Hi,I have been asked to report the initial OS installation date and user profile creation dates for Macbooks. I couldn't find a way to do this with Jamf Pro. Is there a way to get this with a script to be run through Jamf Pro or Jamf Pro? 

We have SSO enabled which works great. However, I need to create a local account that will use the ?failover url. This is an account for an intern so I can't make it an admin account. I created a custom account with the desired privileges but every time we try to use the ?failover url, we get a access denied. Our backup admin account for the ?failover url works as expected. What am I missing?

Hello All,Need your help, i have Apple script which will update the macOS for both Intel and M1 and restart if it's M1 it will prompt for the user password to install macOS. now it's working fine when i run from Apple script editor.But i need to convert the Apple script to run as bash script so that we can push from JAMF.=========================================================================================# Launch software Update preference panedo shell script "open x-apple.systempreferences:com.apple.Software-Update-Settings.extension"tell application "System Events"repeat 60 timesif exists (window 1 of process "System Settings") thendelay 3exit repeatelsedelay 1end ifend repeatif not (exists (window 1 of process "System Settings")) thenreturnend ifend tell# Click "Update Now" or "Restart Now" if presenttell application "System Events"tell process "System Settings"repeat 60 timesif exists (button 1 of group 2 of scroll area 1 of group 1 of group 1 of group 2 of splitter group 1 of

Why is it that these emails DON'T contain any specific information? Thankfully, these dont come all that often, but when they do,, it would be nice if that contained some specifics. If I need to send out an alert to my users, and i send this crap out, my users are going to lose faith in me and what I am telling them.  Hey Jamf, how about defining these a little bit, they sound like a weather report.......you never know if they're reliable or not. 

Hello Team,When we install LogMeIn on mac manually by clicking on it it opens without any issue, but when we install using by installer command downloading it from DP it is not opening. What might be the reason and what is the resolution here? How can I find the cause of this issue, which log can tell me this?

Hi Everyone,I'm new to bash scripting and the JAMF API and need some help. I'm trying to export a csv file with the Serial Number (Column A) and Computer Name (Column B) so I can then import it nightly into our inventory system. I use the computer name to assign each computer and iOS device to that user so this will help confirm who has the device in the inventory. I have figured out how to export the file, but it all seems to be in 1 cell. I'm looking for help on what I should do to break it apart. Thank you in advance. !/bin/bash server information jamfUser="apiread"jamfPass="apireadpassword"jamfURL="https://jss.url:8443/JSSResource" search computers and GET SerialNumbers and ComputerNames exported to csv file apiData=$(/usr/bin/curl --user "$jamfUser":"$jamfPass" --header "Accept: text/xml" --request GET $jamfURL/computergroups/id/1 | /usr/bin/xpath "/computer_group/computers" | /usr/bin/xmllint --format - | /usr/bin/grep -E "<serial_number>|<name>" | /usr/bin/

Hello All,I'm trying to generate the Bearer token using C# via /api/v1/auth/token API and I'm getting 401 Unauthorized error. But, when I call the same API and with the same credentials in POSTMAN I'm getting 200 with a token in the response. Can someone help me with how to generate tokens using C#?. Thanks. Code:string response = string.Empty;try{Uri tokenUrl = new Uri(ConnectionProproperties.url);WebRequest webRequest = HttpWebRequest.Create(tokenUrl);HttpWebRequest httpWebRequest = (HttpWebRequest) webRequest;NetworkCredential networkCredential = new NetworkCredential("xyzzzz", "xyzzzz");CredentialCache credentialCache = new CredentialCache();credentialCache.Add(tokenUrl, "Basic", networkCredential);httpWebRequest.Method = "POST";httpWebRequest.PreAuthenticate = true;httpWebRequest.Credentials = credentialCache;WebResponse webResponse = webRequest.GetResponse();Stream responseStream = webResponse.GetResponseStream();StreamReader streamReader = new StreamReader(responseStre

We installed Slack using the Mac Apps with the 'Install supporting configuration profiles' option selected. This led to the Alert configuration issue reported here https://community.jamf.com/t5/jamf-pro/jamf-app-installers-user-notifications/m-p/287342Recently, I noticed we now had two Profiles on our devices with the same name "App Installers - Slack". One profile had 2 settings (no update and Alert config) and the other had 1 setting (no update). I tried updating our Mac App configuration by unchecking 'Install supporting configuration profiles' option and this successfully removed the "App Installers - Slack" with the single setting, but the 2 setting Profile is still there. I have tried disabling the deploy and that did not remove the legacy profile.I have looked at other options to try and remove this profile but nothing is working since this is a signed JAMF Software profile and not one of ours. This is causing a lot of complaints from our user base since they want

