Hi Guysare we able to add another authenticator app to jamf if the user does not have access to the internet to login okta to be able to use local to login 

This is the default .sh script for ManageEngine Asset Scan. I modified the variables #!/bin/sh ############ Server details ############ hostName="MSD69" portNo="443" protocol="https" ############ Server details ############ SUPPORT="assetexplorer-support@manageengine.com" PRODUCT="AssetExplorer" COMPUTERNAME=`hostname` OUTPUTFILE="$COMPUTERNAME.xml" main() { echo "##### Scanning Started #####" echo "<?xml version="1.0" encoding="UTF-8" ?><DocRoot>" >$OUTPUTFILE constructXML "ComputerName" "hostname" constructXML "OS_Category" "uname -s" echo "<Hardware_Info>" >>$OUTPUTFILE constructXML "OS_Category" "sw_vers" constructXML "Memory_Information" "sysctl hw.physmem" constructXML "Memory_Information" "sysctl hw.usermem" constructXML "Memory_Informationw" "sysctl hw.memsize" constructXML "Memory_Information" "sysctl vm.swapusage" constructXML "Computer_Information" "hostname" constructXML "Computer_Inform

I'm currently working on a workflow to resolve some missing Secure Tokens for users at a client site. Because I don't want to test on production machines, I've got a machine here that I've enrolled in my own Jamf tenant to test against. My issue? I can't REMOVE Secure Token from one of the test users on this machine so I can test the script.FV is not enabled, the admin user has Secure Token. I run the following command in CLI and get an error:sudo sysadminctl -adminUser <username> -adminPassword <password> -secureTokenOff <username> -password <user-password>    Result: "Operation is not permitted without secure token unlock"(I also played around with the order of things in the command, no difference)My GoogleFu is failing me because everything I'm finding relates to ADDING Secure Token to a user who does not already have it.  Can anyone shed some light on this for me? Thanks 

Was not sure how to title this one. I recently noticed a policy that was pushing a package failing on most devices. They all had the failed package download error. On inspection I found that the devices were actually NOT in use, the users said the device was left switched on but was asleep. Yet Jamf reports them as checking in and as such tries to deploy the policy, which then endlessly fails.I have never seen this behavior in the past, seems to be new. Anyone else seen this?Jamf Pro sees up to date check-in for device.Application usage log shows no activity.User claims device was not in active use.Policy pushing a pkg will fail.If at number 2 I see application usage, aka device is in use, the policy will complete. So it looks like Jamf is trying to push things to devices that are in sleep mode? Im confused.

Hello All Playing around with the Jamf App Catalog feature.  Wondering when an app updates if the users is booted out of the App or does the install cache install or ?I have auto updates installed on many of the listed apps, so trying to test can be challenging.P.

A new function for your ~/.zshrc to retrieve the managed Apple admin account password from Jamf ProBackgroundWith the enhancements included in the recently released Jamf Pro 10.49.0, we decided to take a more serious look at Jamf Pro LAPS.In doing so, we wanted an easy way for authorized administrators to view the managed Apple admin account password via Terminal.Continue reading …

This post is mostly to document something I ran into, but please feel free to contribute anything that might help.In the process of running CIS L1 audits on Ventura the following was brought to my attention:--------ls -alh /System/Volumes/Data/System/Library/AssetsV2/downloadDirtotal 0drwxrwxrwx@ 2 root wheel 64B Aug 10 15:35 .drwxr-xr-x@ 43 root wheel 1.3K Aug 8 21:32 ..--------The directory is empty and I haven't seen a case where there is anything in it. There is a CIS control "5.1.6" that has a very strongly-worded description of how they think this should not be, so that particular audit fails. I guessed this was legit and got a little more info to corroborate that:--------xattr -l /System/Volumes/Data/System/Library/AssetsV2/downloadDircom.apple.rootless: MobileAssetDownload--------So the file is SIP-protected and in an area where that service is expected to do things. I found other occurrences of the same directory on Monterrey and Ventura systems, but I am not entirely sure of

  Does anyone have any experience With troubleshooting the Office 365 online yellow banner on Jamf Pro Managed devices? I have 3 laptops being marked non-compliant. 

