Hi, We're looking to push out Wifi settings via Configuration Profiles to 10.7 and above machines. In testing and pilot this is working well. When we go live to the rest of the campus we'd like to be able to search/report on devices which do and don't have the profile installed. We've hunted high and low to find this, but don't seem to have any luck - is this possible? TIA Andy

Hello all! This is my first post on Jamf Nation - I'm a newcomer to Jamf and Apple in general, having taken over for my organization's previous Jamf admin.Some backstory:Currently, we install macOS updates by downloading the OS .app, packaging it in Composer as a .dmg, staging the update package on our endpoints via policy, and then using a second policy to initiate the installation with the following command:  echo '<localAdminPassword>' | '/Applications/Install macOS Ventura.app/Contents/Resources/startosinstall' --agreetolicense --forcequitapps --nointeraction --user <localAdminUsername> --stdinpass  This works great for initiating after-hours installs. However, my leadership has indicated they'd like an option for users to kick off updates from Self Service. While I can make this available in Self Service as-is, the problem is that this doesn't allow the user to control when the endpoint reboots; it doesn't even notify them a reboot is incoming.

From time to time I encounter policies that get stuck in pending and I don't know how to resolve the issue.Example, today a new system was setup for a user and enrollment complete fine. I have an enrollment trigger set for a provisioning package that installs all of our basic applications. This is the first time it didn't function - I can see the trigger is active and the logs show pending, but nothing happened after 20 minutes and a restart.In order to get the policy to run I had to scope it to self service to be run manually, which worked, but now the original enrollment provision is still sitting in pending with no failure or option to cancel.How do you resolve this? Both to get a pending to run and to cancel a no longer needed policy sitting in pending.

Hi everyone, Have a config profile that it seems to be corrupted, i can't update it or remove it from my Mac fleet .. contacted Jamf and it seems they still have issues with config profiles "PI112875" and so far nothing has been fixed .. The profile that is stuck has Security & Privacy payload, creating a new one with the same payload is failing to get installed since all the devices still have the old corrupted one.Thought to post it here and ask if anyone can help with any ideas .. TIA

Hello, I am attempting to disable 2 settings in outlook for mac Office 365 New look 16.77.1 the 2 settings are Disable "Encrypt-Only"Prevent users from applying the Encrypt-Only option to emails when using Microsoft 365 Message Encryption.Category Details Domaincom.microsoft.OutlookKeyDisableEncryptOnlyData TypeBooleanPossible valuesfalse (default)trueRequires Configuration ProfileNoAvailability16.40CommentsOnly applies to the new Outlook.Disable "Do Not Forward"Prevent users from applying the Do Not Forward option to emails when using Microsoft 365 Message Encryption.Category Details Domaincom.microsoft.OutlookKeyDisableDoNotForwardData TypeBooleanPossible valuesfalse (default)trueRequires Configuration ProfileNoAvailability16.40CommentsOnly applies to the new Outlook. I ransudo defaults write com.microsoft.Outlook DisableEncryptOnly -bool TRUE sudo defaults write com.microsoft.Outlook DisableDoNotForward -bool TRUE in termin

Using this json from  https://github.com/macadmins/nudge/blob/main/Schema/jamf/com.github.macadmins.Nudge.json  I am unable to get the mainHeader, subHeader and other elements customized with the text that I want. After I make a change in the configuration profile I see that the changes I made show up in /Library/Managed Preferences/com.github.macadmins.Nudge.plist but the Nudge app does not show these changes. What did work was changing the icon paths for light and dark modes. Does anyone have some tips on how to get this text to change? I have been quitting Nudge and relaunching it after each change I make. Nudge seems to be working well otherwise. Thanks!

Hello, I am trying to test the automated enrolment process via ABM to Jamf Pro, when trying to complete this process I receive the error MDMResponseStatus error 500. I have manually added a couple of devices to ABM, switch their MDM assignment to point at Jamf Pro, waited to see the device show under devices in Automated device enrolment then restarted. I then go to setup the device and receive our welcome screen, at the stage is says "Installing enrolment profile" we then receive the above error. This test has been done on a couple of different devices, on different networks, they do not seem to be going into the mobiles devices either as some have experienced. I have tried fully removing all records of the device from ABM & Jamf Pro then trying again but receive the same error. Am I missing something simple here, has anyone else come across this before and knows how to resolve it? It would be a great help, thanks for your time and much appreciat

