I use a script to update Zoom to what ever version the app owners at my company say we are allowed to install. The script runs a curl command to download the installer for the version we want, then it installs the package. It first checks if Zoom is running. If it's not, it runs the install. If it is, it does not install the newer version of Zoom. The policy runs at check-in scoped to all comptuers with an exclusion for computers already running the version of Zoom we want to install. I have been trying to figure out how to detect if Zoom is running a meeting or not. Somoene may simply have Zoom launched, but not have a meeting running. I know a lot of my users just keep Zoom running. This results in the update taking longer to get done on all of my Macs. Does anyone know what process to look for if Zoom is in a meeting?

Hello allI'm experimenting with the new Software Updates feature available in Jamf Pro 10.48/10.49 for macOS updates but it seems to it's not working.I've created a smart group that includes only my Mac device and I deployed the OS update for myself but nothing happens.In the device management, I don't see any pending or failed commands.What am I missing? Did someone manage to deploy the OS update using this method?Thanks in advance,Michael. 

Hi I seem to be having issues with our shared iPads, The iPads are set up for temporary users only.. They seem unable to always download all of the apps we have assigned, in total the apps assigned only add up to around 5gb at most. However the iPads state that they are unable to download several apps as there is insufficient space. Even when the iPads have downloaded the apps assigned, when I check them in the system they seem critically low on space, so I'm concerned when I get asked to deploy further apps to them that they will need wiping in order to get the new apps pushed out, which I can see being an increasing problem.I've spotted the thread in JAMF pro with a similar issue:https://community.jamf.com/t5/jamf-pro/shared-ipad-temporary-user-storage-problems/m-p/236392#M224211But just wanted to see if anyone has the same issues, or better, a solution for JAMF school?thanks,

We seem to have an issue since around the time we updated from Jamf Pro 10.50 to 11.0 (on-premise). Now when we enroll a Mac with user-initiated enrolment it fails to do an inventory update right away. We're seeing for instance our Rosetta 2 install policy not run at enrolment time as it's scoped to a smart group of our Apple Silicon Macs. In Jamf the name of the Mac is its serial number even though we set a custom name on the Mac (in both About and Sharing). Other things also seem to fail until we run a manual "sudo Jamf recon" - anyone else seeing this?

Situation: In Apple Business Manager we have two MDM server settings. We want to migrate our Mac laptops from the America MDM profile to the India MDM profile. What is the best approach for this?According to me first change the MDM setting from America to India in Apple Business Manager then reset the device and enroll the device again. Or do we have any other way of doing it?

Hi All, Hope this script help you all to install the home brew from JAMF for standard account users and admin account users. It also supports for BigSur OS. #!/bin/sh # # Script Name: installHomebrew.sh # Function: Deploy Homebrew (brew.sh) to the first user added to a new Mac during the post-DEP enrollment DEPNotify run # Requirements: DEP, Jamf # # Copyright 2020, Route 1337, LLC, All Rights Reserved. # # Maintainers: # - Matthew Ahrenstein: matthew@route1337.com # # Contributors: # - "Dakr-xv": https://github.com/Dakr-xv # # See LICENSE # # Apple approved way to get the currently logged in user (Thanks to Froger from macadmins.org and https://developer.apple.com/library/content/qa/qa1133/_index.html) ConsoleUser="$(/usr/bin/python -c 'from SystemConfiguration import SCDynamicStoreCopyConsoleUser; import sys; username = (SCDynamicStoreCopyConsoleUser(None, None, None) or [None])[0]; username = [username,""][username in [u"loginwindow", None,

Hey EveryoneIs there a way to collect a usage report on an entire Smart Computer Group? I know you can click on individual machines and collect, but I cant seem to figure out how to do it with a smart group.

