Dear Jamf Pro Support Team,I hope this message finds you well. My name is Somnath and I am a user of Jamf Pro currently working on the integration of our system with the Jamf SaaS App.I am currently facing an issue when attempting to update a user's password through the Swagger interface. The error message received is: "You cannot change information in an LDAP account or change the password."Upon further investigation, it appears that the Swagger API does not currently support the updating of user passwords through an admin user. As part of our administrative requirements, we need to perform password updates via the API using administrative privileges.Could you kindly assist in providing the necessary API endpoint or guidance on how we can achieve password updates for users with administrative credentials?Your support in resolving this matter is highly appreciated. If there are specific details required from my end or if further clarification is needed, please let me know.Thank you for

Since this morning I am trying to get APNS to work for a customer. After downloading the signed CSR from JAMF. The apple certificate portal always gives the Invalid Certificate Signing Request error.The Certificate Signing Request you entered appears to be invalid. Make sure that request file uploaded is in the correct format and not empty.

Hey All, Trying to build 3 policies for our JSS regarding the google chrome browser but I'm having 0 luck! 1: I need to force chrome installs with the automatic updater installed to run 2: I need to be able to install the automatic updater on machines that do not have it installed or configured but DO have chrome 3: I need to install chrome and have its automatic updater configured on for new enrollments. I've got the policies figured out and the extension attributes in place to identify the presence of the automatic updater, I just can't get the programs to install correctly! I've tried composer and while I can get chrome to install, its automatic updater breaks and fails everytime it tries to go download a new version. I'm pretty new to Jamf and for that matter, the mac platform as a whole and we're just feeling a little stuck. Any help would be appreciated, Thanks!

Hey everyone... I wanted to make Google Chrome a part of my automated deployment process and also be available within Self-Service. Why? Users can just download from Google on their own. True dat. But hey, one-stop shopping in Self-Service, right? As we all know, Google deploys Chrome via a DMG file. The Google Chrome.app file must be dragged to the /Applications folder. You could effectively re-package everything using Composer, but then things get REAL STALE, REAL FAST - Google updates Chrome frequently. So stale software is bad software. So how can we deploy Google Chrome with the freshest of the fresh so we don't get that not-so-fresh feeling? Well, lemme share my story, morning glory. . THE SCRIPTI wrote a simple script that does the heavy lifting... I tossed this script into System Settings > Computer Management > Scripts within the JSS... NOTE: Yes, I am aware that I don't have any error checking taking place. This is v1.1 - quick and dirty. Feel free to add som

Hi all, Does anyone know how to add a second input source to the keyboard? I have the keyboard ID, but don't know how to add it to the input sources? I would also like to show the input menu in menu bar for users. Thanks in advance for any guidance.

Hi We restrict our Apple TV's for just airplay only with conference room mode enabled. This is to stop folk messing with settings and adding apps. This works a treat however we have found an issue, the Apple TV is enrolled via DEP and the device once configured has the conference room mode enabled. We then change the Apple TV name via Jamf Pro. The issue following this is that we have had reports of the Apple TV going into a sleep mode / unable to wake and a hard reset of the device is required. This at times is impractical as the Apple TVs at times are high up behind a 65" TV. Is there a way to manage the power on the Apple TVs or do we need to remove the restrictions and manually configure? Is there anything in Apple Configurator to assist?

I use a script to update Zoom to what ever version the app owners at my company say we are allowed to install. The script runs a curl command to download the installer for the version we want, then it installs the package. It first checks if Zoom is running. If it's not, it runs the install. If it is, it does not install the newer version of Zoom. The policy runs at check-in scoped to all comptuers with an exclusion for computers already running the version of Zoom we want to install. I have been trying to figure out how to detect if Zoom is running a meeting or not. Somoene may simply have Zoom launched, but not have a meeting running. I know a lot of my users just keep Zoom running. This results in the update taking longer to get done on all of my Macs. Does anyone know what process to look for if Zoom is in a meeting?

Hello allI'm experimenting with the new Software Updates feature available in Jamf Pro 10.48/10.49 for macOS updates but it seems to it's not working.I've created a smart group that includes only my Mac device and I deployed the OS update for myself but nothing happens.In the device management, I don't see any pending or failed commands.What am I missing? Did someone manage to deploy the OS update using this method?Thanks in advance,Michael. 