Hello Community and Jamf Team,why are there so many other options in the scope to select as Rule but no "LostMode" offered?I would like to create a group with the rule that only iPad set in Lost Mode will be displayed.Is there a reason for this?Cheers,Peter

HiSo, i have a package file i want to install, but i want to check to see if a file exists before installing this package.If the file doesn't exist, then continue and install the package.If the file DOES exist, then don't install the package. Ideally i want to run a Before script in the Policy, and if Before script exit code is 0 (File doesn't exist) then it installs the package in the Policy too.But if the before script exit code is 1, then just stop the policy there, and don't install the package. Is this possible?Can you stop a package installing, if the exit code matches a certain value from a before script. Thanks

Based on the downloadable .plist for Full Disk Access from https://help.eset.com/eea_mac/7/en-US/install_remote_pre-installation.htmlThe issue that I can't upload them to jamf as it has 4 different Preference Domain inside. So I'd like to split it between 4 preferences domains:com.eset.app.Uninstaller; com.eset.devices; com.eset.eea.g2; com.eset.endpointBut looks like I'm making syntax mistakes and can find them.Tried with the example from https://developer.apple.com/documentation/devicemanagement/privacypreferencespolicycontrolSo my plists are almost the same, the difference if only in Identifier value and CodeRequirement value took from the shared plist:  <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC “-//Apple//DTD PLIST 1.0//EN" “http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>PayloadContent</key> <array> <dict> <ke

At present if you have deployed Shared iPad, the memory space occupied by the cached shared users remains in use on device, any attempt to update the OS actually results in an out of memory issue. At present the system does not report or handle this in a sensible way that follows the natural workflow. You can visit every device page and check the memory for each device but that is not efficient. A couple of feature requests come out of this:1) provide the amount of memory available on device in any OS Update page so you can see whether it is possible that this can't be installed because of memory issues2) Intelligently remove cached users that have been written back to iCloud storage when an OS update is in play

When attempting to clean up enough space to push out OS updates to Shared iPads you do need to have the current user signed out and if you don't have enough space - about 3GB - you do have to free up memory resources. This is done mostly manually on a per device basis.Interestingly, I've issued 3 remote log off commands this morning and the current user is still signed in on most devices. Unclear whether the device list level command is working properly.However, to get the ball rolling it would be good to start to clear out cache space and wait for the pending logged out user to be actually signed out and then their cache written back.The current process doesn't really support this workflow in a single command.You can sign out the current user, but you have to wait and poll the device state to know when this has happened. My experience so far is that I selected multiple devices in a class and asked them to log off the current user, 2 hours later it is still reporting some users to be s

A Read-only Friday post by William Smith “I’m not a terrible procrastinator. I’m a great procrastinator!” It’s Monday morning. You’ve tumbled out of bed and stumbled to the kitchen and poured yourself a cup of ambition. You sit down to check email and in your inbox is a message: Dear <insert your name here>, Congratulations! We are excited to inform you that the following session (or sessions) identified below have been accepted for presentation at this year’s <insert conference name here>. 😳 It’s been weeks (maybe months) since you submitted your session proposal and, frankly, you’d forgotten all about it. Are you excited? Terrified? You need more caffeine to process what you’re reading. The first thing you should do is fist pump the air. Yes! The second is go to your manager, tell them your proposal was accepted, and get the go-ahead to attend. Remember, conference speakers usually get conference costs waived. That can be a few hundred to a thousand dollars o

Does anyone grab the Office VL installers from the following site = https://macadmins.software/based on what i see Office 2019/2021 use the same installer 16.57.0 ?but different Volume License serializer depending on what version you are licensing? so if i install 16.57.0 and run the LTSC 2021 License serializer it will be running Office 2021?does this have different features than if i ran the 2019 License serializer?    

