Is there a way to update Outdated Devcies? I have a lot in my Jamf Pro dashboard. Any tutorials or walkthroughs would be super helpful!

Are there any tools for retrieving and downloading existing scripts that are currently stored on the JAMF server? 

So we have file maker pro with some automation through applescript, and our newer macs arent prompting us to allow this automation.  Is there a way i can push this allowance through jamf? 

Hello, I wanted to know how we can push out an app to Users we know need it and to users that may need it.

Our security team has some questions about the Jamf check in process and I have been unable to find the specific details regarding a switch. The command is: "/usr/local/jamf/bin/jamf policy -event CLIENT_CHECKIN -stopConsoleLogs" and the switch is "-stopConsoleLogs". Does anyone happen to know what exactly this switch does and why Jamf would want to stop the console logs? Thanks!

hi there, we have issue with the jamf connect new version not updating. and i was wondering can we manually download as dwg file and install manually? since the mac users aren't able to conenct. they do have the newer license added. 

Hello, I'm trying to figure out a way to restrict users from deleting the profile under the VPN & Device Management -> Mobile Device Management.It really wouldn't make sense for the users being able to remove the management after being supervised and managed.I went through the restrictions under the blueprints but I couldn't find the one to restrict this.Heard about the prestige enrollment but I don't know where I can access that, if there is one for Jamf Now. Thanks.

Hey all, Quick rundown is that users log into the machines using Active Directory accounts and it creates a mobile account upon login. What I am looking to do is delete the user cleanly while also removing the shared information. I am aware that I can use sysadminctl to remove the user and alot of the information to move forward. The current issue is that this wasnt done previously and was using dscl to remove the user and then an rm command to remove the home folder. I am currently trying to remove the remainder of the users off of the computer which is the SharePoint and Group in Directory Editor to clean these up to move forward without a complete image. I can do it manually in terminal using the full filename. I will post what I am currently trying to use to remove the information. It may not be perfect but I am running into issues with the commands. Please let me know if there is anything that can be done to correct this or any insight. Also if I have anything completely wr

JAMF seems to think that my iPad has a different version of an app installed depending on where in JAMF I look for this information. The iPad itself reflects 13.9.1, but the Smart Device Group that filters on "App Short Version" doesn't capture this device because the "Short Version" under "Inventory > Apps" shows "13.4.1". If I check under "Management > Apps" it shows the correct version that is installed. How do I get the Smart Device Group to match against the field under "Management > Apps" and/or get Inventory and Management to match? Thank you  

i am starting to lose my mind a bit here.I am attempting to rename a few PCs that didn't get renamed during enrollment to: firstName lastName - serialNumberTo my understanding, there is a policy setting under maintenance to "Reset Computer Name" that should allow me to fill in the Computer Name field in the Inventory and it'll update the computer's name upon checking in.However, when I tried that on a test computer, instead it renamed the machine to "Macbook Air"I see that there's a simple script that can be done:jamf setComputerNameI can also add a switch to it, i.e.: jamf setComputerName -useSerialNumberBut I can't find any confirmation as to whether I can use multiple switches at once.I would like to, ideally, know why the Reset Computer Name policy isn't working, but failing that I would like to be able to have a command that is basically: jamf setComputerName -useFullName " - " -useSerialNumberAny help would be greatly appreciated.

Phone worked fine with Jamf prior to resetting. Now it is posting SCEP server returned an invalid response error code. 

Hi there, I am looking for some help. I searched but did not find any hint, regularly people search for a solution to prevent the use of private Apple IDs on Macs, and I am looking for a solution to re-enable it for certain devices.We have a configuration profile in place with Restrictions and the respective Functionality settings that prevent all computers from adding private apple ID. In the Scopes, the device groups are linked that are allowed to bypass the restrictions. Again for such, the allow list is also a configuration profile.This worked quite well for the past three years - now out of the blue I can still see that the private Apple ID is registered on the device, but the majority of services stopped working, and when clicking on the Apple ID in System settings, everything is grayed out and a message on top says "Account changes are restricted by a profile."Does anyone have experienced similar or know a solution to recover?

Afternoon Jamf nation  I have recently @mosermat process here https://community.jamf.com/t5/jamf-pro/build-a-custom-macos-dock/m-p/264565 It working great if I use my admin account however for standard user I recive this message in the log filetdenton is not in the sudoers file.Has anyone seen this before    log file output belowdockutil-variable = /usr/local/bin/dockutilsleep-variable = /bin/sleepcurrentuser-variable = tdentonThe dockscrap file is set to /Users/tdenton/dockscrap.txtNo dockscrap found. Continuing to build the dock!Removing all Dock Itemstdenton is not in the sudoers file.This incident has been reported to the administrator.tdenton is not in the sudoers file.This incident has been reported to the administrator.adding /System/Applications/Launchpad.apptdenton is not in the sudoers file.This incident has been reported to the administrator.adding /Applications/Self Service.apptdenton is not in the sudoers file.This incident has been reported t

We have just discovered that by default the Status bar in Safari is disabled for some reason. We are doing our Phishing security training and are helping staff identify phishing and spam by hovering over links for example. Unfortunately, if they use Safari, that does absolutely nothing. So, I created a script that should enable it, but it doesn't appear to be working and was wondering if anybody else has come across this and how they addressed it. Here is my script; #!/bin/bash defaults write com.apple.Safari ShowStatusBar -boolean true exit 0 *edited for bad grammar

Hi All, I have a tool that needs to be deployed by region. I am trying to figure out a way to query Global Protect via script to determine the GP gateway that a user is currently connected to? I was hoping I could get this information via an extensions attribute. But, that didn't provide the information either.  Has anyone else been able to obtain this information and have it show in JAMF Pro? 

