Its that time of year again!I've modified my regex statement to take out the models that were tragically lost this year to the latest macOS version. RIP 2017 MacBook Pro and iMacs.I've also added in some bug fixes, mainly that it wasn't matching the full line if the last number after the comma in the model identifier was a double digit (as Apple added one this year for the first time), and gave myself some wiggle room in all the other models in case Apple continues to add more double digit identifiers down the line:  (^Mac1[3-9],\\b[0-9]{1,2}\\b|MacBook\\d{2}|MacBookAir([8-9]|\\d{2}),[1-9]|Macmini[8-9],\\b[0-9]{1,2}\\b|MacPro[7-9],\\b[0-9]{1,2}\\b|iMacPro[1-9],\\b[0-9]{1,2}\\b|iMac(19|2[0-9]),\\d|MacBookPro(1[5-9]|2[0-9]),\\b[0-9]{1,2}\\b)  As done previously, you can create a smart group using this in order to find devices in your environment that are not compatible to be upgraded to macOS Sonoma by using the criteria item Model Identifier and then selecting "

We have recently deployed notifications that will notify a user that an application deployed from Jamf App Catalog is due an update. These notifications have been created through configuration profiles. The user receives three notifications:Notifies the user to close out within the next four hours so that the app can update.If the user hasn't closed out the app manually, following the four hour time period, notifies the user that the app will close to update. The application then should automatically close out after 10 seconds.Following the update, notifies the user that the app has updated successfully and will restart.We have noticed an issue with the second notification that it is applying a 60 minute countdown before it automatically closes out the application, giving a "Minutes remaining: 60" at the end of the notification despite us not adding this as an instruction as part of the plist for the specific application.The plist is written as:<?xml version="1.0" encoding="UTF-8"?&

Updated 5 February 2024 iCloud Private Relay is a feature provided by Apple designed to enhance online privacy by ensuring that neither the source IP of users' Apple devices nor the websites they visit can be accessed by a single entity. Due to the design of this Apple privacy technology and its interaction with DNS, certain blocking capabilities within Jamf Security Cloud were initially limited. To ensure policy effectiveness and uphold user safety, Jamf recommended disabling iCPR. However, in the latest release, Jamf has worked closely with Apple to adopt a DNS signalling approach that enables Jamf to overcome any previous limitations and ensures seamless interoperability with Apple's iCloud Private Relay. This approach ensures comprehensive user and data protection via Jamf policies, whilst permitting iCloud Private Relay to safeguard users' online privacy on secure sites. Delivering Jamf Security Cloud capabilities in a compatible mode with iCloud Private Relay has the following i

Hello, We have several computers and devices that have not communicated with Jamf for several months.I wanted to know if it was possible to send an MDM Lock or Wipe command and then unmanage them.Will these MDM commands still be deployed if the computer or the device is unmanaged but a check-in is done again? Thank you

Hello everyone,I've added a webloc in the outer right (just to the left of the trash) of the dock by mistake to all computers in our environment. Does anyone have any idea on how to uninstall/delete it?

Hello,Upgraded from Mojave to Catalina and AppleID, Screen Time and SideCar are grayed out. I ran- python -c "from Foundation import CFPreferencesCopyAppValue; print CFPreferencesCopyAppValue('DisabledPreferencePanes', 'com.apple.systempreferences')"I received 'None' backI created a Configuration Profile that enabled Apple ID Preference Pane, Screen Time and Sidecar and scoped to only Catalina macs. Ideas?Thanks !

