I was always under the impression that managed Apple TVs required a MDM remote command to initiate a tvOS update but I recently noticed most of my fleet has automatically updated to tvOS 17 on their own.  Is there a way to prevent this as this causes disruptions in the classroom?

Hello all! I've been having mixed results with Jamf Software and Patch Management for installing applications on user computers. With Jamf Software it took several hours before the first computer had the software (Grammarly Desktop) installed. A day later 1/3 of the 60 computers had it installed and now 3 days later there's a handful of computes where it's still pending, even with several successful checkins. Patch Management seems to randomly skip updates. Is creating a software package (and then a new one with each update) the most efficient way to manage applications?

Working on deploying KFM with a Silent Opt In. Happy to say this has worked perfectly on Apple Silicon based machines. The config profile deploys, OneDrive is restarted and KFM goes to work in the background.But on Intel machines, the Silent Opt In doesn't seem to work. Instead youre presented with this message. These are the KFM settings I have enabled: Here are the PPPC settings   

So I have a provisioning sequence that happens to all mac enrolled via DEP. The issue is once the configuration profiles that installs the WiFi 802.1X certificate is also set to auto-join and it breaks the continuation of the installation of the reset of the applications. I was wondering if any one has any suggestion that could assist me. I need to auto-join at some point to the WiFi network. Thanks

How are you guys using AppleTVs at your various facilities? What are the displays like? What information are you hosting?

Working on deploying KFM with a Silent Opt In. Happy to say this has worked perfectly on Apple Silicon based machines. The config profile deploys, OneDrive is restarted and KFM goes to work in the background.But on Intel machines, the Silent Opt In doesn't seem to work. Instead youre presented with this message. These are the KFM settings I have enabled: Here are the PPPC settings   

Hello i really need some assistance on setting up auto device enrollment or someone to explain me the process this is my first time doing this and i am super confused and lost not sure if anyone can get in a call with me via zoom or google meet i would just find talking through it and showing you my screen would be more convenient for me  but any help or guide on this would be very helpful (: 

Hello, can someone tell me what the best practice is for re-assigning Mac Mini hardware to any functional account or another employee.. The employee had left the organization, so we had to re-assign with any re-enrollment. If we re-assign, does it affect any login issues or any

Hi Team I am going a bit crazy. I am pushing this with JAMF Pro to some test machines and i get 2 popups. One is correct and the other is like this image. I have tried deleting all the config and post install scripts and redoing them but i cannot seem to identify whats happening? I get one that looks correct and the above also shows on the same machine at the same time. The JSON Config as well as the PLIST etc are all the default with NOTHING changed except the required versions and dates as well as switching to simple mode.

Just curious if anybody is able to get the Teams meeting link added when toggling to Teams Meeting or is it just not an option for MacOS. I went in to Calendar options and configured add online meetings and selected Teams. I've tried signing out of Office and teams. 

So I have an EA set to list who's logged into iCloud in Settings courtesy of @YanW  (thank you!). #!/bin/sh ## Get logged in user loggedInUser=$(stat -f%Su /dev/console) icloudaccount=$( defaults read /Users/$loggedInUser/Library/Preferences/MobileMeAccounts.plist Accounts | grep AccountID | cut -d '"' -f 2) if [ -z "$icloudaccount" ] then echo "<result>No Accounts Signed In</result>" else echo "<result>$icloudaccount</result>" fiDoes anyone have scripts for seeing who's logged into Messages, Photos, Music, etc?  We have some of it banned via profiles, but would like to catalog who snuck in. 

To those of already using Apple TV for digital signage, what product are you using? How do you like it? I was looking at Carousel and Kitcast since they both integrate with Jamf.If you have used, or are using either of these products, what do you like about it? What do you dislike? Thanks!

We have profiles set up to disable iCloud in Settings for our student macbooks, but some have figured out how to add their accounts anyway via other apps tied into iCloud.  Is there a script that will force the removal of an iCloud account from a DEP device?  I tried some of the old ones from 5-6 years ago and they no longer function.Second question, is there a way to detect what devices have iCloud accounts on them from Jamf Pro?

Hello everyone,Where digging for a good technic/solution for us to use or Macs with AD environment. What is important to us is Azure (Entra) login on our Mac computers, that you get access to a home directory in the AD environment, that it provides good and functioning SSO for Mac and that it is easy and convenient to change passwords when needed , so that it syncs with the AD environment.Plus (** not a must)Branding at login **Information in Finder when current password is about to expire **Easy to change password (that syncs) directly in Finder **The solution should be updated frequently and support the latest macOS fairly soon after Apple releases a new version without any difficulty updating if neededJamf Connect is one option, but can it do all above? Or does it exist any other alternative that fulfils this wishes?Hope to find good solutions and users with good knowledge about this in this forum. :)Is MS SSO plug-in for the Mac a possible alternative? What about the built in

I would like to create a script that will allow us to run and confirm that our core apps like Outlook, Teams and others are installed before we give the machine to our normal users.Any help is greatly appreciated.

i found out users on ventura cannot upgrade to sonoma but users on mac os monterey can is there a way to block users from installing sonoma who are on monterey? 

