Hi, we've been copying the bookmarks.plist file located in ~/Library/Safari/ along with FEU FUT in order to set up Safari Bookmarks and had success until macOS Mojave. When we run this policy in Safari, not only does it not copy over the bookmarks, but when you create a new local user account, we get the message "macOS needs to repair your Library." I've asked Jamf support about this and their solution is to move away from setting up Safari bookmarks and instead use Self Service bookmarks. Have you guys had any luck with setting up bookmarks in Safari?

Hello, Has anyone been able to run Microsoft Intune Integration on Macbooks with Intel chips and Ventura OS?We tried to run the policy on Macbooks with Intel chips and Ventura OS but the integration doesn't work and the device will never get registered in AAD.We also tried with M1 chips, but there is no issue, on macbook with Monterey OS and Intel chip, the integration will work. The integration will stop at this step on intel devices with Ventura: We already tried with different browsers, deleting the profiles, using webview and reenrolling the device and everything else that could be found on the internet. Has anyone been able to make this integration between Jamf and Intune with this scenario? Thanks,Traian   

Hi Team,Wondering, Jamf Pro API returns all the device-Id(s) associated with the User, by passing user email/id as input? If yes, can you point to the API end-points? Thank You,Kalai 

Recently we have purchased the software. we wanted to do the training . so wanted to know if JAMF Provide training in India. if Yes please let me know the location. ThanksSantosh

Hi I am looking for a script to replace the Username in the inventory section with the Extension Attribute of "Last User Logged In".  In addition to add "@companyX.com" as a suffix to the user name.  This would help me greatly in getting Asset inventory for my company via Azure.  I am getting the Last User Logged In by Extension Attribute.  So if the "Last User Logged In" is john.doe , take john.doe and add @companyX.com and fill the Username in the inventory section as john.doe@companyX.com.  This would then poll Azure and I would get all the data I need.  Still looking for a way to not manually update the username field when deploying a Mac to another user.  My scripting skills are limited, apologies. Thanks,JT

Script to download the latest Citrix Receiver for Mac: #!/bin/bash ##################################################################################################### # # ABOUT THIS PROGRAM # # NAME # CitrixReceiverUpdate.sh -- Updates Citrix Receiver # # SYNOPSIS # sudo CitrixReceiverUpdate.sh # # LICENSE # Distributed under the MIT License # # EXIT CODES # 0 - Citrix Receiver is current # 1 - Citrix Receiver installed successfully # 2 - Citrix Receiver NOT installed # 3 - Citrix Receiver update unsuccessful # 4 - Citrix Receiver is running or was attempted to be installed manually and user deferred install # 5 - Not an Intel-based Mac # 6 - ERROR: Wireless connected to a known bad WiFi network that won't allow downloading of the installer # #################################################################################################### # # HISTORY # # Version: 1.0 # # - v.1.0 Luis Lugo, 09.05.2016 : Updates Citrix Receiver # ######################

Just making my views public on the decision to deprecate Jamf  Remote app in Jamf Prop 10.40 as I personally feel its the wrong decision.10.40.0Jamf RemoteJamf Remote has been removed from Jamf Pro.This includes the screen sharing workflow using Jamf Remote. Jamfrecommends to use TeamViewer for remote administration. For instructions on how to integrate TeamViewer with Jamf Pro, see TeamViewer Integration in the Jamf Pro Documentation.Having just completed a large deployment of the TeamViewer Tensor and its integration to Jamf Pro and Microsoft Intune, its really a poor substitute to the usability of Jamf Remote.While Jamf Remote lacked support for NAT and accessing devices off local LAN is made up for it for ease of use and its integration to Jamf Pro (it had a very similar ease of use like Apple Remote Desktop) and its ability to ad-hoc install a package or perform certain fu

After initial setup, when a users password is detected as a mismatch Jamf connect just pops up a little notification in the corner with vague (to a user) wording about IDP and local passwords mismatching.Is it possible to make the actual Jamf Connect window pop up and not be closed until the user re-links their passwords? I went through all the options on https://docs.jamf.com/jamf-connect/2.1.0/administrator-guide/Menu_Bar_App_Preferences.html and RequireSignIn is enabled but it seems that is just for first run.Alternatively can I specify the language in the notification so the user understands what is happening?

