Hi, I am wondering if there is a way to force Jamf App Catalog apps like M$ Office apps or web browsers to install on a reimaged device or when an update is avaialble 

As has been discussed in many feature requests, by having the /?failover page be available to sign into the Jamf admin page when SSO is enabled, Jamf has essentially defeated the main point of using SSO - enforcement of MFA. Being able to access the admin page externally with nothing but a username and password just isn't secure. We do have a locally hosted Jamf server so we do have access to all the Tomcat config files. What I'm looking for is any way to block/disable/break that "back door" of using the /?failover. Obviously firewalls and the like will be one area of investigation but I'm also looking for any ideas pertaining to the server itself. Is there anything in the Tomcat server that could be adjusted/deleted/broken that would prevent that /?failover page from being used?

Having a problem with an iPad that enrolls without a problem but when I launch Self Service it gives me the following screen. Any suggestions as to why this is happening?  Thanks

Just recently took over as MDM admin for Jamf Pro and we have no endpoint security on our IOS devices. I think it's too late in the year to get purchase approval for Jamf Protect. We have an M365 license right now and deploy the O365 mobiles apps to our IOS devices. We have zero Intune integration with mobiles right now.Question is can I deploy the Defender app in its default state and at least get some endpoint protection vs what we have now (ie nothing)?Will it even do anything if it doesn't have integration with a MSFT based central management system?ThanksRob

Currently on 10.39. After upgrading, we noticed that the Jamf App Catalog no longer shows as an option under Mac Apps, nor are the ones I already had set up. Was this feature removed? Do I need to roll back to 10.37?

I'm having an issue with configuration of an older device that was previously manage with our old Apple MDM PRIM server. I've assigned this iPad to JAMF through the ABM but it doesn't show up in the pre-stage enrollment on JAMF. I think the device is "looking for the old MDM which no longer exists. Apple configurator doesn't seem to recognize this particular iPad; I think it is due to the old configuration. Can someone offer advice on how to remove or reset the device to allow reconfiguration? 

When Docker installs on a machine, it asks the user for root privileges to finish its installation process after you start it the first time. In our environment, we decided that it's best users don't need to enter any sort of credentials to finish the installation of an application. So, via a trail of troubleshooting steps I found online and some trial & error, I was able to put together an installer that does not need root privileges to finish its installation. Use the following directions to create a version of the installer that does not require Admin Rights. If you are already familiar with making JSS policies and using Composer, check out the TLDR section at the bottom. Download Docker For Mac Mount the Docker DMG

Howdy everyone, has anyone had any issues installing Cisco Secure Client in Ventura after packaging in composer?

Afternoon All How is everyone handling the recent 13.6.2 update seems its not for everythingNOTE: The Ventura 13.6.2 update is not a unified build & only for specific models13.6.2 (22G2321)MBP M3 14"iMac M3 2iMac M3 413.6.2 (22G320)MBP M2 Max 14"MBP M2 Max 16"MBP M2 Pro 14"MBP M2 Pro 16"MBP M1 Pro 16"MBP M1 Max 16"MBP M1 Pro 14"MBP M1 Max 14" I assume a smart group would be best approach not sure whats the best way to capture all devices affected.or is the old software updated workflow able to handle this.Thanks  

i tried that:<restricted_software> <general> <name>Restrict High Sierra</name> <process_name>Install macOS High Sierra.app</process_name> <match_exact_process_name>true</match_exact_process_name> <send_notification>true</send_notification> <kill_process>true</kill_process> <delete_executable>true</delete_executable> <display_message>High Sierra is not yet supported, check Self Service after public release.</display_message> <site> <id>-1</id> <name>None</name> </site> </general> <scope> <all_computers>false</all_computers> <computers/> <computer_groups>24</computer_groups> <buildings/> <departments/> <exclusions> <computers/> <computer_groups/> <buildings/> <departments/> <users/> </exclusions>

In Self Service for iOS 11.2.0 a change was made that requires both the MANAGEMENT_ID and UDID keys in the Preferences field on the App Configuration tab for Self Service for iOS. If you are experiencing an error, confirm that both keys are present in the app configuration.We are working on a resolution that will allow either one or both of these keys to be present in the app configuration.

Hi.I would like to deploy a policy on all devices that prohibits connection to unencrypted Wi-Fi.Is there a way to accomplish this?

Hello Jamf People! Anyone else having issue with their 4th gen Apple tvs not waking up once they go to sleep? They will not wake up when we are trying to airplay to them and will not wake up with the remote. All Apple TVs are DEP enrolled. tvOS 10.2.1JSS9.99.0-t1494340586

Hi Everyone.  I have a profile deploying to a test iPad.  The profile contains only a the following Airprint payload: .76 is a Printer Pool being shared on an iMac running Sonoma, wired ethernet.30 is a fairly new Ricoh printer, wired ethernetipad is of course wifi, on the same subnetI can print to the pool and printer from my laptop without issue (also on the same wifi)The ipad cannot.  In fact even though the profile is indeed showing up on the ipad (Settings > Device Management), the printers are not listed when in an app, e.g. Chrome, Safari, etc.  I would think that even if the printer was having an issue, they would still be listed (a opposed to being discovered over Bonjour).  For example, if I open Chrome, browse to a website, click the Share button, click print, click No printer s

