What is the best way to export Management History and the "Inventory Update" log, given that we do not have JAMF Protect yet Instead of having to open each iPad entry and review its log individually, is there a way to export that data? 

Hi everyone,I have a user who's been consistently unable to connect to American Airlines inflight Wi-Fi. The device behaves as if there's no internet connection at all—it doesn’t redirect to the login portal, and nothing loads. What’s strange is that this issue only occurs with American Airlines; the user has no problems connecting on other airlines' Wi-Fi networks.What I’ve Tried So Far: Excluded the user from the Jamf Radar profile: This has resolved similar inflight Wi-Fi issues in the past, but it didn’t help in this case.( Once I fixed it I would add it back) Confirmed there are no VPNs or DNS filtering tools active at the time of connection. Had the user try multiple browsers (Safari, Chrome) – no success. Attempted manual navigation to common captive portal triggers like: Captive.apple.com Wi-Fi does show as connected, but again, there’s no redirect and no actual connectivity. Questions: Has anyone else seen this specific to American Airlines Wi-Fi? Are there any other

Hi All. I’ve tried searching but haven’t found any hits based on the search queries I’ve given, so i’ll try posting instead.  I’ve been tasked with writing a script that can be run from a Jamf Self Service action to add users to a specific Azure AD group.  My script should work, but seems to be failing. I’m getting a repeated error HTTP Error 411. The request must be chunked or have a content length. even when passing a flag to chunk it.  I’m not great at API, and Azure API is new to me.  Anyone out there have experience with that?  I can share my script, but wanted to make sure I’m not trying to do the impossible first.#!/bin/sh # Add a user to an Azure AD group.sh # # # Created by Ed on 2/28/23. # ## Read the KerberosSSO plist to get shortname of signed in user plistLoc="/Users/Shared/.KerberosSSO/" plistName="com.apple.KerberosSSO.attributes.plist" valueName="user_name" foundItem=$(defaults read ${plistLoc}${plistName} ${valueName} | /usr/bin/aw

Hi everyone,ContextI’ve encountered several machines where multiple Teams accounts (professional, personal, etc.) were registered, and removing them from the system proved to be quite difficult.I looked into various solutions, but many of the recommended methods didn’t work in my case. Every time I opened Microsoft Teams, the accounts would reappear.Here are some of the resources I consulted:    https://support.microsoft.com/en-us/office/sign-out-or-remove-an-account-from-microsoft-teams-a6d76e69-e1dd-4bc4-8e5f-04ba48384487     https://learn.microsoft.com/en-us/answers/questions/2202933/how-do-i-delete-an-old-teams-account-on-mac     etc. What actually worked for meI manually removed the following items from Keychain Access:    OneAuthAccount     login.windows.net     authority_mapAnother effective solution was using a script that I adapted to fit my needs.Hopefully, this can help someone.#!/bin/zsh# Original by PAUL BOWDEN - Completely remove Microsoft Office# Change to remove credent

Hello,We have two instances of JAMF, School and Pro. The organization I am working for has attempted to move from School to Pro by reassigning all devices from the School MDM to the Pro MDM in ASM and slowly wiping them.The issue that I am coming to face is that the licenses were left assigned to these phantom iPads still in School, and from what I can tell I won’t be able to revoke any of them because they aren’t going to check in. Has anyone else had experience with this or know what would be the best course of action?I have refrained from revoking the VPP token, I am not sure that would do much. Ideally I would be able to move all license to the new JAMF Pro location in ASM.Thanks 

Hi everyone,I’m exploring whether it's possible to allow only certain Bluetooth services—for example, allow HID (keyboard/mouse) and A2DP (audio), but block OBEX (file transfer).On Windows, we can achieve this via Intune using Bluetooth service GUID filtering, but I couldn’t find an equivalent method for macOS.Does macOS support this:Restricting or filtering Bluetooth services/profiles individually? Controlling OBEX, SPP, A2DP, HSP, or HID over Bluetooth? Any workaround using scripts, profiles, or TCC/PPPC configurations?If anyone has done this or can confirm that it's not possible, I’d really appreciate your input or any official Apple documentation to back it up.Thanks in advance!

