Looking to see if anyone has a policy or script that checks off the box to Allow user to administer this computer

Enable System and Network Extensions using jamf PRO 61381Created On 08/26/20 21:16 PM - Last Modified 03/21/22 18:33 PMGLOBALPROTECT AGENTINSTALLATIONGLOBALPROTECTPRISMA ACCESSSymptomBackgroundGlobalProtect App starting 5.1.4 uses system extensions on macOS Catalina 10.15.4 or later endpoints for enabling capabilities such as:Split tunnel based on the destination domain name and application process nameEnforce GlobalProtect connections for network access (see GlobalProtect App Customization) without requiring kernel extensionsGlobalProtect App starting 5.2 uses system extensions on macOS Catalina 10.15.4 or later endpoints for enabling capabilities such as:Split DNSWhen GlobalProtect app is installed on a macOS Catalina 10.15.4 or later device for the first time or is upgraded to GlobalProtect app 5.1.4, they must now enable the system extensions. If you have configured split tunnel on the gateway or enforced GlobalProtect connections for network acce

Good Morning,We are moving to Managed Apple ID's for our High School students who have MacBook Airs. Is there any way to prevent them from logging out of their Apple ID on these devices? I see that there is a way to do it via configuration profile for the iPads. Is there any way to do this on a laptop? Thanks!

Hi All,Actually due some issues in past the home folders name are incorrect for the users.I need to get the Jamf Connect Username information to be update for the user computer inventory.How to do this through a shell script Eg)firstname.lastname@domain.com is the user email id.But for some reason users home folder profile is like firstname400000 this is an issue for me to update the computer inventory for each email id.So I have the jamf connect which is been authenticated for all the users.I need to fetch that details and hostname to be updated with the Computer Hardware inventory. Hostname and Username who authenticated at Jamf Connect needs to be fetched and then that needs to be updated for that user email id only

Hi everyone, I just finished setting up Jamf Connect with my Jumpstart call and afterwards I discovered my users have to log in twice. We are using Okta as our SSO and that is setup and connected. But when I restarted the computer, I get the Mac login screen with my user name and my password works and I immediately have to login in with my SSO credentials again. Is this normal or can I get one of these screens eliminated? 

Hello everyone,We've been using three sites in our Jamf for about six years now. Some days ago I set upp a new site with new prestage and everything. Computer enrolls as it should. Automated installations works as wanted.So far we have set upp two applications for the sites (all computers / specific users). The applications are set to Apple category. They are shown in Self service if you click on All categories, but the Apple category isn't shown.Why? Have I missed something?

  Customer Education is excited to share another release notes video with all of the new features and enhancements available in Jamf Pro 10.49. We hope this resource continues to provide additional details to support your use of the features in this release. You can take the quiz below to gauge your understanding of the update!     Thank you for the support and feedback as we continue to work to create the best resources for everyone!  And do not forget to test your knowledge with the quiz!

Does anyone have working JSS REST API code in c#? I am trying to write an application that can grab basic computer information but I cannot find any good examples of C# and REST API. If you have any sample code, sharing is greatly appreciated. Thanks. Edit:I figured it out.

Our organization recently moved over to Jamf Cloud from on-prem hosting. Trying to provision five iPads for a department. Stuck on awaiting final configuration from "our organization" loop. Has anyone experienced this before and if so how did you resolve it? I've already unassigned and reassigned the devices to our MDM in ASM and then wiped the devices in Apple Configurator. Left the iPads running overnight and it was still stuck on awaiting final configuration from "our organization". We had no issues with mobile devices with on-prem hosting.

We are trying to install an external app through .tar.gz file into Mac (macOS 13.4.1, Python 3.9.12, CLT 14.1 Intel Processor) via Jamf pro but when launching the app, the app shows blank white screen. On the other hand when we try to install the same file manually in the mac without JAMF Pro it works fine.  Note: we disable the gatekeeper and enable it after the installation completes in both ways manual and via JAMF.sudo spctl --master-disablesudo spctl --master-enable

Hello! Anyone know how to fix the å,ö,ä show up as "\\366" instead of the character "ö" for example? On MacOS notifications. I guess is has to do something with character coding but I don't know hot to fix it :)

Im looking for some guidance on how jamf pro can deploy accessibility options to a user from enrolment and via self service.Looking at making onboarding as seamless everyone by providing accessibility features at the start and then granular after the mac is enrolled.Looking at solutions for enabling siri, background sounds, focus, voice control, voice over, magnifier, Captions and any other you can recommend.  