I am in need to integrate the Jamf Assets information to be available in the Zoho SDP Asset Module with all the informations like HDD Size,OS Version,Owner of the Device,RAM Size,Hostname, all other information in one place.Zoho SDP have one Scan_script.sh which creates the .xml file and upload it to the SDP Asset module where the logged in user information is coming as Empty for me.Do we have any other method to integrate Jam Pro Inventory with Zoho SDP Asset 

I see that we can select enroll autenticate method from local users from Jamf School or select Azure, LDAP or Google. At the moment we use local users from Jamf and that option let us to install some apps, someone that use Google option can tell us if we can personalize MacBook before enroll with Google account from Teacher? And another question, on iPads that we do shared for these new course, can login with Google accounts or only with Apple School accounts? Thank you for all

In the default profile we have pushed to our iPads in Jamf School, we have the restriction set to allow us to rename the iPad on the device itself.  However, it always get overridden from the name in Jamf School.  Is there a way to be able to rename the iPad and have Jamf School replicate that change???

I have a problem hopefully someone has come accross.We pushed out a custom screensaver using a script, I will post below. It worked on Monterey no problem, but when we pushed it to Ventura it broke something.Now any device using Ventura is locked to the "Ventura" screensaver. No matter which screensaver you try to use, it defaults back to Ventura. When selecting a screensaver it looks like it is going to work, even showing the preview in the small display. But then hit preview and its the Ventura screensaver.Anyone got any advice? # Get user logged into console and put into variable "user" user=`ls -l /dev/console | cut -d " " -f 4` osMajor=$(sw_vers -productVersion | awk -F"." '{print $2}') osMinor=$(sw_vers -productVersion | awk -F"." '{print $3}') sudo -u $user defaults -currentHost write com.apple.screensaver CleanExit -string "YES" sudo -u $user defaults -currentHost write com.apple.screensaver PrefsVersion -int 100 sudo -u $user defaults -currentHost write com.apple.screens

What is the theoretical maximum limit of a Jamf Pro Cloud instance? Could the system support say, 50,000 devices across 12 locations? Combination of laptops and iPads. Edit: This is to settle a debate and not for practical application. 

I am currently working on a process to upgrade all of our fleet (50% Intel, 50% M1 roughly) to Ventura.  As with every upgrade, I am losing my mind finding a good process that works.  All of our users are standard accounts on their devices and Filevault is mandatory.  I have a policy that temporarily elevates user to Admin (script), installs nudge suite (pkg), nudge branding (pkg), mist-cli (pkg) and then runs the Mist command (script) to download the Ventura installer and it places it in /Users/Shared/Mist with the normal “Install macOS Ventura.app” format.I would like to use front end this process with Nudge to make users aware of the upgrade and allow deferrals until they click Upgrade.  I have Nudge configured and working and it invokes a policy from Self Service that kicks off the upgrade script.Here is where I am losing it, when it comes time to issue the upgrade command, it doesn’t work, at least on M1 macs.  I have tried using the Erase-Install app to d

We have a mac where the user is admin and has a secure token but still can't install updates to the OSThe user account is an Active Directory Mobile Account and is the second user to log in. Any thoughts on what else to check or enable?

Is anyone having trouble with the Jamf Server logs not actually logging?   I have a support ticket open (CS0951135) for this because I think the log4j2.xml file is not setup correct, it was broken before in 10.45, but stuff has changed in that configuration file and it is even more broken in 10.46. I am in a windows server environment, and installed using the jamf windows installer. I am installing it on the D drive on my Jamf server and not on my C drive, but I am using the installer to do all of this, so not doing anything special.  Is there anyone else out there with windows using not the c drive for Jamf with this issue?