Does anyone need App Config settings for the following mobile apps?CyraCom Interpreter Axon Device Manager Workday Mobile Heartbeat (MHB)If so, please let me know. If anyone has an App Config for “TrayinMotion Plus 6.1”, that would be extremely helpful.--Jack

Hi Jamf Community, We're experiencing an interesting DNS registration issue with our Mac fleet that I'm hoping someone might have encountered before. Issue Description When our Mac devices connect to our corporate WiFi network, they register in DNS (Infoblox) with generic names like mac.domain or macbook.domain instead of their proper hostnames (e.g., mbp-dav.domain). However, when these same devices connect via Ethernet cable, they register correctly with their actual hostnames. Environment Details DNS/DHCP: Infoblox Mac devices: Various models running macOS All Mac devices have proper hostnames configured What I've Verified I've confirmed the hostname settings are correctly configured on the affected devices:   scutil --get HostName mbp-dav.domain scutil --get LocalHostName   mbp-dav.domain scutil --get ComputerName mbp-dav.domain System preferences show the hostname is correctly set in the Mac'

Hello Everyone, We are setting up jamf pro in our org and are going to be managing iOS devices. We are going to be using Cisco anyconnect for our vpn. We have a configuration profile sending the vpn configuration and the certs. The user certs have made it through ise successfully and the app is getting the vpn settings. The issue is every time we go to connect we get the “connecting…” spin until it times out or sometimes we would get the azure sso window and it would just close. Are we missing a configuration somewhere? Thanks for any help

Has this ever happened to anyone else or do you know why this might occur. Our Jamf Connect config profiles like menu bar, login and license installed before the users start date and then it appears that when the user tried to turn on the laptop and sign in they uninstalled which left them with the message in the image below that their version of Jamf Connect was unlicensed.  

Self Service+ is releasing 2.5.0. In this release you will find:Changes and ImprovementsNotification titles display in both the Notifications and Updates pages.Resolved Issues for Self Service+[PI136074] Fixed: URL scheme-triggered installations in Self Service+ may display a loading spinner and fail, while Jamf Pro incorrectly reports them as successful.Resolved Issues for Account Management[PI125130] Fixed: Configurations using the Microsoft Single Sign-on Extension fail to display the following error when users request admin privileges without being in an allowed group: "Unable to complete elevation. Contact your administrator for additional information."

HI Jamf Nation,I was wondering if there is already a Jamf Group dedicated to Mac admins in the LATAM region. I might have missed it, or perhaps it hasn’t been created yet. If it doesn’t exist, I’d love to explore how I could start one to help foster conversations and collaboration among admins based outside the US and APAC.Thanks again for all your support, and best of luck with the new Jamf Nation experience.

Hello everyone!I'm hoping someone out there has a way to automate the installation of the helper tool that you get prompted to install when you launch Pro Tools 2021.7 for the first time? Pro Tools in this case is being installed using the PKG installer you download directly from Avid. Thanks in advance!

We have a 2FA configuration setup on our Macs and it is working great through Jamf Connect 2.45.1.However, I was curious, is there any way to get 2FA to work on the macOS lock screen?  I’ve checked everywhere online and cannot really find any direction on how to accomplish this? Thank you

Hello everyone,I would like to know if it’s possible with Jamf to enable remote management with all options selected ?

Hi,We are using SYM which is working perfectly however we need to set the default font for Outlook, Word, Excel and PowerPoint.  Has anyone been able to achieve this? TIA. 

