Hello everyone,I have an issue regarding patch management in Jamf Pro.Looking at my dashboard i see the following diagram with many "Unknown Version" that are actually more recent versions : The only action that works is to remove these tools from the patch management page and add them again so that Jamf takes the latest versions into account.This action is tedious, given that Chrome updates itself several times a week (days? :) ).Is there another way to do this and have an updated Patch Management stats for applications ? Thank you very much !!Yoann

Hi,we have distributed a working configuration profile to our macOS Ventura Clients to postpone the Sonoma Upgrade for 90 days. But in the system preferences under software update there is a notification that an update is available even when update list is empty.How can I disable this notification in system preferences?     Thank you!

Is anyone else out there having serious issues with JAMF support right now?I've had a case open since the 27th (I think anyway, who knows what day it is anymore)Aside from asking us for log files - Which as a hosted service they should have access to right?They haven't done anythingThe only thing we've heard from them has been in the form of the two "Emergency Maint" messages they sent out on the 30th of June and then last night.JAMF is one of two vendors I work with where I don't have an account rep's e-mail address and I don't know who my reps boss is (and his/her e-mail address)The only time we get e-mail from a person with a real e-mail address is when it's time to renew.I'm curious as to whether the rest of you long term JAMF customers are experiencing the same thing?

Has anyone come up with a way to schedule a recurring quick/full scan on a system using a configuration profile?

How do you disable iCloud in 10.9?

I have a report showing Extension Attributes of both "Admin End Users Only" and "Admin Users."What is meant by these two fields?  The data on our computer users is not consistent when it comes to users that have admin permissions on the local computer, which is how I interpreted the fields.Thank you in advance!

Edit: Disregard

I believe the issue is with the OS version line (Major and Minor), but I have very little experience in creating scripts. !/bin/sh # Get user logged into console and put into variable "user" user=ls -l /dev/console | cut -d " " -f 4osMajor=$(sw_vers -productVersion | awk -F"." '{print $2}')osMinor=$(sw_vers -productVersion | awk -F"." '{print $3}') sudo -u $user defaults -currentHost write com.apple.screensaver CleanExit -string "YES"sudo -u $user defaults -currentHost write com.apple.screensaver PrefsVersion -int 100sudo -u $user defaults -currentHost write com.apple.screensaver showClock -string "NO"sudo -u $user defaults -currentHost write com.apple.screensaver idleTime -int 600 if [[ $osMajor -eq 14 ]] && [[ $osMinor -ge 2 ]] || [[ $osMajor -ge 15 ]]; then sudo -u $user defaults -currentHost write com.apple.screensaver moduleDict -dict moduleName -string "iLifeSlideshows" path -string "/System/Library/Frameworks/ScreenSaver.framework/PlugIns/iLifeSlideshows.appex" typ

Hello everyoneI have a requirement to send notifications programmatically to iPad devices within a Smart Security Group at specific times every day. Unfortunately, I couldn't find a straightforward method in the Jamf API documentation to accomplish this task. In contrast, with the Microsoft Graph API, achieving this is quite straightforward.any suggestions?

I've managed to get Cisco Secure Endpoint and Umbrella deployed through Jamf Now but I need to make it so that the end user can't disable it. I also need to make the install seamless, so that when the application is installed, the user doesn't need to do anything like allowing the extensions or give it full disk access. I tried to make a custom profile thru iMazing Profile Editor but can't find the settings to allow something like this. Does anyone have ideas/experience with something like this?

I have software that a teacher purchased for her classroom.  I'd like to be able to install it to her classroom mini's through jamf.  It's a dmg file and I believe I have to convert to a pkg file in composer.  Can someone point me in the right direction?

I have an environment where network users are logging into lab machines with Jamf Connect which creates a local user account for them, but when they go to use some apps for the first time the apps ask for permission to access common folders (Desktop, Documents, etc) and this can cause a problem because if they for some reason click Don't Allow when the app requests it then this has to be manually fixed by an admin ... and in the case of some apps like Adobe Premiere Pro the app won't even open if access to those folders is denied.Does anyone know of a way through Jamf of setting these app permissions for users when they sign in so the apps don't have to request access when the user first opens them?Thanks in advance.

Hello All,I'm still learning JAMF so I apologize if this is a basic question, but I would like some help with figuring out the best practice in order to manage multiple locations on Jamf Pro. My IT team is in charge of taking care of users in California along with users in England and I am trying to find out what is the best practice in order to do so. For example, people in England might need to have access to different applications, or if we needed to modify our Zero Touch Deployment for them, we would like to keep it separate from our California side.I have looked into using Sites that is offered within Jamf Pro, but I hear that this is not the best way to go about this. 

