Has anyone had issues with FileVault 2 automatically reenabling itself? Several months ago I set up a Self Service policy to encrypt boot drives with an Institutional + Individual key. After some successful testing I scoped it to 3 of my own Macs and encrypted those boot drives. Everything has been working fine and I have not had any reason to think anything is amiss. I even recently successfully tested it again with two test Macs. So I now have 5 devices encrypted with this policy. I’m now needing to mass deploy FileVault configurations in other JSSs I control, and for the sake of reinforcing my knowledge from my past effort, I decided I wanted to start with a clean slate and create new keys and new policies. So I started the process by turing off FileVault on two of the Macs, one being my own. The decrypting process went without a hitch. Then upon rebooting one of the Macs I was presented with the same encryption process dialog I would exptect to receive after initiating an encryp

I'm sending out a System level Dock mobileconfig (which I've been doing for years now) to our computer labs, and it has always worked well.  Until recently...When I upload my mobileconfig file created by dock-master, I get a dock full of question marks.If I check the dock plist in the Managed Preferences folder, all of my Application locations have had '/System' added to the front of their strings.i.e.: This:<dict><key>file-data</key><dict><key>_CFURLString</key><string>/Applications/Google Chrome.app</string><key>_CFURLStringType</key><integer>0</integer></dict></dict> Turns into this:<dict><key>file-data</key><dict><key>_CFURLString</key><string>/System/Applications/Google Chrome.app</string><key>_CFURLStringType</key><integer>0</integer></dict></dict> Why on Earth would either JAMF or macOS think a

Having some issues with Company portal registration and receiving a generic error message which has no proper logs to dive into unfortunately. Deploying company portal via mac apps and targetting all managed clients Afterwards I created a smart group to locate any devices that have company portal installed and targetted a policy to trigger Microsoft Device Compliance.This triggers the policy once the device recognizes that Intune Company portal has been installed.It launches flawlessly, but unfortunately during the registration portion, I do the following and receive a generic error. Company portal launches on its own with the policyI login w/ my corporate credentials and provide my username/password and then authenticate with 2fa.I then receive this generic error below.If I try to force quit company portal, i'm prompted with JAMFAAD wants to use microsoft to sign in .But, upon going through the process and logging in with my corporate credentials again, I am prompted to

Hello, some of our customers are sending multiple PDF Documents via the Documents Feature (Documents-Inventory-Add Document) to the Ipad Devices and its working flawlessly. They are shown in the books App on the Device. Today I received an Support Ticket saying it is not working with Word Document. And I can confirm this! I uploaded some Word Documents in .doc and .docx format and when sending them to the Ipad Devices it stucks in the Status "pending." Does anyone have an idea whats the problem here? PDF Documents working like charm, Word Documents are stuck in pending. Thanks in advance, kind regards. Christian

We have a question, when we enroll a device it lock the ipad with the account configured in Jamf, if you connect with that account on Apple there are the device list there? We have that account linked with Apple School and we think that then you cannot login to Apple to see devices linked inside. Thank you

Hi, how do you install an app on a managed iPad of a student?Thanks

I gave deploying printers via the Configuration Profile payload a try. Most of the printers had no issue deploying, but I ran into issues with deploying our more complicated printers.We run Ricoh C6502 MFCs for our follow-me printing and these by standard have a large capacity tray and finisher. We print from the Macs via PostScript.When uploading via Jamf Admin and deploying via Policies, the large capacity tray and finisher options are preserved.When attempting to deploy these printers via Configuration Profile, the tray and finisher settings are not preserved, which causes options for trays, stapling, and other finishing operations to not be present.Wondering if anyone else came across this in their testing or if my printer settings in question have issues. I tried this across Ventura 13.4 and Sonoma 14 Beta 4 and submitted feedback on the latter version.Looking in the /etc/cups/printers.conf, does not appear to be a difference between the Policies and Configuration Profiles install

Hey @jamf11 its time for ModernAuth to be STANDARD!!! I hate to say this, but in this area you are TRULY LAGGING WELL BEHIND EVERYONE ELSE! This is a HUGE security issue and coming from all of us, this needs to happen soon!! You're focus on security is well documented but why is this such a blackhole for you?

Is their a way i can configure notification emails to alert token expiration dates?

Is there a way to run a report that will list lost sheep history site wide for a date range?I am looking to create a list of all the computers that entered lost sheep on date X and did not connect until date Y.