We're using Jamf Now with Jamf Protect enabled and periodically seeing CPU spikes (with the process hanging and eating up resources indefinitely) caused by the com.jamf.protect.security-extenstion. This is actually causing the OS to get unresponsive and overheat, eating up all available CPU. The simple solution is to kill the process, but eventually the problem comes back. Some basic debug information from the pid on a machine from when the problem occurred: sudo dtruss -p 337 dtrace: system integrity protection is on, some features will not be available SYSCALL(args) = return sigreturn(0x700008F16550, 0x1E, 0x1F99DBCB69B66C71) = 0 -2 sigreturn(0x70000909F568, 0x1E, 0x2EECB3AAFCC39E5E) = 0 -2 sigreturn(0x700008F16550, 0x1E, 0x5ECF2791121B465B) = 0 -2 sigreturn(0x70000909F568, 0x1E, 0xDCFC18327AB19367) = 0 -2 sigreturn(0x700008F16550, 0x1E, 0x131DCCD7A886722F) = 0 -2 sigreturn(0x70000909F568, 0x1E, 0xA6420414AE3C2D83) = 0 -2 sigreturn(0x700008F16550, 0x1E, 0x77

Hi,I would like to create a deployment for Maya 2025 based on the topic for 2024:https://community.jamf.com/t5/jamf-pro/packaging-autodesk-maya-2024-with-redundant-license-servers/m-p/298743I've found a .app installer in the Contents of the installer:/tmp/maya2025/AdskIdentityManager/AdskIdentityManager-Installer.app This app opens an installation wizard. How can I execute this (after the PKG installs) in silent mode?Thank you.

Any had this issue , devices where PSSO was already registered, users were prompted again to register. When they attempted to register, the process failed, and the devices entries are removed from Azure, resulting in loss of all organization access.we had to re-register the devices through System settings > User and Groups > Network account server > Edit, and then click repair.Note: We use Secure Enclave as authentication type, No changes where done at profiles

Getting kicked out of Jamf Pro server. If you are experiencing a similar issue here is my ticket number: 19843077 After enabling the SSO I am getting kicked out of the Jamf server multiple times daily.Behavior:clicking on a link presents signed out pageoractively browsing a page and presented singed out pageBrowser:SafariChromeOS: 15.4 (scheduled the update for later in the week) 

Setting up some new M4 airs.  Made a mistake after enrollment with the account that was created so decided to wipe and start over.  Ran the Wipe command and instead of what I’ve seen with previous devices this one when to activation and then Recovery so that the macOS has to reinstall.  Is this expected with M4’s?? The M2’s went to activation and then right to setup.

Hello,I have noticed recently that searching for JAMF Nation articles on any mainstream search engine gives the results for those articles, but if you click them it brings you to the JAMF Nation home page instead of the article trapping the information behind the built in search.Is anyone else having this issue, or know what this is? Thanks

Hi All,Not sure how many of you use Clearpass and JAMF but I have been able to modify the script provided by clearpass to collect the rotating MAC address of the device so that clearpass will recognise it and be able to assign a policy for the device without having to turn the rotating MAC address off. The script is below, all you need to do is update the cppm-all-mac-addresses extention attribute script with the one below…. #!/bin/bash wifi_interface=$(networksetup -listallhardwareports | awk '/Hardware Port: Wi-Fi/ {getline; print $2}')rotating=`ifconfig $wifi_interface | grep ether | cut -d ' ' -f2` result=`/usr/sbin/networksetup -listallhardwareports | /usr/bin/awk '/Ethernet Address/ {printf "%s%s",sep,$3; sep="|"} END {print ""}'`  echo "<result>$result|$rotating</result>" a few things to note… This will only work for MacOS devices and not iOS Depending on what time the machine checks in and the clearpass does a JAMF update (every 30 mins) it can take some time to get

Hello,I just set up SSO in Jamf Account.I'm not sure where I need to grant administrator privileges to your Identity Provider (IdP) to configure a connected app and assign the relevant users and groups.

Hello,We are transitioning part of our fleet from AD binding to jamf connect; however, we have hit an odd snag. In the past, we'd be able to just install jamf connect and once the user logged in, it would demobilize their account and sync with their entra credentials. With this new batch with JC 2.37, the accounts become Local, however they then get locked. When a user tries to log in with Entra SSO, it loads, looks like it has accepted the credentials but then just returns to the login screen. It does not accept any password with local login aswell. One thing to note, the devices are not on premise when the change takes place, if that has any effect. If anyone has seen this and has a fix, it would be much appreciated. -Jack