Hello everybody,i'm trying to configure Outlook for Mobile Devices. I used an Extension Attribute "userPrincipalName" to pull UPN from LDAP "Active Directory". Extension works fine in Jamf but when i put it in Outlook-App as:<key>com.microsoft.outlook.EmailProfile.EmailUPN</key><string>$EXTENSIONATTRIBUTE</stringI get everything fine except for username, "@" Symobl in Username, which comes from UPN, is wirtten in Hex codefor example:Username should be: somebody@somedomain.combut i get in Outlook: somebody@somedomain.com (    @ replaced by @    )How to get it without replacing? what i'm doing wrong?  

hey there, I was wondering how can we make our office 365 apps like Word, Excel, Powerpoint etc to be able to switch other Microsoft account? right now in our jamf Mac environment, I don't see the switch account option. Not sure where to look. 

Hello, I found some duplication in the inventory which looks like ghost record. It shows up in the list but never opens; and I am not able to delete it in JSS web interface. Is there any easy way to delete computer inventory record via Terminal by ID #? Some command like: sudo jamf delete_computer ID=XXX Or should I deep down to MySQL? Any suggestions are highly appreciated!

Hey everyone, we are using Displaylink in our Jamf environment and set it up via the guide from synpatics. (https://support.displaylink.com/knowledgebase/articles/1965404-how-to-deploy-displaylink-macos-software-with-jamf)Now to the problem: Around 80% of the time when a new mac is setup and runs the displaylink policy, the policy "seems" to fail (the policy log claims it has "failed" and we even get the concurring mail "an error occured while running the policy "Install DisplayLink Manager".") However... DisplayLink Manager is installed successfully every time. The error message is the following: (The installation failed due to an error. Contact the manufacturer of the software. An error occurred while executing the scripts from the "DisplayLink Manager Graphics Connectivity1.9-EXE.pkg" package). Maybe someone heres has had a similar problem and can help :)

Hi all,I want to deploy a Mimecast Outlook Plugin and wanted to get some insights on how we can deploy a .msi file on Jamf to enrolled Macbooks. I don't have much experience with Jamf, and wanted to test out what is the best possible way to do this. Thanks in advance!

In our environment we use user certs for Cisco AnyConnect. I'd like to have a policy that runs on recurring check-in that alerts the user if the cert is about to expire so that they don't lose VPN access. I thought I had this working but I think I'm running into issues accessing the user's keychain. I can understand why that's a touchy thing. However, what's curious is that I can access the user's login keychain when running the script via Self Service or if I run the policy via the command line. However, when the script is triggered via check-in, it seems to have issues accessing the user's keychain. Even doing a simple "security default-keychain" is struggling. Here's some example code: #!/bin/sh # Let's set a log file to write to logFilePath=/tmp/test.log # Get date/time stamp and kick off log file dateTimeStamp=$( date ) printf "!! Script Execution Date/Time Stamp = $dateTimeStamp !! " >> $logFilePath

Hello All, I am looking for a solution to display end user's account after restarting the mac, we have total three local accounts including user's account, I want to make the end user's account at display login screen so when user will restart the mac user will put his password only to login. Others two accounts will be hidden in login screen, any way is there in JAMF? User's account is having 503 UID others two are UID 501 and 502

Hi, I would like to confirm if my settings are correct?I have choose the defer to 90days and I uncheck App Updates and Software updates.My assumption was my devices will still be able to update to 13.6.2 but not Sonoma but it seems most of them detect Sonoma.Am I doing something wrong?

The TItle says almost all of it.Hello people,After I converted the Slack application, which does not offer native PKG format, using composer, I get the following error:installer: The installation failed. (The Installer encountered an error that caused the installation to fail. Contact the software manufacturer for assistance. The package is attempting to install content to the system volume.This Policy works fine on my PC but does not work on colleague's. I will take a look at more details tomorrow from /var/log/install.log, and will post them here. We both use M1 chip, but mine is MacBook Pro, and she has MacBook Air. Not sure if this makes any difference. The latest OS and updates are applied.Anyway, if anyone has any idea in the meanwhile why this does not work, I would appreciate the help, because I have lost 2 days trying to make this work. :)Thanks in advance!  

