Hoping someone can help me out with this - I need to drop a file in ~/Downloads when deploying software during our automated enrollment. We use Slack for internal messaging, and there is a preconfigured Slack token that will populate our Workspace URL - in order for Slack to read this file, it has to be in the ~/Downloads folder. I've set up a config profile, and given Slack access to the folder, and created one as well for com.jamf.management.Jamf to have access to the folder. It doesnt look like I have the profile for Jamf set up correctly - I can watch the Console logs and see that the package is being deployed, however, its never written to the folder. If I manually place the file there, then open Slack, it reads the token and launches the app appropriately. Any ideas on where I went wrong?

So we have been running the same JAMF instance for 9 years and 51 weeks, and it turns out that the JAMF CA itself has to be renewed after 10 years, so I've got a week to sort out the problem I'm about to describe.My problem is, we are still using a self-signed certificate, so JAMF support has told me that if I renew the CA, all my clients will no longer trust it and will have to be reenrolled. But I already know, from experimenting on my test instance over the winter, that switching over to a publicly-signed certificate *also* drops all my clients.As far as I can tell, there is no way to migrate from a self-signed certificate to a publicly-signed certificate without dropping all your clients. I have googled and I cannot find any documentation anywhere discussing any such process. My JAMF support case seems to be languishing with people scratching their heads.Can anyone point me to steps for migrating to a public certificate without dropping all my clients?(Live JAMF instance is still 1

Have you encountered any challenges in achieving CIS level one compliance for Ventura on your MacBook devices, even after pushing all configuration profiles using the JAMF Compliance Editor for Mac Ventura OS and scoping all your MAC machines to these profiles? Specifically, some of the non-compliant points include* Install.Log Retained For 365 Or More Days* Reasonable Security Audit Log Retention* Sudo Timeout Reduced* Filename Extensions Turned On* Apple Provided Software Is Current * Wake For Network Access And Power Nap Disabledis there any way we can cover the above setting via script?Thanks

Hi All, One of my user is getting the below pop up and after clicking on Get App it is redirecting to a weird broken link. This user is already registered in Intune/Azure AD and it just randomly started to happen. I am mostly curious about the link. Any ideas where this is coming from?

Hi,All of our teachers have iPads and they use apple TV with normal Video-Beamers/Projectors. They use JAMF Teacher to manage the class and the Apple Classroom to look at the student screen.As we know the only way to observe students screen is the apple classroom app.Therefor teachers have to switch between the classroom app and f.ex. powerpoint.Is there a way to extend the ipad screen on the beamer so a teacher can simultaneous look at the student screen in the classroom app an and only share a presentation on the apple TV.Regards  

Does anyone know? I always assumed it meant "just another Mac fanboy", but I have heard several other... creative interpretations. Apparently there is some connection with a book called "Gravity's Rainbow"?

we're attempting to have users disconnect from an Active Directory server and are using a shell script to simultaneously disconnect from AD within Okta and assign a temp password; I'm wondering if there's a way to prompt the Jamf Connect Password Reset window through this script as well in order to construct a more seamless process for our users thank you in advance!

Xcode 14 on Ventura seems to have a different setup than in the past.  When it’s first opened it presents this  and if I click the Install button it promos for admin credentials.  Does anyone know how to preinstall the platform items?       

I've been ordering new 16" MBPs direct from Apple for some of my team members. When they receive them, the auto-enroll is not showing the new user account creation screen, completing the setup, and then just displaying the login screen (we have it set to username/password, instead of the list of users). Checking the local users on the systems, the only account that shows up is the 'jamf' user. Right now, it's been a small number of users affected by this as the rest of the company is getting either 13" MBPs, or an MBA (both M1s). The M1 systems enroll just fine, prompting the user to create an account. Has anyone else experienced this? Did I miss a step somewhere when I configured everything? I haven't changed any settings since our initial Jumpstart a couple of months ago.

Dear Support,find that the Jamf Pro is unable to send out updates All of the APPs, in the All of iPad.can you assist let me know how to fix ASAp, Thanks. 

UPDATE: I have added this script to my gitHub repo. You can find the freshest of the fresh here... Hey everyone! It's been awhile since I've contributed anything to Jamf Nation. I have a script / workflow that I've been sitting on since 2019 that I am finally ready to share... I'm certain many of you use jamfHelper and for the most part, the jamfHelperGUI app is all but a dinosaur sitting on a couple of forked gitHubs out on the interwebs. That being said, I got tired of writing jamfHelper pop-up windows for every workflow that needed one. I wanted something a bit more cookie-cutter... something I could drop into my Jamf Pro Scripts repository and call from within a policy by leveraging Jamf Pro's Scripts "Options" features. So I set out to write a one-size fits all script to assist with the daily grind of pop-up communications. So without further ado, I give you my latest iteration of jamfMessenger... version 3.x... oooh! shiny!    &nb

Hello Jamf Nation!We are pleased to announce the availability of Jamf Pro 10.48.0 Beta.This version includes some exciting new features, including Delete all Classes from Jamf Pro Button, an Updated Jamf Pro Dashboard, and Managed Software Updates - Mass Action Consolidation. We're also rolling out our second round of Jamf Pro Beta Engage Guides. You'll see the guide displayed in your Jamf Pro Beta Instance with helpful links and information.How to join the beta: We’ve made some changes to the Beta enrollment process. Enroll in the Beta Program under Product Feedback at account.jamf.com. Once enrolled, you’ll see a link to the Jamf Nation Beta Forum. Note: There will be a short delay between enrollment and Beta Forum access; you will receive a notification in Jamf Nation to join. When you receive the invitation, click "Join this group Hub". Email beta@jamf.com with questions.The beta program is covered by the Jamf non-disclosure agreement; please do not share any information regarding

What are the latest steps for locating a missing computer that's still calling back to the JSS? It would be helpful to see the current WiFi network name, public IP, and geolocation would be great. 

