Hi there, I'm working on a policy that should be able to deploy a launchdaemon plist to all machines. The below script I found here https://communithttps://community.jamf.com/t5/jamf-pro/remote-management-active-extension-attempt/m-p/119717y.jamf.com/t5/jamf-pro/remote-management-active-extension-attempt/m-p/119717    #!/bin/bash cat << 'EOF' > /Library/Scripts/jamf-Restart.sh #!/bin/bash sudo killall jamf sleep 10 sudo jamf policy EOF chmod 644 /Library/Scripts/jamf-Restart.sh chown root:wheel /Library/Scripts/jamf-Restart.sh cat << EOF > /Library/LaunchDaemons/jamf-Restart.plist <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>Label</key> <string>jamf.restart</string> <key>ProgramArguments</key> <array> <string>sh</string> <string&

Hi ! I use Jamf Compliance editor and recently the "Upload" feature doesn't upload anymore the configuration profiles. It used to work very well until like 2 weeks ago.Scripts and extension attributes are uploaded without any issue though.JCE doesn't raise any alerts when uploading. But I can see in the change log in JAMF that only scripts and extension attributes are uploaded, no mention of configuration profiles.API roles and permissions seems fine, at least as per the documentation.Any idea ?

I am able to add the Apple clock app to self service, but because I cannot assign a license to it, it won’t download on the managed iPads.I tried “buying” licenses from Apple School Manager, but I can’t get licenses for a system app.

Hi There I know there have been discussions regards this already, however, none of these seems to be working for us. Having looked at this article with Google https://support.google.com/chrome/a/answer/7591084?hl=en it appears that they have changed their code/process as this is no longer working. Also the UpdateDefault key is no longer listed on chromium.org/administrators/policy-list-3. My question is, how to force users to have the most up to date version of Chrome? I see Patch Management may work, but this requires pkgs and i am worried it would remove user profiles etc if reinstalled etc. Any advise best way to force users to update chrome? Thanks

We've decided to move our scoped policies and conf. profiles to smartgroups, as we realized this will save a lot of work in the long run. I don't seem to find an efficient way to do this, at the moment i have to go through every single policy and conf profile and change the scope manually, which isn't even the bad part, the worse is that i can't find a way to list all the policies scoped to one department.When the policy is scoped to a few departments, it can't be found anymore in the search, it shows "2 computer groups, 2 departments" or something like that and that excludes the keyword from the search.Any help/ideas would be highly appreciated.

I ran into an issue where a Supervised, Managed phone became unmanaged during iCloud restore via Quick Start. Once the phone reaches the home screen, Self-Service doesn't install, and the phone doesn't check in with Jamf. I believe at least one of the config profiles is missing.I *think* what is happening is that the iCloud restore brings down the config profiles from the old phone that replace the ones PreStage enrollment installed, and since it's from a different device, they can't or don't apply.The workaround I found was to manually re-enroll the phone via the enrollment URL, as doing so downloads and re-installs the config profiles. As far as I can tell, after the workaround, the phone is fully managed and never lost its supervised state.While I have a workaround, this isn't ideal for remote users and isn't close to the zero-touch deployment we aim for. Does anyone know what is the best practice here? Surely there must be a correct way to use core Jamf Pro features like PreStage E

Does anyone know how to allow IP Cameras to display on an iOS device? This is through an app the app opens but no connection to the Cameras. Security setting somewhere that I need to allow this.

Hello Everyone,  I have a question how can i have it setup where a user logins through jamf connect and after login their computer in jamf pro automatically encrypts for example my test mac computer has filevault enabled but it is currently not encrypted in jamf pro 

Found the solution to my problem - How to lock classroom pane/options with a custom profile in JAMF explained in first comment We are looking into deploying Classroom for our teachers and students next year. We would be doing Teacher Managed classes. (macOS devices, teacher and student). By default, students can change settings that include them being able to leave the class, and requires student approval to lock etc... Which is never going to work. JAMF has a couple wonderful configuration profile setting under Restrictions - Functionality. However they ONLY work with Prestage Enrolled devices, not those enrolled via QuickAdd. I have tested and confirmed that with a clean install of 10.14.4 and QuickAdd that the configuration indeed does nothing. Students can still change settings and require permissions etc. Allow Classroom to perform AirPlay and View Screen without prompting, Allow Classroom to lock the device without prompting,Require teacher permission to leave Classroom unm

Hey all, I made a thing to save my eyes (and hopefully yours): https://userstyles.org/styles/170527/jamf-pro-dark-modeGitHub Source Please read the installation notes carefully to activate the style. Tested pretty extensively in Chrome; works in Firefox too. Unfortunately Safari is not possible at the moment until Stylish (or someone else) submits an app for Mojave / Safari 12. While Safari can load custom CSS via Preferences > Advanced, Jamf's CSS has some 'global' declarations in the first few lines for typefaces and I can't easily work around that AFAIK. This is my first attempt to do anything remotely approaching 'front end web development' in over a decade. If I've missed anything obvious or made an amateurish / inefficient CSS gaffe, please let me know here and/or make code suggestions at my github repo. I've uploaded some screenshots here to whet your appetite.

