It's been a while since working with VMs and enrolling them into Jamf Pro. I've been able to seemingly get the VM enrolled using ADE, but it's in a weird state. According to Jamf only 5 profiles are installed, yet quite a few more than that are present on the Mac. However, not all of them that should be there are there. When looking at the computer record in Jamf Pro, it appears as if it's stuck in a loop of installing/reinstalling a majority if not all the profiles again and again...I'm kind of at a loss as to what's going on and how to address.Jamf Pro 10.46.0 (Jamf Cloud)Host: Monterey 12.6.6 on 2019 Intel MBPGuest: Monterey 12.6.5 (using same serial and board-id as host)VMware Fusion 13.0.2

The Jamf Research & Insights team is hosting 4 feedback workshops: OS Updates, AI, Smart Groups, and Reporting. Sign up for a spot with Calendly and check out the Jamf Nation Events page for future workshops!

Anyone got a script for Dockutill on Monterey. Our old Python script doesn't work anymore. We are looking to keep the Self Service app permanently in the dock.  This is the current script. #!/bin/shDOCKUTIL=/usr/local/bin/dockutilsleep 10$DOCKUTIL --add '/Applications/Self Service.app' --replacing 'Self Service' --no-restart /Users/$3killall cfprefsdkillall Dockexit 0

Is anyone else having trouble updating Shared iPads to iOS 15? I'm quite new to device management in general and am looking any help. Our devices are 32GB and the updates are 2-3 GB, almost too large for the allotment per device. I tried to get around this by creating a single device class and updating that single device, but am only seeing that the update is schedule  The update is so large that is is almost too big for I'm pretty new at this, so I created a single device class and tried to update that way. I am still only seeing that the update is scheduled, but the update goes no further. Any advice would be most welcome!

Is there any way to turn on YouTube strict or moderate filtering within Jamf Pro without using Jamf Safe internet. I simply want to enable the native YouTube app feature to enforce strict filtering.For example on the app - I want to enforce this setting on all iPads with the YouTube App.Open YouTube, select YouTube user, top right hand corner / select settings / general / restrict mode.

I'm testing Jamf Connect on a known working and previously domain joined Mac on 10.14.6. The mobile account was successfully demobilized and Jamf Connect works fine. However, I'm getting a prompt from Applications to have access to the "login" keychain. I've tried entering my current password as well as all possible previous passwords and nothing works. What am I missing? This is going to be a pain for users and IT. I'll submit a case this to support in parallel.It turns out the login keychain password is now blank.

I have a Prestage set up that creates a local admin user.It works correctly in Monterey or before.Ventura it stopped working.My work around right now is to not add the machine to pre-enrollment until after I manually setup the local admin user then add the machine to Pre-Enrollment and run [profiles renew -type enrollment] from CMD.I would like to get my pre-enroll working again.Any suggestions?

Hi there,My company is using JAMF to have control over the Macbook I work. Recently, I did bough a Ipad which I did connected with the company managed icloud, only to use a few application I don't want to use in the work laptop(such as personal e-mail).I am trying to use Universal control for use the same keyboard(magic keyboard) and magic trackpad only by "trespassing the mac screen barrier". I did changed all UI controls in apple's guide to make it work, but it doesn't, I can use the ipad as a extension monitor but I would like to use the Unviersal control.I imagine it is due to any restriction in Airdrop(since I try to send file to macbook through airdrop but it doesn't appear in the other device, even the control saying I can receive files from enyone) , to avoid leak of files between devices, my question is: Is there any way the security team can configure the profiles to allow airdrop only for keyboard/trackpad but not allowing file  transference?Thank you in advance!!

Hi, This may be a stupid question but I am new to Jamf and not much of a Mac user. I downloaded Jamf Composer from my Jamf Product page. Version 10.46.0.I get a .dmg file. I run the file on a test Mac and it pops up saying to drag Composer to your hard drive to start building packages. It didn't install anything. So I drag the .dmg file to my Applications folder and run it again. Same message. I plug in an external storage device same thing. USB drive, same thing.I was planning to use Composer to build a .pkg file for Figma as so Figma can be deployed using Jamf.Let me know if maybe I am dragging the Composer .dmg file to the wrong place or maybe it is a bug with Composer.Thanks.

