Recently acquired some new software called Rave Mobile Safety. I have a .pkg that I've made through composer.  It installs the software but it doesn't include the activation key.  When a user launches the software it asks them for the activation key.  Am I missing it somewhere during the process in composer or is it possible to create a script to add the key after in gets installed?

Hello, We use Azure AD and SSO with our Jamf cloud instance.When we log in to the Jamf self service with an Azure AD account, if we don't click "disconnect", each time we log in to the self service, it automatically logs in with the previously used Azure AD account.This poses a problem for us because our technicians can log in with their Azure AD admin accounts on the users' Jamf self-service in order to access administrative content but do not always log out properly.Therefore, users can subsequently open the self service and by clicking on "login" be automatically logged in with the technician's admin account.Is there a way to avoid this please?Thank you for your help

We've encountered an issue related to expired Wi-Fi certificates interfering with Kerberos and SmartCard logins, despite not utilizing SmartCards in our setup. Oddly, Kerberos perceives our expired Wi-Fi certificates as identities for SmartCard logins. Yet, when the certificates aren't expired, this issue doesn't manifest.Recently, SmartCard login has been inadvertently activated on some user machines. As a result, these users cannot log out of Kerberos SmartCard. We found a temporary workaround: deleting the expired Wi-Fi certificate and rebooting allows Kerberos to permit the user to log out. Interestingly, in the absence of any expired certificates, the Kerberos SmartCard cannot recognize any identities, preventing it from being set up on a user's Mac.I'm trying to create a policy script to delete any expired system keychain certificates, but I've hit some roadblocks. Would anyone have relevant scripts or recommendations I could leverage?Thanks in ad

Before the last update we were deploying FileVault activation during enrollment via pre-stage. It was working fine until we upgraded to Jamf Pro 10.50.We encountered a issue: If you deploy a FileVault configuration profile in pre-stage, without enabling the new feature "Force Enable in Setup Assistant", the enrollment crashes with "Waiting for the management server..."

Hi All, I have created a local admin account in prestage and also a local admin account policy but whenever I login to it on the device it never works!Any advice or a better process to achieve this?

I have several users who are not receiving newest Xcode update via Mac Apps.  In self-service, it shows 14.3.1 but no install button, but an open button.  When the user opens Xcode, it's 14.1 and have tried to force updates to no avail. I am trying the unscope and re-scape method now, but its there any reason that the Mac App Store would do this?

Hi, I'm trying to get a network volume mounted automatically at login. The volumes are on an AFP server. In Jamf Pro I am using Configuration Profiles > Login Items > Network Mounts and entering the following: afp://myserver.mycompany.com/MyVolume On client computers I can see in Utilities > System Information > Software Profiles that the loginitems.managed item is being pushed correctly to the client, with the correct afp path as above. However, no volume is mounted at login. In System Preferences > Users & Groups > CurrentUser > Login Items a volume is shown, but there is no path - only "/". I can see discussion that others have problems with this payload. Is it expected to work at all with 10.14 and 10.15? Thanks, ft.

Hello Jamf Nation! We recently released Jamf Protect 5.0.0. This release includes the following changes and improvements: The Computers Overview dashboard and the macOS Version column on the Computers page now displays the Rapid Security Responses (RSR) version. The RSR version of macOS continues to be reported in the Computer Details, under OS and in Alerts. The Apple Provided Software is Current insight also continues to support RSR versions. The new query

Reports have been coming in about macs on the corporate network getting "poor network stability" messages periodically and my networking team has confirmed that systems are jumping from 5ghz network to the 2.4ghz network, or having a hard time moving from AP to AP based on proximity.  After doing some digging I have noticed some articles with similar issues referring to AWDL (Apple Wireless Direct Link).  https://www.meter.com/mac-osx-awdl-psa Mainly to disable this feature on systems to avoid future issues.    This article mentions that the issue should have been resolved in the recent updates to macOS, but systems with the latest OS are still reporting issues. Have others seen similar issues and implemented this practice of disabling the AWDL? 

I'm using the not-very-well-documented computercommands API to trigger device locks during termination events. I got it working on a test device last week, but it has not sent out the command to two separate devices in PROD just today even though when I run the script in verbose it returns a 200 from JSS.Does anyone else use this API or seen something similar?Here is my code:$uri = "https://mycoolcompany.jamfcloud.com/JSSResource/computercommands/command/DeviceLock/passcode/246810/id/$jamf_id";$ch = curl_init($uri);$curlOptions = array(    CURLOPT_HTTPHEADER => array(        'Content-Type: application/json',&nb

how to get the deviceId id from jamf API i want to bring the compliance details 

Hi, A Macbook user just raised an issue with me regarding they can't plug in a USB drive to ttransfer files. I do know we have a restriction profile that stops iCloud, imessage. I don't know we had a restriction on USB connectivity. If it a setting in JSS, where would I find this (and disable it)? We're using JSS 9.81.