Hello all!This is something of a follow-up to a previous post of mine. We are starting the process of convincing our IT Security and Leadership teams that allowing our Macs to download OS updates from Apple is a better alternative to downloading/packaging/deploying the OS.app ourselves. To strengthen our case, I'm looking for resources to back up the claim that softwareupdate --fetch-full-installer is no longer recommended by Apple. I feel like I've heard from multiple people that the download/package method is going to be deprecated "soon" and that it can introduce problems that wouldn't be an issue if the Macs download the updates themselves, but I'm struggling to find any documentation from Apple or reputable third-parties on this. There's plenty on the how of managing OS updates via policy or mass acti

Hello I am testing automated device enrollment and during the test we have 1 failed command and i have no idea what it means can anyone shed some light on the error message please  and please let me know what i can do to not get the error message to pop up anymore i appreciate any assistance in advance (:  

What are folks doing to update thier Macs? Both of Jamf's methods are flaky at best. Anyone get a straight answer from support on this? We had a ticket that went nowhere for 3 months. Also had the assurance that this would be resolved with Jamf Pro 11 and Sonoma. We see the same flaky business happening. We manage a few hundred Mac desktops and about the same Mac laptops. Nudge is not an option for Lab environements. Trying to understand how Jamf Pro is helping streamline the process of securing our Macs. We have met all of the requirements for things to work according to the support engineer we worked with.Would like to hear how other admins are dealing witht this? 

We Seem to have developed a problem since upgrading to Jamf 11 that when we try to push out a Configuration profile to enable/disable an item in Privacy and Security the Config Profile lists as deployed, is appearing on the laptops list of Config Profile but absolutly nothing has changed in the Privacy and Security settings. For Example trying to set up the new Teams program with Folder Access the Config Profile is correct but nothing has changed on the device. Our Position is correct except no Alderaan.

Hello, I'm looking to modify the configuration file for Cisco AnyConnect for our users. The file xml by default goes to /opt/cisco/anyconnect/profile/. I wish to make a simple alteration to modify the hostname and address name of the VPNs available.What is the best course of action for this? Should I create a pkg file to overwrite the already existing config file or is there a way to simply edit it? Thank you.

Hello,I have a list of serial numbers for devices from our inventory system and I want to see their status in Jamf School. Is there a way to search Jamf School using that list of serial numbers? I know this is possible in Jamf Pro, so I am hoping that there is something similar afailable in Jamf School.

Hello,Just after enrolling the Mac on Macos 14 with Jamf prestage, there is this grey screen. (It happens just before creating the user account so when inspect this mac with jamf, there is only the management account created)On the grey screen, there is only login and password.Is there a bug ? Or does it happened to you ?

I have the following code to update wallpaper with custom base64 encoded image. I am confident this is correct, but I keep getting the error "Problem sending command, prior command may be pending, or device may not be capable."I can't seem to find any indication what would cause this. Any thoughts or ideas would be appreciated.   $curl = curl_init(); curl_setopt_array($curl, array( CURLOPT_URL => 'https://myserver.jamfcloud.com/JSSResource/mobiledevicecommands/command', CURLOPT_RETURNTRANSFER => true, CURLOPT_ENCODING => '', CURLOPT_MAXREDIRS => 10, CURLOPT_TIMEOUT => 0, CURLOPT_FOLLOWLOCATION => true, CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1, CURLOPT_CUSTOMREQUEST => 'POST', CURLOPT_POSTFIELDS =>'<mobile_device_command> <general> <command>Wallpaper</command> <wallpaper_settings>1</wallpaper_settings> <wall

Hi all, I'm trying to upload a guidance from Compliance Editor to Jamf pro. I'm at the portion where it's asking for a client ID and secret. I haven't used the jamf API before and I know you need to create a API role first, but I'm not sure what privileges I would need for a compliance editor upload.

Hello we are currently testing a privilage management software and we have demoded some of our admins to standard users, we noticed that standard users can not start a time machine back up, we did a bit of search and located a few scripts with the following lines  but they dont seem to change anything security authorizationdb write system.preferences.timemachine allow/usr/bin/security authorizationdb write system.preferences.timemachine allow we have used similar code  for print and wifi settings and they do seem to allow users to print and connect to wifi but enabling time machine still gives the MacOS pop up asking for credentials on ventura and sonoma. "system preferences is tyring to modify your systems settings" - "enter your password to allow this" we tried adding the /usr/bin/security authorizationdb write system.preferences.timemachine authenticate-session-owner-or-adminto allow all u

I've deployed SMART Notebook v21 and 22 in the past, but I want to get everybody upgraded to version 23. I'm ignoring the product key. The gist of it at the moment is that if I push out the v23 pkg to a device that already has v21 or v22, Jamf reports an error on install: Installation failed. The installer reported: installer: Package name is SMART Education Software installer: Upgrading at base path / installer: The upgrade failed. (The Installer encountered an error that caused the installation to fail. Contact the software manufacturer for assistance. An unexpected error occurred while moving files to the final destination.) If I install the v23 pkg and there aren't any versions already installed, the install goes fine.Here's some detail on the installer:Installs a folder called "SMART Technologies" to the Applications folder, containing a bunch of apps, and another folder with a bunch of apps. None of those app names