As the subject says. Working on redirecting the logs for a user account generating event to SIEM.

Hello, I'm tasked with rotating the firmware password on our fleet. Clearing and setting is fine, either using a policy or a simple script. My issue is that the old password could potentially be one of two values. Both are known so I was thinking of future-proofing with a script containing an array that would attempt to clear it using any values in that array and set the new password once it succeeds. I'm not a bash expert so before I go down that rabbit hole I was wondering if anyone has had to do this, and if someone has already gone to the effort of writing such a script that they would be willing to share. I am aware of solutions that will store a temporary file containing a password in an obscure folder, but that's not an option for me since my users are admins on their machines. Here's what I have so far, the script sets an array with the possible current values and verifies that a password is set. From there it verifies the passwords in the array and uses

Hi,We are implementing Jamf Pro and want to implement a operating system patching policy can I please get some guidance or help on how you guys have done this? Just after a weekly checkin to see if any os/safari updates are required Thanks in advance  

I thought I would share a guide I made on how to add Macs to ABM.https://github.com/kylejericson/JAMF/blob/master/Guides/Adding%20Macs%20to%20ABM.pdf 

Version of Loom that I'm currently running on the machine that I use to create packages is on Version 0.171.0 while the most recent version listed in Patch Management is 0.170.4.  Not sure where JAMF is pulling the version numbers for Loom from but recently the information has been off with the versions that we're receiving.

Hello,I have followed all the steps in this manual. https://learn.jamf.com/bundle/jamf-pro-documentation-current/page/Device_Compliance.html.I install portal company from jamf self service.Then I enroll device to intune.In intune I see device with compliance state.Every think look ok, but when I start use browser chrome or safari in aad logs I didn't see complinace state or device ID.Do you have a same issue?How to force browser to use intune certificate? 

Hello Folks,We have an interesting request that came through recently and are looking for some guidance.There are a handful of employees using Apple Notes and they would like to backup this content to iCloud. We have Apple Business but are not actively provisioning accounts for employees. As a matter of fact, we are just blocking iCloud across our environment. We are governed by HITRUST and have to be mindful about what content is stored, especially on personal accounts.  We are just trying to find a way to protect against data loss for these individuals. Is is possible to force iCloud logins only to company-owned accounts? We really don't want to deal with activation locks, etc. in addition to the aforementioned DLP concerns. Thanks!

We have Microsoft Intune configuration configured for device compliance. There is an app in SelfService for them to Register with the Company portal.What I would like is a prompt or notification to the user that they need to register and if they don't it nags them again.

# This is a script I found for Chrome, it runs successfully in CodeRunner, but I can't move the file where I want:Any help would be appreciated !/bin/bash CHROME_BOOKMARK="$HOME/AppData/Local/Google/Chrome/User Data/Default/Bookmarks"alias bmcsync='cp "$CHROME_BOOKMARK" "/d/someRepo/b-1 backup/5-1 bookmark/"' I added the path to the end, but get an errorif I use "man bmcsync" I get command not found

Hi,We're a school running Ricoh Savin C3500 printers on Macbook Pro laptop (Ventura).I want to deploy a full printer installment to our staff laptops. Currently, I can only deploy a printer driver. It's a pain that we have to match the laptop operating system to a specific Ricoh Savin driver. So everyone time Apple updates, we have to redeploy printers to all laptops.Our vendor has set up our printers using ip addresses. Ex. in VenturaNote we  using the Line Printer Daemon - LPD and choosing Select Software to browse to the Ventura driver for the printer. Does anyone know how to build this into a script or package to deploy to laptops via Jamf School?Thank you,Trenia   

Hi everyone, I'm sure that this subject has been talked about, but I haven't been able to find it. My question is: Can you run two MDM solutions at the same time? I have both MS Intune and JamF available to me and I was wondering if it was possible? I don't think it is, but I want to make sure. - Thanks

Reset local account password keeps failing. Apparently this is due to the local account being secure token enabled. So what's the best option? We deployed a generic local account (standard user) to a lab. For some reason the account works fine, then the next day, no one can login. Like the password changed. To avoid having our techs constantly resetting the local account password, I wanted to deploy an ongoing policy that resets the password, but that's not working.

Hi All,We are setting up the JAMF Pro - ServiceNow integration and it seems that on the Jamf side I only needed to provide an API account that has Read access to Computers and Mobile Devices.  I set this up and I get the below error on the SNOW side of things. I am not finding any details on the error.   What am I missing here?   I do use  SSO in Jamf, but in this case I am using a non-sso local account created in Jamf.  I have confirmed we are adding our JAMF URL to the SNOW connection config.  I should just be providing the https:/orghere.jamfcloud.com URL without any extras I assume? This is the error we see in SNOW when trying to test the connection we setup.Error: Unable to make a connection to JAMF API call. Please check your credential configuration. Check system log for more details. HTTP return status code was -1 (sys_script_include.3fa7da3673b210104ae4b41afaf6a727.script; line 57) I appreciate any help you may have!-Dan 

Not sure what's going on but I've setup the JAMF DEP automated enrollment.I've been able to successfully enroll 20+ macs in the last week, but all of the sudden today, my device is not enrolling correctly. All devices that are being enrolled are showing "Unmanaged" and the JAMF binary is missing from the /usr/local/JAMF folder is missing. Oddly enough though, the base MDM profiles are coming down as well as JAMF Connect package.  

