Recently had a customer report a lost iPad so I did a search for the device to put it in lost mode. When trying to click into the device details, Jamf just spins endlessly. I was then able to click into several other devices with no issue. Restarted the browser, cleared the cache, restarted the computer etc- no change. This has happened before and is extremely frustrating.

Any idea why there is not a Jamf Pro Binary definition for patch management ?

Hey all, Hoping you all can shed some light. Essentially, I'm trying to create an extension attribute to simply pull the agent version and build info.https://community.jamf.com/t5/jamf-pro/extension-attribute-tenable-network-security-nessus/td-p/109007 So I'm following the above article related to its extension attribute setup. Deployment is going well but getting Jamf to acknowledge via the setup of an extension attribute is rough for me. Namely in the Nessus Agent Version and Build info:  I'm going awry somewhere so any help would be appreciated if possible.

Am I the only one? I have the problem that the configuration profile, which is automatically installed on an iOS device, is reinstalled after a certain time.I can sometimes (not always) reproduce the issue by changing the device name and waiting, or by clicking Update inventory in Jamf Pro.After that, configuration profiles are reinstalled although they are already installed on the iOS device.The user has to re-enter his Exchange password or CardDAV requires a password after the configuration is reinstalled.Configuration profiles that will be available in Self Service are not affected.We also manage Macs in Jamf, we don't have any problems with that.I've been in contact with Jamf Support for months, but I wanted to ask the Jamf Nation community if anyone had the same or similar problems and could possibly give me a tip.Since February 2023 we have been using Jamf Pro Cloud (migrated from OnPrem).Device Compliance for macOS and iOSCloud Identity Providers: AzureSingle Sign On: AzureThank

Pretty much the title. I'm doing some testing for Jamf Connect deployment and for an account that has an admin role assigned in Azure (which is what I'm using for the identity provider) it will prompt me to make a new local account and sync it with Azure or it will ask me to sync a current local account. But for some users I'm not getting the option to make a new local account. I have the option to "hide the create new user option" unchecked so I don't think that is the issue.  This would only be an issue for new users. I assume I can just make the non admin local account beforehand and let them sync, but if I can avoid doing that let me know. 

I am trying to figure out how to deploy a script to our users that deregisters the O365 suite. On the Microsoft site I have found the following Terminal command:defaults write com.microsoft.Word ResetOneAuthCreds -bool YESThis works like a charm when I run it locally, but when I try to run it through Jamf (selfService) it gives no result. I think this might be because the script through Jamf does not run as the logged in user.This is what I have sofar:#!/bin/bash#Remove all Microsoft usersdefaults write com.microsoft.Word ResetOneAuthCreds -bool YEShoping there is someone that can point me in the right direction here.

am trying to deploy in the laptops with M1 chip, but its getting failed at the end while installing with an Error: Push workflow for macOS update/upgrade via MDM timed out after 300 seconds, trying again in 3600 seconds Does anyone found a solution

Hi,We've a 401 Unauthorized error en trying to connect to our Jamf Pro this morning.Is there a know issue or it's just us ?Tks.

With a jamf configuration profile, is it possible for web content filtering to only allow urls starting with for example www.youtube.com but blacklist all other sites?

I'm working on an extension attribute script, that utilises API, which uses the assigned user and the MacBook serial number, to populate information of assigned devices managed and total based on the assigned user. it took a while, but I am near complete, the problem I appear to be having now is generating a clickable linkThe below will generate all the HTML code but it will just appear as text instead of insert into the web page to be clickedecho "<result><p><a href=\\"$jamfProURL/mobileDevices.html?id=${managedidmobiledevicearraydata}\\">$managedidmobiledevicename</a></p></result>"and this will just list a URL as textecho "<result>$jamfProURL/mobileDevices.html?id=${managedidmobiledevicearraydata}</result>"does any one know how this could be achieved so it would list the URL as a clickable URL? I suspect it would likely be a limitation of how the java script is treating anything between <result></result> as only text?

We recently changed a configuration profile for our iOS devices and now devices compliance issueNow many of our iOS devices are going in and out of compliance, showing that the passcode on the phone is not compliant, when it was. Is there someway to stop this from occuring?

We recently changed a configuration profile for our iOS devices and now devices compliance issueNow many of our iOS devices are going in and out of compliance, showing that the passcode on the phone is not compliant, when it was. Is there someway to stop this from occurring?

It was my understanding that when bootstrap token is escrowed to jamf, users will get a secureToken upon first login. Is this wrong to begin with? I created a new admin user via Jamf policy, and then used it to log on to the machine (physically, note remote so to speak). It is not getting a secureToken. Jamf says the bootstrap token is escrowed. Computer as well:sudo profiles status -type bootstraptokenprofiles: Bootstrap Token supported on server: YES profiles: Bootstrap Token escrowed to server: YESAm i missing something? Tried creating a new user from system settings (although with the user created by policy). Same result.The mac is an MBP M2 with 13.4. We're running Jamf cloud 10.46.1-t1683911857 

Hi. A few users within our organization are having a daily pop-up that will not go away. Any idea on how to get rid of this?

