Hi all,I am currently facing a really bizzare issue and not really getting far with support.I have a prestage enrolment which for the most part works fine. It prompts for authentication and ive set it to pre populate the 'user creation' screen with the username used on the enrolment authentication prompt.Policies run in the background as normal, however after the user is created and it logs in (automated process with the prepopulated fields) any subsequent polices set to run on enrolment complete do not run.If i use a prestage enrolment which doesnt automatically create the user (so it sits on the login screen) all policies run, however I then face issues with other things)If i set the prestage enrolment to create a user (but for me to enter the details manually on the user creation screen) all policies run if I leave it on this screen. If i create the user and log in as it while policies are still running it will interrupt the process again.I have tried turning off all check in option

Following the upgrade of our cloud instance to 10.46.1 over the weekend, we have machines that are reporting the following in their jamf.log on a repeated basis:Mon May 22 17:47:51 TEST-MBA13 jamf[299]: Upgrading jamfHelper.app...Mon May 22 17:47:51 TEST-MBA13 jamf[299]: The checksum of /Library/Application Support/JAMF/tmp/jamfHelper.app/Contents/MacOS/jamfHelper did not match. (259218dc3c490c86db89be5bc936db11 != e9a1923730a36128986922e6d3a9b9d0)Mon May 22 17:47:51 TEST-MBA13 jamf[299]: Upgrading JAMF notification service...Mon May 22 17:47:51 TEST-MBA13 jamf[299]: The checksum of /Library/Application Support/JAMF/tmp/Management Action.app/Contents/MacOS/Management Action did not match. (35247d66f433b9b6406e4d2f62d737bd != 0ccbad7bef47314eca5e58ac7ab373c2)Beyond the fact that this is showing up repeatedly in the logs, it also appears to be causing self-service triggered policies to falsely report failures (the user receives a "Item failed" notification, but the policy performs the ta

Hi all wanted to share this in hopes it's useful for anyone. I wanted a way to be able to collect the last backup done by Druva inSync just to avoid having to go to two different interfaces to find out. It could be improved a bit more, but it does what I need it to do at this moment. I also wanted to avoid having to install anything extra. #!/bin/bash #Created: 5-05-2023 #Description: Runs through all druva insync logs for that last finished backup cycle and returns the date and time # Get the current GUI user's username gui_user=$(stat -f '%Su' /dev/console) # Loop through the log files in reverse chronological order until the "Finished backup cycle" line is found backup_finished="" IFS='' log_files=$(ls -t "/Users/$gui_user/Library/Application Support/inSync/logs/inSyncClient"*."log") while IFS= read -r log_file; do if tail -n 50 "$log_file" | grep -q "Finished backup cycle."; then echo $log_file backup_finished=$(tail -n 50 "$log_file" | grep "Finished bac

Can anyone explain the Activation code and Licensing? We are licensed for 195 and we are at 195 active computers.  I just received an Activation code for 215 which I added to Jamf Pro in Settings - Activation code.Do I have to update the license configuration file again to have computers update to the 215 licenses?  Is there a document referencing when we get a new activation code and what has to be done for licensing?  

Hi A question: How can I deploy to turn on automatic login for a local user. I found in a other discussion this script but I cant get this working: http://www.brock-family.org/gavin/perl/kcpassword.html What do I have to do to enable the automatic login? I'm a bit confused with this script. Thank you!

A couple of users departed & we don't know their iPhone passcodes.Their iPhone 12's have iOS16.x installed and are Supervised and Managed. They have been restarted. The phones have Verizon SIMs and show an LTE data connection (we have poor service in this location).It seems these phones do not connect to WiFi until the passcode has been entered.Swiping up just brings up the passcode screen with "Your passcode is required when iPhone restarts".Problem - Tried sending 'Clear Passcode' management command assuming it would go via Verizon cellular data but it just shows as Pending in Management History tab (in the queue with the Update Inventory command).Question  - should I expect 'Clear Passcode' management commend to work over a cellular data connection after an iPhone has been restarted?Many thanks!  

Update 10 May 2023: Cloud upgrades are scheduled for the weekend of 19–20 May (details below). We appreciate your patience. Today we are releasing Jamf Pro 10.46. Highlights of this release include: Declarative Status Reporting for Additional Inventory Attributes The following Jamf Pro inventory attributes are now subscribed to the declarative device management status channel: Computer Inventory AttributesOperating System Category > Operating System Supplemental Build VersionOperating System Category > Operating System Rapid Security Response Mobile Device Inventory AttributesSecurity Category > Passcode Compliance Updated Expiration Notification for the Jamf Pro Built-In Certificate Authority The expiration notification for the Jamf Pro built-in certificate authority (CA) has been changed from 90 days to 360 days. This change provides you with more time to take action. The notification will persist until you renew the built-in CA. After you renew the built-in CA, it will b

What is the best way to identify endpoints with removable MDM profiles? I suspect that some computers in my environment may have been deployed that way before I was hired.

