I have a Mac Lab of 30 Mac Minis all using the same config profile and policies. I have 6 Macs that will not run Jamf Connect. I get a black window and a spinning wheel so I can't even click on Local Login to have students use that. Any suggestions? I tried updating to the latest Jamf Connect, restarts, removing the policy etc. I just haven't wiped the devices as I didn't want the students to lose their local profile. Thoughts?

The Jamf Research & Insights team is hosting a feedback workshop on the Jamf Pro mobile experience Wednesday at noon Eastern Time. Sign up for a spot with Calendly and check out the Jamf Nation Events page for future workshops! 

For some reason, our teachers could creat subgroups in Zuludesk teacher, but not in JAMF teacher.Both apps has been installed through JAMF.Is there any hidden preference-option i could not see. 

Hi fellas, can’t easily seem to find info on this. For classroom environments were macs are shared devices, what type of deployment is recommended. In a 1-1 scenario office 365 business pro is recommended, is it the same for shares devices? For office 2019 along with the serializer seemed to work best for classrooms, is that work flow deprecated and everything should get the same deployment? Thanks in advance for the reply’s

This is from the release about JAMF Pro 10.37, but leaves a lot to the imagination:App InstallersApp Installers allow you to deploy apps from the Jamf App Catalog to a smart computer group and automatically updates and deploys those apps. This streamlines the app lifecycle management process by removing the need to manually monitor, package, and update apps. The documentation page isn't much more help:Patch ManagementYou can manage the software updates in your environment using the built-in functionality in Jamf Pro. Managing software updates allows you to ensure that the software in your environment is up to date on target computers, and allows you to update the software if it is out of date.You can manage both third-party macOS software updates and Apple Updates using the following methods available in Jamf Pro:Patch ManagementYou can use the Patch Management workflow and other technologies available with Jamf Pro to manage the third-party macOS software upda

History - We currently have all of our Computer Level Profiles install as the device is enrolled, apps/system settings/etc.    Followed the same workflow for the Managed Login Items (mix of Team ID and label, depending on need) for Ventura.Issue - If the Profile is present (enrollment) before the base application stack is installed, post-app install the Login Item slider is NOT grayed out. No matter if rebooted, etc. Always able to slide it off/on.   Unexpected behavior as we see it.If no Profile present, install our application stack, and THEN apply the Profile, the sliders are grayed out and cannot be altered. I suppose the question is...is this expected? Should the Login Items Profile not be applied until after the targeted applications are installed? This would run contrary to our normal workflow for Profiles that has been in use for some time (Profile first, then apps, etc). 

Anyone had issues deploying the Jamf School Apps? Assigned a teacher to an iPad but it does not auto login or login at all. I assume its because we are on manage.zuludesk.com url? Thanks!

We have a number of fonts installed on the Macs that we used a configuration profile to get them on the laptops. What is the proper way of getting those fonts off of the laptops now using Jamf? 

Hello, After enrolling the device in pre-stage the username & email are remaining blank.We are using google cloud identity LDAP.Looking forward to feedback. Best Regards,Makarand

Been looking for an EA to pull the last 5 reasons given by a user for account elevation from /private/var/log/privileges.log for awhile, didn't quite have the bash savvy to get exactly what I wanted. Last night I decided to give ChatGPT a shot. First I gave it a summary of what I wanted and told it to hold so I could give it more specific info. I fed it the documentation link for Extension Attributes in the Jamf Pro Admin guide, then provided a sample privileges.log file. After a bit of messing around with the results given by ChatGPT and prompting it to refine its response further it spit out something workable. Here's the final result in Jamf, along with the Extension Attribute script (in zsh).    #!/bin/zsh # ########################################################## # # Jamf Pro Extension Attribute # Last 5 Privileges.app requests.sh # Version 1.0 # 3.29.2023 # # This script records the last 5 reasons an end user needs to request local admin right

Hello, I'm looking for a way to add a mark or label to a system so that it can be eligible for a smart group to pick up. When the system is part of that smart group, a configuration profile is then pushed down. Ideally, I would need to do this in Self Service without changing the computer name. Any help is appreciated.

Anyone that is using Okta LDAP and getting the following in their jamf logs?  LDAP operation failed because an administrative limit has been exceeded.How are you dealing with the error?

