Been looking for an EA to pull the last 5 reasons given by a user for account elevation from /private/var/log/privileges.log for awhile, didn't quite have the bash savvy to get exactly what I wanted. Last night I decided to give ChatGPT a shot. First I gave it a summary of what I wanted and told it to hold so I could give it more specific info. I fed it the documentation link for Extension Attributes in the Jamf Pro Admin guide, then provided a sample privileges.log file. After a bit of messing around with the results given by ChatGPT and prompting it to refine its response further it spit out something workable. Here's the final result in Jamf, along with the Extension Attribute script (in zsh).    #!/bin/zsh # ########################################################## # # Jamf Pro Extension Attribute # Last 5 Privileges.app requests.sh # Version 1.0 # 3.29.2023 # # This script records the last 5 reasons an end user needs to request local admin right

Hello, I'm looking for a way to add a mark or label to a system so that it can be eligible for a smart group to pick up. When the system is part of that smart group, a configuration profile is then pushed down. Ideally, I would need to do this in Self Service without changing the computer name. Any help is appreciated.

Anyone that is using Okta LDAP and getting the following in their jamf logs?  LDAP operation failed because an administrative limit has been exceeded.How are you dealing with the error?

A random number of Macs in my environment have lost the ability to use sudo from a terminal. I have tried local admin user, ARD send Unix command as root, and JAMF Remote. I am trying a simple jamf recon and the result is:sudo: 4294967295: invalid value. Google turns up a few articles:https://www.sudo.ws/alerts/minus_1_uid.htmlhttps://news.ycombinator.com/item?id=21366177I am not a Unix or Linux expert to understand why this is occurring or how to fix it. I do know that I have not edited the sudoers file, I can log into a local admin account and run normally if I don't use terminal requiring sudo, I can log in as an AD admin and get the same error message sending terminal commands using sudo, and logging in as a standard AD user I can su to a local admin account, but can't run commands using sudo. These are computers that were installed with a fresh 10.14. OS and apps from our JAMF server and worked normally until I noticed sudo failing Wednesday. They were not imaged, they all work

How is everyone securely disposing or destroying their own Apple SSD storage units?Considering that MacBooks from 2016 to 2022 have an SSD (NAND storage) that is not upgradeable,and it is not replaceable either, since it is soldered onto the main board:If a company has decommissioned a MacBook and the device reaches its end-of-life,the NAND storage cannot be extracted and re-used on a different device.Also:How can businesses assert that their data is securely wiped before device disposal?

Does anyone know if there is a way to prevent users from doing a Force Restart (or Hard Reset) on their iPad Devices using restrictions in Jamf Pro? We currently have some students in our district that are using the Force Restart as a method of bypassing an App-Lock when using the NWEA Secure Testing App. As I've said, I believe the answer to this is "no" since the Force Restart is a firmware level troubleshooting tool by Apple, but just wanted to check. :)  -Matt

We are experiencing some weird behaviour on recently registered Macbook's. All of the App's we install from the App Store or Jamf App Catalog are requireing admin credentials to make changes when the user first opens the app. Obviously we don't want to give them admin credentials and we had not experienced this behaviour on the test devices we registered before this batch. From searching through the forum and Google I've confirmed that the Restrictions profile was not installed on any of the devices (So it shouldn't be an issue with "Require admin password to install or update apps" being selected) and I've since added that profile with "Require admin password to install or update apps" explictly not set, but we still see the same behaviour? Has anyone else experienced this or would know what could be causing it? The devices are all running on OS Ventura and the user's don't have permissions to the security setting in System Preferences.

What is the impact of the bookmark path in the content filters and how can i configure it?Devices > Configuration Profiles > Payload: Content Filter Typ: Specific Website Only  section: Bookmark Path. Thank you in advance.

I just discovered that Apple is introducing a new Model Identifier scheme for the new Macs. The 13" M2 MacBook Pro is "Mac14,7" and the Mac Studio is "Mac13,1" Has anyone found any explanation for the new format? Will we be able to use Model Identifiers in a meaningful way (like MacBookPro11,5 is older than MacBookPro16,1) or will the numbers be just a random assignment to new models? 

Hi Nation. I'm fairly new to Jamf and I'm looking for some advice regarding Chrome extensions and more specifically, the settings within the extension. I am deploying the G App Launcher extension (G App Launcher) and this is working well, however there is a setting within the extension with the key 'displayMarketplaceApps' that is always set to false. I would like to deploy the extension with this setting set to True.I can export the settings via json file, however, I'm struggling to figure out how to configure this for Jamf and deploy deploy along with the extension (if possible) I'm pretty new to json as well, so any pointers/advice would be great.

Hello Jamf Nation, For security reasons at my org, we are trying to compile a list of installed extension for the Chrome, Firefox and Safari browsers.  I've seen a couple posts about chrome extensions and have a script for just Chrome. Does anyone know of a good script that can pull extensions from all three? 

Disregard, is there a delete post option for dumb questions? :)

Hello. Does anyone know a working (!) way to leverage with Jamf Pro that just certain apps/browser sessions use a VPN connection? We need to avoid for obvious performance reasons that our VoIP app also routes phone calls via VPN. Any help/hint is much appreciated. :-) Best regardsChris

Easily create simple macOS Notifications with swiftDialog v2BackgroundFor the last several weeks, the now 550+ users who frequent the MacAdmin’s Slack #swiftDialog channel have been all abuzz about Bart Reardon’s soon-to-be-released version 2 of swiftDialog.One of the features I’ve personally been anxious to try is macOS Notifications via swiftDialog, but as Bart explained when he closed the feature request with wontfix, Apple’s restrictions conflict with what many Mac Admins require: Branded Notifications. VoodooThen, two days ago, Bart posted:Special bonus installer – Same build as RC2 but with some voodoo in the pkgPlace an image (recommended 512×512 png) at /Library/Application Support/Dialog/Dialog.png and then run the installer.Two words: It works!Continue reading …

Hi folksOur client does not have the budget for Jamf Connect and wants the ability to create and log into local Mac accounts via Okta.  Is this possible with the SSO plugin?  has anyone done it?  If so, please point me in the right direction!!! Thanks!