In March of 2023 announced the release of the Jamf 170 Course, and that it was ready for learners interested in security and Jamf Protect. Well, the content became available, but there was one little component we promised would release later in the year. After all, what's a certification course without a certification exam?We're super excited to share the Jamf 170 Course has been made whole with the release of the Jamf Certified Endpoint Security Associate exam! The format and expectations to obtain certification are similar to the Jamf 100 Course. From our About the Exam page: The Jamf Certified Endpoint Security Associate Exam is available here in English. It costs USD 100.00. Customers have 1 opportunity to take the certification exam per enrollment. Customers are eligible for a full refund if cancellation is made without taking the exam and is within 10 business days of purchase. After purchase, customers have 45 days to complete the exam. The cer

Hello,We are running on-premises JAMF Pro 10.37.2 server, and today we've got our first M2 MacBook to enrol.The enrolment process  was similar to M1, however it didn't apply any policies or profiles till I manually run jamf recon and then jamf policy and jamf manage commands - it was just MDM profile sitting there for a long time and that's it. Typically it's finishing enrolment in couple minutes with no issues - at least for other Intel and M1 Macs - moreover other Macs enrolled around the same time finished the process successfully, so it doesn't look like network problem.Unfortunately, we haven't got other M2 Macs to check if this issue is related to new M2 chip or not.Has anyone else faced this kind of enrolment problems with M2 chips? Is JAMF supporting M2 Macs already or not yet?Thank you.

Can anyone help me with examples of what to use so I can setup remotelogging? What companies to use, what setups? I understand if this is vague, I am actually struggling on how to ask the question.Problem: Who should be the host for this?Description: If RemoteLogging is used, this will send the logging for Privileges.app to a remote syslog server.If using RemoteLogging, then the following subsidiary keys must also be set:ServerTypeServerAddressServerPortEnableTCPSyslogOptionsLogFacilityLogSeverityMaximumMessageSizeSources: https://github.com/SAP/macOS-enterprise-privilegeshttps://github.com/SAP/macOS-enterprise-privileges/wiki/Managing-Privileges

Hey,I am getting the above error message when I try to enroll Jamf Pro into a macOS 13.3.1 Virtual Machine.There are several MS Office Apps scoped to this Mac but the download/installation will not start.Installing MAS Apps on the Mac Host and other Jamf Pro Clients work like expected, any thoughts on this issue?Thank you! 

Is it possible to set an Extension Attribute using a policy?I have an extension Attribute and I want to set to yes using a policy

New in Setup Your Mac (1.10.0), Dynamic Download Estimates leverage the built-in macOS networkQualitybinary to provide end-users with approximate Configuration durations, based on the actual speed of their specific Internet connection (which can aid end-users in selecting their preferred Configuration).Additionally, Mac Admins will appreciate the newly added Slack and Microsoft Teams integration, Streamlined Customization and more, making SYM 1.10.0 one of the most significant upgrades yet.IntroductionApple’s Automated Device Enrollment helps streamline Mobile Device Management (MDM) enrollment and device Supervision during activation, enabling IT to manage enterprise devices with “zero touch.”Setup Your Mac aims to simplify initial device configuration by leveraging swiftDialog and Jamf Pro Policy Custom Events to allow end-users to self-complete Mac setup post-enrollment.New Features in SYM 1.10.0Dynamic Download EstimatesSlack and Microsoft Teams IntegrationStreamlined Customization

Hello All,Am testing my installation of Jamf Connect. The scripts open an Applescript and the user select Accept to trigger the policy to install Jamf Connect. The log below appears randomly when testing. Could I be missing something in the script to avoid the error?  #!/bin/bash ## This will display a pop up window and freeze Finder. The user will have to click Accept to start the next line 'Start the policy' button=$(/usr/bin/osascript << EOF tell application "Finder" activate display dialog "Jamf Connect is here! Please save your work and click Accept." buttons {"Accept"} with icon POSIX file "/Library/Application Support/SunPower/brandingimage.icns" with title "Important!" end tell EOF) sleep 5 # run policy with returned value /usr/local/bin/jamf policy -event "$button" 