Hello All,'grep' has been a great tool in my tiny script for many years running from Jamf Remote(deprecated)....now, through Jamf Pro Policies, the grep command is getting a 'Usage Error':**************************************************************************************************Script result: usage: grep [-abcdDEFGHhIiJLlMmnOopqRSsUVvwXxZz] [-A num] [-B num] [-C[num]][-e pattern] [-f file] [--binary-files=value] [--color=when] [--context[=num]] [--directories=action] [--label] [--line-buffered] [--null] [pattern] [file ...]**************************************************************************************************....Basic form of my tiny script:**************************************************************************************************#!/bin/bash#ENV variable for current logged in user = $LOGNAMEfor home in $(ls /Users | grep -v $LOGNAME | grep -v Shared)do rm -rf /Users/$homedone***************************************************************************************

Our company has our Macs domain joined and we use NoMAD. We have this issue plaguing our users where when they try to change their password through NoMAD it will tell them "New password doesn't meet policy requirements" even though the password they are using does meet the requirements. It's seemingly random but seems to pop up for one or two users every month.The solution that works for us is to unbind the MacBook from the domain and rejoin it. After that the user is able to change their password like normal through NoMAD. Has anyone else encountered this or have any solutions?

Good, better and best methods to leave and retrieve client-side breadcrumbs with Jamf Pro Introduction As a Jamf Pro administrator managing Apple computers running macOS, you frequently need to leave a client-side record when a policy was executed, which is sometimes referred to as a “breadcrumb”; you also need an easy way to retrieve this data. Continue reading …

Hi all, Fairly new to Jamf, having an issue getting a Self-Service installer for Citrix Workspace to function.I have downloaded the .dmg file from Citrix, packaged it up, and added it to an install policy. I've enabled FUT and FEU as it's a .dmg and not .pkg. But on installing from our Self Service, the application isn't actually installed despite self service saying install complete (not appearing in Applications list). Any guidance on where to go? Thanks!

There used to be a "More" menu item under which one could find scripts. Where are they now?

Greetings all. Recently we started encountering an odd issue with our OneDrive deployment. Up until the last few weeks of last year, OD had been fairly stable, but we started getting a few tickets of “OneDrive won’t start” or similar issues.  Running the nested ResetOneDriveAppStandalone.command usually fixed it, however when I started digging into it, I started encountering a very strange issue. The OneDrive directory created in the CloudStorage path is being given ownership to our Jamf service account. EdC@TestBox ~ % ls -la ~/Library | grep Cloud drwxr-xr-x 3 JAMFAdmin staff 96 Mar 31 2022 CloudStorage I’ve started working backwards through various types of testing. First building a box and not installing OneDrive - nope, still does it. Next was removing my KnownFolderMove profile - Nope.  At this point, I can’t find what is causing the creation of our CloudStorage path, but once I do, I suspect that’ll be why it’s getting ownership from our Service Account. 

Hi everyone, Running some tests here and have a question. I currently have Google Chrome setup as a Mac App that installs automatically on all the devices in our environment. If I uninstall it manually, how long will it take before it automatically reinstalls again? Currently I have set the distribution so that it installs automatically on all systems and therefore it isn't available in Self Service. Without it being available in Self Service the end user could install it from the internet but I was hoping there was a way to have it done by Jamf because I am under the impression that if it's installed from Jamf then the updating works better later on. Does anyone have any experience with this and can you advise me on best to push out individual apps in situations like this or if it's alright to simply have the end user install Chrome from the web without any concerns about it not updating properly later on. Thanks!