Hi I seem to be having issues with our shared iPads, The iPads are set up for temporary users only.. They seem unable to always download all of the apps we have assigned, in total the apps assigned only add up to around 5gb at most. However the iPads state that they are unable to download several apps as there is insufficient space. Even when the iPads have downloaded the apps assigned, when I check them in the system they seem critically low on space, so I'm concerned when I get asked to deploy further apps to them that they will need wiping in order to get the new apps pushed out, which I can see being an increasing problem.I've spotted the thread in JAMF pro with a similar issue:https://community.jamf.com/t5/jamf-pro/shared-ipad-temporary-user-storage-problems/m-p/236392#M224211But just wanted to see if anyone has the same issues, or better, a solution for JAMF school?thanks,

We seem to have an issue since around the time we updated from Jamf Pro 10.50 to 11.0 (on-premise). Now when we enroll a Mac with user-initiated enrolment it fails to do an inventory update right away. We're seeing for instance our Rosetta 2 install policy not run at enrolment time as it's scoped to a smart group of our Apple Silicon Macs. In Jamf the name of the Mac is its serial number even though we set a custom name on the Mac (in both About and Sharing). Other things also seem to fail until we run a manual "sudo Jamf recon" - anyone else seeing this?

Situation: In Apple Business Manager we have two MDM server settings. We want to migrate our Mac laptops from the America MDM profile to the India MDM profile. What is the best approach for this?According to me first change the MDM setting from America to India in Apple Business Manager then reset the device and enroll the device again. Or do we have any other way of doing it?

Hi All, Hope this script help you all to install the home brew from JAMF for standard account users and admin account users. It also supports for BigSur OS. #!/bin/sh # # Script Name: installHomebrew.sh # Function: Deploy Homebrew (brew.sh) to the first user added to a new Mac during the post-DEP enrollment DEPNotify run # Requirements: DEP, Jamf # # Copyright 2020, Route 1337, LLC, All Rights Reserved. # # Maintainers: # - Matthew Ahrenstein: matthew@route1337.com # # Contributors: # - "Dakr-xv": https://github.com/Dakr-xv # # See LICENSE # # Apple approved way to get the currently logged in user (Thanks to Froger from macadmins.org and https://developer.apple.com/library/content/qa/qa1133/_index.html) ConsoleUser="$(/usr/bin/python -c 'from SystemConfiguration import SCDynamicStoreCopyConsoleUser; import sys; username = (SCDynamicStoreCopyConsoleUser(None, None, None) or [None])[0]; username = [username,""][username in [u"loginwindow", None,

Hey EveryoneIs there a way to collect a usage report on an entire Smart Computer Group? I know you can click on individual machines and collect, but I cant seem to figure out how to do it with a smart group.

Hello All,'grep' has been a great tool in my tiny script for many years running from Jamf Remote(deprecated)....now, through Jamf Pro Policies, the grep command is getting a 'Usage Error':**************************************************************************************************Script result: usage: grep [-abcdDEFGHhIiJLlMmnOopqRSsUVvwXxZz] [-A num] [-B num] [-C[num]][-e pattern] [-f file] [--binary-files=value] [--color=when] [--context[=num]] [--directories=action] [--label] [--line-buffered] [--null] [pattern] [file ...]**************************************************************************************************....Basic form of my tiny script:**************************************************************************************************#!/bin/bash#ENV variable for current logged in user = $LOGNAMEfor home in $(ls /Users | grep -v $LOGNAME | grep -v Shared)do rm -rf /Users/$homedone***************************************************************************************

Our company has our Macs domain joined and we use NoMAD. We have this issue plaguing our users where when they try to change their password through NoMAD it will tell them "New password doesn't meet policy requirements" even though the password they are using does meet the requirements. It's seemingly random but seems to pop up for one or two users every month.The solution that works for us is to unbind the MacBook from the domain and rejoin it. After that the user is able to change their password like normal through NoMAD. Has anyone else encountered this or have any solutions?

