Is anyone else having issues with WebClips loading on iOS 16.6?I can get the WebClips to show on the iOS device but it will not load the site I have it set for. I put the same web clip on an iOS 16.1 and the link loads with no issues. Any help would be helpful. 

I'm getting these characters n""n""n""n""n""n""n""n"" in notification emails.   The email body is / n""n""n""n""n""n""n""n"" The following computers were removed from the group "All Managed Clients"Anybody know how I can resolve this issue? I'm not even sure what is suppose to be there. Anyone have an example of a properly formatted notification?Thanks

Hello everyoneNeed assistance with users idle time.When I run the following script on my workstation ( Apple M1 Backbook Pro ) I get what I need but when I run on a M2 Mac mini, it does not work.After moving the mouse or pressing a key, the counter just keep increasing.  It looks like the IOHIDSystem is using the computer logged in time.  I am wondering is there a new way to check for user idle time, command or in Jamf Pro itself.See the out below.  #!/bin/zsh # Pause/Interval between checks checkInt=1 # Timer in sec timerLength=15 # Keep track of the idle timer lastIdle=0 # Get the current user current_user=$(who | awk '/console/{print $1}') # Get the computer name computer_name=$(hostname | sed 's/.local//') # Message to system.log log_message="User $current_user Test" # Function while true ; do ioresp=`ioreg -w 0 -c IOHIDSystem | sed -e '/HIDIdleTime/ !{ d' -e 't' -e '}' -e 's/.* = //g' -e 'q'` idleNow=`echo $(( ${ioresp} / 1000000000 ))` #

I’m wondering if there’s a way to enable lost mode on a group of iPads in JAMF School.  Using the admin interface you have to click on each iPad one at a time and then enable lost mode.  We have a number of iPads left over from last school year that need to be retired this year and I want to disable them with a message to return them to our Helpdesk staff.  I figure the best way to do this would be to enable Lost Mode.  Is there a bulk way to do this?  Maybe with an API?  I couldn't find anything about this with a casual search.Or is there any workflows that would make this more efficient?

Has anyone rolled out the new device compliance within Jamf? we have the old legacy conditional access for our Macs, but I'm wondering if we can incorporate the device compliance for the ipads first and THEN migrate the macs?

Hi,Am I the only one who thinks the latest Jamf Pro cloud UI changes are bad??The links were changed to a blue colour and the other colours look faded.Makes things look they were done by a rookie website designer.It is even worse using the iPad.I use it alot on the ipad while I am out in the field and it is almost unusable.I use it in portrait mode and I cannot see the left hand column of info UNLESS I collapse the menu.Someone needs to explain how this is an improvement!!!Please contact me for further details.

We sent a mass OS update command to install some rapid security response updates. We gave a deferment period of 7 days. This worked for the vast majority of our machines. There are a few however, that a month later are still showing the prompt widow daily. The window states 1 deferral left every day and when you click on it, no updates are available (they've already been applied).These machines are all on 13.5 and all are Apple silicon (likely a false flag). I sent a mass cancellation of commands and they are still persisting. Has anyone else had this happen?

Hello. Is there a way to enable the automatic backup in OneNote app for MacOS and set the interval using plist?

Hi all,We are trying to upload .csv files into Apple School Manager, and we keep getting this error:[OK] unzipped file: classes.csv.[OK] unzipped file: courses.csv.[OK] unzipped file: locations.csv.[OK] unzipped file: rosters.csv.[OK] unzipped file: staff.csv.[OK] unzipped file: students.csv.[ERROR] rosters.csv: CSV file is missing some headers, or the headers are not correctly formatted.Does anyone have an example of what a correct rosters.CSV file should look like so I can compare with mine?  My headers are in all caps ... would this make a difference?Thanks for your help.

Hello,We've recently noticed that user-initiated computer enrollment is now using a Quick Add package when previously users who initiated enrollment would have to download a CA certificate and MDM profile. This has been causing issues as the Quick Add package has not installed any of our Profiles and while those computers appear in Jamf, we are not able to push any management commands. This has happened with DEP enrolled machines too.Our team hasn't made any changes to the enrollment as far as I know.Any assistance would be greatly appreciated. Thank you.

