Hello All Playing around with the Jamf App Catalog feature.  Wondering when an app updates if the users is booted out of the App or does the install cache install or ?I have auto updates installed on many of the listed apps, so trying to test can be challenging.P.

A new function for your ~/.zshrc to retrieve the managed Apple admin account password from Jamf ProBackgroundWith the enhancements included in the recently released Jamf Pro 10.49.0, we decided to take a more serious look at Jamf Pro LAPS.In doing so, we wanted an easy way for authorized administrators to view the managed Apple admin account password via Terminal.Continue reading …

This post is mostly to document something I ran into, but please feel free to contribute anything that might help.In the process of running CIS L1 audits on Ventura the following was brought to my attention:--------ls -alh /System/Volumes/Data/System/Library/AssetsV2/downloadDirtotal 0drwxrwxrwx@ 2 root wheel 64B Aug 10 15:35 .drwxr-xr-x@ 43 root wheel 1.3K Aug 8 21:32 ..--------The directory is empty and I haven't seen a case where there is anything in it. There is a CIS control "5.1.6" that has a very strongly-worded description of how they think this should not be, so that particular audit fails. I guessed this was legit and got a little more info to corroborate that:--------xattr -l /System/Volumes/Data/System/Library/AssetsV2/downloadDircom.apple.rootless: MobileAssetDownload--------So the file is SIP-protected and in an area where that service is expected to do things. I found other occurrences of the same directory on Monterrey and Ventura systems, but I am not entirely sure of

  Does anyone have any experience With troubleshooting the Office 365 online yellow banner on Jamf Pro Managed devices? I have 3 laptops being marked non-compliant. 

Good morning,I am reaching out to you people since I got ghosted by Customer Success team.Yesterday I bought Jamf 100 exam, Payment when through I got booted out of that login page, money was taken out of my account, I got no confirmation on my e-mail. Anyone encountered this issue before?

Is there a way to remove multiple computers at once from Jamf Protect?I cannot find a way to delete multiple at once and it seems pretty unreasonable to delete hundreds of old computers 1 by 1...

Hi after installing app through JAMF when I am trying to create a shortcut by running this set of code.-------------------------------------------macShortcut.py-----------------------------------------------------------------from re import subfrom pyshortcuts import make_shortcutimport subprocessimport TPLogger as lguser = subprocess.getoutput('ls -l /dev/console | cut -d " " -f4')ruta_user = f'/Users/{user}/Desktop'ruta_app = f'/Applications'try:    make_shortcut('/opt/ex_app.py', name='ex_app', icon='/opt/ex_app/Resources/Images/ex_app.icns',terminal=False, folder=ruta_user)    make_shortcut('/opt/ex_app/ex_appscreen.py', name='ex_app', icon='/opt/ex_app/Resources/Images/ex_app.icns',terminal=False, folder=ruta_app)except Exception as e:    lg.log_info(e)-----------------------------------------------------------------------------------------------------------------sudo python3 /opt/ex_app/macShortcut.py-----------------------------------------When I cre

Hey everyone,We currently have an issue with a number of our intel and M1 Macs where we click the restart or shutdown option and the Mac just hangs on the wallpaper. If they do eventually shutdown or restart the Mac then gets stuck on the apple loading bar. The only thing that works is a Forced shutdown. Login and logoff aren't effected either.At first we thought it could be software not closing properly (we blamed Epic at first) but we have stopped this and others from launching but the issue still persists, I have gone through both launch folders in Library but none of those seems to be causing the issue.We then thought it might be stuck installing updates as we recently updated the Macs to 11.6, but that doesn't seem to be the cause, I have checked the updates cache folder and manually checked for updates just incase it had failed the first time.I have gone through the logs but nothing is standing out that I can see. I have tried a PRAM reset on one of the Macs but that doesn't fix

I'm new to Jamf, but I've been working on configuring the Okta side of things. I've managed to get Jamf Connect integrated with Okta, but I'm encountering an issue during testing. The system prompts for login twice - first for Disk Encryption, then for Okta. Is there a way to streamline the process so that only the Okta login is required to access the Mac, without involving the local account that Jamf Connect set up? Your guidance would be much appreciated.

Our current Jamf Pro instance is a mess with unpatched apps missing packages and policies no one has tended to in years. I recently learned about Jamf App catalog and have 8 "Jamf App catalog" apps deploying on my dev server. Besides the known limitations of Jamf App catalog (less control over versions, lack of verbose install feedback, etc) are there any other downsides to using Jamf App Catalog for basic apps like Chrome 1Password etc? Will I regret not doing it the old way?Jamf App catalog seems much easier to maintain. Am I missing an obvious downside to Jamf App catalog?  Would love to hear about others views on this.  

Hey Everyone,I'm having some trouble with authentication of Cisco ISE & Jamf Pro over Ethernet. My Macs are not domain bound and are using Jamf Connect and Intune registered via Jamf and ADCS. If anyone has some leads enabling User Auth without domain bound macs this would be awesome, after I get the wired working right.My ADCS CertCertificate Subject= CN=$COMPUTERNAMESAN Type= URISAN Name= ID:JAMF:GUID:$MANAGEMENTIDAllow All Apps Access= UncheckedAllow Export= UncheckedMy Ethernet Config ProfileMy Ethernet profile may once randomly auth properly then just fails time after time and I'm thinking I have the wired setup all wrong. When authenticating ISE reaches out to Jamf with the MAC address of the USB Hub connected to the Mac and it fails device compliance stating the device is not found in Jamf and to register.The failures, return a MDM.MDM-GUID:MacAddress of the USB Hub VS a successful auth has this value MDM.MDM-GUID: empty. Instead the mac address of the USB Hub is i

Has anyone found a good way to deploy Microsoft Visual Studio 2019? Microsoft currently does not have a full macOS package of Visual Studio 2019.Trying to get the full package via Unity still gives the previous version (as of 2019.1.8f1). The only think I've thought of is trying composer snap shot, then referencing the uninstall scripts to make sure I don't prune anything - https://docs.microsoft.com/en-us/visualstudio/mac/uninstall?view=vsmac-2019 I was also thinking, install the previous version, and see if there's a way to automate the upgrade?

