DNS ProxyOur DNS settings in Jamf are set to "Restricted" to not allow users to disable it. This is overwritten in macOS Ventura as the user can disable it.Firewall settingsThis field is "greyed out" on macOS Ventura. (Both disable option and "Options..." option. Looks like you need to unlock the setting with the "Lock" icon, which isn't present in Ventura.

I'm following the Jamf Pro Installation and Configuration Guide for Mac and it sounds like the Jamf Pro Server Tools CLI should be included with the Jamf Pro installer for Mac. However, I can't locate the jamf-pro binary after running the installer found in JamfProApps10.46.1.dmg -- am I missing something?

Hey, guys! I am testing our company's FileVault 2 workflow and I haven't been able to use the Institutional Recovery Key, simulating the scenario in which we don't have access to the enabled user's password nor his/her personal recovery key. We have an encryption configuration with both recovery keys. To test it out, I downloaded from the JSS a RecoveryKey.p12 file and put it into a USB drive. Then, booted the "affected" machine into recovery mode, obtained the logical volume's UUID and then ran the following: diskutil cs unlockVolume UUID-OFTHE-VOLUME -recoveryKeychain /Volumes/USBDrive/RecoveryKey.p12 And the response I get is: Error: -69749: Unable to unlock the Core Storage volume It's worth mentioning that this is a Sierra machine, so the drive is HFS. Is this procedure correct or am I missing something? Thanks for your support!

Hi,Does anyone here have any experience in the distribution of Avid NEXIS Client Manager using Jamf Pro? Distributing the package is no problem but after the application launches it immediately closes again. Probably because of some PPPC settings but i can't seem to find which one. 

We have several general use computers with automatic login, and the fact that Screen Lock (aka: "Require Password after screen saver begins") is killing us. Every reference I have found to disabling Screen Lock either refers to the plist from when it was still a part of the Screen Saver Preference Pane (which doesn't work now that it's part of the Security & Privacy Pane), or simply refers to Lock Screen on the Apple Menu. The best we have been able to do is to track the setting down to the following file: ~/Library/Keychains/[UUID]/user.kb We have confirmed that file is where the setting is held, but the file is encoded and we have been unable to decode the file. Does anyone know how to change this setting with JAMF, or a script, or any kind of remote management?

So I am currently working on some API extension attribute based scripts, for use with extension attributes.I have a script working that will do the following:List the assigned number of Computers to a user and List it as a number, under a computer device as a extension attributeList the assigned number of mobile devices to a user and List it as a number, under a computer device as a extension attribute   # get the number of mobile devices assigned to the user UserXML=$( /usr/bin/curl \\ --header "accept: application/xml" \\ --request GET \\ --silent \\ --header "Authorization: Bearer $token" \\ --url "$jamfProURL/JSSResource/users/name/$strassigneduser") #echo "xml results $UserXML" mobileDevicesCount=$(echo $UserXML | grep -o "<mobile_devices>" | wc -l)# get the number of mobile devices assigned to the user UserXML=$( /usr/bin/curl \\ --header "accept: application/xml" \\ --request GET \\ --silent \\ --header "Authorization: Bearer $token" \\ --url "$jamfProURL/JS

Hello all,   I'm wondering if anyone has had any issues currently/in the past with random large amounts of Apple traffic. Yesterday our network got down to 2 MB/s (usually 200+). After some investigation with our ISP, we saw large amounts of traffic coming from Apple's 17.x.x.x IP range and our Firewall CPU usage reaching well over 80% at times and staying. Our ISP specifically said it was from update servers grabbing Apple Img. files. The weird part is we have an update deferral going to all iPads/Macbooks. We are currently going to be throttling our bandwidth to these ranges, but does anyone have any other suggestions? Thanks!

I found myself today offsite on a computer without my Jamf Pro tools (Composer/Jamf Admin/Jamf Imaging/Jamf Remote/Recon) and it occurred to me to wonder if these are available to download online at Jamf somewhere? I managed to ARD into another of my computers and grab them, but had to VPN and do some other contortions. Just wondering.

Hi Nation, I am receiving the following message when trying to upload a package to Jamf Cloud:Package failed to upload The package has only 64 KB, I was able to upload other packages before, not really sure about what is going on... Has anyone been through the same issue ? Thanks you

Below is a screenshot of the Jamf School Profile/Settings interface.I am confused about how to do this overall. Is the idea that you basically create holistic settings that are all encompassing for a type of device, and you put all of the things and stuff in one, and only apply "one per device" or is the idea to be granular and only for example configure the WiFi, Certificates, DNS Proxy if needed, and that's it.If the idea is to be more modular, is there any type of guide that covers which policies can conflict in which case it's a race condition to determine which profile is applied if there are conflicting settings that would prevent the other profile from applying?If I had to guess it should kinda look like this.Modular profile 1 - Connectivity related settings only. So WiFi, Certs, and anything needed to get your content filter to work on the device. Beyond that, I don't know. How should these things be chunked up, or should it be that beyond the connectivity profile, that it

It's been a while since working with VMs and enrolling them into Jamf Pro. I've been able to seemingly get the VM enrolled using ADE, but it's in a weird state. According to Jamf only 5 profiles are installed, yet quite a few more than that are present on the Mac. However, not all of them that should be there are there. When looking at the computer record in Jamf Pro, it appears as if it's stuck in a loop of installing/reinstalling a majority if not all the profiles again and again...I'm kind of at a loss as to what's going on and how to address.Jamf Pro 10.46.0 (Jamf Cloud)Host: Monterey 12.6.6 on 2019 Intel MBPGuest: Monterey 12.6.5 (using same serial and board-id as host)VMware Fusion 13.0.2

The Jamf Research & Insights team is hosting 4 feedback workshops: OS Updates, AI, Smart Groups, and Reporting. Sign up for a spot with Calendly and check out the Jamf Nation Events page for future workshops!