I am working on creating a "make me an admin" script. I know there are already some out there I can use, but I wanted to create this one myself. What I have working now is a script that will first check if the user is already an admin user. If they are, a Jamf Helper window will appear informing them that they are already an admin user. They can then dismiss the window by clicking "OK". The policy stops running after they click "OK". If they are a standard user, the script will elevate them to admin, and a Jamf Helper window will appear with a countdown to what ever time we define in parameter 4. Once the timer runs out, the script runs the command to remove admin rights. I have this working really well. Now I'm trying to add some extra features. What I want to do is detect any new admin users that the user who is elevated to admin creates. They may do this to circumvent our policy of keeping users setup as standard. I had one idea to output the current admin users to a text file befor

Hello everyone,I'm just trying to scope a Self Service policy to Azure AD group, after scoping the policy to the desired AD group under limitation the policy itself is not available in Self Service after a logging with AD id. We have Cloud Identity Provider enabled for this and the connection appears to be successful; is there anything I'm missing here?

Seeing an issue on newly imaged macs and new out of the box. They are Jamf enrolled manually, MDM profile installed, certs installed, forticlient installed, wifi cert installed, AD joined… throughout several reboots after each of these steps the MDM profile and other profiles go unverified and the ca certs disappear. The only work around so far has been removal of the device from Jamf then manually re-enroll which brings back the jamf cert but not the other ca certs needed. 

We've just started running into an issue where the system apps that are removable on iPads such as Notes, Maps etc will not install on their own after setting up an iPad. We have been able to successfully navigate around it by excluding the student from the config profile we use to restrict App Store usage, but in the past they've just been there and it hasn't been an issue. Is this a recent iOS update issue where they are no longer installed by default? If so, it seems odd that they would be trying to install at all if the app store restriction is whats stopping them at 'installing'.

I know it is 60 multiple choice question/ 60 mins, but what is the platform type you take it on? Example: Web Browser-Based and login or download program to bring you into a portal like Comptia to begin? ect.Will plan on taking it tomorrowHope this is right flairthanks!

I'm attempting to set up Onedrive KFM for my company.  I've read over the other posts regarding this topic and by all accounts appear to be mirroring what others are doing.Created and pushed a config to allow full disk access to Onedrive.appCreated a plist in Jamf Pro with requisite settings as outlined in the example belowI'm running into two main issues.The Privacy & Security tab doesn't update to show access granted, but it seems like it has been.The plist is not applied, or at least not applied entirely.  I was assuming it would appear in the library/preferences folder, but it is not.  Are plists created in this manner supposed to appear in a folder on the computer?  Has anyone run into these issues?  I'm able to set up KFM manually on the laptops, but automatic optin is not functioning as expected.<?xml version="1.0" encoding="UTF-8"?><!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

I have been working on my own "make me an admin" script. I recently got a version of this script working. It displays a Jamf Helper window with a countdown timer. When the timer runs out, the user is demoted back to standard. If the user is already an admin user, they will see a Jamf Helper window telling them that they are already an admin. These functions of the script are working exactly as they should. This morning, I added a new function. This one checks if the user created any additional admin accounts while they were an admin. The script is supposed to start out writing a list of the current admin users to a text file. After the user is demoted back to standard, the same command to write the current admin users to a text file is ran again, but with a different file name. I use a "diff" command to check the difference between the two text files with the list of admin users. When I test this new function separate from the rest of the script, my text files get created and the "diff

HiI've been using this function to decrypt api account password in one of my scripts, and i can see it failing to decrypt in some machines. Different versions of macOS, i really can't see a pattern. Anyone seen something similar?function decrypt_string() {apipass=$(echo "$encrypted_string" | openssl enc -aes-256-cbc -d -salt -base64 -A -S "$salt" -k "$passphrase" )} 

Trying to block our public SSID so students on school mac's cant join it and take it off our systems. Any thoughts?