Hello experts. I'm new to jamf and this community so apologies if this has been answered already as I haven't been able to find a recent solution response. I have a policy that enables users to run a script and management wants to know who has run it via self-service.  So far, I've been able to get this computer-by-computer, but is there a better way?   My solution uses: Finds a subset of computer history data by ID (jamf.com) with the subset set to PolicyLogs.  With thousands of computers scoped for the policy, that's a large number of API calls to make.   Ideally I would use Finds a subset of data for a policy (jamf.com); however, there is no subset for PolicyLogs.   Any advice or solutions you can offer? 

So I'm using a policy with a trigger of Login so it's basically a LaunchAgent ... does the command get stored somewhere on the client so I can verify that it made it there? Where do the output and errors go ... jamf.log or do I need the script to redirect everything?

I'm not able to get FUS working on Mojave, wondering if others have a working script/config to get it running. I've tried all previous documentations and nothing has worked. Thanks in advance.

I would like to understand the difference between device and user level in configuration profile. Thanks in advance

Hello everyone, I am try to create a smart group that would allow me to identify computers that have company portal on them. It seems like in Ventura, Jamf Pro is not reading installed Mac Apps from the server.My Situation:I have deployed company portal as well as MS Remote Desktop from Jamf Pro via Mac Apps. This is going to 2 machines, Ventura and Monterey. On my mac with Monterey, I can see the apps showing as Company Portal.app and Microsoft Remote Desktop.app. However on the Ventura mac neither of these are showing in the Inventory. I can see them on the mac though. I have added the ~/Applications/ folder to the inventory search to no avail. Anyone have any thoughts?

Hello Jamf Nation!We are pleased to announce the availability of Jamf Pro 10.49.0 Beta.This version includes some exciting new features, including updates to LAPS, a new restriction for iOS Widgets on Mac, and a new UI to manage client credentials. We also have exciting new in-app feedback submission, documentation, and a video covering the Beta's new features we'd love your feedback on as we iterate on making it easier to participate in our Beta Programs.How to join the beta: Enroll in the Beta Program under Product Feedback at account.jamf.com. Once enrolled, you’ll see a link to the Jamf Nation Beta Forum. Note: There will be a short delay between enrollment and Beta Forum access; you will receive a notification in Jamf Nation to join. When you receive the invitation, click "Join this group Hub". Email beta@jamf.com with questions.The beta program is covered by the Jamf non-disclosure agreement; please do not share any information regarding your testing on any public forum, includin

The networking team for our district is trying to move all of our mobile devices onto a MAC Address whitelisted Wifi network. Is there a way I can export in bulk specific information (like the MAC address) from the Hardware page of each iPad?

Hello everyone,We're on Jamf Cloud with version 10.48.1. We've enrolled some computers now during the summer with no problems. But the latest three we have enrolled doesn't get any date in the Enrollment field (latest enrollment). Last was at 2023/08/02. Am I alone with this problem?The thing is that without the date some policies doesn't work.

Hi Guys. I have a MacBook Air (new) and I manually registered in ABM with Apple Configurator. Then, I registered this device in Jamf (I see it in Prestage), but when I restore and reinstall MacOs (ventura), I select Language, region and wi-fi, the "Remote management" appear and I clic to "Continue" but not advanced. It shows "configuring profiles" but it never continues.I have restored and erased Macintosh HD in various occasions and tried personal hostpot and other networks, but these problems continue.

Hello all, I was wondering if anyone has had success getting the service desk asset scan to work properly for Macs. I am having a little success with network scanning and running the provided scan script on a single machine. Looking for any advice. Thanks! 

To give some context here is what I'm trying to accomplish.I want to create a config profile to push to my mac user's for the Checkpoint Endpoint VPN client without having it install the Checkpoint firewall app. Whatever package I download from checkpoint (the pkg, the dmg, the zipp) it seems the checkpoint firewall app is bundled into the installer. I've tried going to composer route to run the installation of the endpoint vpn client, then deleting the firewall app but it looks like starting with version 84.30 the plist, configuration files don't push out so I can't replicate that install from the created pkg from composer to other machines. Checkpoint provides information on how to create a config file to push to users but it still bundles that firewall app in there. https://dl3.checkpoint.com/paid/68/6899355a6a3c45aee11e6fbb4633ce27/Endpoint_Security_for_Mac-MDM_Deployment_Guide.pdf?HashKey=1625763756_e9cb2b2f4a4fb4288fdd80cbce03c7b3&xtn=.pdf Has anyone figured out a way to r

I see an error quite often when looking at the command history of our IOS devices that reads:"Settings - Time ZoneThe setting being applied is restricted."Any thoughts on what might cause that?Thanks in advance,Rob   

Hi,i create an In-House eBook which is a pdf file (using hosting location is web server) and i distributed to our organization ipads devices, but the eBook did not deploy to any device its give me an error (The MDM request is invalid) .i read some articals that i shoud not use space in ebook display name and i have to use a version but nothing worksi hope that someone can help me on this !!

