Afternoon All How is everyone handling the recent 13.6.2 update seems its not for everythingNOTE: The Ventura 13.6.2 update is not a unified build & only for specific models13.6.2 (22G2321)MBP M3 14"iMac M3 2iMac M3 413.6.2 (22G320)MBP M2 Max 14"MBP M2 Max 16"MBP M2 Pro 14"MBP M2 Pro 16"MBP M1 Pro 16"MBP M1 Max 16"MBP M1 Pro 14"MBP M1 Max 14" I assume a smart group would be best approach not sure whats the best way to capture all devices affected.or is the old software updated workflow able to handle this.Thanks  

i tried that:<restricted_software> <general> <name>Restrict High Sierra</name> <process_name>Install macOS High Sierra.app</process_name> <match_exact_process_name>true</match_exact_process_name> <send_notification>true</send_notification> <kill_process>true</kill_process> <delete_executable>true</delete_executable> <display_message>High Sierra is not yet supported, check Self Service after public release.</display_message> <site> <id>-1</id> <name>None</name> </site> </general> <scope> <all_computers>false</all_computers> <computers/> <computer_groups>24</computer_groups> <buildings/> <departments/> <exclusions> <computers/> <computer_groups/> <buildings/> <departments/> <users/> </exclusions> </scope&

In Self Service for iOS 11.2.0 a change was made that requires both the MANAGEMENT_ID and UDID keys in the Preferences field on the App Configuration tab for Self Service for iOS. If you are experiencing an error, confirm that both keys are present in the app configuration.We are working on a resolution that will allow either one or both of these keys to be present in the app configuration.

Hi.I would like to deploy a policy on all devices that prohibits connection to unencrypted Wi-Fi.Is there a way to accomplish this?

Hello Jamf People! Anyone else having issue with their 4th gen Apple tvs not waking up once they go to sleep? They will not wake up when we are trying to airplay to them and will not wake up with the remote. All Apple TVs are DEP enrolled. tvOS 10.2.1JSS9.99.0-t1494340586

Hi Everyone.  I have a profile deploying to a test iPad.  The profile contains only a the following Airprint payload: .76 is a Printer Pool being shared on an iMac running Sonoma, wired ethernet.30 is a fairly new Ricoh printer, wired ethernetipad is of course wifi, on the same subnetI can print to the pool and printer from my laptop without issue (also on the same wifi)The ipad cannot.  In fact even though the profile is indeed showing up on the ipad (Settings > Device Management), the printers are not listed when in an app, e.g. Chrome, Safari, etc.  I would think that even if the printer was having an issue, they would still be listed (a opposed to being discovered over Bonjour).  For example, if I open Chrome, browse to a website, click the Share button, click print, click No printer selected pulldown, the only printer listed is the .30 ricoh that the ipad found via discovery on its ownThanks for looking! 

Hello all!This is something of a follow-up to a previous post of mine. We are starting the process of convincing our IT Security and Leadership teams that allowing our Macs to download OS updates from Apple is a better alternative to downloading/packaging/deploying the OS.app ourselves. To strengthen our case, I'm looking for resources to back up the claim that softwareupdate --fetch-full-installer is no longer recommended by Apple. I feel like I've heard from multiple people that the download/package method is going to be deprecated "soon" and that it can introduce problems that wouldn't be an issue if the Macs download the updates themselves, but I'm struggling to find any documentation from Apple or reputable third-parties on this. There's plenty on the how of managing OS updates via policy or mass action, but scant information as to why this method is superior to downloading and packaging it ourselves. Indeed, Jamf still recommends the download/package method for major OS releases.

Hello I am testing automated device enrollment and during the test we have 1 failed command and i have no idea what it means can anyone shed some light on the error message please  and please let me know what i can do to not get the error message to pop up anymore i appreciate any assistance in advance (:  

What are folks doing to update thier Macs? Both of Jamf's methods are flaky at best. Anyone get a straight answer from support on this? We had a ticket that went nowhere for 3 months. Also had the assurance that this would be resolved with Jamf Pro 11 and Sonoma. We see the same flaky business happening. We manage a few hundred Mac desktops and about the same Mac laptops. Nudge is not an option for Lab environements. Trying to understand how Jamf Pro is helping streamline the process of securing our Macs. We have met all of the requirements for things to work according to the support engineer we worked with.Would like to hear how other admins are dealing witht this? 