I've been working on optimizing our patch management process using Jamf Pro, and I'm interested in hearing about any strategies or workflows that have proven effective for your teams. Specifically, I'm curious about best practices for scheduling and deploying patches, as well as any tips for ensuring a smooth and reliable update process. Your insights would be invaluable!Thank you for your time and expertise!

Hi,I am quite new to JAMF.I've got everything working except of one attribute: departmentThe guy who was assigned to install JAMF with me said, there is only one way to get the content of this attribute.You need to statically add departments in JAMF, that are the same as the content of the department attribute.And it works.But why use Azure if you need to statically write down everything and always need to keep it up to date?There are many other AD attributes, that can be read via JAMF, why not this one and is there a way to fix this??Thanks for your advice.

Hello,I was following this post: https://community.jamf.com/t5/jamf-pro/centos7-jss-file-distribution-share/td-p/227536 And set up all for sharing, but now when I access https://jamfshare.mycompany.com/CasperShare I do have Forbidden message: ForbiddenYou don't have permission to access this resource. Any thoughts ???? 

Has anyone noticed in JAMF 11.0.1 - When you create a new config profile and click save - the payload has been removed ...Im trying to create a PPPC.. i enter the detail and click save and then the payload is removed .. 

Hey Guys!I'm looking to gather insights on the best practices for using a script to bench and store devices while also ensuring the removal of all essential settings, including management licenses, to free up licenses until the devices are reactivated. #!/bin/bash LOGFILE="/var/log/jamf_script.log" log_message() { echo "$1" >> "$LOGFILE" echo "$1" } log_message "Script started on $(date)" log_message "" invalidateToken() { /usr/bin/curl --header "Authorization: Bearer $token" --request POST --silent --url "$jamfProURL/api/v1/auth/invalidate-token" log_message "Token invalidated." log_message "" } trap 'invalidateToken' EXIT function sendToGoogleSheet { # Gather system details timestamp=$(date '+%Y-%m-%d %H:%M:%S') hostname=$(hostname) loggedinuser=$(stat -f%Su /dev/console) serialnumber=$(system_profiler SPHardwareDataType | awk '/Serial/ {print $4}') macosversion=$(sw_vers -productVersion) # Check for the presence of the j

Hi All,I currently have a user that is attempting to transfer a Keynote presentation to student iPads but is coming up with a "AirDrop Failed"  but when opening the Keynote IOS App, it appears to have successfully transfered without issue. I also confirmed that it is just Keynote presentations that are having issuesI have turned off all C specific restrictions that I am aware of in the config profile that our has organisation setup but am still recieving the message. I tested with multiple and internal and they are all facing the same issue but unmanaged devices do not encounter the same issue which makes me believe that issue lies with the restrictions set within our config profileOther than the functionality restristions that explicitly mention "AirDrop", Is there anything else that I may be missing in the config profile that could be causing this issue?

I have a strange issue when I am deploying a configuration profile in order for the login window to display name and password text fields instead of user icons on a Sonoma device. With the profile I created installed, upon restart it still shows our local admin account icon and does not display the username and password fields but when we login to the local admin account and then log out, then the username and password fields are displayed correctly instead of user icons.  This only works until the computer is rebooted. As soon as the computer is restarted again it goes back to displaying the local admin user icon again and no username and password field. Has anyone run into this on Sonoma? Is there another payload I am missing besides the login prompt payload being set to name and password text fields? My goal is to have the computer boot to username and password fields so that users can login using LDAP credentials upon boot.

I see a number of post on here with help about setting up AnyConnect with an On-Prem-Server. I am new to Jamf, and am using the cloud DP. I cannot for the life of me, figure out how to get Cisco AnyConnect with Umbrella to install via Jamf. I tried doing a snapshot and that did not work, but I don't know why. I have worked with Cisco and at this time, they do not know how to support Jamf Cloud. Their instructions, I don't know how to make that work for the cloud. These are the instructions they sent me: Mass-Deployment-Using-JAMF-Casper-Suite I need help, please and thank you!

we had a Mac that was locked remotely for security reason with passcodeso each time user turns on he had screen asking for passcode. We had to remote wipe this device to erase org data on this Mac. 1 device was locked with a passcode available with us as admins2 we had sent remote wipe command while user was still locked for passcode3 as soon as we provide unlock passcode to user, he logged in to his Mac and within a min device checked in and executed wipe command4 device rebooted to internet recovery screen but failed and had showed message "Your computer is disabled .try again in 15 minutes""This device is not approved for use on the (org name ) network. Please contact your IT department to remediate"5 device is seen 'Unmanaged' in jamf and management tab has no options availableuser tried to access recovery mode but it loops back to same error messageI suspect firmware is locked but device is not anymore managed in jamf so can't do any action from jamf any suggestion will