Hello everyone,  Hope all is well!  We recently purchased a 16" MacBook Pro 2023 running the M2 Pro chip. This is the first time we've ran a user-initiated enrollment on this model/ processor. I am able to enroll the machine but it never checks in automatically. Has anyone ran a user-initiated enrollment successfully on the 2023 MacBook Pro M2 Pro? I'm wondering if this is a known issue or just an issue on my end. Any feedback is appreciated. Thanks for the help in advance!  

I was wondering how do you guys upgrade the cisco anyconnect VPN Client ? as we are all working from home , we need upgrade them remotely and we need to upgrade user VPN Session is not active.if you are aware of any process or any script can you please let me knowThankssantosh 

We have installed several Mac studios at my University. We attached wired Satechi Keyboards and mice to them however for some inexplicable reason, the keyboards and mice intermittently stop responding and users have to disconnect and reconnect. It has become quite a nuisance and not sure why this is the case. Has anyone come across the issue?

Currently in Jamf School when you look at a user record you can see the devices that they own or have been assigned.In an environment where Shared iPad is deployed, the user record has no information about Shared devices. So a scenario that I experience often is a support request from a teacher saying that peter.student is having a problem with his iPad. Which iPad is that? If I look up Peter Student in Users, there's no device associated.But the student is signed into a Shared iPad. There is no history searchable anywhere in Jamf School.Ideally, I should be able to search for that student name and see which Shared iPads they are currently signed into and possibly a secondary list of iPads that they have recently signed into.So the feature request is to add the state of shared iPad login under the Users section in Jamf School.What devices is this user signed into (but does not own, since nobody owns a Shared device).Many times I then have to deal with logging out and clearing cach

I noticed Adobe CC no longer being readily available in Launchpad for our end users after re-imaging to Ventura. Adobe says it's an Apple issue, which makes sense since that is the only thing that has changed, and was my original guess. I can manually create a new shortcut based off the actual application deep in the Utilities folder, but that's not a feasible solution for several hundreds of devices. I've triple checked to confirm Adobe installs correctly and with the most updated version, but Launchpad doesn't see the Adobe CC shortcut that is made in the "Adobe Creative Cloud" folder (also contains the uninstaller shortcut) at time of installation. Instead simply using the Launchpad, it has to be Launched from inside the Applications folder. Our users will give us some blow back at us for not having it exactly the same as last year and for it being "more difficult" for the students.Anyone else experience this and come up with a solution, or have a script to create a shortcut in

No text available

I am working on an extension attribute to check if Aternity is installed, running, and its version. I have to write it this way to take into account the two possible install paths for the agent while we roll out the newer version. I keep running into an error "CFBundleShortVersionString", Does Not Exist". This is being generated from the version check in my script. I have visually confirmed that "CFBundleShortVersionString" DOES EXIST!!! I can run the command in Terminal: version=$(/usr/libexec/PlistBuddy -c 'Print :CFBundleShortVersionString' /Applications/AternityAgent.app/Contents/Info.plist)When I type echo $version, I get the correct result.Only when I run the whole script in either Terminal or CodeRunner does it give me that error. Here's my EA. What am I doing wrong? #!/bin/zsh # Is Aternity installed? Is it the older version or the newer version? agentOld=(/Library/Aternity/Agent) agentNew=(/Applications/AternityAgent.app) if [[ -d $agentOld ]] || [[ -d $agentNew ]

We have 2 on-premises JAMF instances, running different versions of JAMF, on different servers.The day before yesterday, I was suddenly unable to log into the JSS on one of them; I enter my username and password, it sits there for a second, and returns me to the username/password dialogue with no comment or error. Restarting tomcat didn't help. Rebooting the server did. Meanwhile, the other server was still fine. (So it's not my browser.)Today, both of them have the same problem. As far as I'm aware, beyond Windows updates, nothing has changed.Is anyone else seeing this? Or is it just our environment?Thanks,Lisa.

Is there a way to remove or trigger the 'forget this network' command on a certain SSID with a policy? I deleted and recreated one of my configuration profiles for a wireless network thinking it wouldn't be removed from the current devices, but it was. Until the profile is installed again on the iPads I have been connecting them to a different SSID so I am hoping to be able to remove this via JSS after the profile is installed.