We Seem to have developed a problem since upgrading to Jamf 11 that when we try to push out a Configuration profile to enable/disable an item in Privacy and Security the Config Profile lists as deployed, is appearing on the laptops list of Config Profile but absolutly nothing has changed in the Privacy and Security settings. For Example trying to set up the new Teams program with Folder Access the Config Profile is correct but nothing has changed on the device. Our Position is correct except no Alderaan.

Hello, I'm looking to modify the configuration file for Cisco AnyConnect for our users. The file xml by default goes to /opt/cisco/anyconnect/profile/. I wish to make a simple alteration to modify the hostname and address name of the VPNs available.What is the best course of action for this? Should I create a pkg file to overwrite the already existing config file or is there a way to simply edit it? Thank you.

Hello,I have a list of serial numbers for devices from our inventory system and I want to see their status in Jamf School. Is there a way to search Jamf School using that list of serial numbers? I know this is possible in Jamf Pro, so I am hoping that there is something similar afailable in Jamf School.

Hello,Just after enrolling the Mac on Macos 14 with Jamf prestage, there is this grey screen. (It happens just before creating the user account so when inspect this mac with jamf, there is only the management account created)On the grey screen, there is only login and password.Is there a bug ? Or does it happened to you ?

I have the following code to update wallpaper with custom base64 encoded image. I am confident this is correct, but I keep getting the error "Problem sending command, prior command may be pending, or device may not be capable."I can't seem to find any indication what would cause this. Any thoughts or ideas would be appreciated.   $curl = curl_init(); curl_setopt_array($curl, array( CURLOPT_URL => 'https://myserver.jamfcloud.com/JSSResource/mobiledevicecommands/command', CURLOPT_RETURNTRANSFER => true, CURLOPT_ENCODING => '', CURLOPT_MAXREDIRS => 10, CURLOPT_TIMEOUT => 0, CURLOPT_FOLLOWLOCATION => true, CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1, CURLOPT_CUSTOMREQUEST => 'POST', CURLOPT_POSTFIELDS =>'<mobile_device_command> <general> <command>Wallpaper</command> <wallpaper_settings>1</wallpaper_settings> <wallpaper_content>'.$base64_encoded_wp.'</wallp

Hello we are currently testing a privilage management software and we have demoded some of our admins to standard users, we noticed that standard users can not start a time machine back up, we did a bit of search and located a few scripts with the following lines  but they dont seem to change anything security authorizationdb write system.preferences.timemachine allow/usr/bin/security authorizationdb write system.preferences.timemachine allow we have used similar code  for print and wifi settings and they do seem to allow users to print and connect to wifi but enabling time machine still gives the MacOS pop up asking for credentials on ventura and sonoma. "system preferences is tyring to modify your systems settings" - "enter your password to allow this" we tried adding the /usr/bin/security authorizationdb write system.preferences.timemachine authenticate-session-owner-or-adminto allow all users but still no luck. 

I've deployed SMART Notebook v21 and 22 in the past, but I want to get everybody upgraded to version 23. I'm ignoring the product key. The gist of it at the moment is that if I push out the v23 pkg to a device that already has v21 or v22, Jamf reports an error on install: Installation failed. The installer reported: installer: Package name is SMART Education Software installer: Upgrading at base path / installer: The upgrade failed. (The Installer encountered an error that caused the installation to fail. Contact the software manufacturer for assistance. An unexpected error occurred while moving files to the final destination.) If I install the v23 pkg and there aren't any versions already installed, the install goes fine.Here's some detail on the installer:Installs a folder called "SMART Technologies" to the Applications folder, containing a bunch of apps, and another folder with a bunch of apps. None of those app names match the name of the pkg.DMG containing base installer

Hi everyone,I was wondering if you can help me with my issue. So I'm setting up Nudge for my company and we decided to go with option 2 from the Github page. My objective is, I want the "Your Device Requires a Security Update" window to appear and to make this machine update when I press the update device button on the window.  I have a test Mac with Big Sur installed Ver 11.7. I was able to set up the policies for the Nudge suite to be installed automatically to my tester which showed in Self Service as 'installed'. I was able to set up the configuration profile which the test Mac is part of. My question is, (Which I believe is the issue) setting up the criteria in the smart group. I set the criteria the same way as in the github page suggested but it's not finding my test mac. It shows 0 computers in that group. I was wondering if you can help. I will attach screenshots of my configuration.One more question: In Application & Custom Settings - under the requiredinstallat