Hello All! We have successfully blocked VPN's on our mobile iOS devices by checking for restricted apps and then locking down the device. It obviously does not see a VPN if a user manually sets one up? Is there any criteria I could use to find if they manually setup a vpn (not with an app)? I may try to do this more at network level if I have to. ThanksJared

In the process of removing admin from our users. I want to create configuration profiles for any software app permissions that are devs use that I'm not aware of yet. I can pull applications installed and from that try to find code requirements / team identifiers but that doesn't help without knowing what permissions to give it. This will be a process to research each software. Is there a way I can pull this information at least for the Privacy & Security tab? Checking System Report or these locations I am not finding the info I am looking for exactly. /Library/Preferences//Library/PreferencePanes/System/Library/Preferences/System/Library/PreferencePanes Ideally, I would have a script run in JAMF to collect this data combine it if possible. Thanks for any and all help or thoughts!  

Just for anyone else who happens to stumble across this in 2023 and is like, "What does this do?" The answer is NOTHING and DOES NOT WORK. Quote from a ticket earlier that address this very question. "Thank you for reaching out to Jamf Technical Support!To summarize, the feature “Computer administrators may refresh or disable management” is not working.Unfortunately, after some investigation, Jamf created a Ticket with Apple, but this appears this feature is not going to work. We tested on our end, and it is also not working.At this point, we will be marking this case as inactive. If there are any additional questions or concerns, let us know, and reference this case number to allow for us to continue working from where we left off."  

Hi there, So when jamf notified us for APNS renewal, Instead of using the apple id assigned to renew the current certificate on the one on APNS. We have accidentally used a different apple ip and created a new certificate in APNS causing jamf to produce a new certificate on Jamf with a new topic. This has caused the managed laptops and phones enrolled on the previous certificate to lose the functionality to get any remote commands from jamf. The laptops still checking in and working fine, but the remote commands functonality has been lost. We have found the original apple id which was used to renew the certificate now.  My question is if we renew mdm again on jamf with the certificate that was originally used in apns, will it make those devices receive the remote commands again or will it break the entire devices to be unmanaged?  Hope this makes sense, any recommendation will be greatly appreciated. 

how to customize Management Action window message

Hey everyone,  I'm thinking to start integrating our Jamf Pro instance with Intune just for the sake of having confidtionl access, what do you think? any issues that I will encounter? tips?Thanks

I'm trying to find what is removing/hiding the default Mail app from our devices, this is not effecting all of our devices just ones in a set of Smart groups. The devices are enrolled to JAMF via an enrolment profile that is installed via Configurator 2, the devices have the Mail app up until the enrolment profile is installed and they get their configuration profile from JAMF. I've checked the configuration profile settings and can't find anything in restrictions about disabling, hiding or removing the app. The configuration profile is also set to Allow all apps under App restrictions. Any clues would be much appreciated. Thanks

Has any one tried setting up a Synology as a JAMF Pro File Share Distribution Point with http support?

Hi all,We are in the process of setting up 802.1x, using EAP-TLS wifi authentication.We deploy a configuration profile with SCEP/Network/Certificate payload at a computer-level, since we use Jamf Connect and recently found out that we cannot push configuration profiles at a user-level as we were initially planning (the solution of re-enrolling all devices is a no-go).Everything seems to be working, but our cyber security team challenged this configuration because Macs use that certificate to authenticate to the wifi regardless of the user logged in (for example a user could create a local account and authenticate to the wifi, which apparently it's not something they like).My question is: is there any way to manage which user accounts are allowed to use that certificate? Example: only specific users, or only domain accounts?Thank you! 

Hello All, I was looking for a solution to uninstall Nexthink collector from mac device, if I run the uninstaller extracting from .dmg file which contains 4 .pkg it says uninstaller” can’t be opened because the identity of the developer cannot be confirmed. Should I run rm -rf /Library/Application\\ Support/Nexthink and rm -rf /Library/Application\\ Support/NexthinkVersions  or do we have a better solution on this?

Hello,once again we have the problem, that at one school the wifi key was leaked.tbh we really don't know how, because the wifi is pushed via jamfschool profile.So it cannot be viewed with IOS 16.What other settings in jamf restrictions do you recommend to prevent that?thanks

I am trying to deploy Office 365 to my clients, all of whom have Office 365 accounts tied to their email. I would like to deploy through JAMF Pro using the VPP Mac App so the apps will update automatically. My problem is the $69.99 per year page before the sign in option. I don't want my clients scared of signing in. I want them to be prompted for sign in immediately, without the purchase prompting. Does anyone know of a way to script past this prompt? Below is the Screen that I'm hoping to avoid:

Does anyone know how to deploy SmartNotebook v.23?I downloaded SmartNotebook and uploaded the pkg to Jamf Pro and created policy and set for Self Service and it fails everytime.It looks like the SmartNotebook pkg has a packaged with a tool that checks the computer to see if it is compatible to be able to install.I have a feeling that this might be causing the pkg to not install.  Does anyone know how to get past this feature? 

Hey guys, Is there a way of wiping a iPhone with a script ? let me know if this is possible. Thanks 

is there a way to remove the recovery lock password on Apple Silicon Macs without unenrolling/erasing them?