I'm looking to sit the Jamf 100 Exam but when I click the purchase button it takes me to a logon screen and after validating my account it then presents the message: UnauthorizedIt looks like you don't have access to this service. Is there something special I need to do so that I can book this exam? I can't see that I'm doing anything wrong but if anybody knows why this isn't working I'd be glad to hear it!

Hello, has anyone had any experience with using the Hidden app in collaboration with Jamf? If so, what are some positives/negatives you have encountered? Thanks!

Hi Wondering if anyone has fixed this solution. We are getting a growing number of machines getting the following error while using 4.9 / 4.10 AnyConnect on Big Sur. Settings for the Config Profile are below, its scoped only to M1 ComputersCould anyone suggest any problems that i might have? Thanks! 

Hello Team,I never used AWS S3 CDP before, I used standard Jamf cloud CDP, I was just curious to know if the AWS S3 bucket is already integrated with Jamf Pro cloud, then there will be any change in the way to upload a package in S3 CDP for deployment through JAMF policy? Or it is just same like Jamf cloud CDP, I can manually upload the package or use Jamf admin app to upload the package?

Does anyone have a method for having Self Service auto login on Monterey/Ventura? All the methods I found via search have been depreciated. Thanks!

Hi Guysare we able to add another authenticator app to jamf if the user does not have access to the internet to login okta to be able to use local to login 

This is the default .sh script for ManageEngine Asset Scan. I modified the variables #!/bin/sh ############ Server details ############ hostName="MSD69" portNo="443" protocol="https" ############ Server details ############ SUPPORT="assetexplorer-support@manageengine.com" PRODUCT="AssetExplorer" COMPUTERNAME=`hostname` OUTPUTFILE="$COMPUTERNAME.xml" main() { echo "##### Scanning Started #####" echo "<?xml version="1.0" encoding="UTF-8" ?><DocRoot>" >$OUTPUTFILE constructXML "ComputerName" "hostname" constructXML "OS_Category" "uname -s" echo "<Hardware_Info>" >>$OUTPUTFILE constructXML "OS_Category" "sw_vers" constructXML "Memory_Information" "sysctl hw.physmem" constructXML "Memory_Information" "sysctl hw.usermem" constructXML "Memory_Informationw" "sysctl hw.memsize" constructXML "Memory_Information" "sysctl vm.swapusage" constructXML "Computer_Information" "hostname" constructXML "Computer_Inform

I'm currently working on a workflow to resolve some missing Secure Tokens for users at a client site. Because I don't want to test on production machines, I've got a machine here that I've enrolled in my own Jamf tenant to test against. My issue? I can't REMOVE Secure Token from one of the test users on this machine so I can test the script.FV is not enabled, the admin user has Secure Token. I run the following command in CLI and get an error:sudo sysadminctl -adminUser <username> -adminPassword <password> -secureTokenOff <username> -password <user-password>    Result: "Operation is not permitted without secure token unlock"(I also played around with the order of things in the command, no difference)My GoogleFu is failing me because everything I'm finding relates to ADDING Secure Token to a user who does not already have it.  Can anyone shed some light on this for me? Thanks 

Was not sure how to title this one. I recently noticed a policy that was pushing a package failing on most devices. They all had the failed package download error. On inspection I found that the devices were actually NOT in use, the users said the device was left switched on but was asleep. Yet Jamf reports them as checking in and as such tries to deploy the policy, which then endlessly fails.I have never seen this behavior in the past, seems to be new. Anyone else seen this?Jamf Pro sees up to date check-in for device.Application usage log shows no activity.User claims device was not in active use.Policy pushing a pkg will fail.If at number 2 I see application usage, aka device is in use, the policy will complete. So it looks like Jamf is trying to push things to devices that are in sleep mode? Im confused.

Hello All Playing around with the Jamf App Catalog feature.  Wondering when an app updates if the users is booted out of the App or does the install cache install or ?I have auto updates installed on many of the listed apps, so trying to test can be challenging.P.

A new function for your ~/.zshrc to retrieve the managed Apple admin account password from Jamf ProBackgroundWith the enhancements included in the recently released Jamf Pro 10.49.0, we decided to take a more serious look at Jamf Pro LAPS.In doing so, we wanted an easy way for authorized administrators to view the managed Apple admin account password via Terminal.Continue reading …

This post is mostly to document something I ran into, but please feel free to contribute anything that might help.In the process of running CIS L1 audits on Ventura the following was brought to my attention:--------ls -alh /System/Volumes/Data/System/Library/AssetsV2/downloadDirtotal 0drwxrwxrwx@ 2 root wheel 64B Aug 10 15:35 .drwxr-xr-x@ 43 root wheel 1.3K Aug 8 21:32 ..--------The directory is empty and I haven't seen a case where there is anything in it. There is a CIS control "5.1.6" that has a very strongly-worded description of how they think this should not be, so that particular audit fails. I guessed this was legit and got a little more info to corroborate that:--------xattr -l /System/Volumes/Data/System/Library/AssetsV2/downloadDircom.apple.rootless: MobileAssetDownload--------So the file is SIP-protected and in an area where that service is expected to do things. I found other occurrences of the same directory on Monterrey and Ventura systems, but I am not entirely sure of