We're noticing with our Apple Silicon Macbook Airs that the wifi sometimes goes on the fritz after the device sleeps, in that it refuses to connect to any network until rebooted.If someone is aware of a fix, please let me know, but we've been trying a few things and seem to be able to mitigate it by changing System Settings > Battery > Options > Wake for Network Access setting to Never. I'm not sure if this actually solves the issue, or if it's just coincidentally helping, but I'm wondering if we can set this from Jamf.I found an option in the Energy Saver section under Configuration Profiles called "Wake for Ethernet network administrator access" but I'm not sure if this is referring to the same setting I'm looking at within in Ventura/Sonoma.Thanks! 

We are having an issue with DNS in our environment.  Here's what happens:-We take the iMac out of the box-Run through set up wizard and set ladmin as administrator. When we launch terminal it already has a hostname called from another PC or Mac. This is before we name the computer L-###-M##, E-###-## or F-###-## or enroll it into JAMF Cloud.It got so bad that we started having our network team delete the DNS and AD records when we erased and installed our iMacs; no dice.We've been told they will look into it for years (since High Sierra).  I'm working with what little I know about networking so any suggestions are appreciated.

Anyone switched from Carbon Black app control, and if so, what product did you go with?

We are using Jamf Setup on iOS shared devices with Entra/Azure for SSO. Has anyone found a better way for user to type their usernames during login? We have a long domain name along with users full name for their ID. So we would like a better way for users to be able to supply their username when checking out devices. From what I understand you cant use an nfc or barcode or qr code on ios to esentially read the username from a code and open the authenticator app and type in the username.  Has anyone found a better solution for this challenge?

Additional information about Microsoft's Conditional Access filters for apps is available here. What is a “Custom Security Attribute”  Simply, the custom security attribute lets you stick a Post-It Note with anything you want written on it onto an Enterprise app, a user, or any other Azure or Azure AD resources.  Once you’ve tagged it, you can use that tag for things like applying conditional access policies or exempting apps or users from the policy. How are Custom Security Attributes used with Azure Active Directory Conditional Access policies Custom security attributes allow an administrator to tag an application or web service with a special flag.  This flag could be used like a group membership for applications, or it can be used to apply policies to an application which would not normally be subject to conditional access rules like native/mobile App registrations like those used with Jamf Connect.   In these examples, we will: Use a custom security attrib

I looking for a script that will force my machines to do an update to the latest version. Especially since we are required to use macOS Sonoma 14.0.

When a configuration profile for printer management is deployed to a Mac before the printer drivers are installed, the printers are configured as generic printers. Even the release notes of Jamf School mention this phenomenon:Best Practice: Deploying printer drivers to device groups before configuring a printer management profile ensures that the printers are mapped with the correct drivers instead of generic drivers.Question: how can you make sure that the printer management profile only gets deployed after the installation of the printer driver profile has been finished?

I'm looking for the correct API method to get a list of computers in a smart group.The documentation for smart-computer-groups-preview says it does exactly what I want, but I believe that description is incorrect.It says: Recalculates the smart group for the given id and then returns the ids for the computers in the smart groupThat's exactly what I need... unfortunately, it doesn't work. It just returns the count of computers in the Smart Group, it doesn't return the list of computer IDs. Even the example responses in the documentation just show it returning a Count.What's the right way to get the list of computers in a Smart Group from the API? Thank you!

Looking for a deployment script for Dropbox, so far I have found out that Dropbox does not provide an easy way to deploy their applications. Maybe someone has encountered the same problem before and has script/pkg that could help?

ik can't find it in https://xxx.jamfcloud.com/JSSResource/computers/subset/basic and in https://xxx.jamfcloud.com/JSSResource/computers/id/$deviceid.where the heck is it? :)regards 

On a test Mac I converted my mobile account from mobile to local using Rich Trouton's script. This appears to have worked without issue. I've then applied a simple config profile to the test Mac to enable the Kerberos SSO Extension. I can sign in and get a solid key icon in the menu bar and all appears well. However, it realizes that the account password is different than what's defined in AD. I get prompted to put in the AD password and then the local password. It attempst to sync the local account password with the AD password but keeps failing - "Problem setting login password" "There was a problem setting your login password to match your Active Directory password." Please contact your IT help desk for assistance." I've tried this numerous times and it fails each time.

I'm a bit confused on how Jamf Notify needs to be set up.I get the notify screens after enrollment but I'm getting black out screen for 30 seconds afterwards.  I've looked here But I'm not sure I'm implementing it correctly. I do see a notify screen but I'm unclear which of the below are making that happen.Q: What's the most basic form of Notify with the NotifyLogStyle key-value set to jamf ?Q: What is the minimum I need to get Notify to work?Currently I have Authchanger (see below).Basic notify script in package(copied the from jamf docs did not change this at all).Script path in login script.NotifyLogStyle key-value set to jamf (in login profile)  script args are crrently not set in the login profile. Do they have to be?Not sure where the ScriptArgs should go (login profile?)  what they should be set to and what they actually do.I'm using Azure but I don't have a OIDCIDTokenPath setrecap of set up:I've added a

This pop-up asking the user to restart keeps coming up, even after a restart and update. How can I find out what update or configuration is causing this?