Has anyone updated active directory bound Macs past Mojave?I have tried updating to Catalina and newer but every time after logging in to a domain account it just sits there spinning.The setup is:Active Directory bound,Jamf enrolled,Mobile accounts turned off,Local library folder turned off,UNC Path enabled - So the library should generate on the network folderChecking /library/logs/DiagnosticsReports/ from a Windows 10 station I can see reoccurring CRASH files relating to accountsd happening between 6-7 times a minute (please see a copy of one of them below). As of typing this up, the client computer is still at the pinwheel stage after 22 minutes and the logs are still reporting the same thing.Process: accountsd [1987] Path: /System/Library/Frameworks/Accounts.framework/Versions/A/Support/accountsd Identifier: accountsd Version: 113 (113) Code Type: X86-64 (Native) Parent Process: ??? [1] Responsible: accountsd [1987] User ID: 795780844Has anyone came accross a similar issu

I am migrating my workflow of managing the macOS ALF firewall from scripts/policies to Jamf MDM profiles. Found odd behavior that prevents users from making changes.Even though I have explicitly set the new ALF profile to allow users to modify ALF if needed (Jamf Privacy & Security > Firewall settings change > Enable user changes to the firewall settings), the ability to manage ALF locally is greyed-out (disabled) on my test Macs - even though the user is a local admin(and can authenticate to unlock the Security & Privacy pane.As soon as I remove the profile (un-scope the target Mac) the ability to modify ALF returns.When I examine the raw XML plist (/Library/Managed Preferences/com.apple.security.firewall.plist) I dont see any key/value pairs related to restricting users from modifying ALF (assuming I'm looking in the correct location.)When I look at the raw XML plist (/Library/Managed Preferences/com.apple.security.firewall.plist) I don't see any key/value pairs related

After working perfectly the week before, Composer is now prompting to install its helper tool over and over again. When I first launch Composer, it shows as not responding in Activity Monitor, then it prompts to install the helper tool. If I go to /Library/PrivilegedHelperTools I do not see the Composer helper called "com.jamfsoftware.Composer.helper". I do see it at this file path on my personal MacBook Pro, so I know that is the correct location for the helper to be installed. I did try manually copying the helper from its location at /Applications/Jamf Pro/Composer.app/Contents/Library/LaunchServices/com.jamfsoftware.Composer.helper to /Library/PriveledgedHelperTools, but when I do this and then launch Composer again, I see it get deleted, and then I see the prompt again. Here are the things I've tried:1. Remove Composer completely, including its plist and reinstall it from a fresh download from Jamf.2. Rebooted my Mac.3. Manually copy the helper from the Composer app to /

With the changes to macOS in the last two versions. I'm wondering how people are monitoring disk utilization. The Smart Group offering of Criteria "Boot Drive Percentage Full" isn't giving real results. I show only 3 folks with over 67% full. However, if I go to a computers: pick a machine and check its storage I see Data 250.68 GB 75% 58.46 GB Encrypted No Is there a way to change from Boot to Data so I can figure out who is in peril of having a computer seize due to a full disk? or a system update that is going to fail? or a BigSur upgrade that is going to tank? Right now I feel like without using another app like Kolide (osquery) I have no idea the health of my fleet.

I can't seem to figure out where the config profile payload for handling these lock screen options are. Also, is there a way to let standard users adjust these without admin credentials?

Hello,We have an in-house app that we want to push out to a specific group of employees. Apparently, that requires their phones to be in developer mode. Has anyone been able to force phones into developer mode via jamf rather than getting our hands on each phone?

This feature is listed as "experimental" in Google Chrome, but for some reason is enabled by default. We've seen this cause a disruption between Zendesk and a third-party integration here, and I saw another user on the Mac Admins Slack say it's causing an issue for Cloudflare Zero Trust in his environment, so I wanted to share the fix in case it's useful for anyone else. I resolved this by deploying a PLIST via configuration profile with the following key/value pair: <key>DefaultThirdPartyStoragePartitioningSetting</key> <integer>2</integer> When you do this, it'll look like nothing changed. The flag is still set to "Default" just as it was before. The difference is that what the default is has changed under the hood. You can verify that your profile deployed successfully by typing chrome://policy in the Chrome search bar. This will show you a list of all of the Chrome policies that you're managing. Make sure you quit Chrome and re-open it bef

What is your favorite way to add a login item to your Mac? I have an app (IP in Menubar) that I'd like to start when our Macs start up. I see there is a configuration profile for login items, but I don't see a way to add a custom application