I'm sure this has already been covered somewhere, but I can't find anything helpful.  Under Patch Management and a given App (e.g. Visual Studio Code), the patch report showing the devices with a given version provides a "Last check-in" time.  What I am seeing are times very much in the future (appears to be 4 hours).  And, I cannot find a setting anywhere that would allow this to be adjusted to my timezone (assuming it is just a time zone setting).  There is the setting for my account, which is set to NY (UTC -4).  Any ideas?? 

Hi All,I just wanted to know one thing that I created prestage enrollment configuration in my Jamf console, I can see serial number of my organization's device is populating here but it is not marked as checked, so what is the significance being marked as checked and not checked in my prestage enrollment? If not checked and if I turn on the device then device will be enrolled in Jamf or not? If I mark it checked then turn on the device what will happen to notice with another one which is not marked as checked?Please explain me in details.

We have a policy that uses the Software Updates payload to force users to install macOS updates.  By default it's set to run once a month, so users get prompted to install updates, but sometimes there aren't any updates to install.  So it pesters users for no reason.Ideally, I'd prefer that the policy check for available macOS updates, and only prompt the user if updates are available.  Is anyone already doing this? If so, how?If there isn't an existing solution, I'll try and create my own. I've been thinking about how to best accomplish this.Perhaps using two policies, like so:Policy #1 would run daily and check for updates using whatever method works (perhaps this):softwareupdate -lIf Policy #1 finds an update, it would use a custom trigger to run policy #2, which would force an update using the Software Updates payload.  (I would allow users to defer it for x days, (where x is a number chosen by our security team).Advice (and constructive crit

Hey Guys, I'm new to JAMF Nation and Casper - and need to create Apple ID's for our 250+ ipads. Looking at the Batch Creator on https://github.com/aaronfreimark/Apple-ID-AppleScriptIt's really great, but i'm not so great on Apple Scripting - so I think there is things in the script relating to the US Apple Store but I can't find it. Does anyone have anything thats worked in Australia, on Itunes 12.1 and Yosemite. Also does anyone have a Verify script for Gmail to then verify all of these newly created Apple ID's. Any help would be appreciated. Thanks

Hello, Most users currently running Jamf Connect app 2.19. I myself have been running the 2.22 app version for a month or so now (just updated to 2.23 today. Our Jamf Connect Login and Jamf Connect Menu Bar configuration profiles are set for the 2.19 version of preference domain. I am wondering if I should change the preference domain version AFTER I deploy the latest version, or BEFORE I deploy the latest version. Does the timing matter? My computer has been running fine using the 2.19 preference domain while being on the 2.22 and 2.23 Jamf Connect app versions. We do not have Auto Updates setup for Jamf Connect as I would like to manage update manually and controllably.   

I am not sure if it is a coincidence or not, but we have seen the following problem happen on devices after updating to iOS 16.4 +.We have web clips on our devices that point to MS forms pages on our SharePoint environment. They will load once, but any other reloads bring up a blank page. All other web clips (non-Microsoft) work fine. These devices do have a Content Filter Configuration Profile installed on them. When we remove it, the SharePoint web clips work as expected. So the problem is with the filtering. I am hoping someone has had a similar issue and was able to determine the additional site that need to be added for Forms in SharePoint to load properly. I really do not want to enter in the long list of servers that Microsoft has, in the link below. We did test it on Edge, thinking it might be Microsoft being Microsoft, but unfortunately with the same resultsMicrosofts Listing of Servers Did try diagnosing with Charles Proxy and WireShark, but the sites we got th

Hey all,We found that some of the parental controls from screen time on our MacBooks cause issues with test loading in TestNav and we have to disable them.  Im now trying to create an extension attribute to show if the user has screen time enabled so we can send a message to these specific students and parents.During covid we provided instructions for parents to enable screen time on their kids devices, but now have to send messaging out to have them disable it for the tests.Anyone have any suggestions?