I need to whitelist Jabra Direct in a Configuration Profile since they're still using a kernal extension, but I've been unable to get the Team ID and Kernal Extension Bundle name from Jabra Enterprise Support (they read whitelist and think I'm trying to whitelist a url). I can't seem to reach anyone there who knows what I'm talking about. Do any of you have this whitelisted already who can post the Team ID and Kernal Extension Bundle name?

Please add a option for dark mode.. too much white

Hi All,I am curious if its possible to create a configuration profile using custom schema to modify the profile.xml settings?I know we can package it with installer etc and that's what I am doing but i want to know if there is an easier way to update the profile.xml when there is changes in the connection name or server etc? Thank you!

I have a script that uses an ID & PW with curl and it works perfectly when I run it locally. When I define $4 as username and $5 as the password (with the respective values in the policy) and run the script in Jamf it just hangs and I can't figure out why.curl -u username:password https://company.com... works perfectly when run locally. It also works in Jamf, but I'd rather not put the credentials directly in the script.curl -u $4:$5 https://company.com... does not work when run from Jamf.I have tried variations like $4 : $5 or "$4" : "$5" or '$4' : '$5' or "$4":"$5" or '$4':'$5' I've even verified the values with a line that says echo $4 $5 and it does report the values correctly.However, if I define variables in the script like $acct=username and $pw=password and use  $acct:$pw in the curl command, that works just fine, but once again, I'd rather not put the credentials directly in the script. It seems that I can't get the variables to work when defined i

I have wiped my macbook many times and never had an issue with Teams and Chrome installing - since updating mac to Sonoma and Jamf being upgraded - Teams and Chrome will no longer install - just shows Pending -- Also some of my configuration profiles for system extensions will now no longer install since the updates  (Cisco AnyConnect and Trend Micro)  - any ideas on how to resolve? Nothing else has changed - same Jamf build and configs that worked with no issues previously

Hi,I'm using Jamf Pro (10.50.0-t1693149930} and I was wondering if someone can guide me to creating a configuration profile to block or prevent the "InstallDefender" from installing with Office 365. Any other suggestion affective suggestion is welcome.https://learn.microsoft.com/en-us/deployoffice/mac/preferences-office#excluding-appsThanks in advance.

I have deployed a Config Profile with the following code to block Software Update from seeing the major OS releases (Sonoma) for 90 days with com.apple.applicationaccess for the domain: <plist> <dict> <key>enforcedSoftwareUpdateMajorOSDeferredInstallDelay</key> <integer>90</integer> <key>forceDelayedMajorSoftwareUpdates</key> <true/> </dict> </plist>  Sonoma was released by Apple 25 minutes ago and already I see Macs that are displaying Sonoma as an available update! I have verified that the Config Profile has been installed on these Macs for many weeks. Every single time there's a new Major OS release, it's like trying to hit a moving target. How on earth are we supposed to block Major OS releases?  

I have created a configuration profile for the dock. I tried to do it with Dock Master and the dock resets after the computer reboots. (sounds like working as intended, however I do not want to have it this restrictive) Then I tried iMazing Profile Editor and the dock reset as well and the magnification got locked. so really want I want to do is to Crate a dock, place the icons, and then the user can modify it as they wish in the exception to removing 2 icons that must stay.

Hello,I've recently upgraded a MacBook to macOS 14, but Jamf Connect (2.27.0) is not working properly.When i log off, i see just the normal Sonoma Logon-Screen.Is there a new setting?Do i need to turn off Filevault?Thanks!

A tiny bit of a hiccup with JAMF that might affect one of the more 'special' users in my company!When deploying devices, we block practically all iCloud functionality. The user can log in, but document and data sync (such as photos, etc.) is disabled. All done out of security, I must point out that the iCloud accounts are just like any other iCloud account (not managed by the company). All new iPhones receive a configuration profile related to security and iPhone functionally. Let's just call this 'Standard'. For example, certain apps are not available to download. Screenshots cannot be taken, manual resets of the iPhone are not allowed, and so on.There is another config profile for 'Managers' who are afforded a little more freedom in terms of what they can do. Screenshots are allowed. Otherwise blocked apps from the App Store can be installed. WhatsApp is the best example.VPP apps auto-install on the iPhones soon after being enrolled. Nearly everything in the company is Microsoft rela

Hi,I'm using Jamf Pro (10.50.0-t1693149930} and I was wondering if someone can guide me to creating a configuration profile to block or prevent the "InstallDefender" from installing with Office 365. Any other suggestion affective suggestion is welcome.https://learn.microsoft.com/en-us/deployoffice/mac/preferences-office#excluding-appsThanks in advance.

I have a corrupted Student Profile that I do not have a backup of and after speaking with a Jamf rep it was suggested to go to a student station and download the Profile and then upload it to Jamf Pro to recreate it. I'm unable to download the profile when I double click it on the. student Mac. Can someone help me figure out where the setting is to allow downloading a profile? I am able to download the config profiles for my Mac which is technically using a teacher restriction.