Hi All,I have created a new enrolment process using Jamf Connect and SYM.This is now via a VM so I need a solution to capture the enrolment process for documentation and training purposes.What is the best creative method to accomplish this. This is a physical machine which I am working on. ThanksSimon

I recently received an alert that I had reached the "Valued Contributor II" rank in Jamf Nation. That's nice, but what are all of the ranks and how does one reach them? I don't think I've ever seen anything introducing us to these ranks. I'm always happy to contribute to the discussion and help others as much as I can.

We just had a round of passwords expire and now some of our users use their old AD password to get past the FV2 login screen, then use their newly reset AD password to get into the OS. How do we get the passwords to sync back up? I saw the apple solution to use a sudo touch command to delete the cache and let it rebuild, but that has not worked for us yet. Any other tips or trick on getting them back in sync?

We have several macbooks (Monterey and Ventura) that cannot boot anymore and are asking for a recovery key. After filling in the key an reinstallation doesn't work (error), only a complete format and reinstall solves the issue. Some users are able to get to the login screen after entering the recovery key at boot but then the macbook reboots back into the recovery mode. We tried safemode, logging mode etc. All the options that we could find couldn't prevent a complete wipe of the disk and reinstallation. We suspect this has something to do with a patch policy with an Safari 17 update but we are not sure. 

Hello Everyone, I like to ask if anyone uses the USB hub to restore multiple Apple Silicon Macs (like 5-7) using AC2. If you do which brand hub and specific cable? We already using Cambro Nix Thunder Sync 16 for iPad.Also, I can use the DFU blaster to put the Apple silicon Mac in DFU mode instantly one by one. just wondering if there is a faster way to do this. Thank you in advance for all the responses

Hi, We rolled out SentinelOne a couple of months ago, now we noticed users disabling SentinelOne underLoginItems>Allow in the Background in the system settings.  What is the best way to disable this? 

Hey there I am having the hardest time getting Autopkg set up to help Automate my teams workflow. I thought adding the Autopkgr gui would simplify how I set up and manage Autopkg, but it did not. I followed all default commands and even tried adding our SMB on prem server to Autopkg but Packages and groups are not able to be created and uploaded to my jamf pro. Any help will be greatly appreciated at this time.

Hello all,I have created a configuration profile with the values given below (https://learn.jamf.com/bundle/jamf-connect-documentation-current/page/authchanger.html) but unfortunately nothing happens. But when I distribute the command as policy the login window is reset. Policy Command (does work) :Configuration Profile (does not work) : I would be happy about some feedback 

Hi All!Prior to my current role, Bluetooth restrictions seemed to be all or nothing. Either users were free to connect to various Keyboards, Mice and Headsets or not at all.Now I have a mandate to allow specific, vendor approved Keyboards, Mice and Headsets...but nothing else via Bluetooth.What is your preferred method of managing BlueTooth devices in macOS/Jamf?  BlueTooth must be enabled but not discoverable and auto-pairing/file transfer type functionality needs to be disabled. 3rd Party Product? Config Profile? Script? Some combination of the 3?

Good morning all, We manage about 100 iPads spread out among campuses over a 100-mile distance. To my knowledge, no Teamviewer or equivalent would allow for screen sharing or control remotely from one location. I know that Apple has software that can do it when you call support, but I was curious to know if anyone has a workaround or anything I could have missed. Thank you!

I just upgraded to 10.2.1 and I'm drawing a blank for how I can brand our Self Service. I've sent the technical specifications of the icon and banner size to one of our graphic designers but without some samples of what is out there, we're kinda fumbling. I've had a couple ideas for just boring company logo over a photo of our building. Blah. I've had another idea for a banner image that I can change out with static alerts like holiday hours, company events, special software updates that need users' attention. But I don't know how they would look with the Self Service window at different sizes. Unfortunately JamfPro doesn't give us a sandbox to play around in to preview things. (I'm struggling to get a test server working at the moment) I know that the text overlay is white so our images have to have proper contrast for it to be seen, but I'd like to see some real-world examples. Let us see what you've got! :-)

I am running into an issue with a user that can't allow screen sharing, as I can RDP in due to accessibility's being disabled. I looked to the forms to see if I could find the PPPC for it.I did find something identifier "com.webex.meetingmanager" and anchor apple generic and certificate 1(field.1.2.840.113635.100.6.2.6]/" exists */ andcertificate leafield.1.2.840.113635.100.6.113]/" exists / and certificate leaf{subject.OU] = DE8Y96K9QPHowever after pushing it I came back with this error In the payload (UUID: 09DDCCB5-B571-4155-A60A-2229A4BD14DD), the key 'CodeRequirement' has an invalid value.Anyone able to assist me or point me to where I went wrong?

I have 10 iPads in front of me, all going to the same room at the same site. They are all identical, and in the same smart group receiving the same apps. All but 1 is accepting the push. The "black sheep" if you will, is the only one displaying this error "Sign into iTunes to allow "jamf..com" to manage and install apps. I have wiped the device, unmanaged it, deleted it, and re-enrolled it multiple times but I still get the same error. I have read other "fixes" about the app not having vpp checked but all of the other iPads are working (accepting all the apps) just fine.