Hello Everyone,I looked through several threads but couldn't find an answer to the above question. This may be because no one has had this issue. In our school district our staff are all standard local accounts. I've been testing Nudge and am pleased with how it works however when I go ahead with the "Update Device" it asks for an Admin password to install the update. Kind of what I would expect. However I don't think staff would like it if they had to get a hold of tech every time they want to update.Does anyone have a similar workflow that allows Standard users to install the update/upgrade?Thanks

Has anyone had issues with FileVault 2 automatically reenabling itself? Several months ago I set up a Self Service policy to encrypt boot drives with an Institutional + Individual key. After some successful testing I scoped it to 3 of my own Macs and encrypted those boot drives. Everything has been working fine and I have not had any reason to think anything is amiss. I even recently successfully tested it again with two test Macs. So I now have 5 devices encrypted with this policy. I’m now needing to mass deploy FileVault configurations in other JSSs I control, and for the sake of reinforcing my knowledge from my past effort, I decided I wanted to start with a clean slate and create new keys and new policies. So I started the process by turing off FileVault on two of the Macs, one being my own. The decrypting process went without a hitch. Then upon rebooting one of the Macs I was presented with the same encryption process dialog I would exptect to receive after initiating an encryp

I'm sending out a System level Dock mobileconfig (which I've been doing for years now) to our computer labs, and it has always worked well.  Until recently...When I upload my mobileconfig file created by dock-master, I get a dock full of question marks.If I check the dock plist in the Managed Preferences folder, all of my Application locations have had '/System' added to the front of their strings.i.e.: This:<dict><key>file-data</key><dict><key>_CFURLString</key><string>/Applications/Google Chrome.app</string><key>_CFURLStringType</key><integer>0</integer></dict></dict> Turns into this:<dict><key>file-data</key><dict><key>_CFURLString</key><string>/System/Applications/Google Chrome.app</string><key>_CFURLStringType</key><integer>0</integer></dict></dict> Why on Earth would either JAMF or macOS think a

Having some issues with Company portal registration and receiving a generic error message which has no proper logs to dive into unfortunately. Deploying company portal via mac apps and targetting all managed clients Afterwards I created a smart group to locate any devices that have company portal installed and targetted a policy to trigger Microsoft Device Compliance.This triggers the policy once the device recognizes that Intune Company portal has been installed.It launches flawlessly, but unfortunately during the registration portion, I do the following and receive a generic error. Company portal launches on its own with the policyI login w/ my corporate credentials and provide my username/password and then authenticate with 2fa.I then receive this generic error below.If I try to force quit company portal, i'm prompted with JAMFAAD wants to use microsoft to sign in .But, upon going through the process and logging in with my corporate credentials again, I am prompted to

Hello, some of our customers are sending multiple PDF Documents via the Documents Feature (Documents-Inventory-Add Document) to the Ipad Devices and its working flawlessly. They are shown in the books App on the Device. Today I received an Support Ticket saying it is not working with Word Document. And I can confirm this! I uploaded some Word Documents in .doc and .docx format and when sending them to the Ipad Devices it stucks in the Status "pending." Does anyone have an idea whats the problem here? PDF Documents working like charm, Word Documents are stuck in pending. Thanks in advance, kind regards. Christian

We have a question, when we enroll a device it lock the ipad with the account configured in Jamf, if you connect with that account on Apple there are the device list there? We have that account linked with Apple School and we think that then you cannot login to Apple to see devices linked inside. Thank you

Hi, how do you install an app on a managed iPad of a student?Thanks

I gave deploying printers via the Configuration Profile payload a try. Most of the printers had no issue deploying, but I ran into issues with deploying our more complicated printers.We run Ricoh C6502 MFCs for our follow-me printing and these by standard have a large capacity tray and finisher. We print from the Macs via PostScript.When uploading via Jamf Admin and deploying via Policies, the large capacity tray and finisher options are preserved.When attempting to deploy these printers via Configuration Profile, the tray and finisher settings are not preserved, which causes options for trays, stapling, and other finishing operations to not be present.Wondering if anyone else came across this in their testing or if my printer settings in question have issues. I tried this across Ventura 13.4 and Sonoma 14 Beta 4 and submitted feedback on the latter version.Looking in the /etc/cups/printers.conf, does not appear to be a difference between the Policies and Configuration Profiles install

Hey @jamf11 its time for ModernAuth to be STANDARD!!! I hate to say this, but in this area you are TRULY LAGGING WELL BEHIND EVERYONE ELSE! This is a HUGE security issue and coming from all of us, this needs to happen soon!! You're focus on security is well documented but why is this such a blackhole for you?

Is their a way i can configure notification emails to alert token expiration dates?