Just putting this out to share since deploying software via Jamf apps have been very flakey for me lately. I am by no means a scripting expert so feel free to make changes or offer any refinement, so far it does what I want it to do, downloads the universal zip file for VS Code, Unzips it, moves it to Applications, trusts the app, and then deletes the install folder for the secure temp folder. #!/bin/sh pkgfile="VSCode-darwin-universal.zip" tmpDir=$(/usr/bin/mktemp -d "/tmp/VSCode-install.XXXXXX") logfile="/Library/Logs/VSCodeInstallScript.log" url=' https://code.visualstudio.com/sha/download?build=stable&os=darwin-universal' /bin/echo "--" >> ${logfile} /bin/echo "`date`: Downloading latest version." >> ${logfile} /usr/bin/curl -L -o ${tmpDir}/${pkgfile} ${url} /bin/echo "`date`: Installing..." >> ${logfile} cd ${tmpDir} tar xvfz VSCode-darwin-universal.zip /bin/sleep 5 mv "${tmpDir}/Visual Studio Code.app" "/Applications/Visual Studio Code.app" /bin/echo

Hello all,Has anyone managed to configure Powerpoint preferences for users?Specifically I'd like to be able to uncheck the 'Always start Presenter view with two displays' box for users.We're in an office 365 environment.Thanks all

Hello, I have a situation when one of our builds deployed, it add custom app(NetworkFilterApp) to Application Folder, when attempted to uninstall or remove , seeks admin credentials to remove app, Can it be possible to supress Admin credentials  screen and continue with app removal .Any Jamf profile configuration supports this ? Kindly provide pointers 

Background: Had a student not return a macbook during turn in. I remotely locked their laptop as I have done other times with the lock feature. When going back to the machine this summer to get it ready for next student, I realized I never unlocked. Went into JSS to look for it, and code is not where it should be. IE, it has been erased. (palm slap) I have read that a fix for this is to go to apple store or apple tech to have them reset firmware password. I am not sure of this as I have been able to find a clear answer on here or online. Any ideas or guidance?

I want to have 31 iMacs join our local domain. I'm certain this is a config profile, but not 100% sure on how to configure this. Any insight is appreciated. Thanks!

The company was purchased by another company. The new company didn't have Okta so I've been deploying Okta for them, but we still have the old Okta. We've been using Jamf Pro, Connect, Private Access and Protect at the old company for a while now. The problem is that I need to migrate Jamf Connect from the old Okta to the new Okta. The new company uses a different string for username. Old was firstInitLastName and the new is firstname.lastname.Jamf Private Access seems pretty straight forward. Just reconnect it to the new Okta and they authenticate against the new Okta, same as the Jamf Pro for the admins and as I've been able to do with our other applications. What's the best way to migrate all the Mac users from one Okta to another without users needing to recreate a new local user?

Has anyone had any experience in deploying Fortinet's FortiClient to computers? I get a DMG from our on-prem controller but that doesn't install when I use Jamf Pro to install onto client machines

My Google-foo is failing me.  Although my script works to trigger the Jamf helper window - I get 'posix_spawn(): 2: No such file or directory' <-- And as far as I can tell it's because i'm trying to call launchctl -but - can't figure it out.  Is this an error I should be concerned about?JHELPER="/Library/Application Support/JAMF/bin/jamfHelper.app/Contents/MacOS/jamfHelper" LOGGED_IN_USER=$(stat -f%Su /dev/console) LOGGED_IN_UID=$(id -u "$LOGGED_IN_USER") echo $LOGGED_IN_USER WELCOME=$("$JHELPER" -windowType utility -windowPosition lr -heading "Urgent message from Mac Desktop Services." -alignDescription natural -description "An urgent OS update is needed on your system. Please run sofware update at the end of the day (Apple Menu --> System Settings --> General - Software Update) and install Ventura macOS 13 updates to bring your system to 13.6 if it is not already. Please do not click Upgrade to Sonoma, only updates for macOS 13 Ventura " -button1 "Go to u

Buen día, por favor alguien sabe cómo aplicar bloqueo de pantalla, al cerrar la tapa y abrir ya tenga el bloqueo para ingresar password, esto desde jamf pro. Saludos!!