I'm using Jamf Pro, and from what I've read online, the Jamf Management Account is optional, i.e. we only need it if we want to enable FileVault using policy (we don't). But then again, the documents say that the management account is needed for Macs to considered managed by Jamf Pro. I want to manage Macs via Jamf Pro, but I don't need to enable FileVault using policy (we do it via configuration profiles) - so do I still need to create management accounts, or not? Additionally, some of my managed Macs seem to have the management account password gone out of sync with the Jamf server. Running the Jamf Management Account password rotation policy fails.Does it have any actual impact, if I don't need to use the management account (i.e. enable FileVault via policy), and I can just leave it be?If not, what's the right way to get the management account password in-sync with the Jamf server again?

Hi everyone, I am stuck at this step: https://www.youtube.com/watch?v=4vCzG_Zdelkuntill 04:19 everything is allright. (Server token is uploaded and in: (Settings/global) Automated device enrollment I see the MDM server and also 2 computers assigned.But when I go to: Devices -> PreStage Enrollments (See 06.48 of the video) I dont see the same. I see: I am new to JAMF Pro and am stuck at this point.I hope someone can explain why I am unable to do the steps shown in the video.kind regards

I need to run an activation script as administrator after my pkg installs. I've successfully created the install pkg, in the self service center, it runs, executes, then fails. I've been able to run the pkg and the script manually on the mac, it prompts for the su administrator pwd. Not sure how to script the pwd prompt. Any help would be greatly appreciated. script:su administrator sudo bash -c " if [[ -f /usr/local/qualys/cloud-agent/bin/qualys-cloud-agent.sh ]]; then /usr/local/qualys/cloud-agent/bin/qualys-cloud-agent.sh ActivationId=##### CustomerId=########; else /Applications/QualysCloudAgent.app/Contents/MacOS/qualys-cloud-agent.sh ActivationId=##### CustomerId=#####; fi"

Hi All,I am just thinking if there is a way to manage macOS Virtual Machines hosted on AWS by Jamf Pro?Also, what all the possible way to have macOS VMs and its management by Jamf pro?Thanks,Piyush Verma

Good Morning jamf Nation, We are rolling out SentinelOne agent to Macs. I have the policy set, but I need some assistance with "pre-approving" the SentinelOne Agent kernel extension. The S1 setup guide gives a parameter to enter in the policy: Kext Bundle ID: com.sentinelone.sentinel-kext Developer ID: 4AYE5J54KN I just don't know where to put the parameter. I tried copying and pasting it into Execute Command under Files and Processes, but that change doesn't 'approve' the agent. Based on the log file, it looks like it's trying to run the parameter, but then fails? Any ideas?

I've been tasked with setting up AD Certificates for Macs and after working a bit on it I now have it working where the computer gets a config profile installed that then requests from AD a certificate. Everything is working fine, but now I am at the point where I am not sure what needs to be done when the certificate expires 1-year from now. I need some type of workflow for renewing these as it will be impossible to keep track of all the expiration dates. After doing some searching on JN, there are some posts a few years old where users recommend scripting this, but there was no one that could get it working. There is also a feature request to have the JSS auto renew, but that is from 2013 and I don't think that will happen. If anyone is out there who has put together a workflow for getting this to work I would love to hear about it.

I find the progress... circle(?) doesn't give users much feedback as to where a self service policy is at in terms of completion, other than just waiting for it to stop and a quick done over the button. It would be great if the policies could have an actual progress bar, even if it's not super precise. Would anyone else find this useful?

