Hi everyonei'm trying to understand the best way to configure Jamf Protect with our jamf instance. I set up a smart group in jamf to alert users about security issues and that works fine.Unfortunately the jamf protect documentation is a bit incomplete imho. What are the next steps i need to follow? Any suggestion or guide to suggest?Do i need to manually remove the mac from the smart group?Jamf Protect has some removing capabilities or i need to clean the mac manually?

Hi,We are in the process of starting out with Jamf School for our 50 iOS devices. Due some internal policys, I might be in need of integrating AzureAD into Jamf School.How does it work? Is it only authentication (enrollment with AzureAD credentials) or does Jamf School "copy" username and store it somewhere (like syncing users from On-prem AD to AzureAD)?

Our config profile for blocking sharing works fine on macOS 12, but 13 you can edit the computer name in General / About just by clicking on name, Restricting the General prefs is not blocking About, but all other General settings.What have I missed?

I am trying to integrate jamf APIs to deploy in house app (.dmg or .pkg), I gone though the APIs but confused which one to use. I found https://developer.jamf.com/jamf-pro/reference/post_v1-deploy-package and https://developer.jamf.com/jamf-pro/reference/createpolicybyid relevant.I only know mac address or hostname of the device to deploy app on. How can we achieve it?Thanks.

Hi there So this "Seems" to be most recognized LAPS for MacOS - https://github.com/joshua-d-miller/macOSLAPS  Has anyone actually got this up and running? We had spends a few days so far messing with this but were not able to get it working properly, I think we are missing something small but important.  Thanks in advance! 

Local password sync issue with Azure/Entra and Jamf Connect. I have a user with 3 Macs.He changed his password on Mac1 with Jamf Connect. Cloud and local account passwords were successfully changed.Signed into Mac2 at Jamf Connect login window with new password, it prompted for his old/local password, accepted it, and everything is good.Signed into Mac3 at Jamf Connect login window with new password, it prompted for his old/local password and will NOT accept it. Using the local login with that same password does work, gets him to the desktop. He can then sign into JamfConnect using the MenuBar, it again prompts him for this local password, and fails to accept the same password he just used to log in locally.Jamf Connect logs show: Jamf Connect[1757:35a6] [com.jamf.connect:OpenDirectory] Password change failed! Error: One of the parameters provided was invalid.All three Macs are the same build/config. Not enforcing any other password policies.Tried sudo jamf changePassword with his user

I have a connection to WiFi, however when opening the Self Service app, there is a grey bar along the top of the iPad app that says “unable to connect to server”. I have restarted the iPad several times, connected to a different WiFi network, and nothing has worked. I am unable to download apps that I need. Please help!!

I'm trying to script a direct download of Citrix Workspace so I don't have to manual update the pkg for each patch. Unfortunately, the download link is a redirect, and the URL changes regularly. Does anyone know the URL for a direct download? My current script does this: #!/bin/sh curl -L -O "https://downloads.citrix.com/16002/CitrixWorkspaceApp.dmg?__gda__=1559853370_f26ea92eb50e024708c1e0cb9dc29474" mv CitrixWorkspaceApp.dmg?__gda__=1559853370_f26ea92eb50e024708c1e0cb9dc29474 /tmp/CitrixWorkspaceApp.dmg hdiutil attach /tmp/CitrixWorkspaceApp.dmg -nobrowse installer -pkg "/Volumes/Citrix Workspace/Install Citrix Workspace.pkg" -target / citrixmnt="$(hdiutil info | grep "/Volumes/Citrix Workspace" | awk '{ print $1 }')" hdiutil detach $citrixmnt rm -f /tmp/CitrixWorkspaceApp.dmg

Hi, everybody.One parent has being using Jamf Parent for a while with one of their kids. A few months ago they sent me an email saying it didn't work anymore. I asked for clarification, but I don't know if they never replied or if I lost the info. Anyway, nothing was done. A week ago a second child received their school issued iPad. The parent was able to scan the QR code and everything works. They have since sent me an screenshot of what happens when they try to scan the code for their first kid."The device is already added to your dashboard."However, they can't see it and, if they go to Settings, they can only see the newest iPad.Any ideas?PS: I tried adding the problem iPad to Jamf Parent from one of our devices and it worked with no issue.

Since Jamf Remote is deprecated, we are now disabling SSH in our environment. I've been able to do that with  "systemsetup -f -setremotelogin off", but is there any way to uncheck or hide the checkbox for "Allow full disk acess for remote users"?

Hey everyone,Google Meet has a PWA app (progressive web app) that can be downloaded to the Mac, here is the guide by Google:On your computer, go to meet.google.com.At the top right of your browser, in the URL bar, click Install The Meet app appears in your app dock.I wanted to deploy this app to my org in some way, but when I tried to create a package from my Mac, users got this error message:"Google Chrome cannot read and write to its data directory:/Users/***/Library/Application Support/Google/Chrome"which means it took my personal directory and deployed it to all org which created an invalid package.Any suggestions on how I can fix it / deploy the Google Meet app to my org by taking into consideration that's a PWA app? Thanks! 

Hi there,What solutions are you guys using to elevate permissions for users temporarily. For now I've found https://github.com/SAP/macOS-enterprise-privileges/wiki/Using-Privileges but not sure if there are better solutions more tied to Jamf Connect itself?

