I'm trying to script a direct download of Citrix Workspace so I don't have to manual update the pkg for each patch. Unfortunately, the download link is a redirect, and the URL changes regularly. Does anyone know the URL for a direct download? My current script does this: #!/bin/sh curl -L -O "https://downloads.citrix.com/16002/CitrixWorkspaceApp.dmg?__gda__=1559853370_f26ea92eb50e024708c1e0cb9dc29474" mv CitrixWorkspaceApp.dmg?__gda__=1559853370_f26ea92eb50e024708c1e0cb9dc29474 /tmp/CitrixWorkspaceApp.dmg hdiutil attach /tmp/CitrixWorkspaceApp.dmg -nobrowse installer -pkg "/Volumes/Citrix Workspace/Install Citrix Workspace.pkg" -target / citrixmnt="$(hdiutil info | grep "/Volumes/Citrix Workspace" | awk '{ print $1 }')" hdiutil detach $citrixmnt rm -f /tmp/CitrixWorkspaceApp.dmg

Hi, everybody.One parent has being using Jamf Parent for a while with one of their kids. A few months ago they sent me an email saying it didn't work anymore. I asked for clarification, but I don't know if they never replied or if I lost the info. Anyway, nothing was done. A week ago a second child received their school issued iPad. The parent was able to scan the QR code and everything works. They have since sent me an screenshot of what happens when they try to scan the code for their first kid."The device is already added to your dashboard."However, they can't see it and, if they go to Settings, they can only see the newest iPad.Any ideas?PS: I tried adding the problem iPad to Jamf Parent from one of our devices and it worked with no issue.

Since Jamf Remote is deprecated, we are now disabling SSH in our environment. I've been able to do that with  "systemsetup -f -setremotelogin off", but is there any way to uncheck or hide the checkbox for "Allow full disk acess for remote users"?

Hey everyone,Google Meet has a PWA app (progressive web app) that can be downloaded to the Mac, here is the guide by Google:On your computer, go to meet.google.com.At the top right of your browser, in the URL bar, click Install The Meet app appears in your app dock.I wanted to deploy this app to my org in some way, but when I tried to create a package from my Mac, users got this error message:"Google Chrome cannot read and write to its data directory:/Users/***/Library/Application Support/Google/Chrome"which means it took my personal directory and deployed it to all org which created an invalid package.Any suggestions on how I can fix it / deploy the Google Meet app to my org by taking into consideration that's a PWA app? Thanks! 

Hi there,What solutions are you guys using to elevate permissions for users temporarily. For now I've found https://github.com/SAP/macOS-enterprise-privileges/wiki/Using-Privileges but not sure if there are better solutions more tied to Jamf Connect itself?

Hey guys, I connected several macbooks via email invitation enrollment. Now on these computers on the login screen at the "normal " account also appeared a guest account. How to turn this off guest account? Regards

Greetings Everyone, Has anyone come across any tools or processes for automatically migrating Outlook 2011 PST(On My Computer) folders to an Office 365 Online Archive? Our Windows environment is using a tool from Barracuda that is handling the process automatically, we would like to find something similar.

Is there any way to customize the Google login window with JAMF Connect? Is it possible to brand the login window in any way with a district/company logo OR pre-fill the login domain based on smart groups in JAMF?

So I have enrolled into the feedback program for Jamf Connect and I keep getting this error stating: It looks like you have never logged into the Jamf Nation community with this account. Please click here to log in to the community. After logging in to Jamf Nation once, please log out of Jamf Account and back in, then return here. But I have logged into Jamf Community and use the exact same account. So I don't know what to do to fix it.