Good morning,I am reaching out to you people since I got ghosted by Customer Success team.Yesterday I bought Jamf 100 exam, Payment when through I got booted out of that login page, money was taken out of my account, I got no confirmation on my e-mail. Anyone encountered this issue before?

Is there a way to remove multiple computers at once from Jamf Protect?I cannot find a way to delete multiple at once and it seems pretty unreasonable to delete hundreds of old computers 1 by 1...

Hi after installing app through JAMF when I am trying to create a shortcut by running this set of code.-------------------------------------------macShortcut.py-----------------------------------------------------------------from re import subfrom pyshortcuts import make_shortcutimport subprocessimport TPLogger as lguser = subprocess.getoutput('ls -l /dev/console | cut -d " " -f4')ruta_user = f'/Users/{user}/Desktop'ruta_app = f'/Applications'try:    make_shortcut('/opt/ex_app.py', name='ex_app', icon='/opt/ex_app/Resources/Images/ex_app.icns',terminal=False, folder=ruta_user)    make_shortcut('/opt/ex_app/ex_appscreen.py', name='ex_app', icon='/opt/ex_app/Resources/Images/ex_app.icns',terminal=False, folder=ruta_app)except Exception as e:    lg.log_info(e)-----------------------------------------------------------------------------------------------------------------sudo python3 /opt/ex_app/macShortcut.py-----------------------------------------When I cre

Hey everyone,We currently have an issue with a number of our intel and M1 Macs where we click the restart or shutdown option and the Mac just hangs on the wallpaper. If they do eventually shutdown or restart the Mac then gets stuck on the apple loading bar. The only thing that works is a Forced shutdown. Login and logoff aren't effected either.At first we thought it could be software not closing properly (we blamed Epic at first) but we have stopped this and others from launching but the issue still persists, I have gone through both launch folders in Library but none of those seems to be causing the issue.We then thought it might be stuck installing updates as we recently updated the Macs to 11.6, but that doesn't seem to be the cause, I have checked the updates cache folder and manually checked for updates just incase it had failed the first time.I have gone through the logs but nothing is standing out that I can see. I have tried a PRAM reset on one of the Macs but that doesn't fix

I'm new to Jamf, but I've been working on configuring the Okta side of things. I've managed to get Jamf Connect integrated with Okta, but I'm encountering an issue during testing. The system prompts for login twice - first for Disk Encryption, then for Okta. Is there a way to streamline the process so that only the Okta login is required to access the Mac, without involving the local account that Jamf Connect set up? Your guidance would be much appreciated.

Our current Jamf Pro instance is a mess with unpatched apps missing packages and policies no one has tended to in years. I recently learned about Jamf App catalog and have 8 "Jamf App catalog" apps deploying on my dev server. Besides the known limitations of Jamf App catalog (less control over versions, lack of verbose install feedback, etc) are there any other downsides to using Jamf App Catalog for basic apps like Chrome 1Password etc? Will I regret not doing it the old way?Jamf App catalog seems much easier to maintain. Am I missing an obvious downside to Jamf App catalog?  Would love to hear about others views on this.  

Hey Everyone,I'm having some trouble with authentication of Cisco ISE & Jamf Pro over Ethernet. My Macs are not domain bound and are using Jamf Connect and Intune registered via Jamf and ADCS. If anyone has some leads enabling User Auth without domain bound macs this would be awesome, after I get the wired working right.My ADCS CertCertificate Subject= CN=$COMPUTERNAMESAN Type= URISAN Name= ID:JAMF:GUID:$MANAGEMENTIDAllow All Apps Access= UncheckedAllow Export= UncheckedMy Ethernet Config ProfileMy Ethernet profile may once randomly auth properly then just fails time after time and I'm thinking I have the wired setup all wrong. When authenticating ISE reaches out to Jamf with the MAC address of the USB Hub connected to the Mac and it fails device compliance stating the device is not found in Jamf and to register.The failures, return a MDM.MDM-GUID:MacAddress of the USB Hub VS a successful auth has this value MDM.MDM-GUID: empty. Instead the mac address of the USB Hub is i