Hopefully, this is an easy one. I'd like to be able to keep the Apple apps from installing automatically on enrollment. I don't want to exclude them, I just want them available in Self Service. (I.e. Garage Band, Pages, Keynote, Numbers, iMovie) Any ideas? Thanks in advance

Hi, we have a big problem with the layouts at our school. We have defined layouts (iPadOS) for school days. Unfortunately, the layout that should apply outside school hours cannot be loaded. Jamf has the following error: "Profile installation failed / Profile could not be installed / The profile" gsg-Layout-Schueler-1: 1 (version: 46) "could not be installed. / The payload" HomescreenLayout "could not be installed cannot be installed. / A home screen layout is already installed. We're pretty desperate because only a full wipe could solve the problem. Does anyone have the same problem or even a solution? In German:Hi,wir haben bei unserer Schule ein großes Problem mit den Layouts. Wir haben für die Schulzeit Layouts (iPadOS) definiert. Leider kann das Layout, das außerhalb der Schulezeit gelten soll aber nicht geladen werden. Bei jamf steht der folgende Fehler: "Profilinstallation ist fehlgeschlagen / Profil konnte nicht installiert werden / Das Profil „gsg-Layout-Sc

Good morning, everyone! I have a few systems that I just updated to High Sierra from Sierra and I get a Red Apple and a Green progress bar and then the systems restart displaying the same screen half way through continuously restarting. If I boot into safe mode it at least gets to the desktop but after a restart from there the same Red Apple and reboot. Any ideas? Or fixes? Thank you everyone!

Hello,Struggling to find the answers to this.I see you can buy the "Jamf Certified Associate Exam" and "Jamf Certified Endpoint Security Associate Exam" online for $100 each.Is it not possible to get certified for the Jamf 300(etc..), without enrolling in a full course? Some sort of self paced with an exam when you are ready?Thanks

We are trying to set up a site in Apple Business Manager as we are building out a new process and want to start testing. I have run into an error when I am trying to upload the token from Apple business manager to the Jamf site.I will add the file then click upload it will say "Unable to handle file upload." I've tried multiple browsers and computers and still no luck.I have uploaded a new public key to Apple Business Manager, then I downloaded a new token and I've attempted this multiple times.

Has anyone got the App Configuration working with Okta on the IOS app?  I would love to prefill some setup information just like I do with the Outlook app.   Thanks in advance for the guidance.

Hello I am attempting to block the Mac OS Sonoma BETA my boss advised me that my restricted profiles i created are wrong i will post a picture of what i have done so far when i scope the restricted software to my test mac machine it always installs and downloads the sonoma beta not sure what i am doing wrong    

Using Jamf Cloud hosted JSS 10.37.2 we're seeing an odd problem with policies run from Self Service that contain only a Script payload where they don't actually run the script. There's no error reported, and the Policy log shows it as Completed, but looking at the Details window shows there's no output from the script:1  [STEP 1 of 3]2 Executing Policy Something Something Something...3 [STEP 2 of 3]4 [STEP 3 of 3]as opposed to a normal run which would look something like:1 [STEP 1 of 4]2 Executing Policy Something Something Policy Someting3 [STEP 2 of 4]4 Running script Something Something Script Something...5 Script exit code: 06 Script result: Retrieving inventory preferences from https://something.jamfcloud/.........Submitting data to https://something.jamfcloud/...<computer_id>1234</computer_id>7 [STEP 3 of 4]8 [STEP 4 of 4]The problem appears to be attached to the policy as when the problem appears the policy won't run on any computer. Editing the policy in the JS

Description: I have encountered a persistent issue with Jamf Pro version 10.49. When attempting to edit a 'Distribution Point', upon clicking the 'Edit' button, I am faced with a continuous loading spinner, preventing any further actions. The expected behavior would be for the edit options to appear without any delay or persistent spinning.Additional Information:Browser version: Chrome, Safari, Firefox in normal and private window.Operating System of Distribution Point : 13.5Network conditions: No conditionsQuestion: Do you have any idea what might be causing this issue or any suggestions for potential solutions?

Is there a way to force a computer to restart? I'm able to get OS updates to work where they download and then the restart prompt time starts. But if you click on the timer it stops the forced restart, and apparently delays it indefinitely, until the user restarts their computer, or I just resent the command over and over. I was hoping it was just for M1 computers, but it seems to be true for all. Is there a way to force a computer to restart from the Jamf platform?