We've been noticing a good amount of students downloading and launching .app files from their Desktop and Downloads folders. Is there a good way to prevent .app files from launching from these folders? I have been using Restricted Software, but it is a large amount of work to up keep. I am now messing with Configuration Profiles with Application Restrictions, but it doesn't seem to be working as I hoped. Right now I have ~/Users/Desktop and ~/Users/Downloads in the Disallow Folder. Nothing is currently set in Allow Apps or Allowed Folder. With these settings it seems as if every app no matter the location is being blocked. Are the Allow Apps or Allowed Folder options required when messing with these settings? My main goal is to prevent applications from running in a users Desktop or Downloads folder. This seems to be the typical location that students have been saving/running from. We are running 9.6.1 of the JSS. Thank you in advance!

Hi Everyone, I'm reaching out in the need of assistance. I'm currently working on the migration of 300 AD bound macs. The scenario is the following: -All 300 Macs are joined to old domain with network accounts and need to be migrated to the new domain without deleting their user data and making sure it has the correct permissions. -Currently their is no FileVault enabled. -I've been looking into scripts or some sort of automation that could help me un-join from the old domain, re-join to the new domain and move the user's profile with the same naming convention over to the new domain. Any help on this would be greatly appreciate it, as I would like to publish this script on self service to do this on all the Macs that need to be migrated. I'm no expert in JAMF, but I understand the concepts and have been using it for a while now. So detailed explanation would be greatly appreciate it. Thanks for everyone's time on this threat, thanks in advanced. Please feel free to have any

Hi,Is there a way to make OSX auto-trust Microsoft Remote Desktop Connection (to specific addresses) regardless of certificate in JAMF? I know the client can hit view certificate and click always trust but is there a way to automate this or have a policy that always allows this?Thanks

Hi Everyone,I want to be able to block USB Storage devices via JAMF does anyone know if this is possible with JAMF?I can see there's a restriction setting when creating a config profile but this is now depreciated... Thanks in advance for any advice!

Hi all,Looking for advice with my 'Off-boarding Script'Description:This script (below) is crafted for system administrators utilizing Jamf Pro to facilitate the remote off-boarding of Mac devices that end users have purchased. It performs several functions to ensure the device is no longer managed or configured for enterprise use. The script automates the removal of management settings, promotes the current user to admin, creates backup accounts, and eliminates no longer necessary accounts and management software. Furthermore, it updates the device's details in Jamf Pro's inventory, sends essential information to a Google Sheet, and concludes by removing the Jamf management framework, making the process as hands-off as possible. #!/bin/bash # Functions removePolicyBanner() { if [ -e "/Library/Security/PolicyBanner.rtfd" ]; then echo "Found PolicyBanner... Removing PolicyBanner" rm -rf "/Library/Security/PolicyBanner.rtfd" else echo "No PolicyBanne

My 30-day deferral of Sonoma in my Jamf Pro Restrictions profile should have lapsed by now (October 26th marked ~30 days since Sonoma dropped, right?), but my Macs that are scoped to a 30-day deferral still dont see Sonoma in the SU Settings pane on Ventura 13.6.x or softwareupdate cli tools. Any thoughts on this? Anyone else experienced this?

I'm experimenting with patch management and I've set one up to be available via self service. My only problem so far is that the name I've set in Jamf Pro is not matching in self service. I'm not sure where it's pulling this name from, except for maybe the repository from Jamf. Has anyone else seen this? 

Hi fellow admins,It's the first time I have to update our iPad inventory since the release of Version11.0.1-t1698068630 and I'm encountering a problem:It applies changes to the information, such as username, but won't remove the iPads I had deleted from the list. There are no error message concerning the .csv upload. I've tried several times, with different browsers to no avail.Is it a known issue and is there a workaround?Thank you Suzane

I created a free tool to get the LAPS password for a Mac. This is designed for IT admins or Helpdesk staff.Check it out here https://github.com/kylejericson/Jamf-LAPS-Bootstrapper