I thought I would share a workflow for enabling auto-login for Macs with pre-stage and JAMF Pro on Big Sur+First the tools you'll need: 1. MacUserGenerator app 2. Payload-Free_Package_Creator.pkg3. JamfConnectMetaPackage postinstaller.sh4. Jamf Pro Pre-stage setup like this.5. Jamf Composer installed6. Apple Developer ID Installer cert or a Jamf Pro Self signed cert to sign the pre-stage pkgs.Self Sign how to guide is in hereSteps:1. Create the auto-login account with MacUserGenerator.app file and export as python script.Make sure you check the two check boxes below.2. Use the payload free package creator and add the python script from step 2.3. Open Jamf Composer and create a blank pkg.    A. The pkg is created from step 2    B. Add post-install script and add this script and update the path and pkg name  JamfConnectMetaPackage postinstaller.sh   C. Create the pkg and sign and add to your pre-stage.4. Done! Now

Hi Everyone I know a way in windows to block an SSID to show in my computer via CMD script👇netsh wlan add filter permission=block ssid="SSID NAME" networktype=infrastructureif I run this command in windows, my neighbour's SSID won't even show in my wifi list  I tried so hard to find something similar for Mac but no luck, can someone tell me if this is possible and how ? Thanks Arman 

I am attempting to remove our guest wireless network (SSID) using WPA2 personal from all machines in my environment. I have scoured through JAMF Nation, in search of posts looking to achieve the same. I was able to find a handful of useful discussions but none were fully applicable to my current requirement. Some posts had suggested achieving this in a configuration profile and supplying a bogus password so the machine is never able to connect to the network. I would like to remove the guest wireless network from all machines rather than fully implementing an all out ban from ever connecting to it again. In short, I'd like to accomplish the following: Create a smart computer group which inventories all machines with the guest network SSID. That is, all machines that have the guest network saved as a preferred network. Remove the SSID from all machines in this smart computer group. Please let me know what your thoughts are and if this is best approached with an extension attribute

Hello I have a very dumb question. What is the most common way users deploy jamf connect in their org? we are doing it where we have config profiles and policies setup and we scope it to a users computer and through pre stage enrollment is that the common way to deploy jamf connect? Are there other ways to deploy Jamf Connect I saw you can download a config profile directly to the computer 

We have Office365 federated with Okta. When I use the Jamf Connect Configuration app with my Azure application everything works fine. I get tokens. However now that I've deployed it using a machine that's not a fresh install I enter my credentials at the Jamf Connect window and I don't get sent to Okta then it says my credentials are incorrect. Is this expected? Will this only work with a freshly wiped machine like in the Jamf connect training? Edit: It seems Jamf connect is unable to handle federated Azure so I'll likely be switching to Okta.

Hi, I have an issue with one specific app (Flash Academy) that I am trying to roll out in my schools network. When a user tries to load flash academy it immediately crashes and sends them back to the home screen. The app doesn't work on any iPads, both the app and iPads are fully up to date. No issues occur with any other app. The app works absolutely fine when I remove the JAMF profile from the device. Any ideas?

How long does the alert play when you use the Play Sound command in JAMF School for a device in Lost Mode? 

The last time I had to follow the article for integrating GSX into Jamf Pro, I found the instructions quite lacking. I'm referring to this article: https://docs.jamf.com/technical-articles/Integrating_with_Apples_Global_Service_Exchange_GSX.htmlI worked on my own documentation and figured I'd share it with the community. I won't necessarily keep this up to date, but hopefully it helps people that might be looking to do the GSX integration with Jamf Pro. Hopefully Jamf will integrate these details into their technical document I linked above.==============This article explains how to create a GSX account and obtain an Apple certificate. You can integrate Jamf Pro 10.15.0 or later with Apple's Global Service Exchange (GSX).Note: As of October 1, 2019, Jamf Pro 10.15.0 or later is required to integrate with GSX. If you are using an earlier version of Jamf Pro with a GSX integration, you must upgrade to Jamf Pro 10.15.0 or later to continue integrating with GSX.General RequirementsBefore y

Hello everyone,I wanted to update our Cisco client which works without any problems. But unfortunately the following messages appear in the Cisco client:Has anyone had this problem before?

we have an issue lately with devices enrolling with Intune.. many devices are getting a sign in loop after a few days. This issue started after migrating to Jamf Connect, it's most common with Ventura and Sonoma. We used to fix it by removing stale device records in both Intune and ME-ID (AAD), or removing stale ADAL cached passwords from Keychain. Unenrolling from Jamf to fix Intune enrollment is not helping... removing plist from library preferences is not helping as well. The only option is to rebuild the device.  Any ideas? I'd really appreciate anyone's help!