a Configuration Profile, but if we wanted to force-sign-out users from iCloud, then prevent a user from logging into iCloud ever again, can we do this?

So we have cloud JAMF Pro, and JAMF 11. But this issue happened before we upgraded.Basically I install the JAMF TEACHER APP on an iPad (test iPad) and go through the initial setup.... then it says NO INTERNET Now before you say anything YES I have internet LOL!! I called in but not heard back so I am not sure what to do. I know I am not the only one :) ?

Hello all,I have received the best assistance with finding a script to determine users slack architecture type it is currently used as an extension attribute  here is the script, I wanted to know if there is a way to adjust the script so it works more behind the scenes now it is using the lipo command which on a recurring check in a user will get a prompt to install the lip command and it takes about 40 min to complete is there a way to adjust the script so when a user turns on the computer it will already be ran so on jamf we can check the extension attribute section and tell us what version of slack they have wether it is intel, universal, or silicon  basically is there another route i can go in the script that does not use the lipo command  

THANKS DEAN! THIS WILL BE GREAT! See you at JNUC!

My organization is looking to enable the firewall but allow AirPlay, Remote Desktop. Has anyone successfully created a Config Profile that would allow this? I can see some options when I'm in the System Settings -> Network -> Firewall pref panel but those options aren't available in the config profile. 

I've gone through different discussions here (old ones) and just with a question. I can see there's no official way to set default browsers in Jamf Pro.  The only way of accomplishing this would be to either:A.) Create a script setting the default browser and deploying via a PolicyORB.) Create a custom configuration profile using iMazing Profile Editor, export it, sign it, and upload it to Jamf Pro.Has anyone done either of these and can facilitate further input so this is pushed out to a mac fleet? Your input is appreciated - thanks!  

Introduction Migrating from an on-premises Jamf Pro environment to Jamf Cloud offers numerous benefits, including increased scalability, simplified maintenance, and enhanced security. However, the migration process requires careful planning and coordination to ensure a seamless transition. In this article, we will explore the steps involved in migrating from on-premises Jamf Pro to Jamf Cloud, along with key considerations and tips for a successful migration.   Preparation Before initiating the migration process, several prerequisites must be fulfilled. Firstly, it is important to update your on-premises Jamf instance to the latest version. Jamf Cloud instances are automatically upgraded and kept up to date, so making sure your on-premise version is in sync with Jamf Cloud will ensure compatibility. Upgrading to the latest version also ensures that you have access to the latest features and enhancements available in Jamf Pro. For more information, see Jamf's documentation on Prepa

Hi Jamf Pro,I have a user reporting that they can only use their touch ID when unlokcing from sleep, but not if they completely sign out or restart the device. I have Allow Touch ID selected in my Restrictions Config. Profile, but I'm wondering if I'm missing something else. I don't think there are any conflicting config. profiles or policies but I do have a login profile --I didn't see anything about touch ID in the Login Window payload so I assume this isn't an issue but hopefully someone can give me further insights!Thank you,G