Anyone deployed RedSky MyE911 with JAMF? RedSky E911 is a cloud-based emergency call routing service that helps organizations comply with E911 regulations Kari's Law and RAY BAUM'S Act. Both are separate pieces of legislation that were passed in the United States with the goal of improving public safety and emergency response. I believe a configuration profile will be needed to allow access to system events. Not too sure if I will need to get the Team Identifier or Bundle ID. Also, looking for a way to automatically input the host address so users won't have to manually input it. If anyone already has this set up and don't mind sharing, that would be awesome.

Trying to figure out the update process. I'd like to keep my macs up to date with the latest versions, especially when i see the notes identifying an issue I'm having. The problem is, I can't see how to scope an individual machine, or several machines, to test the latest update. Is that even possible?

I recently updated my Jamf Pro instance to the latest version, but I am unable to locate the Jamf Pro Laps feature. Can anyone provide guidance on how to set it up? The "Jamf Pro API Changes and Enhancements" section has been updated since the initial publishing of these release notes to clarify information in a note about how the local administrator password solution (LAPS) feature works with a secure token.

jamfcloud.com/devices/updatesNew look update button in the updates page needs a little UI polish to fix the button width relative to the text/symbol overlay.

I've installed the connector according to Jamf documentation on a server running Windows server 2016 and different one running 2022. I have found multiple posts on the Jamf forum regarding setting up a service account as the identity on the ADCSproxy. I created a service account, switched the identity, I added the same service account to the IISUSR group on the machine, and to the local admins. Port 443 is open on the device, port 443 is open on our network. When I try to test the site from within the IIS Manager, I get an error: ERROR_CONNECTION_RESET. Certificate invalid, site not secure. Any ideas?

Hello everyone,We have encountered a problem that we have never encountered before. When we enrolling our new M1 Macs, the computer restarts or shuts down after we have logged in at the remote management.The only thing left to do is to reinstall the computer again. If we're lucky, the problem won't reoccur. But we have had to reinstall some computers several times.The devices ship with macOS 12.3.0 and we're running on-prem Jamf Pro 10.30.3, if that makes any difference.What could be the error? Does anyone know? Is there any solution? Seen others with the same problem on this forum but not with any confirmed solution.

I have created and configured a lot of Jamf Pro servers over the years. While creating a new one today to use for testing, I ran into an issue I have never seen before. While following the steps for installing Jamf Pro on Ubuntu I am not prompted to create a root user password during the MySQL install process. I'm also not prompted to use legacy authentication. The Jamf article I am using is here:https://learn.jamf.com/bundle/technical-articles/page/Installing_Java_and_MySQL_on_Ubuntu_for_Jamf_Pro_10-14-0_or_Later.html#concept-5140What, if anything, could I be doing wrong? MySQL installs. I'm just not being prompted. Even though I have followed this process many times I always pull up the instructions published by Jamf to ensure that I complete all steps and catch any new or modified steps. Fortunately I have a snapshot of my server so I can revert back to the base install of Ubuntu quickly.

I just configured Teamviewer Remote integration after watching this videohttps://www.jamf.com/resources/videos/jamf-pro-and-teamviewer-supporting-users-wherever-they-are/and the documentationhttps://docs.jamf.com/10.32.0/jamf-pro/administrator-guide/TeamViewer_Integration.html All went well but there is an issue if I click in Jamf on the manage computer and and Management I dont see the option for Remote Management in the list!!Is it buggy or what could be missing that it is not working?

I feel like I'm playing whack-a-mole with these but our students with macbook airs are finding ways to get around everything I have in place and still managing to install VPNs Students have a standard accountI have a profile in place to prevent adding chrome extensionsI have the App Store set to updates onlyStudent devices have Securly at home filtering set up The latest VPN they have is StarVPN it doesn't show up as running, the only way to see it (so far that i've noticed) is it adds a network service, which they shouldn't even be able to do without admin permissions. any suggestions on preventing this further? We are being forced to hold off on device collection until the last day of school and are worried that VPNs will prevent us from locking computers that aren't returned.

Hello,I hope someone have a suggestion how to sovle this in Jamf ProI want to have two Search Invetory Groups1. One that list all Macbooks we have that are managed but never wiped with remote command.2. All Macbook we have still in Jamf, but they have been wiped with Wipe Computer command = not in use anymore.The reason for this is that we must keep all computers in Jamf that we have taken out of use, but still remain as proof that we have done a remote wipe on them.