Hi AllI am having difficulties with HIP testing from Global protect to detect for Jamf Pro on Macintosh devices. We use the Cloud based Jamf Pro and the only options for HIP Objects for this is either for a plist or Process. Plist is out of the question (Unless someone can hopefully prove me wrong) and the issue with the process that the binary that is on the Macs is under /usr/local/bin/jamfAgent.     This does not actually appear as a running process but as a file path (in a hidden directory) so GP HIP can not identify it. Has anyone had any experiences with this please who can advise me how they overcame it.  If anyone also knows the actual physical running active process that is running when Jamf is installed, I could use that although I can't see anything in Activity Monitor as believe it may use the MDM process or something similar.Many thanksStuart

Hello Jamf Nation! As many of you may have noticed, Jamf Pro version 10.49 introduced a new authentication mechanism for interacting with the Jamf Pro and Classic APIs. We're excited to provide a more modern and secure solution for API interactions! Documentation on the API Roles and Clients feature can be found here with sample code and additional details on the Jamf Developer Portal. In January of 2022, coinciding with the 10.35 release of Jamf Pro, we announced the deprecation of basic authentication for the Classic API. We originally planned to remove support for basic authentication by the end of 2022, but community feedback indicated that bearer token authentication was not a sufficient replacement for all consumers of the API. With two authentication mechanisms now available for both the Classic and Jamf Pro APIs, it's finally time for us to say farewell to basic auth. Removal of support for basic authentication with the Classic API is planned for March 31st of 2024.&n

Hi All,Does anyone know how to curl the policy logs? I know it can be found in computer history but I want to pull the actual policy logs from the policy itself.Currently there is no published API end point for this but has anyone managed to find out how to get this page?Thanks!

I have run into an odd issue where on some machines complete the S1 upgrade and some machine fail it after the agent is installed (hence the S1 console sees them online and on the correct version).  It seems like a permissions issue that I don't know how to tackle.This is the install script - This is the one I decided on using.This is the upgrade script - Alternate scriptWIth the install script, I got 3 Macs that Completed and 11 that failed.Successful. Not successful. This is the error:Script result: installer: Package name is SentinelOne installer: Upgrading at base path /installer: The upgrade failed. (The Installer encountered an error that caus installation to fail. Contact the software manufacturer for assistance. An ur error occurred while moving files to the final destination.)I guess I'm confused as to why it completed on 3 Macs but failed on 11 Macs.  Same script.  Same everything...Any help would be appreciated.    

I have about 30 mac mini's in asm that's pointed to jamf server, but these are not in jamf pro - we did go over our device count license in jamf pro but since our rep has added some, wondering how i can get them in jamf now, will i have to unbox them and reinstall the OS

Hi everyone,I am trying to create a configuration profile in JAMF pro which will allow us to block connections to a specific IP address, but the configuration profile is showing the option to block only the incoming connections.Is there any way that we can block the outgoing connections to a specific IP address? Thanks

Hi,We would like to get MS Teams to open on startup, i read a post where it suggested to add the Microsoft Teams.app as a login item however that didn't work.  I also see a plist somewhere that had some settings but i couldn't work out how to replicate this in xcode and it wouldn't let me save the contents to a text file and change the extension to .plist.  I know there is a tick box within the app to "Auto-Start Application" but we want to enable this for all users by default. Any ideas on the easiest way to achieve this?  TIA 

HiEver since 13.4.1 update, some of our users are being prompted daily that their is a managed update that is required, when you click it. It checks the update the server and it says your up to date.I originally thought it was Nudge causing this, so I uninstalled Nudge from the affected users laptop, but the prompt is still coming on.Any ideas, 

seem to be having issues deploying 2 packages out of 3 edge seems to deploy ok and will install but i am having issues installing Eset and Datto i am getting the following errors. nstallation failed. The installer reported: installer: Package name is ESET Endpoint Solutionsinstaller: Installing at base path / installer: The install failed. (The Installer encountered an error that caused the installation to fail. Contact the software manufacturer for assistance. An error occurred while running scripts from the package “epi_mac_live_installer (1).pkg”.)I have downloaded the pkg again and install them on my own machine ok 

I'm getting the error "sync failed.  Awaiting next sync" on the ADE page.  I'm also getting a similar error in another MDM we have.  Is there an issue with Apple's ADE sync right now?

Hello everyone, I have been working on this for a long time now. I am trying to install Unity Hub on iMacs in the labs. The application installs fine, however it crashes every time it launches with a crash report. If I run it from terminal using the below command it works fine. sudo /Applications/Unity Hub.app/Contents/MacOS/Unity Hub Is there a way to have this command run every time a user launches the application? At the moment this command only works once when the application is first installed. I have added that command to my policy in the files and processes payload. If i script it i think it would be the same issue where it would run only once and not whenever a user double clicks the app to launch it. Thanks for your help in advance.