With the advent of new JC versions coming out , what is the best and easiest way to clone a Jamf Connect Configuration Profile without having to manually cut and paste all of the variables from one to another? I tried cloning then changing the JC version and I get this message:  

I wanted to start a thread on best practices for dealing with lost and stolen devices (Macs / iOS).Some older threads exist, but with the new Apple Silicon Macs and newer OS security enhancements, I wanted to check back on this topic and see what people are doing.Past threads have suggested:Create a lost/stolen prestage enrollment - however this may possibly be bypassed by setting a Mac up with no wifi.Install Prey to get screen shots and geolocation sent back to you for recovery efforts - however it may require approval to access the camera and screen.Lock the device and wipe it remotely.Run a script that will lock the screen and play an audible notice to speak that this device is lost or stolen.Any other ideas/suggestions/updates?

We have shared ipads set up with jamf school. I can have classes appearing on them OR I can have them just use guest mode but I don't seem to be able to have the option for both. Basically a teacher wants to allow a couple of students to sign into a shared device but also allow others to use the ipad as a guest. Currently throughout the year the number of users logging in grows and grows which isn't ideal. Is it possible to have both? Our students are 5 year olds so the simpler it is for them the better. ThanksRichard

Hi,Does anyone have a script that will install Ruby / RVM.  Specifically looking to run this command, sudo \\curl -sSL https://get.rvm.io | bash -s stable –ruby,Specifically getting a Script exit code: 1 error.  Any ideas?  

tl;dr: student circumvented Jamf Pro to install App Store alternative... how? In the high-school I'm at, we have restricted the App Store for some students and predictably they seem to have found a way around it and are installing apps like Minecraft and so forth. Fairly harmless in general, but persistently we've noticed the presence of TutuApp. In the brief reading I've done, TutuApp is apparently an App Store alternative. I'm still trying to figure out how it was installed. We're concerned because iOS 11 apparently breaks many of TutuApp's features and while recent updates to TutuApp supposedly fixes this, it also installs a Nesstool profile. According to the forums, nobody is really sure what this is or where it came from or why it installs a VPN profile on their machine. We first observed this when a student came into the office citing Wifi issues. No VPN should be present but there was a VPN toggle in his Settings. It was automatically toggling on and the off again rapid

Can I ask the end user a question during iOS enrollment and recored that response in Jamf Pro? I would like to ask things such as: Are you a current Apple user? etc.

Hi All,I'm trying to create the Silent KFM option with OneDrive using Mac Configuration Profiles (this is my first Jamf instance, so I may just be missing something simple here).When I deploy the configuration profile there doesn't seem to be any changes made to the App itself.Using separate profiles, I was able to give full disk access and put OneDrive into the Insider Ring successfully.Only when trying to do any kind of KFM option (silent or otherwise) I can't see anything change (for example, if I open the OneDrive app to configure backup manually, nothing is selected). It also won't block people syncing their personal OneDrives (which when I added my own personal one, it broke my Company Portal Registration, easily fixed, but it's an issue that repeats at least on the device I'm testing with).There are some differences that I've noticed myself with people who have been successful. Most people reference a company specific plist file but mine is generic com.microsoft.onedrive and I'm

Hello Everyone, i have a Problem with 2 Devices, one of them ist with the new M2 Chip and the other One is an Intel Mac. Both of them show me that in jamf:  Personal Recovery Key Validation:UnknownBut FileVault 2 Partition Encryption State:Encrypted.I am able to see the Personal Recovery Key in terminal but there is a Problem with the transfer to Jamf. Ihad tried with jamf recon but nothink happens. Can anyone help please.

I have been trying and failing over and over today to get Graham Pugh's erase-install to work.https://github.com/grahampugh/erase-installSometimes it works but too often it doesn't. It often fails during the preparing stage before macOS Ventura installs. Other times, it finishes the preparation of the install and then does nothing. The Mac reboots. No install happens. I have literally spent my entire day today working with it. I thought maybe one of our security agents could have been interfering. I read about this possibility in the FAQ for erase-install. I have been running my tests from a Mac with no security agents installed. If someone has worked with this solution and been successful with it, I would love to know how you did it. The scenario is that we have several Macs that need to get upgraded to Ventura. The users are mostly standard user accounts on both Apple Silicon and Intel. When this has worked, I haven't had to do anything special to get non-admin users to be able to in