Anyone got a script for Dockutill on Monterey. Our old Python script doesn't work anymore. We are looking to keep the Self Service app permanently in the dock.  This is the current script. #!/bin/shDOCKUTIL=/usr/local/bin/dockutilsleep 10$DOCKUTIL --add '/Applications/Self Service.app' --replacing 'Self Service' --no-restart /Users/$3killall cfprefsdkillall Dockexit 0

Is anyone else having trouble updating Shared iPads to iOS 15? I'm quite new to device management in general and am looking any help. Our devices are 32GB and the updates are 2-3 GB, almost too large for the allotment per device. I tried to get around this by creating a single device class and updating that single device, but am only seeing that the update is schedule  The update is so large that is is almost too big for I'm pretty new at this, so I created a single device class and tried to update that way. I am still only seeing that the update is scheduled, but the update goes no further. Any advice would be most welcome!

Is there any way to turn on YouTube strict or moderate filtering within Jamf Pro without using Jamf Safe internet. I simply want to enable the native YouTube app feature to enforce strict filtering.For example on the app - I want to enforce this setting on all iPads with the YouTube App.Open YouTube, select YouTube user, top right hand corner / select settings / general / restrict mode.

I'm testing Jamf Connect on a known working and previously domain joined Mac on 10.14.6. The mobile account was successfully demobilized and Jamf Connect works fine. However, I'm getting a prompt from Applications to have access to the "login" keychain. I've tried entering my current password as well as all possible previous passwords and nothing works. What am I missing? This is going to be a pain for users and IT. I'll submit a case this to support in parallel.It turns out the login keychain password is now blank.

I have a Prestage set up that creates a local admin user.It works correctly in Monterey or before.Ventura it stopped working.My work around right now is to not add the machine to pre-enrollment until after I manually setup the local admin user then add the machine to Pre-Enrollment and run [profiles renew -type enrollment] from CMD.I would like to get my pre-enroll working again.Any suggestions?

Hi there,My company is using JAMF to have control over the Macbook I work. Recently, I did bough a Ipad which I did connected with the company managed icloud, only to use a few application I don't want to use in the work laptop(such as personal e-mail).I am trying to use Universal control for use the same keyboard(magic keyboard) and magic trackpad only by "trespassing the mac screen barrier". I did changed all UI controls in apple's guide to make it work, but it doesn't, I can use the ipad as a extension monitor but I would like to use the Unviersal control.I imagine it is due to any restriction in Airdrop(since I try to send file to macbook through airdrop but it doesn't appear in the other device, even the control saying I can receive files from enyone) , to avoid leak of files between devices, my question is: Is there any way the security team can configure the profiles to allow airdrop only for keyboard/trackpad but not allowing file  transference?Thank you in advance!!

Hi, This may be a stupid question but I am new to Jamf and not much of a Mac user. I downloaded Jamf Composer from my Jamf Product page. Version 10.46.0.I get a .dmg file. I run the file on a test Mac and it pops up saying to drag Composer to your hard drive to start building packages. It didn't install anything. So I drag the .dmg file to my Applications folder and run it again. Same message. I plug in an external storage device same thing. USB drive, same thing.I was planning to use Composer to build a .pkg file for Figma as so Figma can be deployed using Jamf.Let me know if maybe I am dragging the Composer .dmg file to the wrong place or maybe it is a bug with Composer.Thanks.

I'm seeing a CodeSignSummary-xxxxxxxxx-xxxx-xxxx-xxxxxxxxx.md appearing in Applications on my computers. File content shows something about wdav-upgrade.zip, which has to do with Defender. Any idea why this file is getting generated?

I need someone help I noticed today that my CA Certificate on the certificate Details section is giving me the description but also gives me an error saying Not found in keychain

Curious if anyone has setup an automated removal of IOS devices that haven't reported after a period of time? We have enough devices that a few get destroyed, lost or stolen every month and I'd like to automate the removal after 6 months just to free up the JAMF licenses for re-use. Thanks!

Hi Jamf Community,  Has anyone ever been asked to report on the number of systems that have Touch ID fingerprints setup? I've been attempting to write an EA as I have not found anything online. There are no Jamf Template EAs for TouchID, maybe this is a feature request. I know we can restrict the use (allow touch ID unlock, etc.) but we are unable to restrict our users ability to add a fingerprint into touch ID.  If anyone has some suggestions on how to accomplish this, I would be grateful. Thanks,JR

For those unaware LAPS is based on an approach originally created for Windows environments whereby Windows devices are configured with local admin level accounts for which the password is randomised and stored in Active Directory per device record. (This relies on devices being enrolled in to AD.)This was and is a highly useful approach so that each device can have a unique admin password rather than all of them having identical passwords.As such this technique would equally benefit a Mac environment and a number of equivalent solutions have been developed over the years. Some even store the password in AD also but many store the password in Jamf hence this discussion here. Again many techniques have been previously discussed here before.However Apple being Apple 😦 this is more complex than it used to be or likely is for Windows.The big issue these days is the use of Secure Tokens for FileVault2 access.Firstly I will state that previously at a number of organisations over

Hello,We have a compiled AppleScript that users can click to access their account and bring up the password change window locally on their computer. It has worked great up to Monterey. But since Ventura it doesn't work at all! It opens System Preferences and Users and Groups but then it stops.Anyone who is sharp on AppleScript and has a solution or some good advice?