I'm trying out the new PCM Device Compliance feature for macOS and am running into a problem. When running the "Microsoft Device Compliance" policy, it launches Company Portal, I login and it seems to complete the registration without issues. When I lookup the device in InTune, it's not there at all. In Azure I see the following:Join Type: Azure AD registeredMDM: NoneCompliant: N/AI configured the feature according to this technical paper: https://learn.jamf.com/bundle/technical-paper-microsoft-intune-mobile-devices-current/page/Integrating_with_Microsoft_Endpoint_Manager_Introduction.htmlAny help would be appreciated.

We have used Jamf now for about 6 years and think it has been stable and good (earlier on-prem, now Jamf Cloud). We currently have around 1,000 Mac computers and 3,000 mobile devices. We are in the middle of changing platforms, we are leaving Novell in favor of AD with Office 365.Those who are changing platforms, networks, etc. are thinking about whether they should have Mac, iOS devices, Android and PC under the same management tool. In this case it would be about Intune. Of course, this is not a good option for us in the Apple world, not something we would look forward to in any way. Jamf works well for us and we are satisfied.I would need some help with what is best to lift to convince my other colleagues to keep Jamf and not move everything to Intune. Which points/functions are important to highlight in order to convince the colleagues?In the long term, we had also intended to implement Jamf Connect or something similar to authenticate against Azure. How does it actually work? Can

Hello everyone,some of our users use a software called openLCA. As we had some issues with new versions in the past we distribute updates the way the last version stays. So in general they have two versions of this App on their systems.But my EA only finds (and reports) the wirst version. Can someone tell what is wrong with my code?Thanks.  #!/bin/sh ########################################################################## # A script to collect the Bundle Version of openLCA. # ########################################################################## PATH_EXPR="/Applications/*/Contents/MacOS/eclipse" BUNDLE_ID="openLCA" KEY="CFBundleShortVersionString" RESULTS=() IFS=$'\\n' for BINARY in ${PATH_EXPR}; do PLIST="$(/usr/bin/dirname "${BINARY}")/../Info.plist" if [ "$(/usr/bin/defaults read "${PLIST}" CFBundleName 2>/dev/null)" == "${BUNDLE_ID}" ]; then RESULTS+=($(/usr/bin/defaults read "${PLIST}" "${KEY}" 2>/dev/null)) fi done unset IFS if [

https://support.google.com/chrome/a/answer/9301891I've tried the "CloudManagementEnrollmentToken" file placed in the directory through JAMF as described above with no luck. Reinstalled chrome, signed existing users out and back in, but nothing seems to trigger enrollment or show as enrolled within google admin's "managed browsers" The token itself is a simple text string and nothing more. Example value:"37185d02-e055-11e7-80c1-9a214cf093ae" Below is the limited instruction on setting up this feature of chrome/g-suite **Option 1: Use a policyPush the token to your browser as a policy named CloudManagementEnrollmentToken. Setting policies on Mac devices requires the Apple Profile Manager. Option 2: Use a text filePush the token in a text file called CloudManagementEnrollmentToken, under /Library/Google/Chrome/. This file must only contain the token and be encoded as a .txt file, but should not have the .txt filename extension.** Just curious if anyone has had success remotely pushi

Hi Team,I am trying to create a Jamf Pro Classic API Connection in OKTA Workflows. I created a service account in JAMF Pro granted Administrator, Standard user and Full privileges. When I try to test the connection. I am getting HTTP 401 Authorized Error. I am not finding settings to grant access to  "Make sure that your Jamf Pro Classic API account has access to the /JSSResource/activation code endpoint"Appreciate any help or pointer!Thanks,Kalai

Hi. This is kind of a weird one. We want to create a configuration profile that forces VPN to always stayed toggled on, so that any internet activity is monitored. Obviously we would want this setting to be locked/grayed out. Is this possible to do for iPads/iPhones?Note: We already have a separate configuration profile in place that has the actual VPN connection configured. We just want to make sure that the general VPN setting within the mobile device is locked to ON at all times.Thanks.

Best way to setup auto-restart on a nightly or certain day basis. I want to do it without installing a package to force the restart

Very much a newbie here and not good at writing my own code (I'm very much a copy paste guy when it comes to creating plists etc) - I find that there is no easy way in the JAMF Pro UI to reboot machines in a static group - can anyone give me an easy guide for a policy or config profile that just performs a simple reboot on a machine that I can apply to a static group?