I'm seeing a CodeSignSummary-xxxxxxxxx-xxxx-xxxx-xxxxxxxxx.md appearing in Applications on my computers. File content shows something about wdav-upgrade.zip, which has to do with Defender. Any idea why this file is getting generated?

I need someone help I noticed today that my CA Certificate on the certificate Details section is giving me the description but also gives me an error saying Not found in keychain

Curious if anyone has setup an automated removal of IOS devices that haven't reported after a period of time? We have enough devices that a few get destroyed, lost or stolen every month and I'd like to automate the removal after 6 months just to free up the JAMF licenses for re-use. Thanks!

Hi Jamf Community,  Has anyone ever been asked to report on the number of systems that have Touch ID fingerprints setup? I've been attempting to write an EA as I have not found anything online. There are no Jamf Template EAs for TouchID, maybe this is a feature request. I know we can restrict the use (allow touch ID unlock, etc.) but we are unable to restrict our users ability to add a fingerprint into touch ID.  If anyone has some suggestions on how to accomplish this, I would be grateful. Thanks,JR

For those unaware LAPS is based on an approach originally created for Windows environments whereby Windows devices are configured with local admin level accounts for which the password is randomised and stored in Active Directory per device record. (This relies on devices being enrolled in to AD.)This was and is a highly useful approach so that each device can have a unique admin password rather than all of them having identical passwords.As such this technique would equally benefit a Mac environment and a number of equivalent solutions have been developed over the years. Some even store the password in AD also but many store the password in Jamf hence this discussion here. Again many techniques have been previously discussed here before.However Apple being Apple 😦 this is more complex than it used to be or likely is for Windows.The big issue these days is the use of Secure Tokens for FileVault2 access.Firstly I will state that previously at a number of organisations over

Hello,We have a compiled AppleScript that users can click to access their account and bring up the password change window locally on their computer. It has worked great up to Monterey. But since Ventura it doesn't work at all! It opens System Preferences and Users and Groups but then it stops.Anyone who is sharp on AppleScript and has a solution or some good advice?

I have worked through paloalto's official support document which explains how to create a jamf policy to uninstall Global Protect. It say that the script will run with "superuser authority". However, it still prompts the user to authenticate for the removal of the extension. Is there any way to get around this prompt on the user side?

Hi Jamf Community, i have been trying to setup a search for all devices that dont have a personal recovery key set . Unfortunately there is no such option. Then i thought i could just check if the Filevault Encryption is "Valid". This would be great but, some of the devices in my jamf network dont have a recovery key set, but are encrytped. I was trying to figure out how to search for all of these devices so i could issue a new key for them. Is there any way to do this ? Thanks ahead,Raffael

Has anyone been successfully able to update Splashtop Streamer via Jamf policy? I see that they have a guide for creating a package on their website (Splashtop), but I am unsure of what the "deployment code" is referring to. 

Hey folks, I have a weird one. We use dockutil to manage Dock. Dockutil installation + sorting out the Dock is set as a policy after enrollment. Policy deploys fine, installs Dockutil, adds the required icons but doesn't remove any of them with error 'Remove failed for xxx in /User/Username/Library/Preferences/com.apple.dock.plist'. Although, same script is added to our SelfService and when its run from there, it works as a charm.  #!/bin/bash echo "running dockutil" DOCKUTIL=/usr/local/bin/dockutil $DOCKUTIL --remove 'Safari' --allhomes $DOCKUTIL --remove 'Mail' --allhomes $DOCKUTIL --remove 'Contacts' --allhomes $DOCKUTIL --remove 'Calendar' --allhomes $DOCKUTIL --remove 'Photos' --allhomes $DOCKUTIL --remove 'Messages' --allhomes $DOCKUTIL --remove 'FaceTime' --allhomes $DOCKUTIL --remove 'iTunes' --allhomes $DOCKUTIL --remove 'iBooks' --allhomes $DOCKUTIL --remove 'Maps' --allhomes $DOCKUTIL --remove 'TV' --allhomes $DOCKUTIL --remove 'Music' --allhomes $

