Hi All,Anyone who got a solution for this problem? We have units who do not check in anymore and we get an error "Device Signature Failed" when we run commands like sudo jamf policy.Devices were bought from Apple and we have Apple Business Manager set up so that all the new equipment are already onboarded to JAMF.Profile removal is disabled so that users cannot remove the MDM profile, but this backfired on a troubleshooting perspective since we can't remove the faulty profile and re-enroll the device. Re-enrolling via self enrollment (email with a link) fails as wellCommand sudo profiles renew -ty

Hi there,Last year we introduced Google Workspace Federated Managed Apple IDs into our environment to negate the use of personal Apple IDs. Dealing with activation locks were particularly tedious on those personal Apple ID linked devices so we opted for making use of Managed Apple IDs since they do not have Find My functionality associated with them. Logically this should resolve the activation lock issue and also allow users to make use of some iCloud related functions.The behaviour we saw as a result was a 70% uptick of devices triggering activation lock that when formatted both through Jamf Pro or directly in-OS using the erase or format functions. The difference with these activation locks is that they ask for the last iCloud signin used but do not have the hint i.e "s*****z@icloud.com" and since Managed Apple IDs don't support Find My the devices cannot be unlocked even if we use the Managed Apple ID credentials.Most logical response then wou

Hi Team, I am trying to get the JAMF Connect information through Google App Script there is an issue is there to get the information into the Google Sheet.I want the same into the Power Automate to get only the JAMF connect -Display Name. Appscript for your reference function fetchJamfComputersData() { var sheetName = "JamfComputers"; var sheet = getOrCreateSheet(sheetName); if (!sheet) { Logger.log("Failed to access or create the sheet."); return; } var jamfProUrl = "https://URL/JSSResource/computers/subset/basic"; var jamfConnectUrl = "https://URL/JSSResource/jamfConnectDirectoryBindings"; var headers = { "Authorization": "Bearer Token_Information", "Accept": "application/json" }; try { var jamfProData = fetchData(jamfProUrl, headers); var jamfConnectData = fetchData(jamfConnectUrl, headers); var computers = jamfProData.computers

Hi All,I have noticed a strange issue after upgrading to 12.4. Post upgrade, automatically the device's registration status has been changed to "Unregistered". I tried registering the device from self-service portal and it got registered. However, compliance information is not getting updated in AAD and due to that unable to access office resources. I did force update of sending Intune integration logs from Jamf Pro --> Device's history --> "macOS Intune Integration Logs" and it's sending the update to Intune. Somehow the compliance is not getting changed.As part of troubleshooting deleted both the entries from AAD and re-registered the device but still the compliance is not getting updated. Any help is much appreciated.

Hello. Our Sonoma testing has been good, for the most part, but I was curious if there's a Jamf config profile that can help resolve this Print Center pop-up. It occurs every single time I try to print.

I thought I had the password syncing working in Jamf Connect with Google but it seems I don't.When I log in to the Mac via Jamf Connect Google I click the Connect button on Jamf Connect Menubar and I get this error.Yes, the cert deployed via Jamf Pro is set to Allow all app access. I have also tested running this command in terminal via @rabbitt LDAPTLS_IDENTITY="LDAP Client" ldapsearch -uLLL -w USERPASSWORDGOESHERE -D 'USERNAME@GOOGLEDOMAIN.EXT' -H ldaps://ldap.google.com -b 'dc=USERNAME@GOOGLEDOMAIN.EXT'I get this error when running this with my username and password replaced above.

Hi all, I want to implement MacOS LAPS by Joshua D Miller. However i want so that the MacOS LAPS only consist of characters and numbers (up to 17 characters as well).How do i do this?I managed to create a policy to install the MacOS LAPS package in jamf pro (cloud). I install the swift binary package of MacOS LAPS. and I create another policy (that run weekly) to reset the password    

Hi all,I am managing all of our company macs through Jamf however the pre-stage enrollment was previously set up by someone no longer in the company so I don't know what the password is for the local admin account. 1. Is there a way to view the already set passwordor2. If I change what is in the password boxes, will it then sync and change the password for the local accounts on the machines already enrolled?Thanks

Has anyone experienced an issue with any applications repeatedly getting uninstalled from their Mac? We have a user whose zoom keeps getting uninstalled repeatedly. 

Apple released macOS 14.1 today. On my Macs running Sonoma, this update is being deferred by our minor macOS update deferral profile. On Macs that have not yet been upgraded to Sonoma, macOS 14.1 is showing up in Software Update to install. Before today, Sonoma was being deferred. Why would 14.1 not be deferred? For a Mac running Ventura, any version of Sonoma should be considered to be a major macOS upgrade. Is there an adjustment that I need to make?

Hi there. In order to keep our extension attributes up-to-date, we have added a recon policy, to run once daily, with a script called as follows; #!/bin/sh /usr/local/bin/jamf recon exit 0 When I run this script locally on macs, the recon command updates the extension attributes correctly, populating the database with the expected results, but when it runs as a policy, all the results are cleared out leaving no information in the extension attribute fields. Can anyone help to shed light on this or advise how I can force an update to the extension attributes? Thanks

I'm trying to run a VERY simple script that mounts a folder based on user login - open "smb://server/staffhome$/$(whoami)"This works perfectly in terminal but when putting it as a process to execute on login it keeps on being unable to find the location?

