Hi guys,im new to jamf and actually having a problem with a device which i am using for testing.Actually its not able to get this phone into jamf....it worked once (27.11). For documentation purposes i startet the process again. It shows up in Apple Business Manager with the latest timestamp (today 4.12). I switch MDM server to our server but nothing happens in jamf. It still keeps entry in pre-stage from 27.11. Thats probably the reason why the process cannot be completed again. I cannot find any option to delete a single device from pre-stage. The only option i get is to delete our pre-stage profile.Any idea what i can do?Greetings Frank

Computers will not enroll today, when we enter any username and its password (Active Directory) it gets stuck 'retrieving enrollment profile' then returns to the login screen as if the username and password are incorrect, no errors. We verified usernames and passwords (including reseting passwords in Active Directory) and used multiple accounts with the same results. We do not recall any notifications for service interruption or have seen any outage reports as of today 11/29/23.The last time we were successfully able to enroll a laptop was 11/20/23

Hai community,I am considering switching from Windows laptops to a Mac provided by my organization. However, they have informed me that the device management software, specifically Jamf, which they intend to install on the Mac, may significantly slow it down. I value Mac's performance and reliability and want to make an informed decision about this matter. Is it true that installing Jamf or any other device management software on a Mac could noticeably affect its speed and overall performance?Thank You.

Is there a script or EA we can use to see when the last time Jamf Connect checked the sync status of the password and what the results were?  

I have a test JSS server that was running 9.22 and installing the Wireless configuration profiles so I could start testing my profiles and policies to make sure everything would be working when we upgraded our main server to version 9. Everything was working fine until I upgraded my test JSS server to 9.23 then the wireless configuration profiles would fail saying "Some required information in the profile is missing." I've recreated the JSS certificate, un-enrolled and re-enrolled the computer, tried different fresh installs of the OS, I also downloaded the profile to install it and it still came up with the same error. This configuration is scoped to all computers. I'm testing a user initiated enrollment, so once the enrollment is finished the computer can then access our wireless. The machines I've tested this on are a MacBook Air (11-inch Mid 2013), an iMac (21.5-inch, Late 2012), and an iMac (Late 2009). The MacBook Air is running 10.8.5 and the iM

Hi all,I'm trying to setup BYOD User Enrolment. We already use Jamf Pro with a set of school-issued iPads, and have iPad licensing. Now I want to add BYOD MBPs to the equation...Fairly simple question, but I'm having trouble finding the answer: What license do I need for Jamf Pro to enrol both iPads and MacBooks? Is BYOD User Enrolment still free/unlimited, or was that just free during the pandemic?Thanks.

Hello everyone,I'm currently encountering a difficulty and would be grateful for your assistance. I'm attempting to determine which clients have iCloud Drive activated, particularly with the synchronization of desktop and documents.I've conducted thorough research online and within this forum, but it seems that the solutions provided are not applicable to the newer versions of macOS.Could anyone offer guidance or suggest an effective method for the latest macOS versions (Ventura, Sonoma)?Any help would be highly appreciated.

Trying to figure out if Protect can provide similar insights to system, file, network events that Microsoft Defender ATP can provide.Have just stood up Protect and wired it up to pass data into Splunk, but feel that this does not give the same level of insight into what is happening on the device as compared to ATP/Windows.ATP has a timeline feature that allows you to drill down into each step a user makes on their system. This is crucial for our InfoSec team to be able to analyze alerts.We are hoping that Protect can give us more insight into what is happening on our growing Mac fleet. Any advice is welcome and appreciated.

Hey everyone!Thanks for taking some time to look over this post. I am currently working on getting a webloc file deployed to each user's desktop on their Mac. This is turning out to be more difficult than I imagined. I was wondering if anyone has had any experience with deploying something like this?!I have tried creating a package that stores the weblog file in a temp folder, but I can't figure out how to get the file copied over to every user's desktop folder. If anyone has any suggestions, I am open to hearing them! Thank you!

Hello I was wondering if there was any way to disable the automatic run of safe files in safari using a configuration profile/policy, I can't find a setting for it and need to disable it for compliance reasons.

Disclaimer, while I work for Code42 software, these were built for internal use and are not part of the product. Hey, I wanted to share some extension attribute scripts I created for Code42 Incydr (Professional, Enterprise, Horizon, and Gov F2. - or more generically the Code42-AAT.app). A shoutout to @MLBZ521, as I used some logic from their scripts. A bit more specifically. there is logic built into these for local logging if you need that.  I hope others can find these useful.  First is a script to validate that the Configuration Profile that is required to run the app is in place. This is a great pre-deployment check to make sure the application will run properly after install.  #!/bin/bash # set -x ############################################################################################################## # Script Name: incydr_mdm_check.sh # By: Perrin Bishop-Wright / Created: 8/16/2022 # Version: 1.0.1 / Updated: 8/16/2022 / By: PBW

Hello All, One mac user reported that he is not able to sign into Nomad, how can I do the troubleshooting to find the cause?Others users are able to sign into Nomad, so it seems like related to mac device not related to deployment through JAMF. Any idea will be appreciated. Thanks!