Hi, We are managing 300 iphones using JamfPro in the cloud and the Self service portal wasn't running. We have added the configuration to get over a none functioning Portal (with the correct URL details):<dict><key>INVITATION_STRING</key><string>$MOBILEDEVICEAPPINVITE</string><key>JSS_ID</key><string>$JSSID</string><key>SERIAL_NUMBER</key><string>$SERIALNUMBER</string><key>DEVICE_NAME</key><string>$DEVICENAME</string><key>MAC_ADDRESS</key><string>$MACADDRESS</string><key>UDID</key><string>$UDID</string> <key>JSS_URL</key> <string>https://JAMFURL:8443/</string></dict>But now each app is showing Error loading content... Any ideas?CheersNick

I am writing a quick script to delete a file from our users computers. We have Jamf Connect on all computers currently.I'm using this script to get the logged in user:loggedInUser=$( scutil <<< "show State:/Users/ConsoleUser" | awk '/Name :/ && ! /loginwindow/ { print $3 }' )This used to work for us but now that we are on Jamf Connect it just shows the IDP user, not the local user. I need the local user in the variable because that is actually where Documents are stored for the user.Any way to extract the actual Local account that the user is logged into and avoid the IDP user?

We've replaced our lab computers with M2 MacMinis running Ventura and the package I set up to install the desktop background for the old computers is installing, but the config policy is not applying the image.  Do I need to replace the spaces with %20?  I didn't before.

Does anyone know if DEPNotify is still being worked on? I know someone opened an issue on this already on the git page, but was wondering if anyone here knew.

When you change a config profile in Jamf and tell it to distribute to all what is the process that happens on the MDM side? Does it send a command to remove the original profile and then download and install the changed profile? or does it download the changed profile first, remove the original profile and install the changed profile? I am asking because the MDM profile I am changing effects the network settings (VPN) and most likely the network connection will be disrupted. If the changed profile is not first downloaded before the original is removed then I cant see how it will get the changed profile.

I am experiencing installation errors when installing my Xcreds package with the following pre & post install scripts. The app installation does actually succeed, but the installer still throws the "Installer encountered an error that caused the installation to fail. Contact the software manufacturer for assistance." error. Any idea why these scripts would fail when added to the package? The preinstall script just terminates any running instances of XCreds and removes any existing installation of XCreds.app from the /Applications directory, and the postinstall script creates a backup of the system.login.console authorization right, installs a login plugin for Xcreds, and runs a login script for the application. #!/bin/sh killall XCreds if [ -d "/Applications/XCreds.app" ] ; then rm -rf "/Applications/XCreds.app" fi#!/bin/bash set -e set -x script_path="${0}" echo "script_path: ${script_path}" package_path="${1}" echo "package_path: ${package_path}" ta

Hello, I am having issues with the following script that worked great as a policy for Big Sur and older OS/Macs to rename Macs, but for some reason, Macs with M1/Monterey will not execute the rename commands as a Policy Script. #!/bin/sh /usr/sbin/scutil --set ComputerName "Test-Mac" /usr/sbin/scutil --set HostName "Test-Mac" /usr/sbin/scutil --set LocalHostName "Test-Mac" exit 0 

Today we released Jamf Connect 2.26.0. This release includes the following improvement: Official identity provider namesThe Jamf Connect login window and menu bar app have been updated to provide the official identity provider name, instead of the value from the Identity Provider (OIDCProvider) setting.   To access new versions of Jamf Connect, log in to Jamf Account with your Jamf ID. The latest version is located in the Products section under Jamf Connect. Product Documentation For additional information on what's included in this release, review the release notes via the Jamf Learning Hub. Thank you!The Jamf Connect team  

Hi all,We're encountering a random issue with the Jamf Connect login window hanging and preventing any interaction with the computer. The login window is gray, the spinning beachball spins, and we can't click on anything.To get around this we have to force shutdown the Macbook by holding the power button, then after starting up again, quickly click Local Login before the Jamf Connect login window can try to load.Any thoughts? I can't yet find anything in common between the users its happening to, other than that they've brought their Macbooks home, which should be fine and works for most users. Jamf Connect version 2.19 Build 4482 using Google LDAP2020 Macbok Air M1 on Monterey  

I have a customer who uses Jamf Protect and we just recently integrated it with Azure Sentinel for GCC High. The native connector isn't available in GCC High yet, so we had to use the manual Data Forwarding method to an Azure Log Analytics Workspace. Ingestion seems to be working as of now. Without the native connector, however, we don't get the out-of-the-box analytics rules to create Sentinel incidents. Does anyone know of some importable analytics rules that might help us get some use out of the raw data in the log workspace?

Hello all,I'm trying to see if there is a way to automatically update user & location field based on the user's login. We currently have Jamf Connect setup and wanted to know if there is a way to get the logged in user to appear in the "email address" or "full name" of the user & location field. Our main goal is here to identify and tie a device to the user using it within the organization. Thanks in advance for any guidance here. 

I deployed some applications via pkg files instead of mac apps. These applications now prompt the user for an admin password when updating. We can permit them to do so but I want to know if there is a script or scripts that we can use to auto-update applications and software.I've read about Munky and AutoPKG but I wanted to check if there is a simple solution to what seems to be a common problem. Unless I need to write scripts for each app to check and install updates? 

Hi Everyone, Getting this error, if am using software update differ configuration profile via Jamf for Mac devices. Getting attached error. attached setting is configured for differ software update pane.