I have a "1 Extension Attribute Error" error on Google Drive File Stream patch management template, a bit like this error.I'm not sure what is going wrong, I see no logs.But I do have one laptop which has the latest version installed. In patch management, it is reported as Unknown. But when I run the script manually, it reports the correct version. Other patch management items have no problems.Now I noticed it has the old name (with File Stream). So I wanted to add the package "Google Drive", but when I press on the (+) button, I get a "404 Page Not Found" error. When I want to add another package (for example "Textmate"), it just works.What is the problem? Do I first have to remove the "Google Drive File Stream" package, before adding the new one? I'm afraid it will still fail... Also, how can I see what's going on. It seems very magical to me right now...  

Hello,I have one configuration profile with restrictions configured as followedIt works as expected with macOS Monterey 12However, it doesn't work on macOS Ventura 13+. The setting screen shows message "Screen Saver settings are not available"Any suggestion on how this could be fixed? Thank you !

Hi,We are a fairly small company and offer a COPE service to our employees. Since the question came up how the employees can copy their data to a new private iPhone when they leave. Is there anything to be aware of when using Quick Start on a private iPhone to copy the data from an iphone managed in Jamf?Or is that not possible, because otherwise the management would also be copied?

Hi All,We are going do the MacBook refresh. And we would like to our users not to lose the followings,1. Bookmarks2. Cache3. Applications4. Desktop shortcutsDo we have any application to backup above listed and restore it in new MacBook. Suggestion are welcome. Thanks.

We are using the Mac Apps with the Jamf Catalog packages to keep some of our client-side apps up to date.Most of the time that work great and gets all of the clients to a better state then they were before using this feature.But the issue we found is that the updates are slowly spread across the devices AND it block the auto-update feature for eg Google Chrome.This way more devices then we want are running an older version; they will get the update but not as fast as we want in this occassion.This auto-update feature is blocked for eg Chrome, but for Brave it is not.Will this be made a free choice?What is the best option to push an update without spending much time on packaging?

This issue popped up on me in the spring and has resurfaced now as we prepare iPads for students. After setup most iPad apps install everything fine, however some devices show apps either dark or with the bullseye placeholder and say "waiting", but when you click on them you get this message: Unable to install "Jamf Self Service"You must purchase this app to install itView in app store Some of them show as installing in the system but not all. They do not process unless I manually delete every dark app and restart the iPad. This is obviously not ideal when managing large fleets, or when devices are at home with students during remote learning situations. Wondering if anyone has dealt with this issue and found a resolution.

Microsoft released version 16.45 of their Office apps for Mac yesterday. I’m disappointed that Microsoft still has not released their so-called “new” Outlook for Mac users that promises better performance and better features. This new version is still not feature complete. They have been blogging about this software for months, and extolling the great new features and better performance. What did we get? More of the same. Switching to the “new” (incomplete) Outlook will not give users anything new, except a reskinned interface that looks like macOS Big Sur. When I switched to it just now, I was told that a shared mailbox that I had attached to the account that is logged in is not supported. Really? Shared mailboxes are not supported by this “new” and allegedly improved Outlook? I have no idea what they’re thinking in Redmond. Apple users are charged the same amount for Office but they get less product in return. Outlook for Mac has always been missing important features that the Window

I am looking for a way of scripting the account icon for a local user account used across multiple devices. Instead of a random picture, the idea is that this account would be singularly identifiable on any device.Using dscl seems to be the method and maybe it is just identifying the image path for default Apple icons or Monogram.There are scripts like this one that utilize a resource folder being placed so a custom image can be utilized, but in this case a generic user silhouette or Monogram is what I am looking for.In the past I found that attempting to set the user icon via script, if the path to the image didn't exist or was invalid, the icon would revert to a default grey silhouette picture. This worked for what I am trying to achieve but I would like to specifically set it using a known method, to a Memoji or already existing icon, even the headshot silhouette picture. 

A couple of my users have had an issue where they go to login with their Okta credentials in Jamf Connect login and they are then prompted for their local password to migrate the accounts. The problem is that the local password is always registered as incorrect. This happens even when I reset their local password and then try to sync again. The only work around I have found is to disable Jamf Connect Login on their machines and have them continue to use their local account for now. Reinstalling Jamf Connect Login has not fixed the issue nor has rebuilding my plists.Any thoughts?

This might be a dead horse at this point but since the posts I see are a little old, I am going to ask anyway...  When it comes to Office 365, what is your preferred deployment method? I see 3 main types:  Direct download from Microsoft and make a PKG, use Mac App Store applications, or use Jamf Catalog.  I have done a manual direct Microsoft method but am looking to more easily automate the updates for patch management purposes. The only downside I know of so far for the MAS method is that when Office updates are created they are first provided by Microsoft through their own channels, then passed along to Apple for approval.  Apple might or might not approve the update in a timely manner so it may be days to weeks before the MAS version update is available. I do not understand enough about the way Jamf Catalog titles are updated to know if they also go through a similar delay before updates are available. At this point, I am leaning towards