Hi All,I am curious if its possible to create a configuration profile using custom schema to modify the profile.xml settings?I know we can package it with installer etc and that's what I am doing but i want to know if there is an easier way to update the profile.xml when there is changes in the connection name or server etc? Thank you!

I have a script that uses an ID & PW with curl and it works perfectly when I run it locally. When I define $4 as username and $5 as the password (with the respective values in the policy) and run the script in Jamf it just hangs and I can't figure out why.curl -u username:password https://company.com... works perfectly when run locally. It also works in Jamf, but I'd rather not put the credentials directly in the script.curl -u $4:$5 https://company.com... does not work when run from Jamf.I have tried variations like $4 : $5 or "$4" : "$5" or '$4' : '$5' or "$4":"$5" or '$4':'$5' I've even verified the values with a line that says echo $4 $5 and it does report the values correctly.However, if I define variables in the script like $acct=username and $pw=password and use  $acct:$pw in the curl command, that works just fine, but once again, I'd rather not put the credentials directly in the script. It seems that I can't get the variables to work when defined i

I have wiped my macbook many times and never had an issue with Teams and Chrome installing - since updating mac to Sonoma and Jamf being upgraded - Teams and Chrome will no longer install - just shows Pending -- Also some of my configuration profiles for system extensions will now no longer install since the updates  (Cisco AnyConnect and Trend Micro)  - any ideas on how to resolve? Nothing else has changed - same Jamf build and configs that worked with no issues previously

Hi,I'm using Jamf Pro (10.50.0-t1693149930} and I was wondering if someone can guide me to creating a configuration profile to block or prevent the "InstallDefender" from installing with Office 365. Any other suggestion affective suggestion is welcome.https://learn.microsoft.com/en-us/deployoffice/mac/preferences-office#excluding-appsThanks in advance.

I have deployed a Config Profile with the following code to block Software Update from seeing the major OS releases (Sonoma) for 90 days with com.apple.applicationaccess for the domain: <plist> <dict> <key>enforcedSoftwareUpdateMajorOSDeferredInstallDelay</key> <integer>90</integer> <key>forceDelayedMajorSoftwareUpdates</key> <true/> </dict> </plist>  Sonoma was released by Apple 25 minutes ago and already I see Macs that are displaying Sonoma as an available update! I have verified that the Config Profile has been installed on these Macs for many weeks. Every single time there's a new Major OS release, it's like trying to hit a moving target. How on earth are we supposed to block Major OS releases?  

I have created a configuration profile for the dock. I tried to do it with Dock Master and the dock resets after the computer reboots. (sounds like working as intended, however I do not want to have it this restrictive) Then I tried iMazing Profile Editor and the dock reset as well and the magnification got locked. so really want I want to do is to Crate a dock, place the icons, and then the user can modify it as they wish in the exception to removing 2 icons that must stay.

Hello,I've recently upgraded a MacBook to macOS 14, but Jamf Connect (2.27.0) is not working properly.When i log off, i see just the normal Sonoma Logon-Screen.Is there a new setting?Do i need to turn off Filevault?Thanks!

A tiny bit of a hiccup with JAMF that might affect one of the more 'special' users in my company!When deploying devices, we block practically all iCloud functionality. The user can log in, but document and data sync (such as photos, etc.) is disabled. All done out of security, I must point out that the iCloud accounts are just like any other iCloud account (not managed by the company). All new iPhones receive a configuration profile related to security and iPhone functionally. Let's just call this 'Standard'. For example, certain apps are not available to download. Screenshots cannot be taken, manual resets of the iPhone are not allowed, and so on.There is another config profile for 'Managers' who are afforded a little more freedom in terms of what they can do. Screenshots are allowed. Otherwise blocked apps from the App Store can be installed. WhatsApp is the best example.VPP apps auto-install on the iPhones soon after being enrolled. Nearly everything in the company is Microsoft rela

Hi,I'm using Jamf Pro (10.50.0-t1693149930} and I was wondering if someone can guide me to creating a configuration profile to block or prevent the "InstallDefender" from installing with Office 365. Any other suggestion affective suggestion is welcome.https://learn.microsoft.com/en-us/deployoffice/mac/preferences-office#excluding-appsThanks in advance.