Has anyone found a good way to deploy Microsoft Visual Studio 2019? Microsoft currently does not have a full macOS package of Visual Studio 2019.Trying to get the full package via Unity still gives the previous version (as of 2019.1.8f1). The only think I've thought of is trying composer snap shot, then referencing the uninstall scripts to make sure I don't prune anything - https://docs.microsoft.com/en-us/visualstudio/mac/uninstall?view=vsmac-2019 I was also thinking, install the previous version, and see if there's a way to automate the upgrade?

Has anyone used this successfully? I have a fleet of mostly M1 Macbooks, FileVault enabled on all of them. I've tried using a test group to deploy software updates, but none of the computers seem to respond no matter what I select. No prompts, no updates downloading. I've tried on three different machines on Ventura. Jamf pro version is 10.48. Do I need to be on 10.49?

Hi,I am trying to add 2 Portals for Global Protect VPN with a script, but it only shows 1 portal even-though I added the 2do Portal to the script. Is there any other way I can achieve this? or is there is anyone out there using a script to add 2 portals, thank you. if you can be very specific on how to do this please, thank you.

Hey I want to update my hosts file in all computers with Jamf but i dont know which commands use. The lines that i want to add are 17.171.120.82 locate.apple.com17.171.120.18 locate.apple.com thanks

Hello everyoneHaving issues with Content Caching for the past few weeks and driving me crazy.We have a M2 Mac mini with the IP address 10.10.10.10 ( not real IP ).The end-points are on the same network.I've created a Configuration Profile for the Cache System and the end-points with the followingConfiguration Profile Settings.I have read https://support.apple.com/en-ca/guide/deployment/depde72e125f/web and https://support.apple.com/en-ca/guide/mac-help/mchl3b6c3720/mac and I can't seem to get it workingDo I need a DNS TXT record? I didn't put one in since I set the My Local Networks to use one public IP addressWhat am I doing wrong?Here is my Configurations settings 

I'm looking to get some insight into large files and folders on computers before they get to our office. We are seeing a large number of requests come in for not being able to update their macOS dues to low available storage so I'd like to be able to get a report on who has what storage left, easily looking into a device record and see the top 5 or 10 large files and folders. I've been playing with the "du" and "find" commands but struggling to put it together in a useable format for a script or extensions attribute. Does anyone have anything?

Hi,We recently tested macOSLAPS but could not get it to work without enabling full access to the computer object in AD. Does anyone know which attribute needs to be set in order for the computer to update it's own password in AD? We set the ms-Mcs-AdmPwd attribute but that did not seem to work. 

Hi everyone,Hope someone can help me with the below issues I am having;I am trying to install a custom app which I got from a vendor in a .dmg format.  Within the dmg there is a .pkg file and then two script files called install.tool and uninstall.toolAs per guidance by the vendor I need to run a command to call the "install.tool" via a command and then add a parameter to point it to a server which we have running in our environment.  This all needs to happen before the actual installation takes place i.e. while the .dmg file is mounted and I think this is where I am going wrong or having difficulty to run the above script via command before the actual installation takes place.I have come across a few threads on here to use composer which I have done but I have not had any particular success deploying it via JamfPro. It seems weird, as if I run the .pkg file (which I got from composer) on the test I have Mac, the program installs fine but not via JamfProSorry my Mac

I suspect many of you in an enterprise environment are required to run N+1 like I am.   I'm yet to find anything specific indicating whether you can run the ADCS connector and do load balancing via DNS.  Does anyone have a setup for two (or more) ADCS Connectors?

Hi,is there a way to configure iPads to always trust one specific computer? Usually you plug in the iPad and are being asked if you want to trust this Computer, but this is not possible in Single-App mode.Kind regards