Hello guys,we have some problems with our jamf school solution. We are currently running around 2k iPads in different locations. The wifi settings are deployed via a wifi profil.We selected following options:[X] Auto join[X] Enable if target network is not open or broadcasting[X] Disable MAC Address RandomizationOur Wifi-SSID is not broadcasting and set to WPA2-Personal.Most of the iPads are connected properly but couple one arent or taking like 2 hours of time or not connecting at all.If i look in jamf, the correspondent ipads got the profile pushed and installed... A reset of the iPads is working but inconvenient. Sometimes also iPads that already connected, loosing the connection and do not reconnect at all...We are running a guest network, hidden, vlan tagged but open to the internet. Most of the iPads are running 16.4 or newer...Thanks in advance for your helpKind regardsConrad

I use Jamf patch management definitions to help with our patching process, as it makes it easy to build the correct Smart Computer Groups using the criteria.I just noticed that the current version of Microsoft Teams (standalone) that can be downloaded from macadmins.software is showing version 1.6.00.11156, or "61156" as the CFBundleVersion displays it. I confirmed this right now by downloading the latest version linked there and examining the pkg in Suspicious Package.Yet, in Jamf's Patch Management, I'm seeing this for versions of Microsoft Teams.There is no version "611156" listed in the patch definition. Am I just missing something or did Jamf miss one of the versions for this title? Maybe 611159 it was supposed to be 611156?This is the first time I've run into a missing version in patch management that I can actually verify is a version I can obtain from the vendor.

We recently updated App Installers section of the Jamf Pro Admin guide (in 10.40) to provide more detail on the App Installers workflow.As we call out in this section, App Installers uses the InstallEnterpriseApplication MDM command as its deployment mechanism whereas other app deployment workflows such as policies and patch management use the Jamf management binary. The MDM command does not provide us with the same amount of control as we have with the Jamf binary and depending on how the original software vendor designed their installation mechanism, the installation experience can be quite different than that of an installation that was triggered either via a policy or with a GUI triggered installation  (i.e double clicking the installer).This has resulted in a less than ideal end user experience with a number of the software titles that are being updated by App Installer such as apps being killed whilst the end user was running the app with no warning, strange dialogs, etc.To

Knowledge sharing is the most rewarding experience any of us can have. As technology professionals, we have all likely had an occasion or two where we shared something we know with someone who could benefit from the information. Many of us create videos and keynotes to train and conduct presentations. As a Learning Experience Designer within Jamf’s Customer Education department, I make a lot of videos and keynotes. I’ve found that great keynotes focus on graphics over text to aid in visual storytelling. Consistent spacing, easy-to-read font, and clean animations also add to a fantastic keynote. When delivering your keynote, make sure to bring energy and passion to excite your participants and energize them to learn. To help you create a great future video or presentation, here are six resources I frequently use to design and deliver amazing content. Keynote     Apple’s Keynote app is a mainstay in the presentation landscape. Keynote is well-known for its stunn

I'm not sure if anyone here has tested the updated version of Configurator or was aware that they added the ability to install apps with the App Store disabled. My excitement over this feature dwindled when I found an iDevice enrolled in Casper would error out if an app was added to Configurator and pushed to it. Removing the enrollment profile and using a profile created in Configurator allowed the feature to work. Bummer.

Hi,Can someone take a look at my Printer management profile and see if you can tell what is off? It's not working, but I feel like I'm close. Device URI: smb://oesprint.oes.edu/LS_XeroxCopier_MacOS (This should be correct it's working in Jamf Pro)Display Name: OESPRINT_LS_XeroxCopier_MacOS (this is the CUPS name of the printer)Location: blankModel: "Xerox Color C70, 5.7.2"Printer locked? Not requiredPPD path: file://localhost/Library/Printers/PPDs/Contents/Resources/ Xerox Color C70 Xerox Color C70.gz I'm really not sure about the PPD path. I installed the Xerox drivers on the computer. There is a "Xerox Color C70.gz" file in the path where the PPDs are, but I'm not sure what to do with it because it appears to be zipped and not a .ppd file.

Hi,We are looking at increasing the amount of characters needed for passcode in the config profile.Is the "Change at Next Authentication" a one time change and if not how often does it repeat? Cannot find an answer in Jamf documentation.Thanks.

Hi, I tried using JAMF school to set the names for all new devices.  Under device placeholder I updated "Set Device Name" in JAMF and the Macbook device Computer Name did changed but when I use terminal to check hostname is it different. Is there a way to change all names at once?Thank you 

Has anyone worked on chrome extension I want to user to block installation of chrome extension and existing extension should work without any issue.

Hi,Trying to figure out if I did this correctly. The EAs said it's okay, but the CIS Report says the script failed even though the configuration profile is there.Is this how you would do the configuration profile? Maybe I got the "string" detail wrong. @jmahlman