A random number of Macs in my environment have lost the ability to use sudo from a terminal. I have tried local admin user, ARD send Unix command as root, and JAMF Remote. I am trying a simple jamf recon and the result is:sudo: 4294967295: invalid value. Google turns up a few articles:https://www.sudo.ws/alerts/minus_1_uid.htmlhttps://news.ycombinator.com/item?id=21366177I am not a Unix or Linux expert to understand why this is occurring or how to fix it. I do know that I have not edited the sudoers file, I can log into a local admin account and run normally if I don't use terminal requiring sudo, I can log in as an AD admin and get the same error message sending terminal commands using sudo, and logging in as a standard AD user I can su to a local admin account, but can't run commands using sudo. These are computers that were installed with a fresh 10.14. OS and apps from our JAMF server and worked normally until I noticed sudo failing Wednesday. They were not imaged, they all work

Does anyone know if there is a way to prevent users from doing a Force Restart (or Hard Reset) on their iPad Devices using restrictions in Jamf Pro? We currently have some students in our district that are using the Force Restart as a method of bypassing an App-Lock when using the NWEA Secure Testing App. As I've said, I believe the answer to this is "no" since the Force Restart is a firmware level troubleshooting tool by Apple, but just wanted to check. :)  -Matt

We are experiencing some weird behaviour on recently registered Macbook's. All of the App's we install from the App Store or Jamf App Catalog are requireing admin credentials to make changes when the user first opens the app. Obviously we don't want to give them admin credentials and we had not experienced this behaviour on the test devices we registered before this batch. From searching through the forum and Google I've confirmed that the Restrictions profile was not installed on any of the devices (So it shouldn't be an issue with "Require admin password to install or update apps" being selected) and I've since added that profile with "Require admin password to install or update apps" explictly not set, but we still see the same behaviour? Has anyone else experienced this or would know what could be causing it? The devices are all running on OS Ventura and the user's don't have permissions to the security setting in System Preferences.

What is the impact of the bookmark path in the content filters and how can i configure it?Devices > Configuration Profiles > Payload: Content Filter Typ: Specific Website Only  section: Bookmark Path. Thank you in advance.

I just discovered that Apple is introducing a new Model Identifier scheme for the new Macs. The 13" M2 MacBook Pro is "Mac14,7" and the Mac Studio is "Mac13,1" Has anyone found any explanation for the new format? Will we be able to use Model Identifiers in a meaningful way (like MacBookPro11,5 is older than MacBookPro16,1) or will the numbers be just a random assignment to new models? 

Hi Nation. I'm fairly new to Jamf and I'm looking for some advice regarding Chrome extensions and more specifically, the settings within the extension. I am deploying the G App Launcher extension (G App Launcher) and this is working well, however there is a setting within the extension with the key 'displayMarketplaceApps' that is always set to false. I would like to deploy the extension with this setting set to True.I can export the settings via json file, however, I'm struggling to figure out how to configure this for Jamf and deploy deploy along with the extension (if possible) I'm pretty new to json as well, so any pointers/advice would be great.

Hello Jamf Nation, For security reasons at my org, we are trying to compile a list of installed extension for the Chrome, Firefox and Safari browsers.  I've seen a couple posts about chrome extensions and have a script for just Chrome. Does anyone know of a good script that can pull extensions from all three? 

Disregard, is there a delete post option for dumb questions? :)

Hello. Does anyone know a working (!) way to leverage with Jamf Pro that just certain apps/browser sessions use a VPN connection? We need to avoid for obvious performance reasons that our VoIP app also routes phone calls via VPN. Any help/hint is much appreciated. :-) Best regardsChris

Easily create simple macOS Notifications with swiftDialog v2BackgroundFor the last several weeks, the now 550+ users who frequent the MacAdmin’s Slack #swiftDialog channel have been all abuzz about Bart Reardon’s soon-to-be-released version 2 of swiftDialog.One of the features I’ve personally been anxious to try is macOS Notifications via swiftDialog, but as Bart explained when he closed the feature request with wontfix, Apple’s restrictions conflict with what many Mac Admins require: Branded Notifications. VoodooThen, two days ago, Bart posted:Special bonus installer – Same build as RC2 but with some voodoo in the pkgPlace an image (recommended 512×512 png) at /Library/Application Support/Dialog/Dialog.png and then run the installer.Two words: It works!Continue reading …

Hi folksOur client does not have the budget for Jamf Connect and wants the ability to create and log into local Mac accounts via Okta.  Is this possible with the SSO plugin?  has anyone done it?  If so, please point me in the right direction!!! Thanks!

I have a "1 Extension Attribute Error" error on Google Drive File Stream patch management template, a bit like this error.I'm not sure what is going wrong, I see no logs.But I do have one laptop which has the latest version installed. In patch management, it is reported as Unknown. But when I run the script manually, it reports the correct version. Other patch management items have no problems.Now I noticed it has the old name (with File Stream). So I wanted to add the package "Google Drive", but when I press on the (+) button, I get a "404 Page Not Found" error. When I want to add another package (for example "Textmate"), it just works.What is the problem? Do I first have to remove the "Google Drive File Stream" package, before adding the new one? I'm afraid it will still fail... Also, how can I see what's going on. It seems very magical to me right now...  

Hello,I have one configuration profile with restrictions configured as followedIt works as expected with macOS Monterey 12However, it doesn't work on macOS Ventura 13+. The setting screen shows message "Screen Saver settings are not available"Any suggestion on how this could be fixed? Thank you !