Has anyone used this successfully? I have a fleet of mostly M1 Macbooks, FileVault enabled on all of them. I've tried using a test group to deploy software updates, but none of the computers seem to respond no matter what I select. No prompts, no updates downloading. I've tried on three different machines on Ventura. Jamf pro version is 10.48. Do I need to be on 10.49?

Hi,I am trying to add 2 Portals for Global Protect VPN with a script, but it only shows 1 portal even-though I added the 2do Portal to the script. Is there any other way I can achieve this? or is there is anyone out there using a script to add 2 portals, thank you. if you can be very specific on how to do this please, thank you.

Hey I want to update my hosts file in all computers with Jamf but i dont know which commands use. The lines that i want to add are 17.171.120.82 locate.apple.com17.171.120.18 locate.apple.com thanks

Hello everyoneHaving issues with Content Caching for the past few weeks and driving me crazy.We have a M2 Mac mini with the IP address 10.10.10.10 ( not real IP ).The end-points are on the same network.I've created a Configuration Profile for the Cache System and the end-points with the followingConfiguration Profile Settings.I have read https://support.apple.com/en-ca/guide/deployment/depde72e125f/web and https://support.apple.com/en-ca/guide/mac-help/mchl3b6c3720/mac and I can't seem to get it workingDo I need a DNS TXT record? I didn't put one in since I set the My Local Networks to use one public IP addressWhat am I doing wrong?Here is my Configurations settings 

I'm looking to get some insight into large files and folders on computers before they get to our office. We are seeing a large number of requests come in for not being able to update their macOS dues to low available storage so I'd like to be able to get a report on who has what storage left, easily looking into a device record and see the top 5 or 10 large files and folders. I've been playing with the "du" and "find" commands but struggling to put it together in a useable format for a script or extensions attribute. Does anyone have anything?

Hi,We recently tested macOSLAPS but could not get it to work without enabling full access to the computer object in AD. Does anyone know which attribute needs to be set in order for the computer to update it's own password in AD? We set the ms-Mcs-AdmPwd attribute but that did not seem to work. 

Hi everyone,Hope someone can help me with the below issues I am having;I am trying to install a custom app which I got from a vendor in a .dmg format.  Within the dmg there is a .pkg file and then two script files called install.tool and uninstall.toolAs per guidance by the vendor I need to run a command to call the "install.tool" via a command and then add a parameter to point it to a server which we have running in our environment.  This all needs to happen before the actual installation takes place i.e. while the .dmg file is mounted and I think this is where I am going wrong or having difficulty to run the above script via command before the actual installation takes place.I have come across a few threads on here to use composer which I have done but I have not had any particular success deploying it via JamfPro. It seems weird, as if I run the .pkg file (which I got from composer) on the test I have Mac, the program installs fine but not via JamfProSorry my Mac

I suspect many of you in an enterprise environment are required to run N+1 like I am.   I'm yet to find anything specific indicating whether you can run the ADCS connector and do load balancing via DNS.  Does anyone have a setup for two (or more) ADCS Connectors?

Hi,is there a way to configure iPads to always trust one specific computer? Usually you plug in the iPad and are being asked if you want to trust this Computer, but this is not possible in Single-App mode.Kind regards

Hello very new to Jamf. Have set up in prestage enrollment a local admin account (with admin permissions) and was hoping to use that local account as the one required to make any changes.Also, have the box checked in the policy to require admin when installing/deleting apps However - when the macs go through enrollment and first user is prompted to create an account, it is set up as administrator. It can uninstall apps, send things to trash (after using creds) etc. I want this to be a standard account What am I missing?

We have a group of kids that really need dictation enabled on the ipad keyboard. Anyone have a suggestion to show the option under keyboard to enable that?

Good afternoon, everyone.I've been using Jamf Pro a little over a year now for mobile devices and have been fairly successful at getting that to work as needed, now I need to figure out how to use it for Mac computers. Currently I am trying to deploy the Adobe CC package I've made via Jamf and from all the threads I have read here on this, nothing is working for me. Mainly in that a lot of these threads commenters are saying to just upload the .pkg that is in the Build folder once I unzip the package. I don't have any .pkg file??I am working off a Microsoft machine, not a Mac.My process has been this:Go to Adobe CC AdminCreate PackagePackage downloads, and I unzip the folderGo to Jamf Pro and go to PackagesCreate NewFill out Display NameCategoryGo to  Filename and 'Choose File'This is where I go to look for a .pkg file. In the zipped folder I have both Build and Exceptions folders and 3 loose files: .DS_Store, a .ccp file and PackageInfo text document. When I go into the Build fol

Hello team,I was wondering if you can assist me on a quick and easy matter. I'm trying to create a Smartgroup to update all of our machines to the latest Zoom update. I just want to know if there's anything else that I'm missing for criteria. See screenshot.One more thing, once the smartgroup is created and the patch take effect, do the machines get excluded out of the smartgroup once the patch is complete with the new update? I just want to make sure because Jamf support said it does.Thanks.