Hi folksI know, its maybe more an Apple topic as a jamf topic. But hopefully is here someone who has experience with this.So I just started to configure in the Apple Business Manager and Entra the Federated Authentication and the Directory sync. I was able to configure everything. My idea was to test this with one testuser (created through me) which will be also have an private apple id.When I am in the last step to enable the federated Authentication, I see an info, that i have 155 username conflicts. So I just stopped with this and have not enabled it for nowDirectory Sync is already enabled.In the Azure App I have only me and my testuser which I would like to test first, before enabling it for all.So anyone an idea what I have missed or done wrong. I need to test this first, document it and then I need to inform also all of the 155 user they are in the conflict.As i was reading the apple documentation, I saw this:Apple Push Notification service (APNs)APNs certificates are most

I normally run this script when trying to log into multiple computers via Apple Remote Desktop:osascript -e 'tell application "System Events"' -e 'keystroke "username"' -e 'keystroke tab' -e 'delay 0.5' -e 'keystroke "password"' -e 'delay 0.5' -e 'keystroke return' -e 'keystroke return' -e 'keystroke return' -e 'keystroke return' -e 'end tell'When I try to run this script on computers running Mojave I get the error:execution error: System Events got an error: osascript is not allowed to send keystrokes. (1002)

I am new to Jamf School. I would appreciate some assistance with some general questions. I successfully uploaded our asset tags into Jamf School to match serial numbers:Can I customize the search function so I can search using Asset Tag? Currently when I am in Users and trying to assign a device to a User I need to have the serial number and I would prefer to use the Asset Tag. When in Device Groups I am trying to add Members and the Asset Tag is not listed only the Serial number and again I would like to be able to add by asset tag. How do I change that?When I assign a device to a User it says Successfully Assigned, but the Devices assigned to the User still says 0. I am not having any luck finding solutions in the Jamf School Documentation or videos. Any help would be appreciated. 

Hi Everyone,Our users all have two teams clients a 'Microsoft Teams' and a 'Microsoft Teams Classic' which seems to have installed overnight (I suspect MS auto update). We use company portal to enroll the devices into Intune and enforce device compliancy, the Classic client works fine but the 'new' teams client doesn't show the device as compliant and thus fails to authenticate. for the moment it isn't causing an issue as users are using the classic client, I'm just curious if anyone else has seen this issue and has a fix? Many thanks!  

We’ve recently removed admin rights on Macs for all of our users. Does anyone know of a way to enable users to always be able to administer preferred/saved Wifi networks which are saved on their machines without having to grant them temporary admin rights?

Hi there, We have a Jamf Mac devices seems to be getting a lot of Jamf Connect notification along with IdP password does not match local account password and jamf connect login sign in window is greyed out. Any suggestions? I think we have pushed connect version to the newest at first but then rolled back. 

this is mostly for third party as JAMF VPP apps will update but it’s the other apps like browsers and standard third party apps they’re not in the App Store. JAMF Self Service is great but having to keep on top of uploading the latest packages can be a pain. I’ve tested Brew in the past and it worked but I know installing XCode via. JAMF has been a pain.Is there another ideal solution for assisting JAMF to deploy the latest versions of software?TY

Pharos Notify & Popup issue on Monterey 12.5.1This software has worked darn near flawlessly until now(hasn't been updated since 2018?).  Even though the Firewall is set correctly, neither of the Pharos components(Popup & Notify) can communicate with the server for whatever reason.Screenshot attached(Well, I don't have 'permission' to add graphics?). :-p ~Patrick 

We have just started using Jamf Pro.  We were using Meraki and some of our iPads are in there.  What is the best (or proper) sequence for getting these into Jamf Pro?  My thought was to do this in the following order but was hoping someone could confirm this will successfully move this from Meraki to Jamf Pro.1.  In Meraki under DEP, select the device and click Remove Device2. In ABM, go to the device and choose edit Device Management and change it to our Jamf Pro MDM from the list.3. Wait for Jamf Pro to sync with ABM and the device should now be in my list in Jamf Pro to assign to a prestage enrollment.