I have a corrupted Student Profile that I do not have a backup of and after speaking with a Jamf rep it was suggested to go to a student station and download the Profile and then upload it to Jamf Pro to recreate it. I'm unable to download the profile when I double click it on the. student Mac. Can someone help me figure out where the setting is to allow downloading a profile? I am able to download the config profiles for my Mac which is technically using a teacher restriction.

Has anyone experienced an enrolled device, utilizing JAMF Connect, just *changing* the local password, even when no password change was initiated?Our users enroll devices with JAMF Connect and Google IdP. It creates a local account with the same password as their email. If they change their password to their Google account, JAMF Connect will yell at them to change the local password to match the new Google password- which is exactly how it's supposed to work.I have a bizarre situation that has occurred 3 separate times (once even to me) where the local password just changes on its own and locks the user out of their device. When I have the user login on a different device with their email password (which should be the password for the local account), they are successful, so it's not an issue of them typing their password incorrectly.I have assisted two people through the recovery process at this point. Even on the root level in recovery mode, it rejects that known password. Our only sa

I would like to have JAMF keep record of lease dates for all of our devices. I am planning to manually enter each lease date directly onto each device record. My question is if there is an easy way to be alerted when a device has this lease date removed (ex. when wiped) so that I know it needs to be added back. The relevant information I would need in these reports are the lease date and serial number. If there is any scripting to be done, I would love if I can be pointed in the right direction. Once I can get this set up, I will set up reports that will let me know when lease dates are nearly up.If there is another more useful way to ensure these lease dates stay on permanently, please let me know

Hi everyone!I've been spending so much time on this so I hope to find an answer in the Jamf community.Was anyone able to find a way to set a custom screensaver (a folder with 3 pictures in a loop) that works with macOS Ventura?I've got close to have it working with the below script, but I still need to manually go into System Settings - Screen Saver and choose "Classic", because it defaults to Ventura and I cannot find a way to fix this.Any help would be extremely appreciated!  #!/bin/sh ## get current user user=$( echo "show State:/Users/ConsoleUser" | scutil | awk '/Name :/ { print $3 }' ) ## configure screensaver framework /usr/bin/sudo -u "$user" /usr/bin/defaults -currentHost write com.apple.screensaver moduleDict -dict moduleName -string "iLifeSlideshows" path -string "/System/Library/Frameworks/ScreenSaver.framework/PlugIns/iLifeSlideshows.appex" type -int 0 ## set key items for screensaver /usr/bin/sudo -u "$user" /usr/bin/defaults -currentHost write com.apple.scre

Hello all,We're working on forcing updates on our fleet and it seems the best way to do this reliably or at least with some feedback is via the managed-software-updates API (POST .../api/v1/managed-software-updates/plans. This at least provides us with variable options, including groups via single machines (which we use to test), as well as feedback as to what's happening to the machinesGET .../api/v1/managed-software-updates/plans?page=0&page-size=20&sort=planUuid%3Aasc' However I have a few questions: Using:"updateAction": "DOWNLOAD_INSTALL"and"versionType": "LATEST_MAJOR"my test machine has been stuck at "state" : "SchedulingOSUpdate"What can I expect as a next step, either for me the Jamf admin or on the user side? Why is it stuck at "Scheduling"?For a few machines I have:"state" : "PlanFailed""errorReasons" : [ "APPLE_SILICON_NO_ESCROW_KEY" ]Is this solvable? I also have:"state" : "PlanFailed""errorReasons" : [ "EXISTING_PLAN_FOR_DEVICE_IN_PRO

Hey all, I'm primarily a Windows admin, so bear with me on this one. I have an EDU client looking to install Creative Cloud apps via JAMF Cloud and am trying to figure out the proper way to push it to the machines. I am following the steps outlined here: https://docs.jamf.com/technical-papers/jamf-pro/adobe-creative-cloud/9.0/Deploying_Adobe_Creative_Cloud_for_Enterprise.html https://www.jamf.com/jamf-nation/articles/593/deploying-adobe-creative-cloud-packages But where I get hung up on is the manifest file. I created the installer package from the Adobe admin console, and it downloads as a zip with the "Build" and "Exceptions" folders, as well as the ".DS_Store", and "<name>.ccp" files. What is the Package actually looking for me to upload here? Do I need to capture or package anything separately? Seems like I'm chasing a red herring while looking through the folder structure for the proper file. Again, sorry for the igno