Our company is expanding our Jamf enrollments to company owned Macs in Japan. I know that for the users, the OS and Jamf products are multilingual and will display according to the system language. Obviously, anything I type into Self Service descriptions will be in English since that's the only language with which I am proficient. Today I was looking at the computer records of some Japanese Macs that recently enrolled and I saw most information was in English, but I saw the following under Software Updates:macOSセキュリティ対応 13.3.1 (a) 13.3.1 (a)macOSセキュリティ対応 13.3.1 (a) 13.3.1 (a)-13.3.113.3.1 (a)I don't speak or read Japanese, but from the context and version number I can tell this is for the Rapid Security Response 13.3.1(a) update. But it got me thinking...  How would I run searches or Extensions Attributes on Macs in a foreign language.  For Self Service descriptions, those of you in this situation, do you use a translator to put multilingual translations in the descriptions

Greetings,We are starting our setup for Jamf Connect and so far the login window is working, though on one M1 Mac Studio, it keeps asking for password verification each login. I read in another thread that is firmware issue?My main question is that we are having issues with the Connect App not loading. It seems to work sometimes but most times it loads we get the attached image. App with empty menu items.I can upload the plist from the config file if needed. But I'm at a loss for how to fix the issue.

Today we are releasing a maintenance version of Jamf Pro. Jamf Pro 10.46.1 fixes the following product issues: [PI111508] Resolved a broken access control issue within an authentication implementation (CVE-2023-31224). [PI111680] Jamf Pro users who use group-based access roles will no longer see an error when attempting to access the Volume Purchasing settings page. [PI111688] In clustered environments, Jamf Pro no longer stalls on the setup assistant if setup was initiated on a non-primary web app. [PI111726] A java.lang.OutOfMemoryError error no longer occurs when configuration profiles with a Certificate payload that is associated with an Active Directory Certificate Services (AD CS) integration are distributed to or removed from computers or mobile devices.   For additional information on what's included in this release, review the release notes via the Jamf Learning Hub. To access new versions of Jamf Pro, log into Jamf Account with your Jamf ID. Th

I work at a College to where we receive in anywhere between 400 - 2000 systems back after fall then spring semesters. We were using Mac Provisioner to Erase and reload all of our returns to Catalina (T2 chips requiring to first boot using Command, R to get to utilities and then running command line in terminal). Now with Big Sur this does not seem to work. Any other suggestions for mass loading this many returns as running thru Jamf requires logging into all systems then running downloads to Big Sur and running the erase and reinstall commands which I do have setup in Self Service.. just trying to avoid booting and logging in and downloading.

Wonder if anyone can help. Was asked to update our ipad estate to the latest IOS which appeared to go smoothly but on some devices the management tab will not open & will sit there loading until the page is closed. We are on the latest version of Jamf Pro. The database tables check says all is ok.

There has been a request to create a restriction on certain students' iPads to prevent them from disrupting the class. This looks, to me, like a student behavior issue and not a technology problem. Even so, I will like to see if this is possible. The teacher setup is as follows: Teachers connect their MacBooks to the projector via HDMI to teach the class. Here is the issue: students can start "Screen Mirroring" (to the teacher's MacBook) from their iPads triggering the "Join" code to overtake the class screen and interrupt the class. I will assume that if something can be done it will take a "Configuration Profile" scoped to the incurring student's iPads in order to block the Screen Mirroring from being available on the iPad. I have only found some restrictions for "Airplay incoming requests" and "AirDrop", but, none do the trick. Let me know your thoughts!