I'm trying to complete a script run by a launchdaemon to delete a specific account if it is over X hours old. I started with Sean Rabbit's similar script here. But drifted away as I didn't need all that.I've tried "dscl -delete" and "sysadminctl -deleteUser" but they just convert the account to a standard user.I'm now trying to use "jamf deleteAccount" but it doesn't even seem to run (log created, but nothing in it).In all three cases the script works fine when run with sudo, and it's my understanding that /Library/LaunchDaemons/ are run as root? #!/bin/bash # Some Variables jamfBinary="/usr/local/bin/jamf" user="eucadmin" ageLimit=5 #in minutes ageLimit=$((ageLimit * 60)) currentTime=$(date +%s) #list users and if our target is on the machine check its admin and then if it's too old delete it users=$(/usr/bin/dscl . list /Users) if echo "$users" | /usr/bin/grep -wq "$user" && groups eucadmin | grep -qw admin;then userCreateTime=$(/usr/bin/dscl . -readpl

Hoping some of you folks who use Nudge for OS updates can help me out.  I'm having trouble getting the Deferred Count to show anything but 0, even after multiple times closing the window by clicking the Later button.  I think I have the config profile set up correctly, but I feel like something may not be right or has been left out.Here is my plist:<?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>osVersionRequirements</key> <array> <dict> <key>requiredInstallationDate</key> <string>2023-01-06T12:00:00Z</string> <key>requiredMinimumOSVersion</key> <string>12.6.1</string> <key>targetedOSVersionsRule</key> <string/> </dict> </array> <key>userExperi

This is a test message to see if I can post hereas I recently joined Beta.

Hello All, I am looking for the URL to script to download the latest version MS Edge and to install on macOS when it will execute on mac device. I dont want to download and upload and add this latest .pkg every month in my Jamf policy. But after download I can see the URL is version dependent, do anyone has any suggestion how to get a fix URL so that same URL will download the latest version of MS Edge .pkg every month without changing the URL in my policy, I want to do it just I like MS Office package after taking the URL from https://macadmins.software Please help me for Edge browser.

Hi there, We are having some issues with the deployment of Jamf Connect. Seems a handful of people once Jamf Connect deploys to their machine and they get to the process of associating the local account with their IDP account, after the initial IDP login they're prompted to enter their local password and the passwords are not accepted even though we know for certain their password was entered correctly.About 80% of people migrate successfully while the remaining are having these issues only during the migration phase. Since we do a rollout without FileVault we have to wipe these machines to get the employee back working.Does anyone know what the cause of this issue is? We've checked keyboard inputs, the MacBooks themselves are all sourced from the same supplier with no variation between the region. It just seems very much like RNG at this point. We've tried external keyboards as well, since you cant view the password being entered a good assumption would be that even though the pa

We are trying to determine which computers are being shared in the company and to do so we need to know how many users there are per machine. Is there a way to report how many local user accounts per computer we have and list them? I tried some reports, scripts, etc but they only show me lastuser or duplicate computers with the same user. Thanks

Hello all,I am noticing that in iPadOS17 the method we used to set the Home Screen of a Shared iPad is no longer working.Previously we were able to do so by sending the wallpaper out via a smart group. For some reason in iPadOS 17, this method now only works with the Lock Screen. The Home Screen just turns black, and in Jamf Pro I see the message in Failed Commands: Settings - WallpaperThe wallpaper image could not be applied.Anyone else seeing this and/or have a solution?Thanks!

So im seeing a few posts that show some steps for blocking the pop up message in Venture about Background Items added, however I'm not seeming to have much success in blocking this notification. Im working on installing the smart client for Uniflow and am looking to block this notification from showing:Ive grabbed all the info from the process, and just am trying to make a config profile based on this.  Anyone have this successfully blocked already who can chime in?  UUID: 24282C71-85D9-4058-8CA6-534FF2F0024E Name: uniFLOW SmartClient Developer Name: NT-WARE Systemprogrammierungs-GmbH Team Identifier: 4M6FV5A8E6 Type: legacy agent (0x10008) Disposition: [enabled, allowed, visible, not notified] (3) Identifier: com.ntware.SmartClient URL: file:///Library/LaunchAgents/com.ntware.SmartClient.plist Executable Path: /Applications/uniFLOW SmartClient.app Generation: 0 Parent I

Anyone ever successfully configured ldap with FreeIPA? I can query users, and groups, but not if users are members of any groups.

Hello everyone,Our district has two seperate public SSIDs:CCS Devices (installed via profile)Concord BYOD (open public network)While all iPads are told to auto-connect to the CCS Devices SSID, this doesn't stop students from manually joining the guest network.When this happens, Apple Classroom is not able to see the students if the Teacher iPad is on CCS Device and the students are on BYOD.We have allowed the ports found in this support article:https://support.apple.com/guide/deployment-education/requirements-classes-synced-apple-school-edud491bf924/webHas anyone ran into this before?Any help would be appreciated!

