It seems like using Jamf Protect's Custom Prevention Lists feature is a better way to block/restrict applications than Jamf Pro's 'restricted processes'.Restricted Processes only goes off of the name, which could be changed to evade the blocks in place.But with Custom Prevention Lists, you can choose Team ID or bundle/signing ID which is more effective.The problem is, in my initial testing, it's only blocking 1 of 3 apps. I've tried both Team ID's and Bundle ID's with the same behavior. All three apps download as .dmg's with .app's inside of them.I'm using codesign -dv /Path/To/.app to get Team and Bundle ID's.ProtonVPN.app works as expected. I get a 'ProtonVPN Has Been Blocked' Jamf Protect message.However, mirroring the same exact steps, neither Epic Games Launcher.app or Steam.app get blocked. They're both launching just fine still.Again I've tried Team ID's and Bundle ID's with the same behavior.I've ran a sudo protectctl checkin, still same behavior.Because it is working for

Has there been any update on a way through the Jamf Pro website to view policies that are scoped to a group?  I've seen mentions of a feature request for that and such, but all post are multiple years old.  I was hoping maybe there was a way to do this without looking at each policy individually.Thanks

Hi,since monday, we have a weird issue. We have two clients, who re-enrolled themselves automatically. One on monday, one on tuesday. We tried to find similarities, but the only thing we found is, that the IDs are close together (44 & 46). Both MacBooks are in use and haven't been restarted for some day. So the re-enrollment appears to be totally random. "Last Enrollment" gets set to the actual date.Could this maybe has something todo with the "MDM Profile Expiration Date"?jamf.log:   Mon Jan 09 10:18:48 MBP0110 jamf[8235]: Removing existing launchd task /Library/LaunchDaemons/com.jamfsoftware.task.bgrecon.plist... Tue Jan 10 08:34:27 MBP0110 jamf[10088]: The SSL Certificate for https://XXX.jamfcloud.com/ must be trusted for the jamf binary to connect to it. Enrolling computer... Tue Jan 10 08:34:32 MBP0110 jamf[10107]: Skipping trustJSS command... Tue Jan 10 08:34:35 MBP0110 jamf[10107]: Error creating user: An account with the user name jadmin already exists.

Hi, I have a script which i try to run trough Self Service using SwiftDialog. Script works fine when tested on local machine, but not when run trough JAMF. Can someone send me in right direction ? Script :  #!/bin/zsh PrintLog="/Users/Shared/.AS/Logs/Print.log" if [ -f $PrintLog ]; then echo "______________________________________________________________________" >> $PrintLog echo "######## Print Installer RUN ON: `date +%d.%m.%Y:%T` ########" >> $PrintLog echo "Printer Installer log already exists. Continuing to Install...." >> $PrintLog sleep 3 else echo "______________________________________________________________________" >> $PrintLog echo "######## Print Installer RUN ON: `date +%d.%m.%Y:%T` ########" >> $PrintLog echo "Printer Installer has not run before. Creating master log now...." >> $PrintLog mkdir -p /Users/Shared/.AS/Logs/ sleep 3 fi # Use dialog to capture user input userInfo=$(dialog \\ --bannerimage "https

Our users' are unable to login to their Macs after completing the Jamf Connect login prompt. After doing so, they get a splash screen of our Zero Touch deployment which the load bar bounces back and forth and does not move forward. This is odd because we have not seen this issue before, and this splash screen only occurs when users setup a new Mac, it is not supposed to re-occur at any point after the Mac has been setup. We have tried having users reboot, log in without being connected to a network, re-install/update the OS, and the same issue still occurs. At the moment, the only thing we have been able to do is wipe the Mac to get users back online, which is not ideal. Any one else seeing this issue??     

On Jamf-managed Macs, i want to implement a full-screen agreement that appears whenever a user restarts their machine. This agreement should display after the login screen and require the user's acknowledgment before they can proceed to the desktop. Need a advise how we can achieve this  

I’ve got a Mac Studio enrolled in Apple Business Manager, then into a JSS.For some reason I’m still seeing this prompt to enable system extensions. Any ideas why this is?The device is checking in, policies & inventory run, and there are no stuck management commands. I have not noticed this before with any other devices from ABM and Jamf Pro.The extension attribute for “Enrolled via Automated Device Enrollment:” reports yes.

Has anyone else see some of their custom icons for their Self Service policies disappearing? Some, not all, of my icons aren't just switching to the default, but when I go to fix that situation the custom icon isn't even in the list of those available anymore. I'm not entirely sure exactly when this started, but it seems to have begun sometime this summer. 

Hello All,Can we create a Advance Search or a smart group to list of Not or Either latest version of an application.Tried this combination but result null.Application Title    has      Microsoft Outlook.appandApplication Version    is not    Latest VersionNot sure where I'm doing wrong. 

Our Jamf Pro managed iPads are setup to only have Jamf Self Service deployed, not the app store.The Jamf Self Service-app had the setting "Allow users to remove app (iOS 14 or later)" enabled, and some user removed the app. Is it possible to redepoy the app to the iPad, or do I have to wipe the device to do this?(I unchecked the "Allow users to remove app") 

Hello all, I wanted to know if there is a way or an easy way to have computers automatically named when a user goes through the JAMF automated device enrollment i did it on my test machine and it just says "Macbook Air" i would love it for me to enter my organization email and password then when the downloading of apps is finished go to jamf and see my computer name synced with JAMF pro   

We just received our first M3 laptops. Wanted to see if these could be downgraded to Ventura, but it appears Apple has locked these to Sonoma. Not ideal, but that's not the real issue. I've only tried 1 so far, but after the auto-enrollment, the screen goes black with no cursor and doesn't respond. Reboot didn't help. I'm able to go to recovery, and am trying reinstall of Sonoma now. Just wanted to see if anyone has enrolled M3 Macs with Jamf yet. For context, this is a MBP 14 and we are on Jamf Cloud. If issue persists after reinstall of OS, I'll try another one of the M3s. Thanks in advance.