Good, better and best methods to leave and retrieve client-side breadcrumbs with Jamf Pro Introduction As a Jamf Pro administrator managing Apple computers running macOS, you frequently need to leave a client-side record when a policy was executed, which is sometimes referred to as a “breadcrumb”; you also need an easy way to retrieve this data. Continue reading …

Hi all, Fairly new to Jamf, having an issue getting a Self-Service installer for Citrix Workspace to function.I have downloaded the .dmg file from Citrix, packaged it up, and added it to an install policy. I've enabled FUT and FEU as it's a .dmg and not .pkg. But on installing from our Self Service, the application isn't actually installed despite self service saying install complete (not appearing in Applications list). Any guidance on where to go? Thanks!

There used to be a "More" menu item under which one could find scripts. Where are they now?

Greetings all. Recently we started encountering an odd issue with our OneDrive deployment. Up until the last few weeks of last year, OD had been fairly stable, but we started getting a few tickets of “OneDrive won’t start” or similar issues.  Running the nested ResetOneDriveAppStandalone.command usually fixed it, however when I started digging into it, I started encountering a very strange issue. The OneDrive directory created in the CloudStorage path is being given ownership to our Jamf service account. EdC@TestBox ~ % ls -la ~/Library | grep Cloud drwxr-xr-x 3 JAMFAdmin staff 96 Mar 31 2022 CloudStorage I’ve started working backwards through various types of testing. First building a box and not installing OneDrive - nope, still does it. Next was removing my KnownFolderMove profile - Nope.  At this point, I can’t find what is causing the creation of our CloudStorage path, but once I do, I suspect that’ll be why it’s getting ownership from our Service Account. 

Hi everyone, Running some tests here and have a question. I currently have Google Chrome setup as a Mac App that installs automatically on all the devices in our environment. If I uninstall it manually, how long will it take before it automatically reinstalls again? Currently I have set the distribution so that it installs automatically on all systems and therefore it isn't available in Self Service. Without it being available in Self Service the end user could install it from the internet but I was hoping there was a way to have it done by Jamf because I am under the impression that if it's installed from Jamf then the updating works better later on. Does anyone have any experience with this and can you advise me on best to push out individual apps in situations like this or if it's alright to simply have the end user install Chrome from the web without any concerns about it not updating properly later on. Thanks!

Hello everyone,I hope you are doing well. I have Okta integrated with Jamf through Jamf Connect, I am wondering is it somehow possible to pass user's Full Name or at least Username in Okta to Jamf / Mac.What I am trying to do is to change computer name to be the same as the name of the Okta user.So far my closest success to this was to create script that takes username or alias(alias has precedence) of the currently logged in user and sets it as computer name. Code is below: #!/bin/bash admin1="admin1" admin2="admin2" # get username of the currently logged in user username=$(/usr/bin/logname) # get currently logged in user's alias if alias is not available, username will be used instead alias=$( echo "show State:/Users/ConsoleUser" | scutil | awk '/Name && ! /loginwindow/ { print $3 }' ) # If logged in user is not one of local admins that are for IT personel if [ $username != $admin1 ] && [ $username != $admin2 ]; then if [ $username == $alias ]; then

Hello, Using hybrid joined Azure, we appear to have an issue with our Conditional Access configuration between Jamf and Entra. We have configured Jamf Device Compliance with a Compliance Test Group and an Application Group, the connection verification status: Success between Jamf and Intune is confirmed and partner compliance management configured.A group of test Mac’s in Jamf have Company Portal and Intune integration policies installed and they are registered in Entra We have configured Conditional Access policies in Intune and targeted all cloud apps but when we run the CA policy we are locked out of Cloud Apps because according to Entra Sign-in logs the Mac is non-compliantAm I missing something?

Experimenting with Self Service and noting that if an application is installed, albeit I'm just testing with Chrome, through the Self Service app and then deleted it is not possible to reinstall the app through Self Service a second time. For Chrome, it initially displays Install which changes to Open when successfully installed but doesn't revert to Install if the app is removed. How can the option in Self Service be reinitialized?

Hey everyone! Does anyone have any insight as to how I could set up a smart group to show me computers with a software update status of "unknown". We have seen a few machines with this status that aren't getting prompted for updates with the DDM software update commands and are thinking this could be the issue. Any help here appreciated!

How/where do I set that Sonoma has to be up-to-date during automated enrollment? Can't find anything in the GUI>