Hello.For backup purposes, I want to write out an individualized launch agent plist via a shell script to certain Macs.This script should at first gather two variables locally (currently logged in user and a user specific storage directory, I would technically know how to get both of them), but then successfully hand over these two variables to an individualized launch agent created by the same script, doing watch paths on certain directories for running a backup script as soon as there is a change to the root directories.How could I leverage this?Thank you and best regardsChristian

Hello, my company decided to use Jamf Pro as MDM solution for Macs administration. Our current setup is Jamf Pro + Jamf Connect with Azure AD as IdP, and all purchased Macs are already in Apple Business Manager with Jamf as assigned MDM server.We're on last phase of polishing all apps deployment, policies configuration, scripts deployment, but found a bug (or misconfiguration) that is preventing usage of Jamf as company-wide solution yet.In perfect scenario, when new employee has been hired, brand new Mac is being purchased and delivered directly to user. Mac is already enrolled to ABM, and automatically assigned Jamf as MDM server. This user also receiving AAD credentials with temporary password to change during first account use.Please find below issue description:1. User first time power on new Mac, and connect to the Internet.2. Jamf pre-stage enrollment has been started and all config profiles deployment happens.3. When above completed, Jamf Connect shows Microsoft network login.4

Hello Jamf Nation! If you haven’t heard the news, Jamf Pro 11 is here! Featuring a new interface, ADDE, DDM software updates for iOS, and more! How to join the beta: Enroll in the Beta Program under Product Feedback at account.jamf.com. Once enrolled, you’ll see a link to the Jamf Nation Beta Forum. Note: There will be a short delay between enrollment and Beta Forum access; you will receive a notification in Jamf Nation to join. When you receive the invitation, click "Join this group Hub". Email beta@jamf.com with questions.The beta program is covered by the Jamf non-disclosure agreement; please do not share any information regarding your testing on any public forum, including the non-beta areas of Jamf Nation. Use the Jamf Nation Beta Forum or contact Jamf via beta@jamf.com with any questions. Thank you to all who participate in this program!

Hello community, I am stuck trying to figure out a way to reset password of forgotten computer password that is used to log in to the computer. I have read here that you could do reset a computer's password with local account policy and I have tried that and it is not working. i am not sure which triggers i should enable for this to work or any other option i should include. Also, the reset option in local accounts policy says: This does not update the account's login keychain password or FileVault 2 password.  can i update the those credentials later with the filevault recovery key that i hold?I also have tried the filevault approach, but i can only see the reset password with apple id option and not the using filevault recovery key. Thanks for the help in advance  

Need to know how to generate report for Mac users who left organisation?

Hello,As I have done previously, I am simply trying to upload a wallpaper image to use. However, I keep getting the following error:  Any thoughts on the issue? It is a .png file that is 5.47 KB (I am just using it to test, and it still fails). Thanks!

Is there a way of passing the "Latest Version" variable from Patch Reporting of an application into a script in a policy? Thanks

Hey all,I’ve downloaded a installer for macOS 14 from apple and I’ve tested it by packaging it via composer and building it as a .pkg and .dmg and deploying it via a policy in self service. But it doesn’t work it just spins and states this item failed. What am I doing wrong here? Or is their a better way cia this similar method.

Hello, I have enrolled an user in JAMF pro before enrolling the device in Apple Business Manager. I have removed the MDM profile and reset the Mac. so should I delete the user from JAMF pro before starting the device enrollment in Apple business manager? or I can enroll the device in apple business manager then delete the user from JAMF Pro? 

App Installers are new to Jamf School.  I have been experimenting with Chrome on a test device.  Since I installed Chrome using the App Installer there has been an update to Chrome.  How and when will this update be loaded into Jamf School and pushed out to any devices the app is scoped to? 

We normally block URL's via our firewall but wanted to test blocking a specific URL for just one lab and figured I'd just use the Parental Controls in the JSS to do it. I've added both the www.domain.com and domain.com to the deny list and pushed it to my test iMac and MacBook but they can still visit the URL's. I've even rebooted the systems and flushed the cache but the URL is still not blocked. What am I missing?