Hello everyone,I hope you are doing well. I have Okta integrated with Jamf through Jamf Connect, I am wondering is it somehow possible to pass user's Full Name or at least Username in Okta to Jamf / Mac.What I am trying to do is to change computer name to be the same as the name of the Okta user.So far my closest success to this was to create script that takes username or alias(alias has precedence) of the currently logged in user and sets it as computer name. Code is below: #!/bin/bash admin1="admin1" admin2="admin2" # get username of the currently logged in user username=$(/usr/bin/logname) # get currently logged in user's alias if alias is not available, username will be used instead alias=$( echo "show State:/Users/ConsoleUser" | scutil | awk '/Name && ! /loginwindow/ { print $3 }' ) # If logged in user is not one of local admins that are for IT personel if [ $username != $admin1 ] && [ $username != $admin2 ]; then if [ $username == $alias ]; then

Hello, Using hybrid joined Azure, we appear to have an issue with our Conditional Access configuration between Jamf and Entra. We have configured Jamf Device Compliance with a Compliance Test Group and an Application Group, the connection verification status: Success between Jamf and Intune is confirmed and partner compliance management configured.A group of test Mac’s in Jamf have Company Portal and Intune integration policies installed and they are registered in Entra We have configured Conditional Access policies in Intune and targeted all cloud apps but when we run the CA policy we are locked out of Cloud Apps because according to Entra Sign-in logs the Mac is non-compliantAm I missing something?

Experimenting with Self Service and noting that if an application is installed, albeit I'm just testing with Chrome, through the Self Service app and then deleted it is not possible to reinstall the app through Self Service a second time. For Chrome, it initially displays Install which changes to Open when successfully installed but doesn't revert to Install if the app is removed. How can the option in Self Service be reinitialized?

Hey everyone! Does anyone have any insight as to how I could set up a smart group to show me computers with a software update status of "unknown". We have seen a few machines with this status that aren't getting prompted for updates with the DDM software update commands and are thinking this could be the issue. Any help here appreciated!

How/where do I set that Sonoma has to be up-to-date during automated enrollment? Can't find anything in the GUI>

Not sure what I am doing wrong here. I have created a Supervision Identity in JAMF Pro. But when I try to add it to my keychain, the password I provide is invalid. I've deleted and recreated the identity many times. Any idea what is going on? 

Hey all, got an issue that I can't find answers to. I have no restrictions on anything in ABM and JamfNow in terms of app store access. Users can log into the app store but can't download anything. What am I missing?

Hi All,Do we have the .pbit for the Jamf Pro.I have referred to the this link,But unable to find the JAMF Pro .pbit help me if anything is already there ?  https://github.com/jamf/powerbihttps://www.youtube.com/watch?v=DDbDbOfABTM

Since the JAMF Cloud update over the weekend, I see all clients now have the JAMF Remote assistant binaries / apps etc installed and a launchdeamon running.. We do not have it enabled in JAMF.We cannot have remote access apps / binaries installed without testing and passing security etc. There is no way to disable this 'functionality' of auto installing (I've asked)There are no official uninstall processes at the moment (I've asked) This is a very very bad idea installing this automatically.

Hello All. I've been installing a configuration profile that sets up our wifi SSID and associates it with a machine certificate via the AD Certificate section. It associates the cert with the wifi config (so the user doesn’t get prompted) and overall has been working fine for quite some time. I have one issue though. New networks place the network at the end of the preferred network list. Simple fix: should be to re-install right? Nope. The configuration profile places the network at the end of the Wifi Preferred Networks. I want it to be first. There doesn’t seem to be a way to re-order it unless I remove the wifi network, then re-add it. That's fairly trivial to script, but that breaks the association with the computer’s certificate and the user now suffers. Does anyone know how to programmatically re-order SSID preference without breaking the cert association OR how to add wifi and associate it with an existing machine cert so that the user isn't prompted? Th

I have seen several discussions on this topic but so far following them I have not been able to get rid of the Cisco AnyConnect Socket Filter PPPC pop. I have a few configuration profiles for AnyConnect following other people and Ciscos generic documentation and it looks like they have installed correctly. However the popup persists. Anyone got any ideas? https://www.cisco.com/c/en/us/td/docs/security/vpn_client/anyconnect/anyconnect49/upgrade/AnyConnect_macOS_BigSur_Advisory.html#_Toc52277857