Has anyone come up with a way to schedule a recurring quick/full scan on a system using a configuration profile?

How do you disable iCloud in 10.9?

I have a report showing Extension Attributes of both "Admin End Users Only" and "Admin Users."What is meant by these two fields?  The data on our computer users is not consistent when it comes to users that have admin permissions on the local computer, which is how I interpreted the fields.Thank you in advance!

Edit: Disregard

I believe the issue is with the OS version line (Major and Minor), but I have very little experience in creating scripts. !/bin/sh # Get user logged into console and put into variable "user" user=ls -l /dev/console | cut -d " " -f 4osMajor=$(sw_vers -productVersion | awk -F"." '{print $2}')osMinor=$(sw_vers -productVersion | awk -F"." '{print $3}') sudo -u $user defaults -currentHost write com.apple.screensaver CleanExit -string "YES"sudo -u $user defaults -currentHost write com.apple.screensaver PrefsVersion -int 100sudo -u $user defaults -currentHost write com.apple.screensaver showClock -string "NO"sudo -u $user defaults -currentHost write com.apple.screensaver idleTime -int 600 if [[ $osMajor -eq 14 ]] && [[ $osMinor -ge 2 ]] || [[ $osMajor -ge 15 ]]; then sudo -u $user defaults -currentHost write com.apple.screensaver moduleDict -dict moduleName -string "iLifeSlideshows" path -string "/System/Library/Frameworks/ScreenSaver.framework/PlugIns/iLifeSlideshows.appex" typ

Hello everyoneI have a requirement to send notifications programmatically to iPad devices within a Smart Security Group at specific times every day. Unfortunately, I couldn't find a straightforward method in the Jamf API documentation to accomplish this task. In contrast, with the Microsoft Graph API, achieving this is quite straightforward.any suggestions?

I've managed to get Cisco Secure Endpoint and Umbrella deployed through Jamf Now but I need to make it so that the end user can't disable it. I also need to make the install seamless, so that when the application is installed, the user doesn't need to do anything like allowing the extensions or give it full disk access. I tried to make a custom profile thru iMazing Profile Editor but can't find the settings to allow something like this. Does anyone have ideas/experience with something like this?

I have software that a teacher purchased for her classroom.  I'd like to be able to install it to her classroom mini's through jamf.  It's a dmg file and I believe I have to convert to a pkg file in composer.  Can someone point me in the right direction?

I have an environment where network users are logging into lab machines with Jamf Connect which creates a local user account for them, but when they go to use some apps for the first time the apps ask for permission to access common folders (Desktop, Documents, etc) and this can cause a problem because if they for some reason click Don't Allow when the app requests it then this has to be manually fixed by an admin ... and in the case of some apps like Adobe Premiere Pro the app won't even open if access to those folders is denied.Does anyone know of a way through Jamf of setting these app permissions for users when they sign in so the apps don't have to request access when the user first opens them?Thanks in advance.

Hello All,I'm still learning JAMF so I apologize if this is a basic question, but I would like some help with figuring out the best practice in order to manage multiple locations on Jamf Pro. My IT team is in charge of taking care of users in California along with users in England and I am trying to find out what is the best practice in order to do so. For example, people in England might need to have access to different applications, or if we needed to modify our Zero Touch Deployment for them, we would like to keep it separate from our California side.I have looked into using Sites that is offered within Jamf Pro, but I hear that this is not the best way to go about this. 

I apologize if this has been asked and answered or documented somewhere, but I've looked and can't really find my answer.  I'm looking to change the distribution method for an app from Install Automatically to Make Available In Self Service. I know how to do that, but my question is what will this do to devices that already have the app installed? Will the app be pulled and require them to download it, or will it remain on device? Thanks!-Matt

I am trying to create a policy in Self Service that is scoped out to all devices, but is only accessible for a certain local admin account to install/run. When devices are enrolled, a default local admin account is automatically created and we do not use LDAP, so I'm trying to find a way to limit this policy from being run by unauthorized users. Is there any way to accomplish this? Or is there perhaps a way to require admin credentials be entered before the policy can run?The policy works great when I scope it to a test device, but as soon as I add the local admin account to the limitations, the policy is removed and disappears from Self Service. 

So with iOS 17, we've seen in the field that updates actually work as intended now! So what do I mean by that? Well, this is our observations:1. Admin uses the traditional method of sending a mass-action command do a device to update to the latest version, with download, install and reboot2. The device receives the command and downloads the update3. The next time the user unlocks it, it will require the device PIN regardless if you have touch-ID or not, presumably to get the PIN to allow software installation4. Then the update is scheduled overnight5. During the night, regardless if the device is connected to a charger or has usufficient battery charge, the update will install and the device will reboot This might seem like a no-brainer and obvious. However, this didn't work pre-17. Then users weren't prompted for a PIN at all, or they were prompted but could dismiss it. Update would fail to install overnight etc etc. In essence, what a huge positive change!Is it just me or is thi

Hello to all,I hope everyone is well in the community :)I have a recurring problem with macOS Ventura :when I upgrade from macOS Monterey to Ventura, a minor update or when I try to register a Mac directly, after restart, I get a blank screen with a wheel that spins without stopping.I have the impression that it is the Form of Address window that wants to be displayed, I only have the "back" and "continue" buttons at the bottom (they do not work).When I restart the mac, everything is fixed, I can authenticate and work again.Has anyone encountered this problem before?Thx for your returns

Hi is there a way to push certificate and "Trust" it via JAMF School? I am currently installing it manually and need to select "Always trust.    