Its that time of year again!I've modified my regex statement to take out the models that were tragically lost this year to the latest macOS version. RIP 2017 MacBook Pro and iMacs.I've also added in some bug fixes, mainly that it wasn't matching the full line if the last number after the comma in the model identifier was a double digit (as Apple added one this year for the first time), and gave myself some wiggle room in all the other models in case Apple continues to add more double digit identifiers down the line:  (^Mac1[3-9],\\b[0-9]{1,2}\\b|MacBook\\d{2}|MacBookAir([8-9]|\\d{2}),[1-9]|Macmini[8-9],\\b[0-9]{1,2}\\b|MacPro[7-9],\\b[0-9]{1,2}\\b|iMacPro[1-9],\\b[0-9]{1,2}\\b|iMac(19|2[0-9]),\\d|MacBookPro(1[5-9]|2[0-9]),\\b[0-9]{1,2}\\b)  As done previously, you can create a smart group using this in order to find devices in your environment that are not compatible to be upgraded to macOS Sonoma by using the criteria item Model Identifier and then selecting "

We have recently deployed notifications that will notify a user that an application deployed from Jamf App Catalog is due an update. These notifications have been created through configuration profiles. The user receives three notifications:Notifies the user to close out within the next four hours so that the app can update.If the user hasn't closed out the app manually, following the four hour time period, notifies the user that the app will close to update. The application then should automatically close out after 10 seconds.Following the update, notifies the user that the app has updated successfully and will restart.We have noticed an issue with the second notification that it is applying a 60 minute countdown before it automatically closes out the application, giving a "Minutes remaining: 60" at the end of the notification despite us not adding this as an instruction as part of the plist for the specific application.The plist is written as:<?xml version="1.0" encoding="UTF-8"?&

Updated 5 February 2024 iCloud Private Relay is a feature provided by Apple designed to enhance online privacy by ensuring that neither the source IP of users' Apple devices nor the websites they visit can be accessed by a single entity. Due to the design of this Apple privacy technology and its interaction with DNS, certain blocking capabilities within Jamf Security Cloud were initially limited. To ensure policy effectiveness and uphold user safety, Jamf recommended disabling iCPR. However, in the latest release, Jamf has worked closely with Apple to adopt a DNS signalling approach that enables Jamf to overcome any previous limitations and ensures seamless interoperability with Apple's iCloud Private Relay. This approach ensures comprehensive user and data protection via Jamf policies, whilst permitting iCloud Private Relay to safeguard users' online privacy on secure sites. Delivering Jamf Security Cloud capabilities in a compatible mode with iCloud Private Relay has the following i

Hello, We have several computers and devices that have not communicated with Jamf for several months.I wanted to know if it was possible to send an MDM Lock or Wipe command and then unmanage them.Will these MDM commands still be deployed if the computer or the device is unmanaged but a check-in is done again? Thank you

Hello everyone,I've added a webloc in the outer right (just to the left of the trash) of the dock by mistake to all computers in our environment. Does anyone have any idea on how to uninstall/delete it?

Hello,Upgraded from Mojave to Catalina and AppleID, Screen Time and SideCar are grayed out. I ran- python -c "from Foundation import CFPreferencesCopyAppValue; print CFPreferencesCopyAppValue('DisabledPreferencePanes', 'com.apple.systempreferences')"I received 'None' backI created a Configuration Profile that enabled Apple ID Preference Pane, Screen Time and Sidecar and scoped to only Catalina macs. Ideas?Thanks !

Hopefully, this is an easy one. I'd like to be able to keep the Apple apps from installing automatically on enrollment. I don't want to exclude them, I just want them available in Self Service. (I.e. Garage Band, Pages, Keynote, Numbers, iMovie) Any ideas? Thanks in advance

Hi, we have a big problem with the layouts at our school. We have defined layouts (iPadOS) for school days. Unfortunately, the layout that should apply outside school hours cannot be loaded. Jamf has the following error: "Profile installation failed / Profile could not be installed / The profile" gsg-Layout-Schueler-1: 1 (version: 46) "could not be installed. / The payload" HomescreenLayout "could not be installed cannot be installed. / A home screen layout is already installed. We're pretty desperate because only a full wipe could solve the problem. Does anyone have the same problem or even a solution? In German:Hi,wir haben bei unserer Schule ein großes Problem mit den Layouts. Wir haben für die Schulzeit Layouts (iPadOS) definiert. Leider kann das Layout, das außerhalb der Schulezeit gelten soll aber nicht geladen werden. Bei jamf steht der folgende Fehler: "Profilinstallation ist fehlgeschlagen / Profil konnte nicht installiert werden / Das Profil „gsg-Layout-Sc