Hello All, I was looking for a way to deploy Nexthink browser extension on macOS for Google Chrome , MS Edge and Firefox.Nexthink team gave me link( https://docs.nexthink.com/platform/latest/installing-the-web-browser-extension) to download extension but I can see there is code too in their site, what exactly I need to do in JAMF? 

Can anyone help or provide guidance? I have a customer that is considering using the forced updates in the Jamf Pro 11 but wants some clarity in what the end users experience is. Does anyone know what the users sees on there computer if forced update is pushed out and what impact will it have on them? 

Hello everyone, I already configured this kind of launch agent in the past but actually I'm having a weird issue about not seeing the launch agent is running. On my test machine the Google Chrome is not up to date which means the launch agent has to start in 60 seconds to use googles software update agent to identify updates but I can't see the launch agent is running with launchctl list or even on my test machine via Google Chrome which should me give a notification to update it. I got no error or something like also when I try to start the launch agent by terminal.  <key>RelaunchNotification</key> <integer>2</integer> <key>RelaunchNotificationPeriod</key> <integer>3600000</integer>  That's the plist file which is stored in /Library/LaunchAgents/  <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

Hello! We are deploying some M1 iMacs, JSS 10.47.0 on prem. Machines are in Apple School Manager, they enroll and get profiles from the JSS, but no jamf binary is installed.Can anyone provide some hints on what to look for?I have confirmed there is no configuration profile 'requiring admin' (Application Restrictions payloads) but it seems to happening on all systems regardless of policies etc.

Hi, I'm trying to enroll the first of a dozen new MacOS computers. I go to our user-enrollment portal and everything seems good. It installs the CA, and the MDM profile, plus a couple of other profiles (JAMF notifications & Privacy Preferences). However, it is NOT installing the config profiles I have set up. I thought something glitched during the enrollment, so I tried to remove the framework and start over, but the jamf binary is not installed. From the docs: "The jamf binary is installed automatically after MDM enrollment is complete." I looked in /usr/local/bin where previously deployed computers left it, but the only thing there is something called RemoteUpdateManager. Doesn't sound like a JAMF thing, but I could be wrong. I tried the whereis and which commands and they couldn't find it. Note, the computer shows up in the list, and I can use the "Remove MDM" Profile" command and it does remove it from the computer, so they are tal

Hi Team,I am experiencing issue we have devices that listed on DEP , .Once powered  this will prompt the remote management windows , Enter my details  to have device enrolled via DEP.Device enrollment is successful but the , however whe i check in JAMF there is no except the details entered at the point of enrloment.I have checked system Preferences > profiles > and all profiles are listed .Because there is no communication, i switched to check if the jamfbinary is installed on the  client .I have run sudo jamf log and out put is "command not found" same when i run sudo jamf manage. Would you please advise how to have have this fixed. Kind Regards. Henry

Hey all, we've recently run into an issue where apps that have previously been installed either through the Mac App Store, then removed from our JAMF MAS apps are now prompting users for admin credentials in order to updat (See image). As you can imagine, this is causing quite the disruption for our users, who are not admins on their devices (And we don't run any kind of temporary admin permissions either). Has anyone else encountered this and, if so, what was your solution? Some notes:- We have plenty of VPP licenses (Around 500 for ~200 devices);- We use ABM to supply all VPP apps, imported from the old iTunes VPP. Previous licenses were purchased under this account, others bought with a new account under the same ABM.

Hi Everyone, Our Jamf user and location is being mapped with azure  but it seems the "room" "building" and "department" arent being generated when choosing a machine and under general choosing "user and location" but all other fields are being populated. Even though on the azure side we do see a room number assigned to a user... does aynone know how to get these synced up properly?   

Hello everybody,We need confirmation that a MacBook has been successfully wiped remotely and kindly ask for your advice on this matter. I found the Audit Logs of a MacBook, which has an entry like "Issued Wipe Computer Command." This is just a confirmation that a wipe command has been sent, but not confirmation that the machine has actually been wiped, am I correct?Just in case this matters: We have a mix of preStage-enrolled and user invited-enrolled machines.Best regards,Floh

Hi, I am wondering if there is a way to force Jamf App Catalog apps like M$ Office apps or web browsers to install on a reimaged device or when an update is avaialble 

As has been discussed in many feature requests, by having the /?failover page be available to sign into the Jamf admin page when SSO is enabled, Jamf has essentially defeated the main point of using SSO - enforcement of MFA. Being able to access the admin page externally with nothing but a username and password just isn't secure. We do have a locally hosted Jamf server so we do have access to all the Tomcat config files. What I'm looking for is any way to block/disable/break that "back door" of using the /?failover. Obviously firewalls and the like will be one area of investigation but I'm also looking for any ideas pertaining to the server itself. Is there anything in the Tomcat server that could be adjusted/deleted/broken that would prevent that /?failover page from being used?

Having a problem with an iPad that enrolls without a problem but when I launch Self Service it gives me the following screen. Any suggestions as to why this is happening?  Thanks