Hello,I am finding that some apps are failing to install on iPads and the details listed are "Internal Error." Has anyone else encountered this? When I had apps fail to load in Jamf Pro I would wipe the iPad and re-enroll and they would all load. I was hoping to find a different solution in Jamf School. Thanks

Hello, I am working on a faster deployment for the end user but I am hitting a snag. We are manually creating the user account after the computer is set up. However, the problem is that Jamf is taking the admin Account and using that as the Fields for User and Location. Is there a good way that I can have the newest created account be imported and change these fields? (snapped a pic just to make it more clear).--This method is still in the testing stage so luckily zero headaches yet :D Just some extra info:No user account is created when we enroll the computer (Admin account is Added).I have chopped DEPNotify in Half. This way we can do the 30-40 minute install without the person needing to be here. Once the first half of DEP is installed, we create their account, i.e. appleguy13 and generic pw.Once they're here, we have them update the PW and run DEPNotify part two which grabs their name and computer name etc. However, I'm not getting this info imported in Jamf As alway

so before i delve into jamf and see if I can put some verbose logging on....I just caught a user upgrading to Monterey in place before we had our upgrade polices ready.  i did neglect to put a block on before hand as i have been swamped and forgot 😵 anyway, so i'm just testing a block now to stop any others launching the app if they download it, however it doesn't seem to be respecting it.  i have set it up like previous versions and the .jmf_settings got delivered and the new policy is in place:-    {      "jamfProID" : 30,      "shouldKill" : true,      "whitelistedUsers" : [       ],      "shouldDelete" : true,      "exactMatch" : true,      "message" : "Currently the upgrade to MacOS Mojave is not possible at this time, as it is still being tested against the managed build. Please contact the IT H

We are currently on a campaign to bring more visibility to Self-Service in our environment, since we have a lot of great solutions to common issues. My boss asked if I could get some usage statistics, which is easy for just about everything else in Jamf, but not for Self-Service. Odd, but it is what it is. I am aware there is a feature request open from 2012: https://www.jamf.com/jamf-nation/feature-requests/819/usage-statistic-reporting-for-selfservice. However, I am sure someone, somewhere has hacked a solution, so I am curious. How are you getting Self-Service usage reports to management? Assume that I have unlimited resources to implement your strategies.

I've updated a few test machines to 2.28.1.  Since doing so, I'm getting this error.  We are using a conditional access policy with Intune Integration.   Worked fine before upgrading from 2.26 to 2.28.1.   Any ideas?  If I exclude my userid from the CA policy, it works fine.  My initial thought was to exclude the Jamf Connect app from the policy, but wanted to post this first.  Thanks in advance for any help.   Here is the Entra sign in log.  Here is the policy.  Only require 1 of the 2 checked.  It targets all cloud apps.  Here is my test machine in Entra.      

(seriously amateur scripter) looking to upgrade how we manage device naming.Our naming policy is not complicated, Department-Building-Tag#, and our current script requires us to maintain a separate list of data to populate a dialog box that lets the user select from the available options:set Department to (choose from list {"AAA", "BBB", "CCC", "DDD", etc.But that means anytime there is a change in department structures, we need to update the Jamf>Network>Departments information, as well as the script. I am hoping to use API commands to grab the current list of departments when the Naming Policy is triggered something like:departmentList=$(curl -su username:password\\"https://url/JSSResource/departments" \\-H "accept: xml/text" \\| xmllint -format - \\| awk '/name/ {print}' \\| awk -F '[><]' '{print $3}')This gets me the data in a list, but I can't figure out how to (or if it is possible to) prompt the user to select from a list just by calling the variable:...set Depa

Following a twit by Richard Trouton, I thought it would be good to implement sudo in Touch ID authentication for our developers as one of the benefits to Sonoma, since Sonoma makes the change persistent even when updates are made.If you are interested follow the link to Richard Trouton's Wordpress site (https://derflounder.wordpress.com/2023/10/14/enabling-touch-id-authentication-for-sudo-on-macos-sonoma/)However, upon implementation I needed an EA to check if the authentication had been enabled or not since I implemented two self service policies; one to enable and the other to disable.Since the policies are ongoing, I needed smart computer groups to exclude enabled computers when the policy was enabled and only present the disable policy and vice versa.this is the EA that I used which reports if Touch ID has been enabled or not-------------------#!/bin/bash# Check if the file existsif [ -e /etc/pam.d/sudo_local ]; then# Check if the specific line exists and is uncommentedif grep -qE

How can we disable auto update on Xcode build application from jamf pro

Link:https://swdist.apple.com/content/downloads/09/40/042-74906-A_ZJ5SVXD513/6yfe7yuiin4fwvc9ku04hq2fb7jqxjxv85/Safari17.1VenturaAuto.pkg

Hi everyone,I'm working on setting up an Apple Configurator 2 laptop, from which we can bulk restore and enrol Macs (over DEP). I take it others are already doing this, so I'm wondering if so, which Thunderbolt/USB-C hub have you been using, and what your overall experience with AC2 and Apple Silicon Macs has been? Thanks!

Ever since edge switched to the new 113 updater I have run into a few macs that edge refuses to update.I am already using the plist to update<dict> <key>updatePolicies</key> <dict> <key>global</key> <dict> <key>UpdateDefault</key> <integer>0</integer> </dict> </dict> </dict>And it works fine. The macs that have the issue I noticed the EdgeUpdater folder is locked out and therefore blocking edge itself from updating.Macs that are updating ok,  this folder does not have a permission block.I even manually updated to version 117 and it does not fix the folder permission and edge is still not updating.Not sure if anyone has run into this or if they have a way to fix the folder permissions using Jamf. 

Hi, are there anyway for me to disable all other apps except Google Chrome for macOS Device.By default we have Apple Pages, Numbers, Safari etc. During exam, I only want students to login and only able to use only Google Chrome.Thank you