Hi,We are looking into the following scenarios: 1. Leverage a script or a jamf config where if someone attempts x amount of times of fail login attempts on a macbook, it lockouts out the machine. 2. We leverage OKTA IdP and Jamf Connect. How can we leverage this so password policies for lockouts are being enforced. Apple Builtin seems to leverage brute force which is varied for lockouts 

Does anyone have a solution installing the Creative Cloud Installer?We are finding that the first time our users open the application it attempts to update and immediately prompts the user for administrator credentials.  We are downloading the app package as an Adobe Self-Service package that allows users to install and update the Adobe apps without admin rights however the initial update of the Creative Cloud Installer requires admin rights.Any ideas?

Hi there, need assistance in scripting as have modified a script to download the creative cloud cleaner tool to /tmp/ and to run then delete after it has run. I am wanting this to run before the installer will run the Latest version of Adobe products as there are some Macs with two versions already installed:#!/bin/shVendorDMG="AdobeCreativeCloudCleanerTool.dmg"curl https://swupmf.adobe.com/webfeed/CleanerTool/mac/$VendorDMG -o /tmp/$VendorDMG# Mount the DMG Installer filehdiutil attach /tmp/$VendorDMG -nobrowse#Copy App to tmpsudo cp -pPR /Volumes/CleanerTool/Adobe\\ Creative\\ Cloud\\ Cleaner\\ Tool.app /tmp/#Run creative tool appecho "Running the CC Cleaner app with 'removeAll=All' option"/tmp/Adobe\\ Creative\\ Cloud\\ Cleaner\\ Tool.app/Contents/MacOS/Adobe\\ Creative\\ Cloud\\ Cleaner\\ Tool --removeAll=All --eulaAccepted=1#delete appsudo rm -rf /tmp/Adobe\\ Creative\\ Cloud\\ Cleaner\\ Tool.app# Unmount the DMG Installer filehdiutil detach -force /volumes/cleanerTool# Delete the

We are using Jamf Connect with Azure AAD. Our configuration is hybrid and I have all the correct settings I can find in various documents and previous posts. I've even rebuilt the configuration using Jamf Connect Configuration and get tokens while testing. Not sure what i'm doing wrong. I tried a version bump to version 2.21.0 and still have the same behavior.Anyone ran into this error when trying to connect using Jamf Connect Bar? This is happening on both Ventura and Monterey. 

With the Jamfs App Installers there is an option to "Install supporting configuration profiles". Jamf note that its not possible to see or modify those configuration profiles, however is it documented what each supporting profile is doing?For example if I want to deploy Microsoft Defender there are several profiles required is Jamf creating all of these? ie System extensions and full disk access?

Team,I am looking for a solid process that works for deploying a .pkg application via Casper which requires an .INI settings file to be ran along side. The .INI file contains the settings needed for the application to point to the correct server when installation completes. The application in question is Carbon Black.

Has anyone managed to find any documentation on the new onboarding in Jamf Pro 11? I’m looking to revisit our onboarding workflows but I cannot find any documentation.

Smtp-server send test message and I get test message.  All email notifications is enabled in profile, but I don't receive to email notifications.Why?  

Hi all,I'm trying to determine whether or not this is an Apple issue or a Jamf Pro issue. Here's what happens:During a PreStage enrollment, after entering credentials to do the enrollment, the machine will reboot to the login screen. There is no user present except the Jamf management user. After a wipe and macOS reinstall, it will work.I have also noticed that also intermittently, after wiping the Mac during the "Activate Mac" part, the error "An activation server cannot be found" will appear. Try to activate again a minute later, and it works. I've checked Apple's system status page when this happens and haven't noticed anything down at the time.It seems like these two events are related, but I haven't proven that conclusively. Has anyone else encountered this?

During Enrollment of a Sonoma MacBook, after Remote Management starts and our required Credentials are entered, it Skips creating the Local User Account. It goes straight to a Log-in Screen instead. We do push a hidden Admin Account via Script during Enrollment. I can Log-in with said hidden Admin Account at that new Log-in screen. We only see this issue with macOS 14.x (Sonoma). We can manually Enroll a Sonoma machine without issue. Only during Enrollment of a Sonoma system is it an issue.  For our current Setup, we need the ability to Create Local Users still.  Anyone else see this issue?