Can anyone tell me the location of the Self Service company branded icon.This is not the Jamf icon found in Applications/Self Service.app/Resources/AppIcon.icns I am after the branded icon that you upload into the Branding section of Self Service in Jamf Pro. The reason I ask is I wanted to add this to messages we send out using Jamf Helper and -icon "full path to icon location" I would have thought this would be locally on the machine somewhere, but I have had no luck looking for it on the machine, or within Jamf Nation posts. Many thanks

If I have Jamf cloud and I have integrated my Jamf cloud with Azure AD for device compliance and also registering the mac in AAD then should still need AD-CS connector to get the certificate? If yes then why? and this AD-CS connector should run on DMZ?How can I know if AD-CS connector is integrated properly in my Jamf? Is it from Settings/PKI Certificate/Certificate authority?

We have been using EAP-TLS wi-fi with our iOS and macOS devices for some time.  I use a Jamf pro configuration profile with 3 parts:1) install the wi-fi profile2) install the root and intermediate certificate for our internal AD CA3) use SCEP to request a machine certificateBut I'm looking to expand this so the wi-fi user also gets a user certificate.  I can utilize more Wi-Fi roles and place users into different VLANs and ACLs, etc.So my question is anyone installing AD CS user certificates on your macOS and iOS devices?  Are you doing it in an automated way using SCEP?  Or are the users going to a web site and enrolling themselves?If you can help, please provide as much detail as possible.

Hi guys,i am willing to create a schedule task in order to restart my managed ipads every week.is it possible?

Curious about any district using MacBooks (Pro, Air or otherwise), and if you are using any app or service for more parental controls? I have parents wanting more control of website blocking, time limits, and general view of what their child is doing on said machine. Jamf Parent would be great for this if it worked with Macs and not just iPads. Gabe ShackneyPrinceton Public Schools

Hi All,I’ve come across a strange issue stopping me rolling out M1 MacBook Pros to our users to replace older Intel machines.I’m unable to use ARD to screen share onto an M1 Mac in these scenarios:Filevault on and Firewall onFilevault on and Firewall off Works if Filevault is off and Firewall on or Filevault is on and Firewall is off.I’ve tested a MacBook Pro 14inch and 16inch M1 running Monterey 12.0 through to 12.2 with the same result. If I test an Intel Mac with the same Filevault/Firewall on, ARD works no problem. Not sure if I’ve missed something daft on these M1 machines or a bug in Monterey on Apple silicon. Cheers,Robert.

I'm trying to authenticate against the JSS API URL with a valid login credentials and it seems to constantly fail, e.g. ../JSSResource/accounts with error 401, not authorized. The user has full admin privileges, but continue to fail on the basic auth. I've even tried cURL to see if the behavior is different: $ curl -kvu "jss:****************" -H "Content-type: text/xml" https://jss.*********/JSSResource/accounts * Trying *.*.*.*... * TCP_NODELAY set * Connected to jss.**** (*.*.*.*) port 443 (#0) * ALPN, offering h2 * ALPN, offering http/1.1 * Cipher selection: ALL:!EXPORT:!EXPORT40:!EXPORT56:!aNULL:!LOW:!RC4:@STRENGTH * successfully set certificate verify locations: * CAfile: /etc/ssl/cert.pem CApath: none * TLSv1.2 (OUT), TLS handshake, Client hello (1): * TLSv1.2 (IN), TLS handshake, Server hello (2): * TLSv1.2 (IN), TLS handshake, Certificate (11): * TLSv1.2 (IN), TLS handshake, Server key exchange (12): * TLSv1.2 (IN), TLS handshake, Server finished (14): * TLSv1.2 (OUT),

Having a little trouble finding the correct operations to pull the Warranty info from the API. Im not even sure if it is possible. The reason to do this is to have a popup on a computer, which is coming up to warranty end, to inform the end user to prepare their machine for replacement. If there is a better way to do this please let me know.