I have a department who has been letting their patients facetime their family on devices that were previously unrestricted. With our migration, we don't want anyone signing into the devices with personal accounts but the department created iCloud accounts just for the patients to facetime. Is it possible to restrict signing into iCloud on the device but still use iCloud logins for facetime?

Hi everyone! I'm Kate - a member of the research and insights team at Jamf! We have a new survey opportunity available focused around security. The survey should take five-ten minutes to complete. Thanks!https://www.research.net/r/LV3JMW9  

Hi all. I can easily create a smart group to determine which Macs are running 13.4.1, but what about 13.4.1 (c)? Is there a way to tell which Macs have that update installed? Thanks

I'm trying to setup a Custom Menubar Icon for Jamf Connect by following the instructions here:https://learn.jamf.com/bundle/jamf-connect-documentation-current/page/Menu_Bar_App_Preferences.htmlI created a 16x16 png file and saved it as /user/local/icon.png Then I added these lines to the Profile, <key>MenubarIcon</key <string>/usr/local/icon.png</string> I quit Jamf Connect and when it relaunches, I just get a white square where the icon should be. The details of the image are not there. So it is trying to display it, but it just can't parse the file? When I click on About Jamf Connect, it also displays a small white square where the icon should be. I made sure the file had 755 permissions on it.  Is there a particular DPI or color pallet I need to set on the image? Is there something I'm missing?

Hello All,I am new to Jamf and have set it up for our entire company. After going through the Jamf Pro enrollment we believed everything was all set. Now we are noticing that users are unable to change their Azure Passwords through Jamf Connect. Is there any guidance of what may be causing this? Thank you in advance.

No text available

Hi, Couldn't find the answer I was looking for but I'm wondering if its possible to creating a configuration profile to clear pending commands and send a inventory update as we are having issue with our iPad's not checking in, iv created a smart group so it will show them but want to clear commands and send a inventory update without me doing it by hand, is there a option in Automated Management that can do that? Thanks much!

Hello !I have some questions regarding PPPC for apps permissions.First of all, I would like to know how I can find what an app needs for permissions. Access to accessibility, full disk access or user's folders, etc... Most of the time, I have a window asking an app to have access to accessibility for example but for controlling Finder, System Events, System UI Server, I don't know if I have to grant it or not. I ask that because I made a PPPC for apps like Teams but one user had the problem that she couldn't share her screen with others. She needed admin rights but she's a standard user. I didn't think about this and had to change my profile. I would like to avoid that because it was a serious problem for her when it happened.In fact, I would like to fine tune my PPPCs so they are more strict but with enough permissions. I also fear that an app needs more permissions but the user can't grant them as it needs admin rights. Screen recording, for example, or granting access to deskto

Hello,We use Jamf Pro but also have two on-site Distribution Points.These DPs can only be synced with Jamf Pro via 'Jamf Admin' from a machine on a particular subnet within our organisation.Anyone aware of another method of remotely syncing Jamf DPs with the Cloud? I have a Mac-Mini that pretty much just has one job, which is to sync the DPs, and it seems like a waste of a resource.Ta!Steve.

Hi, Is it possible to put in variables within these fields such as the serial number of a device easily? This would be very handy to be able to see on the lock screen. Thanks. :)

Good morning. We recently hit a APN snafu that resulted in a new APN and policy having to be pushed out. We are trying to find a script run as an extension attribute that can return either a "good" or "bad" result depending on what APN variable is stated. From there, we would make a smart group to see those endpoints in real time. Using Jamf Pro and managing MacOS machines. Thanks.