Hello Team,Can anyone help me with a Script Or Command to get BootUp time duration and Startup duration .I tried using the below command ,but it just gives me the up time but I need calculate the duration time of the boot and startup.sysctl -n kern.boottimeThanks,

Hello Nation, I'm having the issue where SCEP configuration works fine for Monterey but it doesn't for Ventura, the error only says Unable to obtain certificate from SCEP server at “ADDRESSXXX”. <MDM-SCEP:15002> No sure what to do here and if anyone has make this work with Ventura?

I was curious to know that when I drag and drop the source of Firefox, I can see group permission is set for "wheel" and for Google Chrome group permission is set for "staff", now I dont understand one thing, if I install both apps I am able to open the apps from /applications from a user who is not the member of wheel, why?Same thing was not working for LogMeIn Rescue app, so I changed the permission to "staff" from "wheel" and it started working. So I am confused, can anyone explain me? I am really very curious to know it.

Has anyone successfully deployed the following script to add a computer to a static group. Goal: Have buttons in Self Service to add a computer to a static group. $4 is the group ID. #!/bin/sh #API login info apiuser="apiaccount" apipass='apiaccountpassword' jamfProURL="https://myjamfinstance.jamfcloud.com" ComputerName=$(hostname) #Group to update GroupID="$4" apiURL="JSSResource/computergroups/id/${GroupID}" #XML header stuff xmlHeader="<?xml version="1.0" encoding="UTF-8" standalone="no"?>" apiData="<computer_group><id>${GroupID}</id><name>Whatever the GroupName Is</name><computer_additions><computer><name>$ComputerName</name></computer></computer_additions></computer_group>" curl -sSkiu ${apiuser}:${apipass} "${jamfProURL}/${apiURL}" -H "Content-Type: text/xml" -d &#034

Hello All, I am just curious to know about all type of Apple ID we use either in enterprise or for personal use.1. One is to sync contacts and to use iCloud for iPhone/iPad and Mac device2. Developer ID for inhouse app to upload in AppStore3. ABM ID for DEP and VPP app management, same can be use to download certificate to sign a package Any other type is there and its purpose please?

Hi, My name is Eli, we have a problem when we install or upgrade BeyondTrust PMC agent, the splash window is not loading after the restart. is there anyone that experiences this issue?Thanks, 

I am still fairly new with Jamf and I am trying to figure out the various recovery options and when to use them.Currently I am seeing the following four: ConditionUnlock/Recovery OptionUser activates Find My and does not turn it off before returning the device. Activation lock is enabled.Use Activation Lock  Bypass to turn off Activation Lock?Jamf > Computer > Inventory > Local User Accounts > scroll to the far right > Manage > Unlock accountPersonal Recovery Key required to reset passwordJamf > Computer > Inventory> Disk Encryption > Personal Recovery Key ?Jamf > Computer > Security > Recovery Lock Password I am not sure these are all of the unlock/recovery options but I would really like to know the options and the conditions that require them.Thank you.

Hi, We've setup the Intune Registration at Jamf properly. Devices are successfully imported to Intune. But there is an additional window at the registration process, which asks the user to allow the "Jamf Native macOS Connector". Accroding to the Jamf documentation, this window shouldn't appear? I already checked the permissions at the app which seems fine to me. We haven't assigned any endusers to the app, but enabled for signin. Do I miss something? Regards,Jonny Update: After some further investigation, I've found this error message, but I have no idea why this is happening. Will open a case with Microsoft Support.

With Intune Integration (Legacy) setup - the consensus seems to be to enable JamfAAD to use WKWebView for the best performance.  I've pushed that option via profile, and it works well through the first part of the Azure registration.  The problem is, using WKWebView we never get to that Jamf Native macOS Connector window...so it seems to finish with no errors, but the computer never actually gets registered.  Every time you try to access a resource targeted by conditional access, it takes you back to the message that this device needs to be set up for access. If I turn the WKWebView option off and set the default browser to Safari, it works (including the Jamf Native macOS Connector prompt).  Hoping I'm missing something easy and obvious. 

Hi everyone, Today I struggle a bit with the intune integration. Connection between jamf Pro and Intune was quite easy to do if you follow the documentation on jamf. Also this blog helps a lot:[https://ems.world/2018/01/17/jamf-pro-and-microsoft-ems-better-together-part-1/ ](link URL) The issue I’m having is with enrolling the user into intune.User hits Self Service to load the company portal, user logs in with their AD account and then the Jamf Native macOS Connector keeps asking for approval by an admin. Why?!? Message is in dutch, sorry about that: Hope there is somebody who can point me into the right direction. Thx.

I started using the new API. For now I'm using basic authentication (with my personal acount) with /v1/auth/token to get a Bearer token. Works like a charm.However, I really want a seperate account, because the scripts run on a seperate VM.However, I just can seem to find an account manager for Jamf Pro. So my questions are:Where do I find the account manager to manage the users which can login to our Jamf Pro instance (xxx.jamfcloud.com)Is the basic authentication + auth-token a good way to authenticate on a standalone VM? 

Guys, We have installed 3rd party Root CA and Enterprise CA cert in keychain via Intune mdm and those are showing as non-trusted. Now I would like to know how to make those cert are trusted using shell script. Kindly help. Thanks.