Hi After updating to iOS 17 the wallpaper we use suddenly started zooming in after it's added to the phone.It looks correct for around 1 second and then it zooms in on the image.Anyone else had that issue and found a solution? Worked perfect using the same image on iOS 16.I have not changed anything to the smart group we used for iOS 16, since it's just set up to add it to all enrolled devices.//Kenneth

Hello all,I am looking to lock down printing as a security compliance measure for all of our supported browsers.I got Chrome going already but can't seem to find an easy way to put a config profile together for Firefox and Safari.Any ideas or has any one been able to accomplish this before? 

What, exactly, is the Jamf Management acount defined in UIE used for at this point? What would the ramifications be if I were to uncheck the "Create Management Account" checkbox in UIE?Further explanation: our machines are all using Xcreds (which is largely interchangeable for the purposes of this discussion with Jamf Connect). We were previously following the workflow demonstrated in the "One Account to p0wn them all" session from JNUC 2022. However, we are now experiencing issues resulting from PI111014. Because we're on Xcreds, at the minimum, we need to create a Managed Administrator account in prestage, so that's what we're doing. What would happen if, rather than specifying a separate Jamf Management Account in UIE, we just tell UIE not to create the management account?I've read that, as of Catalina, the management account is largely unncessary... but is "largely" the same as "entirely"? What, exactly, would I be doing to myself by NOT having a management account on the

I have looked at the forums for a solution to this issue without much luck. If there has already been a solution posted could you please direct me to it?My organization if moving from Cylance to Crowdstrike. Installing Crowdstrike with Jamf has been super easy. Uninstalling Cylance has been a bit of a different issue. I cannot click the checkbox to uninstall in the package details. I have read that the way to resolve this issue is to reconfigure the package with the Jamf Pro app. My question on this front is if I reconfigure this package will it have to be redeployed before it can be uninstalled? Essentially do I need to reinstall it in order to uninstall?Another option seems to be that when Cylance installs it creates an uninstaller app. Is it possible for me to silently run this app on all of the Macs from Jamf Pro?

We use Jamf School to manage iPads and will be using Jamf Pro to manage Mac Minis for a high school computer lab. Can these two use the same VPP token and the same Apple ID? In my research, I'm finding that we can use the same Apple ID but need to create a different location with a seperate VPP token. Is this correct? 

A Little Background In 2017, Jamf released an integration with Microsoft Endpoint Manager’s (formerly Intune) Partner Device Management (PDM) API. This API allows Jamf Pro to send inventory data for managed computers to Microsoft Endpoint Manager, where compliance is then calculated using Microsoft Endpoint Manager’s Compliance Policies. In order for Jamf Pro to send data to Microsoft Endpoint Manager, computers must be registered to Azure AD using Company Portal, and a jamf agent (JamfAAD) must collect and maintain an active user session token. Organizations seeking to use the PDM integration must guide end users through this registration flow. The following document addresses best practices for registration, including configuration of the JamfAAD agent, Azure AD SSO Extension, using policies to guide the user, and tracking registrations via Extension Attributes. Configuring the JamfAAD agent UseWKWebView JamfAAD must prompt the user to sign in with their Azure AD crede

While I welcome updates that make things better, I'm not sure the new font choice / bold type in 10.48 is an improvement on the dash board. All uppers worked well, now its upper and lower.. which im not sure is more readable.Bold.. this does not work for me, maybe it works for others?  some smart groups that were once fully readable are now cut at the end, meaning you can't see the ending, making some groups look identical. Renaming these is not an option due to how JAMF uses names for reference. Display preferences are somewhat lacking (dark mode) but an option to toggle this back to Uppers / No bold would be welcome.