Hey everyone, If you're like me you're probably having trouble tracking down how to get Jamf Remote Assist Session logs/details. I did a quick writeup on how to get some of the information when you want to audit the logs. It's a bit clunky but overall much better than nothing.

I want to know how SUPERMAN works and how I will deploy in Jamf.I built a policy and added the SUPERMAN script and added the script parameter in my policy, I executed on mac But I dont know how it works for Apple updates, how it will evaluate the pending updates and install it on end point.Should I create another policy to evaluate the pending Apple updates and deploy on end point? 

I am in early testing of the upgrade path we have been using for the last few years. Make a package with Composer and use that for the install. When I go and make the DMG with the Sonoma install, Composer errors out and cannot make the DMG. Anyone have another way to accomplish this or a different workflow?

Hi,We are experiencing slowness when copying files from a Mac in Ventura or Sonoma to an Azure file share with the smb protocol.We manage to improve performance by modifying the contents of the /etc/nsmb.conf file.Have you encountered this problem and do you have any recommendations to offer us?Thanks

Hi fellow Admins! I placed a feature request for an API function for Jamf Pro. If you like that idea please vote for it. It would help us a lot for monitoring reasons. Thank you in advance and i wish you a pleasant weekend!https://ideas.jamf.com/ideas/JN-I-28017Best regards David

Hi All, We are working on removing Docker desktop from Macs, tried few scripts for uninstalling through Jamf Pro however we are getting an error stating root access is needed. Wanted to check if anybody knows of a way to remove docker through jamf.The script user#!/bin/bash # Uninstall Script if [ "${USER}" != "root" ]; thenecho "$0 must be run as root!"exit 2fi while true; do  read -p "Remove all Docker Machine VMs? (Y/N): " yn  case $yn in    [Yy]* ) docker-machine rm -f $(docker-machine ls -q); break;;    [Nn]* ) break;;    * ) echo "Please answer yes or no."; exit 1;;  esacdone echo "Removing Applications..."rm -rf /Applications/Docker.app echo "Removing docker binaries..."rm -f /usr/local/bin/dockerrm -f /usr/local/bin/docker-machinerm -r /usr/local/bin/docker-machine-driver*rm -f /usr/local/bin/docker-compose echo "Removing boot2docker.iso"rm -rf /usr/local/share/boot2docker echo "Forget packages

Is it possible to use Payload Variables to create local accounts for say the assigned user of a device rather than having a policy for each individual user? For example something like this. 

Hi Folks, I want to unbind my AD Mobile macs. It's mandatory to ensure AD pssword sync with local pwd. I have to use Apple SSO Kerberos Extension for now.1- Can Apple Extension make pwd sync from both sides ?2- If AD pwd is locked or desabled, is this going to lock local mac pwd?3- The user can change local password and do not update the Apple Extension. Is there away to force sync pwd to avoid this case?4- In order to make the extension work, shall user authenticate before unbinding his mac?5- I do not find a guide to make the extension setup in jamf pro, any idea?

The last topic had a solution marked that wasn't a solution - I want to bump this back up to the top.  We are experiencing issues with our network sporadically when moving through APs in our building.  The fix is associated with a the Limit IP Address Tracking feature but I am not sold on that. How do we turn this feature off in mass? Its been said that this feature is only related to Mail and Safari - has anyone else experienced issues outside of those like mine? 

Hi all! Is anyone else experiencing problems with Jamf School and Classroom? Classes and lessons remain empty for teachers and I can't find anything wrong within JSS or Classroom. Jamf has updated the Education profiles, but no luck. Just wondering if anyone else has these issues and maybe a solution or workaround. Thx!

I have been searching for an answer, but coming up empty. Our prestage enrollment creates a local admin account for our tech services department but under Big Sur that account is created with no permissions to access anything on the disk. We can log into the account, and even use it to create other user accounts, but it has no permission to access the desktop, downloads, trash, or even to open Self Service. Is there a change that I may need to make to how prestage enrollment performs under Big Sur that I may have missed? Thanks in advance for pointing me in the right direction. I appreciate your help.

Hi all,I got a question from a customer, that they're trying to delete management on iPads that are in JSS. The problem is that their APNs is expired and the iPads don't have WiFi currently. I think it's possible to get WiFi on the devices, fortunately, but I'm wondering what the best way is to get the management off the devices. Does anyone have experienced this or has any suggestions?Thanks!!

Morning Everyone!we updated a collection of iPads yesterday night. These iPads were running version 15.6.1.  So I sent a remote command from Jamf to update to the latest version.  when I checked this morning none of the iPads have updated and few of them are stuck on apple logo (loop).  These iPads power on and then the apple logo appears as normal and then after few minutes it restarts and this keeps happening over and over again. Any advice/help will be very much appreciated. Thank you