Good Afternoon, Has there been any updates to PI110959 ?  Thanks

Hello All,We are new in our setup of Jamf Pro and had to remove the Prestage Enrollments config so we could get a computer to our current config to test enrolls. After removing the Prestage Enrollment config and readding the computers we are testing with will not re-enroll using this https://learn.jamf.com/bundle/jamf-now-documentation/page/Re-enrolling_a_Computer_Using_Automated_Device_Enrollment.html as well as a newly wiped machine that is being activated is not going through the pre-enroll process that is configured. Also we are seeing a pop-up now which was not seen before the removing and readding of the Prestage enroll config which states "Confirm Prestage Account Settings Creastion, Prestage account settings creation may take extended time to save. Do not refresh." Click save and it goes through just fineWe ran through a user driven enroll on the computer in hopes it would fix the pre-stage and re-enroll issues we are seeing, it did not. After user enroll initiated a wipe throu

I'm hoping someone has gone through this process and has some ideas. We are an on-prem Jamf Pro shop. We are looking at implementing some things with out macOS devices as part of our new security process. I've tried doing the LAPS scripts that have been put out by Josh Miller, and PezzaD84 on Github. I've also tried setup up and configuring the new built in LAPS in 10.46. I've run into various issues with those options and figured I need some help. We have our setup as mostly set and forget, so I'm not well versed in Jamf as others might be.The built in API LAPS option might work, but we don't have any computers that are currently enrolled with prestage. The test machine I'm using was manually enrolled. The scripts from Perry seemed the most robust choice with password encryption etc. but seem to not be fully configured right on my end. I'm wondering if some of the issue is since we are running on a Windows server, since that's or core infrastructure, and not a macOS bas

We have had the following problem or bug for the past two days. Certain iPads are receiving the (automatic) command to "update profiles." Afterwards, they become members of all dynamic device groups and load apps, restrictions, etc. Nothing has been changed either on the iPads or in the groups. What's really strange is that the group memberships should actually exclude each other. For example, students and teachers, location X and location Y (60km apart, dynamic group based on IP), school A and school B, etc.Has anyone ever encountered a similar case or have any idea what might be causing this?Thanks in advance :)

 Hello, my script continously asking for user password id blank is left empty ! any idea to fix it:  # Password validation loop.TRY=1until /usr/bin/dscl /Search -authonly "$user" "$USER_PASS" &>/dev/null; do(( TRY++ ))echo "Prompting $user for their Mac password (attempt $TRY)..."USER_PASS=$(osascript -e 'tell application "System Events" to display dialog "Please, type your Password to start the operation:" default answer "" with title "test" with hidden answer buttons {"OK"} default button 1' -e 'text returned of result' 2>/dev/null)if (( TRY >= 5 )); thenecho "[ERROR] Password prompt unsuccessful after 5 attempts. Exiting script..."exit 1fidone

Does anyone know if the 8x8 Work app can be deployed via Jamf? I tried converting the dmg to a pkg in composer, but that didn't seem to work. I'm also open to using a script to install it. Any thoughts are appreciated. Thank you!

We are using Jamf School to manage our fleet of iPads. Is there a restriction that will prevent the user from clearing their browser history in both Safari and Chrome? Also, I'd like to disable Incognito mode in Chrome.

Hi all,I want to write a scripts to auto select Monterey or Ventura installer.The scripts is here:#!/bin/bash### CHECK AVAILABLE DOWNLOADS GET_OS_UPDATE=$(softwareupdate --list-full-installer | sed -n 3p)sleep 1TRIM_OS_VERSION=${GET_OS_UPDATE#*Version: }echo "$TRIM_OS_VERSION"OS_BUILD=${TRIM_OS_VERSION%%, Size*} ### GET THE MAJOR AND MINOR VERSIONS: majorVersion=$(echo "$OS_BUILD" | cut -d "." -f 1)minorVersion=$(echo "$OS_BUILD" | cut -d "." -f 2) ### GET THE NAME: TRIM_OS_NAME=${GET_OS_UPDATE#*Title: }echo "$TRIM_OS_NAME"OS_NAME=${TRIM_OS_NAME%%, Version:*}InstallerPath="/Applications/Install\\ "$OS_NAME".app/Contents/Resources/startosinstall" osascript -e 'tell app "System Events" to display alert "Downloading '$OS_NAME $OS_BUILD' update"'softwareupdate --fetch-full-installer --full-installer-version $OS_BUILD####Variables # Determine the current usercurrentUser=$( scutil <<< "show State:/Users/ConsoleUser" | awk '/Name :/ && ! /lo

Hello,For time to time we might ask user to prompt his password if no workaround is available depending on scenarios.When deploying below script, user is not forced to type his password. He can just drag the prompt windows aside and continue working. Is there a way to:1) display the prompt windows on full screenor/&2) if not answered, user cannot continue working as per mac software installer "when admin pwd must be put"#!/bin/bash user=$(ls -l /dev/console | awk '{ print $3 }')PROMPT_TITLE="Authentication Needed"Logo="/Users/Shared/loreal.jpeg" echo "Prompting $user for their Mac password..."USER_PASS=$(sudo -u $user /usr/bin/osascript -e 'display dialog "Please, type your Password to start the xxxx operation:" default answer "" with hidden answer buttons {"OK"} default button 1' -e 'text returned of result')exit 0

Hi,Using Jamf cloud - very new to JamfCurrently trying to setup MS defender and deploy the App to my test Mac Devices - followed this guidehttps://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/mac-jamfpro-policies?view=o365-worldwideThe defender app (.pkg) has been downloaded from our 365 defender Portal by our Admin)I can deploy the MS Defender App manually.In Self Service When clicking on install - after a moment - it reports 'item failed'The Jamf Log on the device  it states 'The message could not be parsed'Can anyone give some further advice as to where to investigate this issue - how would I check the content status on the jamf cloud ? - thinking this is the only difference between successfu;/unsuccessful install ? Many Thanks

In Jamf Pro, we disabled the Airdrop feature for one of our systems to comply with CIS benchmarks. However, in Jamf Protect insight, it still states that the system is non-compliant. Could you please assist us in resolving this issue.