Hi All, I'm wondering if anyone else here force installs chrome apps and how you do it?Right now, I am trying to use the com.google.chrome.plist in /Library/Preferences.That method works great for all other chrome settings that I want (for example I have developer tools turned off, populated the blacklist for extensions, etc), and it's easy to deploy and update with jamf. BUT I cant get it to actually force install any extensions.chrome://policy lists everything right and even says the status for that policy is "OK"any ideas? or a better method? thanks!

Any suggestions welcomed. How can I force sync the Desktop to OneDrive with Jamf Pro? 

After a LOT of head banging, I finally am able to deploy Malwarebytes Endpoint Agent to computers via JAMF. I wanted to share to help others who may be looking for assistance. Please feel free to tweak any of this as there may be better ways, but this worked for me. FYI … this is the deployment method that worked for me in JAMF 1) Log in to the Malwarebytes Nebula platform.2) Go to Downloads.3) In the Mac section, click Download to download the Mac Endpoint Installer to your local device.4) For JAMF the brackets [ ] are incompatible, replace the PKG filename brackets to an underscore enclosing the account token. File name downloaded Setup.MBEndpointAgent[xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx]_.pkg New file name Setup.MBEndpointAgent__xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx__.pkg* 5) Upload the renamed package to JAMF6) Upload & Scope “Malwarebytes KEXT Whitelist”7) Upload & Scope “Privacy Settings Whitelist - Malwarebytes Protection”8) Create scrip

Hi all, This may be a stupid question but I am relatively new to managing computers with Jamf (only 5 managed so far). I have been testing enrolling my test MacBook Pro and unenrolling a few times to make sure everything comes down as we want it. Instead of unenrolling the device I decided to test out the "Remote Wipe" command in Jamf, which worked perfectly. However since reimaging (and reimaging a few times through the normal process, as well as unenrolling and re-enrolling) the Mac and when doing self enrollment or email enrollment I'm being asked to install the QuickAdd package instead of enrolling by installing the CA certificate and Mobile device profile. This only seems to happen on this one computer, if I go to any other Mac it enrolls with the cert and profile. What is causing this one Mac to enroll with the QuickAdd package and is there anyway to configure which way a device enrolls? We did have a an image set up under Settings -> Computer Management ->

This script will completely remove Trend Micro security from the MacWe saw that the official uninstaller didn't completely remove all components.Newer versions might work but this script works for us anyway. #!/bin/sh # Copyright: EVRY # Filename: UninstallTrend.sh # Requires: - # Purpose: Removes Trend Micro Security # Contact: Anders Holmdahl <anders.holmdahl@evry.com> # Mod history: 2018-01-31 launchctl unload /Library/LaunchDaemons/com.trendmicro.icore.av.plist rm /Library/LaunchDaemons/com.trendmicro.* rm -r "/Library/Application Support/TrendMicro" rm -r /Library/Frameworks/TMAppCommon.framework rm -r /Library/Frameworks/TMAppCore.framework rm -r /Library/Frameworks/TMGUIUtil.framework rm -r /Library/Frameworks/iCoreClient.framework rm -r /Applications/TrendMicroSecurity.app killall -kill TmLoginMgr killall -kill UIMgmt exit 0

I've been working on setting up MDM profiles and implementing Secure Token for our devices using Jamf Software, and I've run into a bit of a roadblock. I'm trying to establish MDM profiles on a list of devices using Jamf Software. These profiles are supposed to work in conjunction with Apple's Device Enrollment Program (ADE).I've double-checked my configurations, ensured that the devices are registered correctly with ADE, and waited for an adequate amount of time to allow for profile propagation. Still, the issue persists. Has anyone else faced a similar problem when integrating MDM profiles, ADE, and Secure Token using Jamf Software?

I was wondering if there is a way to manually force a device to check if it has any apps it needs to install from the App Installers. Similar to running "sudo jamf policy" to see if there are any new policies updates, I was wondering if there is something similar.I had an application that I set to auto install, but it was stuck in "processing" for a whole day. It didn't install the app, until I flipped the deploy to "off" then back "on"Thanks for any help!