I'm trying to put together an Extension Attribute that will alert me to whether zscaler is logged in or not.This is what I've come up with.  It works when run locally, and I thought it was working when run through Jamf but I'm noticing that machines are now reporting back as "No" when I have checked and zscaler is correctly logged in.  Just wondering if anyone else has an EA that they use or could tell me what's happening.Thanks#!/bin/bash currentUser=`ls -l /dev/console | awk '{print $3}'` if (security find-generic-password -l 'com.zscaler.tray'); then echo "<result>Yes</result>" else echo "<result>No</result>" fi exit 0

Hello friends,I need to uninstall Carbon Black on all company devices. The app bundle includes a shell script to uninstall it, so I thought I could run a command with the Files & Processes payload of a policy. It looks like this:sh /Applications/VMware\\ Carbon\\ Black\\ EDR.app/Contents/Resources/sensoruninst.shIt works, but the user gets prompted to approve deleting the system extensions.  I tried copying the sensoruninst.sh and pasting it into a script in Jamf, then adding the script to a policy. That does not work, returning this message:VMware Carbon Black EDR Uninstaller Copyright 2016-2021 VMware, Inc. All rights reserved Uninstalls the VMware Carbon Black EDR sensor. Must be run as root. Options: -d [ d ] Keep local sensor data. Maybe what I want to do is not possible but I thought I'd check here. Do any of you know if it's possible to uninstall this thing without user intervention? Any insight and suggestions are welcome.  Thank you 

Hello I need a  help to deploy Nexthink collector app on mac through Jamf.I have .dmg for Nexthink which is having 4 different component, if I copy the .dmg file under /tmp and drag into composer and click on convert into source then shows me 4 components in a separate window, but composer never shows the actual path like /tmp/Nexthink.dmg, still I closed the window and built it as .pkg , but if I run manually on my mac it says incompatiable on this device. Any easy way to deploy Nexthink on mac through Jamf using by .dmg file?

Is there a way to check that OneDrive is online on the command line? One of my coworkers mentioned that he'd changed his password but OneDrive didn't prompt for the new password but did go Offline on the menubar icon. His worry was that people may not notice and continue to put stuff in locally without authenticating.

 I am struggling with this pop up while using Outset to mount an SMB share on every login under login-every.Initial observation says this could be happening because of these lines in our script-############## Mount the network homewritelog "Mounting $adHome"mount_script=`/usr/bin/osascript > /dev/null << EOTtell application "Finder" activatemount volume "path to share"end tellEOT`Any idea if anyone here is seeing this issue?

We're in the early stages of setting up our Team Dynamix instance here at our university and I'm running into a snag on how to import JAMF inventory into TDX. Is there anyone out there who is using Team Dynamix in their work environment who has it integrated with their JAMF inventory? They provided an XML based asset importer but it will only connect to a Microsoft SQL or ODBC database. We're cloud hosted with JAMF so I trying to see what other options we have. Should we create a mirrored database of our JAMF inventory by means of API?

Hello, Has anyone already configured/Setup iOS device compliance integration (JAMF->Intune)? Everytime that we register the device via self service it won't ask us to enter the credentials instead we are getting "You are now Registered with Microsoft" prompt but when we checked back Intune we still don't see the device. Not sure if we missed something or doing it incorrectly. Steps taken: Device Compliance is ConnectediOS Device is enrolled in JAMF and supervised Self Service, Company Portal and Authenticator are installed on device (Latest Version)'Register with Microsoft' located in Self Service Configured JAMF Device Compliance in Partner compliance ManagementAppreciate the help!

I'm trying to deploy Maple 2021 to MacOS Big Sur.  The software actually installs fine if I watch the application folder in Finder.  However, as far as self-service is concerned, it just keeps spinning in process indefinately.My policy caches my pkg to a temp folder.  I then run the post install script:#!/bin/shcd /users/shared/Temp/Maple2021.1MacInstaller.app/Contents/Macos./installbuilder.sh --unattendedmodeui minimal --mode unattended --licenseType network --serverName REDACTED --portNumber 27003 --enableUpdates 0 --checkForUpdatesNow 0 After this, another script to remove the installer runs:#!/bin/shrm -rf /users/shared/Temp Any suggestions?  I'm a MacOS and Jamf novice, so I'm assuming I'm doing something incorrectly

Sorry if this is a really silly question, but...On https://www.jamf.com/blog/jamf-supports-rapid-security-response/ it states: Organizations can use Jamf Pro to send push notifications via Self Service to encourage users to apply the Apple Rapid Security Response, and with the combination of settings to permit users to apply Rapid Security Response updates and lightning-fast reporting on current update status, Jamf admins are empowered to protect their fleets from emerging threats as soon as Apple identifies them. Does anyone have an example or guide on how one might do that? 