With the new firmware being released tonight, I wanted to make sure I could see what versions (of the very limited number) are in our fleet. I threw this EA together, hopefully it can help someone else out! #!/bin/bash result="<result>NOT Found</result>" if [[ $(system_profiler SPDisplaysDataType | grep -i "Studio Display") != "" ]] then dispFW1=$(system_profiler SPDisplaysDataType | grep -i "Display Firmware Version:") dispFW2=${dispFW#*: Version } dispFW3=${dispFW2%)*} result="<result>$dispFW3)</result>" fi echo "$result" 

Hello everyone!Just want to know if dockutil is compatible with Monterey, Ventura and Sonoma?

Hello,I am looking to create a custom analytic that will alert when a software installation occurs.  I found this:  custom_analytic_detections/app_bundle_installedIt does work and creates alerts, however it alerts on everything installed and there are multiple alerts for each item.Is there a way to filter out System or Root level installs?  That way Jamf patches/pushes don't trigger alerts?Thanks,Don

Hi everyone I want to use FULL NAME as the Computer Name because there are too many devices and making changes one by one is painful. Do you have any good scripts to recommend.Thank you. Thanks

We would like to track leases through JAMF and will set up a report to notify us of dates. The issue is that when a device gets wiped, all information is removed. I have two questions regarding this? Is there a way I can have certain information automatically added to the device after a wipe? As it is right now, most information like who it is assigned to is removed and replaced with a serial numberIs there a way to notify me that there has been a wipe that includes the information before the wipe? As in user and location information.Thanks!

Is there way to block iOS 17? I would like to update to iOS 16.6.1 only.I have defer settings but is still showing up on iPads.Thank you  

Hiwe are having trouble with Mac-OS ventura update, I would appreciate if someone can help with this matter, trying to use the Jamf pro update feature but it's not working, even with a package on self service we are getting different errors. Thanks

Hello Everyone,  Is anyone else seeing macOS Sonoma not respecting the delay within the restrictions payload?I have the delay for Major software updates set to 90 days. In addition I also have a software restriction setup for "Install macOS Sonoma.app". Not sure how my users / systems are being updated?   

I created a small application to automate this process of creating a .p12 file for Google LDAP and Google with Jamf Connect.Here is the Github of this tool.https://github.com/kylejericson/Jamf-Connect-Google-P12er 

Hello everyone,I use a device smart group that includes all iPhones to push a background image. The criteria I am using is Model > is > iPhone. This pushes every month to make sure anyone that changes it will have it set back to the correct background. For some reason, some users reported that their iPhone background has changed to a blank, black background. Pushing the wallpaper change directly to a user's device using the wallpaper change command fixes the issue no problem. What I am trying to find out is why it's happening in the first place and how to prevent it from happening again. Thanks,Matt

We run a script through self service that migrates data from a user's old computer to their new computer (computers connected via target disk mode). Data copies perfectly, however, Jamf throws up some messages like the attached for things like Documents, Desktop, Downloads, Reminders etc. Any idea of how to allow that in advance without having to click OK every time? Config profile maybe?

Hello, I'm struggling to find a way (if there is one) to deploy via Configuration Profile via Jamf Pro the path to the Workgroup Templates.This setting normally can be found into (for example) Word:Preferences > File Locations > Set "Workgroup templates" I checked the com.microsoft.office.plist file, after changing the path into Word the file gets updated (the date / time updates), though there is no key in the plist file that tells me it's related to this kind of setting. Any help is appreciated.Thank you 

I have tried writing a script about four different ways simply to report what version cURL is installed on Macs. I am scratching my head why the value is blank after running recon on various Macs.  Below is the script:#!/bin/bash if command -v curl >/dev/null 2>&1; then curl_version=$(curl --version | awk 'NR==1{print $2}') echo "cURL is installed. Version: $curl_version" else echo "cURL is not installed." fi

Hey there, I am trying to get the mac laptops to use certificate based logons for 802.1x. The machine can join to the AD domain, it can generate a certificate and i see that certificate on the machine. However when i try and apply a jamf profile to add the certificate and wireless profile to connect to the network i get the following errors:mschap: FAILED: No NT/LM-Password. Cannot perform authenticationLogin incorrect (eap: Failed continuing EAP TTLS (21) session. EAP sub-module failed): [MS\\lmc02d<FULLHOSTNAMEREMOVED>I have tried with PEAP as well as TTLS. On the windows laptops i have connecting using the same infrastructure, they connect fine and do not require any password. What is the point of certificate based logons that require a password? Makes no sense. But jamf / macs appear to need something there. Its very possible my jamf config is the problem here.The domain root certificate is SHA-256, and is added to the same profile and trusted on the trust tab. I also pu