Welcome to Part 3 of our discussion of Certificates, SCEP, and 802.1x. In our previous post we took a look at how Active Directory Certificate Services works. In our final part in this series, we will explore SCEP and 802.1x. What is SCEP? SCEP = Simple Certificate Enrollment Protocol What does SCEP do? SCEP is a certificate management protocol that helps IT administrators issue certificates automatically. SCEP is used by a Windows Server Role called NDES or offered as a service by a third-party Certification Authority (CA). What is NDES? NDES = Network Device Enrollment Service NDES is a Windows Server Role Service which works with the Active Directory Certificate Services Role to distribute certificates via SCEP. What does NDES do? NDES allows software on routers and other network devices (e.g., Macs and iPads) running without domain credentials to obtain certificates based on the Simple Certificate Enrollment Protocol (SCEP). How does NDES work? NDES uses the Micr

Hey Everyone, I noticed when we get to this part of the login for Jamf Connect we get this error message below.   Would anyone know how we can get rid of it? 

Hi, Totally fed up with the constant updates of Flash player plug in. Does anyone have a deployable method to remove it from my lab Macs? I know there is the manager in the Utilities folder, and you can uninstall it with that. But this does not look scriptable to me. And I need a deployable method as there are about 300 Macs with it on. As usual, any help will be greatly appreciated.

Pretty new to Jamf and Mac management. Have been looking at the patch management process and focusing on browser updates, although what I'm discussing is applicable to any application update, not just browsers.What I'm seeing is some confusion among our users regarding the patching process. For example, user gets notified that there's an update available for Microsoft Edge. User initiates the install process. Browser closes, update begins.My question is: how does the user know the update has finished applying and they can safely re-open the browser? Is there a way to tell the application to restart after an update has applied? Curious to know how other admins/organizations are handling this. Thanks!

Hi all,Next month we will migrate from CA legacy to Device Compliance.The question isWhen the devices migrates to DC, what are the experience from the user side? do they get a prompt to enter their AAD password?If yes, can we avoid this prompt with SSO in place?Thanks

Hey,I'm trying to create a Smart Search, which lists devices with any Software title by Oracle installed. Is there an easier/better/future proof way than just adding every Application made by them? I found "Vendor" as an attribute, but does not yield any results.Any ideas?

The Jamf profiles on our devices (iPads) are set to "non-user-removable". Some of our students get to keep their iPads after they left our school and of course they want to have unmanaged devices without any restrictions and profiles.Is it enough to disown the devices in Jamf, move them to the trash and tell the users to "erase all content and settings"?Or is it neccessary to unmanage the devices first?Or in other words: does disown entail unmanage?

After installing KB5005623 on our Windows print server it seems to have broke printing from macOS to our SMB queues. Windows machines seemed unaffected as were macOS clients printing via LPR. We have heard that uninstalling it will restore printing from Macs. But we do have print servers at 50 sites and each would require an uninstall and reboot. If the Windows machines are still printing I'm wondering if there is something that can be done on the Mac side that will allow them to print as well. 

Hi all,Just wondering what you're doing in terms of macOS and iOS updates? Our Windows workflow is fully automated with a 7-day grace period before the computer will automatically restart to install updates. We really want to have something similar in place for our Macs but also iPhones/iPads if possible as they're lagging behind everytime a new update is released.Right now what we're doing is trying to educate personnel and push them to update their devices which is not ideal to say the least...Is there a way to force them to update without interrupting their work by giving them a grace period? Does anyone have any suggestions or workflows they currently use for this that they'd like to share?Thanks in advance!

I'm using Jamf Pro with some Macs and for some reason I have trouble getting a few M365 apps to update; specifically the Mac App Store versions of Microsoft Word, Excel, and Powerpoint. Interestingly, the Mac App Store versions of Outlook and OneNote update fine. I know the apps having issues are larger sized, but they should still work. I have tried removing and adding the apps to Jamf, removing the VPP option, and a few other things. I have also read about others having the same issue with Mac App Store M365 apps not updating.Anyone experiencing this issue? Any suggestions on how to solve the issue?

We've got a couple devices that after installing the latest updates of Sonoma are still showing RSR version (i.e. 14.1.2 (a)).  Does anyone know of a way to get this back to showing a true version of the OS that is running on the device?

Seems to be happening with every package I create and try to deploy. Attached a log below: Sending Wake On LAN command...Opening SSH Connection to 152.146.193.xxx...Accepting authentication method...Authenticating...Successfully authenticated.Verifying Computer's Identity...The MAC Address has been verified.Checking Operating System Version...Running Mac OS X 10.8.4 (12E55)Verifying /usr/sbin/jamf.../usr/sbin/jamf is current (8.7)Verifying /usr/sbin/jamfvnc.../usr/sbin/jamfvnc does not exist.Verifying /Library/Preferences/com.jamfsoftware.jamf.plist...Preparing Policy...Executing Policy 2013-07-15 at 11:20 AM | user | 5 Computers...Mounting afp://server/CasperShare to /Volumes/CasperShare...Installing Lexmark X945e Drivers.dmg...Error: An error occurred attempting to mount the package "Lexmark X945e Drivers.dmg".Unmounting file server...Submitting log to server...Finished.

Hi!Our users can use a specific guest WiFi to enroll their devices. This WiFi does not have access to any other sites than the ones needed for enrollment. The correct WiFi is rolled out via configuration profile.Is there a way to remove the guest WiFi automatically after the correct one is installed via that configuration profile? 

Hi,Does anyone know how to set up a policy thta triggers every 2 montths (or a specific time)?I want to set up a policy that tiggers a script that moves all of the files of the download folder to the trash (i already have the script), that is cus the computers are used by students that donwlaond multiple files for their projects, but rather that delete those files at the end of semestres y prefer to set up a policy that triggres the scrpit once every two months.Is it possible? Thanks in advance.

Hey Everybody,  I notice on my test machine where I am testing Jamf connect that the user always ends up as a standard user. How can we make it so that the user is an administrator?