Hello everybody, i hope you guys can help me with my problem. Please excuse my bad english^^We are using Apple Mac Mini M1 (2020) as personal computers for our schools. We got this school lab with about 30 MACs that students can use for almost everything, like IT study, researching. Those MACs are managed with Jamf School. We build a device group and a profile that forbids stuff like changing wallpapers ( The students like to change those to ntfw content). Sometime we like to update those config profiles and push those onto the MACs. Now i got this Problem that those MACs are losing the connect to jamf school. I can reset those MACs. Then they work fine for about 2-4 hours. After that they are losing the connect. That is pretty frustrating because those conf profile updates cant be pushed. While they have no connect to jamf, they still got internet connection. I can use the internet without problem (like google stuff). We tried using mobile Data on those MACs (creating a hots

Did anybody hit any issues with either update? https://forums.macrumors.com/threads/apple-pulls-ios-16-5-1-and-macos-13-4-1-rapid-security-response-updates-due-to-safari-bug.2395565/https://9to5mac.com/2023/07/11/ios-16-5-1-security/ 

プッシュ証明書の更新方法をスクリーンショットを添えて説明したいと思います。 注意：・異なるプッシュ証明書を更新した場合、正しいプッシュ証明書に変更して下さい。・プッシュ証明書の更新にはジャムフ・プロとプッシュ ポータルへのアクセスが必要になります。・「なぜ同じプッシュ証明書を使って更新しなければならないのか」についてを確認して下さい。 同じプッシュ証明書を使用しないと登録されたコンピュータはジャムフ・プロとの通信ができなくなってしまいます。その為、どのプッシュ証明書が同じ / 正しいのかをまず確認する必要があります。 必ず以下の方法を使用して正しいプッシュ証明書を更新する様にして下さい。・ジャムフ・プロよりジャムフ・プロ→設定→一括管理→プッシュ証明書このページからプッシュ証明書の：タイプ（Type）、識別子（IDENTIFIER）、シリアル（SERIAL）、期限日（EXPIRE）を確認できます。識別子（IDENTIFIER）を使用して同じ / 正しいプッシュ証明書を探します。識別子（IDENTIFIER）は非常にユニークなIDですので最後の６文字を記憶、比較すればまず間違いないと思います。 ・アップル プッシュ ポータルよりRenewの隣にあるInformationボタン を選択して下さい。シリアル番号（Serial Number）、サブジェクトDN（Subject DN）の：C=とUID=、そしてノート（Notes）が確認できます。ここではSubjectDN UID=をチェックして下さい。 スクリーンショットからは最後の６文字しか確認できませんが、同じ内容です。 IDENTIFIERとSubjectDNのUIDが合致するMobile Device Managementが同じ、　　　　　　　　　正しいプッシュ証明書をジャムフ・プロが使用している事を証明します。 次にプッシュ証明書の更新方法を説明します。１）ジャムフ・プロ→設定→一括管理→プッシュ証明書→MDM Push Notification Certificateを選択。２）画面右下にある更新ボタン を選択。３）Download signed CSR from Jamf Nationを選択。４）Jamf Nation 認証情報を入力。署名された CSR がダウンロードされます。５）「署名され

Hello, Is there an API command to install an app that is configured for Self Service? 

I was wondering if anyone has found a solution that allows users to connect to any wireless network they would like, as long as it meets certain security requirements (particularly a password).I know there are ways that you can lock down the network settings completely, but we want to be able to give our users some autonomy while ensuring they aren't joining open networks.