I apologize if this has been asked and answered or documented somewhere, but I've looked and can't really find my answer.  I'm looking to change the distribution method for an app from Install Automatically to Make Available In Self Service. I know how to do that, but my question is what will this do to devices that already have the app installed? Will the app be pulled and require them to download it, or will it remain on device? Thanks!-Matt

I am trying to create a policy in Self Service that is scoped out to all devices, but is only accessible for a certain local admin account to install/run. When devices are enrolled, a default local admin account is automatically created and we do not use LDAP, so I'm trying to find a way to limit this policy from being run by unauthorized users. Is there any way to accomplish this? Or is there perhaps a way to require admin credentials be entered before the policy can run?The policy works great when I scope it to a test device, but as soon as I add the local admin account to the limitations, the policy is removed and disappears from Self Service. 

So with iOS 17, we've seen in the field that updates actually work as intended now! So what do I mean by that? Well, this is our observations:1. Admin uses the traditional method of sending a mass-action command do a device to update to the latest version, with download, install and reboot2. The device receives the command and downloads the update3. The next time the user unlocks it, it will require the device PIN regardless if you have touch-ID or not, presumably to get the PIN to allow software installation4. Then the update is scheduled overnight5. During the night, regardless if the device is connected to a charger or has usufficient battery charge, the update will install and the device will reboot This might seem like a no-brainer and obvious. However, this didn't work pre-17. Then users weren't prompted for a PIN at all, or they were prompted but could dismiss it. Update would fail to install overnight etc etc. In essence, what a huge positive change!Is it just me or is thi

Hello to all,I hope everyone is well in the community :)I have a recurring problem with macOS Ventura :when I upgrade from macOS Monterey to Ventura, a minor update or when I try to register a Mac directly, after restart, I get a blank screen with a wheel that spins without stopping.I have the impression that it is the Form of Address window that wants to be displayed, I only have the "back" and "continue" buttons at the bottom (they do not work).When I restart the mac, everything is fixed, I can authenticate and work again.Has anyone encountered this problem before?Thx for your returns

Hi is there a way to push certificate and "Trust" it via JAMF School? I am currently installing it manually and need to select "Always trust.    

Hello all,    I've tried difference scripts (bash and AppleScript) but none seem to work for me.  Basically, (and I see this has been asked a lot but varies), I would like for any user that logs into the Macbook, connect to their smb share AND place that drive as a shortcut in either the Locations (in Finder) OR Desktop.  Users should not be prompted for their username and password.  Here's what the smb path looks like:smb://servername/Userdata/UserName/My%20DocumentsWhere UserName can be any user that logs in to that Mac device.  But do not prompt for username and password if possible.  If password is a must, then I'll take whatever I can work with.

Hi, I came across a new feature in iOS 11 yesterday enrolling a new Student iPad. It seems Apple added a new Settings option under the 'General' tab which is "Multitasking & Dock". in here you are able to allow / prevent the following: -Allow Multiple Apps-Persistent Video Overlay-Gestures and for the Dock-Show Suggested and Recent Apps Unfortunately I haven't found any payload in the latest Jamf Version to disable the Dock feature, as it expands the Dock with the last used Apps, nor the other ones. Does anyone else came across this, or better, has a solution to switch them off on student iPads??

Hi Everybody,The plist housing the settings for the keyboard shortcut for VoiceOver has been moved to a different plist since it was last addressed in this post.  Anybody know which plist houses the Cmd+F5 shortcut for activating/deactivating the VoiceOver in macOS Ventura?  I have obnoxious kids that like to constantly toggle it, and I'm not seeing an option for it in the configuration profiles.Thanks In Advance,-Rob

We're trying to figure out how to set the color profile (to Adobe RGB) for all displays in one of our labs. I've seen different posts on here, but no solutions. Any thoughts on how to set this up with a script or, ideally, a profile?

Greetings, Does anyone know (perhaps using an extension attribute) how I can identify which clients on my network have 802.11n NICS?  I'm trying to see if I can safely turn this frequency off on my network. Thanks in advance. Andy

It’s that time of year again. You and your team have finished or are about to finish all the big summer projects, but what might you have missed in the shuffle? Here are a few things we re-check at Brewster just before students arrive for the winter term.    Certificates Certificates are something you should have well handled and probably on a team calendar for renewals. After all, there are plenty of them across many services, and missing one could have dramatic consequences, especially at the beginning of the school year. So double-check even if you’re sure you’re all set. Apple Certificates such as Developer and Deployment ID certificates - require yearly renewal. In JAMF Pro, double-check your Push Certificates, PKI Certificates, and your Apple School Manager/DEP integration to make sure everything is syncing properly.   Software Updates It’s nearly universal that educational software developers have this tendency to release new major updates in the weeks leadin

So today our lab cart was being used for a test. These machines are always on or supposed to be. I installed a Firefox patch (version 57.0) the other day. When these machines came online there was the 15 minute message about having to shutdown to install the update. The issue is this was during a test. So some computers had the browser shutdown and they had to re-login. Another issue was Word also had an update and several users were in the middle of a document when the warning went out to shutdown and save their work. What if they had left their machine to go to the bathroom or something? We are going to instruct people to use Safari but how do people get around these Patch Management issues? I could make everything self service but I like the idea of pushing patches. I can make the time longer I guess. Suggestions?