Im getting ready to go-live with FV2 and PRKs this fall. Doing final testing and documentation now.I had a FV2 Mac ‘on-ice’ for a few weeks for testing. It was shut down and left alone on purpose to test a few things. When I booted it up, I noticed the PRK escrowed in Jamf did NOT match the PRK on the laptop (I am testing a Smart Group to report this, which was accurate). Questions about this observation:-Did the act of leaving the Mac dormant for a long time cause the PRKS to get out-of-sync?-Do escrowed PRKs automatically rotate over time?-Does the act of viewing the PRK in Jamf Pro cause the PRK to rotate?-If I would have let the Mac sit a while to run a recon, check for policies etc, would the escrowed PRK get set on the Mac eventually?

Heya folks. I had a previous post about Adobe CC with a lot of helpful feedback. I've gotten to a point where I was able to succesfully deploy and download applications via Mac Apps (Hooray!) but for individual Adobe products such as Photoshop and Illustrator, this was not working in that once installed the credentials I used to sign in was not recognized as being an Education account and I was granted only a trial.Whereas when I create a package via Adobe CC Admin portal, pick my apps and install, when I log into after an install this way, Adobe recognizes my credential. So, after setting up my distribution point with Jamf Cloud and creating a package with the .pkg from the latest package build in Adobe Admin, I pushed it down to Self-Service with a policy.I see Adobe CC in self-service and i go to install it and it takes about 8 to 10 minutes before it ultimately fails. When I go to the details in Jamf, all I get is...Installation failed. The instal

Does anybody have a script that can be run on a network account, to automatically add it to the sudoers file? We have several developers that will need to work with some code and use some sudo commands, that we do not want to have Admin access I'm aware this is splitting hairs somewhat

How to enable App Store app installation for users using managed Apple IDs via ABM? I have federation set up with Azure AD in ABM

Any way to disable or block all notifications from safari and only allow notifications for certain sites? Thank you!

Today we are releasing Jamf Pro 11.0. Highlights of this release include: Jamf Pro Interface RedesignThe Jamf Pro interface has been redesigned to improve clarity and ease of use. The redesign includes new sidebar navigation, larger font sizes, greater contrast between font and background colors, and adjustments to the padding and alignment of various elements. These accessibility improvements make it easier to read text and scan information quickly when using Jamf Pro. Account-Driven Device EnrollmentYou can now use Account-Driven Device Enrollment to enroll mobile devices with Jamf Pro. Account-Driven Device Enrollment allows administrators to enroll institutionally owned mobile devices with Managed Apple IDs, simplifying the enrollment process. Note: Account-Driven Device Enrollment requires mobile devices with iOS 17 or later, or iPadOS 17 or later

Jump-start your users’ on-boarding experience with SYM-Helper, a stand-alone macOS app to help MacAdmins more easily deploy Setup Your MacContinue reading …

Hello,I would like to know how to unenroll broken mobile devices in a clean way?I have no way to turn the devices on, or others have broken screens.I'd like to reset them and unenroll them to give them to the scrapyard.Do you have a procedure for this?Thanks in advance for any answers!

Hi - Simple question here, I'm just wondering if I can enable the self-service desktop app for just a subset of our users. We just recently deployed JAMF and I didn't have this turned on at the time. I'd like to flip it on now, but I'd like to do some testing and get things in there, and communicate what the new icon is before it shows up on everyones computer. Can I deploy it via policy or profile? Because it looks like a global setting.. Thanks!

How do you all keep an inventory on your devices? What do you use as an asset tag in Jamf? I am looking for a better way to track our devices.

Is there a way to create an extension attribute in JAMF under the 'Users' section that can also be displayed in the 'Computer' section? Currently, if I create an extension attribute in the 'Computers' section to mark a machine as 'Remote,' it applies only to that specific Mac and not to the user. Is it possible to make this user-specific information visible in the 'Computer' section as well?

Hey, I have one Mac's Recovery is locked with a very long password. I never configured this thing and I'm not sure how it happened. How can I fix it?

Today we are releasing a maintenance version of Jamf Pro. Jamf Pro 11.0.1 fixes the following product issues: [PI111089] Simultaneous PATCH requests to the /v2/mobile-devices/{id} endpoint in the Jamf Pro API no longer cause configuration profiles and provisioning profiles to unexpectedly reinstall. [PI113020] Improved the memory footprint of the Set Wallpaper remote command. [PI113193] In environments integrated with Microsoft Intune and using Single Sign-On extension, Jamf Pro no longer incorrectly reports some managed computers as “Deactivated” or “non-compliant”. [PI114175] The Jamf Pro installers now include Apache Tomcat 8.5.95 to mitigate vulnerabilities identified in Apache Tomcat 8.5.93. [PI114369] Jamf Pro user accounts with “%”, “&”, or “+” characters in their password can now successfully log in again. For additional information on what's included in