Hello guysI'm struggling with the OneDrive configuration without any luck, some settings are not being applied and I cannot understand why.I'm deploying OneDrive from Jamf's app catalog and with a configuration profile using .plist file I've created according to our organization's needs following Microsoft's documentation.The goal is:1. Allow sync using accounts within our organization only.2. Personal OneDrive account sync is not allowed.3. Disable the tutorial (this one works).4. Redirect known folders (Desktop, Documents) to OneDrive5. Redirect silently without notifications and prompts.6. The user cannot disable folder backup.7. Show notification that folders were redirected to OneDrive.8. Open at login (this one works). This is my .plist:What am I missing?<?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>AllowTenantLi

@rderewianko helped me figure out how to check what account someone is signed in with in Google Chrome. We're a Google for Work shop so want to make sure people are signed in like we recommend so their bookmarks and settings are saved to their account for ease of use. Could also be useful for troubleshooting I suppose. If someone is signed into Chrome with multiple accounts it will display all of them. Next step I'd like to do is detect when the yellow warning icon appears in Chrome, where an account's password needs to be re-entered and Chrome currently is not saving anything to the account. I have it on GitHub too. #!/bin/sh # # check-chrome-users.sh # # Extension attribute to report which accounts # are logged into Google Chrome on a Mac. # # For use as a JAMF Casper Suite extension attribute # # Adam Codega, Swipely # loggedinuser=`python -c 'from SystemConfiguration import SCDynamicStoreCopyConsoleUser; import sys; username = (SCDynamicStoreCopyConsoleUse

A stand-alone macOS app to help MacAdmins more easily deploy Setup Your MacIntroductionAs announced during JNUC 2023, @leslie_h does it yet again by providing the MacAdmins community SYM-Helper, a stand-alone macOS app to help MacAdmins more easily deploy Setup Your Mac.Continue reading …

Hello,  I am having this issue where our student macbooks are not showing all the users in the login screen. Each macbook has around 3 student accounts (standard). When I turn on the laptop only two of the accounts show up along with the admin account. I have to sign in to either of the accounts shown and then log out to get the other student account to show. Any idea why this is happening? We have firevault enabled and I have been researching and Firevault comes up as a potential cause. Any suggestions or solutions to this?  Thanks

I am working on getting a lot of systems upgraded to macOS Ventura. Some of the systems are not compatible with macOS Sonoma, and we won't be making Sonoma available for a while. I had previously written a script to download the macOS Ventura installer. That script works very well. No issues. For this new script, I wanted to make sure that any older versions of the Ventura installer got deleted first. I want everyone on macOS 13.5.2. I don't want anyone to have to run a software update after upgrading to Ventura. Working from the previous script, I wrote this one. The "downloadURL" variable uses Parameter 4 in the Jamf policy. I fill in the download URL that I get from the Download Full Installer app. I use Parameter 5 to specify the macOS version that the script is downloading. This will be the name of the Install Assistant package when it is downloaded. I added a variable "installerVersion" to check the version of the currently installed macOS installer app if it's present. My intent

Is there a way to configure a profile to keep the wifi password encrypted in ios 16 and higher?   As of now, if you press and hold the "encrypted" wifi password in settings, the actual password shows up.     

I was wondering if there are any ways to send custom messages/notifications to end user ios devices. This is mostly to inform users to install the latest ios update and to provide a date that we will force the os installation on devices.

Hi All,Due to security and the @enrolment trigger only kicking in after macOS home screen loads, I need to find a solution that will allow my current workflow to allow Setup My Mac & SwiftDialog to run right after Jamf Connect. Is there anyway to do this.My current flow is 1. Prestage Enrolment 2. Jamf Connect (not using Notify)3. Boot into macOS then @enrolment trigger kicks off Setup My Mac.Can I "hold off" booting into macOS and have Setup My Mac run straight after the local account is created with Jamf Connect?TIASimon 

Hello! I saw yesterday that JN-I-16521 was listed as "Implemented."  https://ideas.jamf.com/ideas/JN-I-16521I was thinking S3 encryption should work now but It doesn't appear to. I updated our Test Jamf instance (On Prem) to the latest version and turned on encryption for our S3 bucket.  When I upload a package with Jamf Admin to our On-prem DP and then try to replicate it to the S3 Distribution Point, I get a the progress bar of it seeming to copy out, then I get a message saying the replication is complete.  But when I go look in the bucket, the package is not there.  This is exactly the same thing we saw before the above feature request was Implemented.  The only way I could get it to work before was turn encryption back off.  Our Security organization is quite unhappy about the bucket having to be unencrypted so I was really hoping this would work.  