In some of my workflows, I check the return code from a policy that is executed before continuing. If the policy fails, it will attempt to run the policy again, etc. Here are a couple of examples of how I check the return code: # Example 1: for ((i=0; i<=3; i++)); do if /usr/local/jamf/bin/jamf policy -event "$event"; then echo "Success" break else echo "Failure" fi done # Example 2: /usr/local/jamf/bin/jamf policy -event "$event" [ "$?" != "0" ] && echo "Error" I have been using these techniques for quite a while with no issue, but just recently the policies that check the return code of a policy are reporting failure code 1 even though they appear to complete successfully in every other way. E.g. they show having completed successfully in Jamf Pro, the packages/scripts run by the policies complete without error, etc. I have even tried running some of my policies manually from the command li

Hi,I'm having an issue with a specific User-initiated enrollment does not complete fully on a MacBook Air.After enrollment the MacBook's serial number shows up in Jamf Pro console, but does not have any associated data/reports. For example, OS has null value, last Update has null value, etc.Running "sudo jamf recon" or "sudo jamf policy" on the client returns:The file /Library/Preferences/com.jamfsoftware.jamf.plist does not exist. Use the createConf verb to create it.I have tried creating the com.jamfsoftware.jamf.plist file successfully but then get further errors relating to security.This Mac was previously successfully enrolled with Ventura, 13.5 installed. The drive has been wiped (twice) and the record was deleted from Jamf Pro before re-enrollemnt.The model is MacBook Air Intel, Retina running Mojav

On our Ventura devices we have are having difficulty with filevault preventing users from logging in when not connected to the network.  If the device has a wireless or wifi connection, a AD account can log in with no issue.  As soon as it is disconnected, and try to log in with the same AD account, we get a login progress bar that stops around 60-70% and goes not further..  If we connect a network then try to login again, it logs right in.  If we disable filevault, the user can log in on or off the network with no issue.Is this normal? How do we get around it?We did not have this problem with previous OS versions.Thanks for any assistance

Our ServiceNow Asset Management team is having an issue with devices that have been "retired" on their end.  The previous JAMF admin has those retired Macs set as unmanaged within JAMF.  The issue is the unmanaged Macs are still populating software within ServiceNow even though some of them haven't been online for 2+ years.  The asset management team wants me to clear all of the software data in JAMF so that any online mac reports back so their data is current.  I don't think that's possible and even if it was, that sounds like a bad idea to me.  Am I right in thinking that?

Hi all. I'm fairly new to JAMF and I'm looking for a away to automatically push a managed Chrome app over the unmanaged version on iPads.Here's where I'm at... All iPads currently have the unmanaged version of Chrome. I created a new Chrome in Mobile Device Apps with the enrollment token in App Configuration. I want to push this new version to the iPads. However, since they already have Chrome, it doesn't push it. I tried excluding the original Chrome from the app list but that didn't apply. If I list it in Self-Service, a user can re-install and then it applies, however, I'm trying to do this en masse. 

Hello,II have renewed the push certificate MDM on Jamf but when I send a mass command to renew the MDM profile on all the computers in my smart group and I look at the computers, the command still pending on all computers. If anyone has any idea where this might be coming from.

Has anyone been able to get mice to have right-click enabled by default? We are running lab machines with new users logging in all the time and would prefer they not have to enable that for themselves each time. I have seen (and tried) various solutions here on Jamf (scripts run in a policy) but have not been able to get it to work. I am interested if anyone has had any success while running Monterey.Thanks-

Hello all,I've been using Dockutil to set the Dock for our elementary students and in it's current form it's based on user (because we had grade level login accounts, which we've since gotten ride of). I need to change our script so that it applies Dock settings based on the user's group (for example: class of 2037, class of 2036, class of 2035). I could break my head trying to figure it out but I'm hoping someone on here might know exactly what to do. Here's the current script:#!/bin/bash #We need to wait for the dock to actually start until [[ $(pgrep Dock) ]]; do wait done #Get the current logged in user that we'll be modifying if [ ! -z "$3" ]; then user=$3 else user=$( scutil <<< "show State:/Users/ConsoleUser" | awk '/Name :/ && ! /loginwindow/ { print $3 }' ) fi #Set variables du="/usr/local/bin/dockutil" userHome="/Users/$user" networkHome="smb://server.com/Students$/$user" #Function for applying dock config

I've seen this error randomly over various versions of macOS when triggering recon manually. In the past I was able to clear it up by removing the Backup folder, but now I can't even do that because it says operation not permitted.The search for mobile device data at path /Users/x/Library/Application Support/MobileSync/Backup failed:Error Domain=NSCocoaErrorDomain Code=257 "The file “Backup” couldn’t be opened because you don’t have permission to view it." UserInfo={NSUserStringVariant=(    Folder), NSURL=file:///Users/x/Library/Application%20Support/MobileSync/Backup, NSFilePath=/Users/x/Library/Application Support/MobileSync/Backup, NSUnderlyingError=0x7f98254d1220 {Error Domain=NSPOSIXErrorDomain Code=1 "Operation not permitted"}}Any idea what is going on

Hi All, has anyone been able to force private mode for Safari/WebClips (non-full screen)? I also checked new profile settings in Apple Configurator 2 and found nothing. We need to perform purchase transactions but don't want to retain any shopping cart/personal information from previous sessions. I know we're not on the latest JSS version, but will upgrade if this is fixed. iOS 9.3.2JSS 9.9AC2 2.2.1

I am seeing recon hang on some machines.Anybody else seeing this?It hangs at "Gatekeeper status: App Store and identified developers"

Two Particular Apps, plenty of licenses, short of nuking the ipad, is there anything I can look at in JAMF itself? Message as follows:No licence was found for app “com.google.chrome.ios“.

I'm encountering a bit of a roadblock with Jamf Connect and I'm hoping someone here might have some insight. I've been trying to kill a Kerberos process using the process ID, but it's not working as expected. I try to kill this process using sudo kill 1234, where 1234 is the Process ID. However, when I do this, it doesn't seem to work. The process is still running. I've also tried sudo kill-9 1234 but that didn't help either. Any help or guidance would be greatly appreciated.