Hello all,    I've tried difference scripts (bash and AppleScript) but none seem to work for me.  Basically, (and I see this has been asked a lot but varies), I would like for any user that logs into the Macbook, connect to their smb share AND place that drive as a shortcut in either the Locations (in Finder) OR Desktop.  Users should not be prompted for their username and password.  Here's what the smb path looks like:smb://servername/Userdata/UserName/My%20DocumentsWhere UserName can be any user that logs in to that Mac device.  But do not prompt for username and password if possible.  If password is a must, then I'll take whatever I can work with.

Hi, I came across a new feature in iOS 11 yesterday enrolling a new Student iPad. It seems Apple added a new Settings option under the 'General' tab which is "Multitasking & Dock". in here you are able to allow / prevent the following: -Allow Multiple Apps-Persistent Video Overlay-Gestures and for the Dock-Show Suggested and Recent Apps Unfortunately I haven't found any payload in the latest Jamf Version to disable the Dock feature, as it expands the Dock with the last used Apps, nor the other ones. Does anyone else came across this, or better, has a solution to switch them off on student iPads??

Hi Everybody,The plist housing the settings for the keyboard shortcut for VoiceOver has been moved to a different plist since it was last addressed in this post.  Anybody know which plist houses the Cmd+F5 shortcut for activating/deactivating the VoiceOver in macOS Ventura?  I have obnoxious kids that like to constantly toggle it, and I'm not seeing an option for it in the configuration profiles.Thanks In Advance,-Rob

We're trying to figure out how to set the color profile (to Adobe RGB) for all displays in one of our labs. I've seen different posts on here, but no solutions. Any thoughts on how to set this up with a script or, ideally, a profile?

Greetings, Does anyone know (perhaps using an extension attribute) how I can identify which clients on my network have 802.11n NICS?  I'm trying to see if I can safely turn this frequency off on my network. Thanks in advance. Andy

It’s that time of year again. You and your team have finished or are about to finish all the big summer projects, but what might you have missed in the shuffle? Here are a few things we re-check at Brewster just before students arrive for the winter term.    Certificates Certificates are something you should have well handled and probably on a team calendar for renewals. After all, there are plenty of them across many services, and missing one could have dramatic consequences, especially at the beginning of the school year. So double-check even if you’re sure you’re all set. Apple Certificates such as Developer and Deployment ID certificates - require yearly renewal. In JAMF Pro, double-check your Push Certificates, PKI Certificates, and your Apple School Manager/DEP integration to make sure everything is syncing properly.   Software Updates It’s nearly universal that educational software developers have this tendency to release new major updates in the weeks leadin

So today our lab cart was being used for a test. These machines are always on or supposed to be. I installed a Firefox patch (version 57.0) the other day. When these machines came online there was the 15 minute message about having to shutdown to install the update. The issue is this was during a test. So some computers had the browser shutdown and they had to re-login. Another issue was Word also had an update and several users were in the middle of a document when the warning went out to shutdown and save their work. What if they had left their machine to go to the bathroom or something? We are going to instruct people to use Safari but how do people get around these Patch Management issues? I could make everything self service but I like the idea of pushing patches. I can make the time longer I guess. Suggestions?

Hello, So we are having a bit of a struggle here, since the begining I've never wanted to use the Patch Management feature because there was only a defined set of apps usable, and thus you had to have apps in here, and the unsuported ones in the policy section. I didn't like that so I went for a full policy updating workflow.It actually works pretty well, I even created some scripts so you can easy add any type of pckage you want and you just have to tweak thhe paramters to control the installation process, very handy.But the problem we have is that it seems impossible to filter computers in smart group by "less than" for a software version. It's a nightmare, so we've been updating as soon as possible the precise version in these groups and update de package as sson as possible. But if for some reason an update gets released and we don't react fast enough some computers might auto update some stuff, and then jamf would then downgrade the app, cause it doesnt match our policy.....&

requirements: OS X updates for "shared" machines in an Educational  environment will be deployed during a scheduled  maintenance window when labs are closed. At no point shall a student or teacher ever be prompted for any action re: updates. The  SLA for shared/public workstations  is that machines are patched by IT--this process must be fully automated so that IT staff doesn't have to run around logging into machines to patch them. What is the current thinking on how best to accomplish this? The environment is full JAMF Pro with an established team to support it. Most of the Macs in the overall environment are 1to1 deployed, and assigned users are encouraged to respond to prompts to update --it's part of their responsibility. But there are still plenty of computer labs/teaching stations where asking end users to participate in keeping the machines updated is not practical. Our current scripted solutions don't seem to work reliably in Big Sur and abov

I've seen several posts about this, and have been struggling with it myself, but I finally found a way to create a sort of maintenance window for Patch Management policies. For our faculty and staff computers, we distribute patches through Self Service patch policies, which is fine. It leaves it to the user to patch when convenient. But for our lab and classroom computers, we don't want to rely on our students to push patches, so we use the automatic installation patch policies. They work fine, but unless the admin updates them during regularly scheduled down-time, the students are forced to quit any applications that need updates shortly after the patch policies are revised. I wanted to find a way to be able to update my patch policies, but not have them trigger until a certain time. Ironically, regular policies have an option to set up a scheduled time using the Client-Side Limitations. Sadly, patch policies do not have this option, so I set about finding a way to emulate this functi