Hey guys, I connected several macbooks via email invitation enrollment. Now on these computers on the login screen at the "normal " account also appeared a guest account. How to turn this off guest account? Regards

Greetings Everyone, Has anyone come across any tools or processes for automatically migrating Outlook 2011 PST(On My Computer) folders to an Office 365 Online Archive? Our Windows environment is using a tool from Barracuda that is handling the process automatically, we would like to find something similar.

Is there any way to customize the Google login window with JAMF Connect? Is it possible to brand the login window in any way with a district/company logo OR pre-fill the login domain based on smart groups in JAMF?

So I have enrolled into the feedback program for Jamf Connect and I keep getting this error stating: It looks like you have never logged into the Jamf Nation community with this account. Please click here to log in to the community. After logging in to Jamf Nation once, please log out of Jamf Account and back in, then return here. But I have logged into Jamf Community and use the exact same account. So I don't know what to do to fix it.

Hello guysI'm struggling with the OneDrive configuration without any luck, some settings are not being applied and I cannot understand why.I'm deploying OneDrive from Jamf's app catalog and with a configuration profile using .plist file I've created according to our organization's needs following Microsoft's documentation.The goal is:1. Allow sync using accounts within our organization only.2. Personal OneDrive account sync is not allowed.3. Disable the tutorial (this one works).4. Redirect known folders (Desktop, Documents) to OneDrive5. Redirect silently without notifications and prompts.6. The user cannot disable folder backup.7. Show notification that folders were redirected to OneDrive.8. Open at login (this one works). This is my .plist:What am I missing?<?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>AllowTenantLi

@rderewianko helped me figure out how to check what account someone is signed in with in Google Chrome. We're a Google for Work shop so want to make sure people are signed in like we recommend so their bookmarks and settings are saved to their account for ease of use. Could also be useful for troubleshooting I suppose. If someone is signed into Chrome with multiple accounts it will display all of them. Next step I'd like to do is detect when the yellow warning icon appears in Chrome, where an account's password needs to be re-entered and Chrome currently is not saving anything to the account. I have it on GitHub too. #!/bin/sh # # check-chrome-users.sh # # Extension attribute to report which accounts # are logged into Google Chrome on a Mac. # # For use as a JAMF Casper Suite extension attribute # # Adam Codega, Swipely # loggedinuser=`python -c 'from SystemConfiguration import SCDynamicStoreCopyConsoleUser; import sys; username = (SCDynamicStoreCopyConsoleUse

A stand-alone macOS app to help MacAdmins more easily deploy Setup Your MacIntroductionAs announced during JNUC 2023, @leslie_h does it yet again by providing the MacAdmins community SYM-Helper, a stand-alone macOS app to help MacAdmins more easily deploy Setup Your Mac.Continue reading …

Hello,  I am having this issue where our student macbooks are not showing all the users in the login screen. Each macbook has around 3 student accounts (standard). When I turn on the laptop only two of the accounts show up along with the admin account. I have to sign in to either of the accounts shown and then log out to get the other student account to show. Any idea why this is happening? We have firevault enabled and I have been researching and Firevault comes up as a potential cause. Any suggestions or solutions to this?  Thanks

I am working on getting a lot of systems upgraded to macOS Ventura. Some of the systems are not compatible with macOS Sonoma, and we won't be making Sonoma available for a while. I had previously written a script to download the macOS Ventura installer. That script works very well. No issues. For this new script, I wanted to make sure that any older versions of the Ventura installer got deleted first. I want everyone on macOS 13.5.2. I don't want anyone to have to run a software update after upgrading to Ventura. Working from the previous script, I wrote this one. The "downloadURL" variable uses Parameter 4 in the Jamf policy. I fill in the download URL that I get from the Download Full Installer app. I use Parameter 5 to specify the macOS version that the script is downloading. This will be the name of the Install Assistant package when it is downloaded. I added a variable "installerVersion" to check the version of the currently installed macOS installer app if it's present. My intent

Is there a way to configure a profile to keep the wifi password encrypted in ios 16 and higher?   As of now, if you press and hold the "encrypted" wifi password in settings, the actual password shows up.     

I was wondering if there are any ways to send custom messages/notifications to end user ios devices. This is mostly to inform users to install the latest ios update and to provide a date that we will force the os installation on devices.

Hi All,Due to security and the @enrolment trigger only kicking in after macOS home screen loads, I need to find a solution that will allow my current workflow to allow Setup My Mac & SwiftDialog to run right after Jamf Connect. Is there anyway to do this.My current flow is 1. Prestage Enrolment 2. Jamf Connect (not using Notify)3. Boot into macOS then @enrolment trigger kicks off Setup My Mac.Can I "hold off" booting into macOS and have Setup My Mac run straight after the local account is created with Jamf Connect?TIASimon 

Hello! I saw yesterday that JN-I-16521 was listed as "Implemented."  https://ideas.jamf.com/ideas/JN-I-16521I was thinking S3 encryption should work now but It doesn't appear to. I updated our Test Jamf instance (On Prem) to the latest version and turned on encryption for our S3 bucket.  When I upload a package with Jamf Admin to our On-prem DP and then try to replicate it to the S3 Distribution Point, I get a the progress bar of it seeming to copy out, then I get a message saying the replication is complete.  But when I go look in the bucket, the package is not there.  This is exactly the same thing we saw before the above feature request was Implemented.  The only way I could get it to work before was turn encryption back off.  Our Security organization is quite unhappy about the bucket having to be unencrypted so I was really hoping this would work.