Hi all,Is there a way to hide apps from the homescreen in iOS without removing them entirely from the phone? I know how to do it manually on my phone, but I'm not sure I've found anything that works within Jamf. We have a content filter application that needs to be installed to function, but the app itself only contains text and so it seems to confuse our users if it's visible on the home screen. Thanks in advance for any suggestions!

Hello !I try to upgrade mac computers to the latest version of Ventura, 13.5.2. I have Big Sur and Monterey OS and downloaded the installer through the mac App Store but when I want to install from it, it says that macOS Ventura cannot be installed on this computer. I was thinking about the updates deferral, but some computers haven't that profile installed. And when I use the software update, it doesn't install the latest version of the OS.On one computer, I installed Big Sur => Ventura 13.4.1 from the software update and once it was done, it only proposes 13.5.1. When I tried to install the 13.5.2 installer from Jamf => App Store, it still said that Ventura cannot be installed on that computer. I don't know how to proceed to be able to install the latest version of macOS. Is there a way to check if a deferral is configured ?Any help is welcome !

There is another thread with this that starts with discussing the managed preference involved. Wanted to start a new thread with the user-facing error message as the subject. So far I have been running into this on pre-WWDC 2023 Apple Silicon MacBooks running macOS Ventura 13.4(22F66) and 13.4.1(22F82), while older releases seem to be able to leap into 22F82 and then begin enjoying the broken updates. This error is showing up now on systems attempting to install the rapid security response (c) too, so even more reason to bump the thread up. Our solution was to remove the Defer Updates from our restrictions payload entirely. The image below shows the only thing I changed to get it working. That instantly allowed people to install updates. Hope this helps and that Apple fixes it. Also worth it to see what we had set before that is causing problems.

Hi there, We're running a test scenario of a device configured with FDE and passthrough. There's a glaring issue that we can see and that is the the reliance on the Jamf Connect Menu being the only means checking for password mismatches between our IDP and the local account.The concern is that once credential mismatch is detected a sign in window appears which can simply be ignored indefinitely. With no way to directly enforce IDP and local account password syncs without disabling passthrough which will cause the double login issue on boot and restarts.Could anyone confirm if this information is correct or if there's information we're missing?

Requirement: need to get check in / current ip of all the machines for about 1k machines in the network on regular intervals.Since the Jamf server does not keep  record of check in IPs, planning on scheduling a script to run every 15 minutes on all machines ( a simple command to echo `date +%T`,`curl ifconfig.me` ) to a log fine, the resulting log file needs to be pulled out to harvest/consolidate and create an inventory of all machines records probably in a database table. the challenge I'm trying to solve is the retrieval of the log file from all the machines to a central locationHow secure is to use a script that uses creds in it though encrypted when applied via policy against all machines? and if we upload to the attachment section of machines in jamf, how easy it is to pull this to a central location for all the machines.. I'm assuming via an API if that is supported.https://github.com/kc9wwh/logCollection/wiki/Using-Encrypted-StringsAlso is there a good practice to copy the

Hello All,In my organization Xcode is getting deployed through VPP Self-Service policy, now few developer raised a concern that Xcode IDE should not patched to next version, auto updates should be disabled as it is impacting their testing job.Now my question is what should be the best way to stop auto update for that team but others team it will be patched automatically?If I exclude their machines from VPP deployment policy then it will stop auto update or Xcode will be removed entirely from mac?

Since 10.50 (Cloud)When I click on a smart group on the dashboard (the value) I'm redirected to the page.. there is some blue-whirling.. and a blank page.. no results are displayed. Not every time, but more often than not.I now need to click on the smart group name, then results. Chromium browsers  (no I can't use a different browser) Anyone else? Was all working fine in 10.49