Hello,on Friday we update our Jamf to the 10.47 version and this morning we got an issue that any newly assigned computer during PreStage with Enrolment customization will be pushed to Site: None.So, in PreStage enrollments settings, Enrollment Site is defined and the Automatically assign new device option is enabled. This is all working fine.But as soon as we enable Enrollment Customization Configuration, which is a simple text with a button "Next", the computer will always be pushed to Site: None in Jamf.We tried to select the Site in the Enrollment customization profile, but whatever you select result is the same, Site: None.What I noticed, if is Prestage Enrollment Customization enabled, the computer will be assigned to the proper site at the beginning, but as soon as the Remote Management window is done (all config profiles installed) will be removed from that site. This happens only if is Enrollment Customization Configuration enabled in PreStage enrollment. Does anyone have

Hello All,hpefully anyone has an Idea for me. We using a long time now Jamf to enroll our Mac's by DEP and UI always working fine.Since a short while now, the enrollment process starts normally, load the MDM Profile all looks good, then it stops by load a few of the Profiles after the MDM Profile.The communciation give the standard error: Device Signature Error. If i try sudo jamf profles renew -type enrollment, nothing happen here, no changes.I need to remove the MDM Profile by Jamf, and enroll it new over the url, then it went over the stop point and enroll normal.This is by booth way to enrollment Automatic and Manually on first time.Anyone an Idea what this can happen, i search all but yet cannot find anyhting related to it.BestAJ

Someone showed me at a conference how their staff created what they said is a webclip, but looked like a widget with an icon for Google Docs, Sheets, Slides, and Drive. When you clicked any of the icons within the webclip it opened a new Doc, Sheet, etc. I've been trying to search for how to do this and haven't found a way to replicate it. Any thoughts?

Iam not sure if anyone else here is intrested, but i raised the following Feature request to allow a policy to be created in JAMF which would update all devices scroped to it to a particular OS version: Minimum and maximum patch level | Jamf Nation Feature RequestsI raised one of these before when remote commnads were first introduced but there wasnt much dammand for it. Now its been a few years on it looks like we are still resorting to sending push commnads natively within JAMF Pro. Other vendors do allow you to set patch levels so jamf should be able to implement this, and we shouldnt have to resort to third party scripts or applications just to get updates. If other agree it would help if others upvote the feature request

Can anyone help me out in figuring out how to Cisco Umbrella Root Certificate via JAMF.  The link from Cisco only shows how to deploy the certificate on a single machine.Install the Cisco Umbrella Root CertificateAny help would be really helpful. Thanks

Hi Jamf users,I've been given a couple of old iOS devices but some still have the previous user's iCloud on them (yes, we did not block it beforehand 🙄). They have been wiped and handed in and now of course these users have long been gone from the company but they are still linked to the person's iCloud.Is there a way, as a Jamf School admin, to remove the iCloud account from the device, or is it a write-off? We're talking 2014-2015 vintage so I doubt we can still find the invoices from the bulk purchases from way back but considering the devices still work fine, I'd rather give them away instead of having to throw them into e-waste bin.The iCloud account has been registered on a company e-mail address which has also been deleted after the person has left. I doubt that recreating the e-mail address in the 365 tenat would do anything to recover the iCloud password?

Is it possible to add some basic logic to the Jamf Notify script? In my scenario, I'm using it as a first boot installation of a few basic apps and one of those is Zoom. Infamously Zoom doesn't have a universal installer so depending on the architecture it'll need one of two saved packages installed from Jamf Pro.Is it possible to read the processor type in the script and add an if/else section to install the correct pkg? I had messed around with it some but it was failing and I wasn't sure why, but it was my first time testing with the Notify Screen so I wasn't sure what I was doing. Thanks everyone!

Greetings. My Company use JAMF Pro to manage our macbooks and they had policy that user must have admin access because most of them are Programmer and they must had full capability to their macbooks. One day i found that if i delete MDM Profiles, i cannot restore it again unless i re enroll the laptop to JAMF. i already implement self heal script, but it doesn't work because JAMF binary still there and i still can use the command. My friend suggesting for restriction access to "Profiles", but it can't help since our users must have access to this menu for testing or allowing their mobileconfig. Is there any possibility to restore deleted MDM profiles automatically or prevent it to be delete withouth restricting Profiles Menu?

Guys, sorry to reopen the thread. I've macOS of 13.4.1(c) and trying to deploy the customised dock using the below script. When I manually execute the script in terminal, it is getting executed successfullybut nothing appearing in the dock even after kill the dock. Kindly advice. #!/bin/zsh# dockutil pathdockutil="/usr/local/bin/dockutil"# Exit if Dockutil is not installedif [[ ! -f ${dockutil} ]]; then  echo "dockutil is not installed. Existing..."  exit 1fi# Get major macOS Versionos_version=$(sw_vers -productVersion | awk -F. '{print $1}')# Wait for the Dockwhile ! pgrep -x "Dock" >/dev/null 2>&1; do  echo "Waiting for Dock..."  sleep 1done# Get the username of the currently logged in userusername=$(scutil <<< "show State:/Users/ConsoleUser" | awk '/Name :/ && ! /loginwindow/ { print $3 }')# Cleanup Dock/usr/local/bin/dockutil --remove al

Hey Community, Has anybody put in place a script that is used in a policy so it can display computer info and this through Jam's self service?  Any input is much appreciated! Thanks. 

Hello, I searched Jamf Nation for a similar issue and came up short, if I missed a post that would provide info please let me know.  My networking lead has brought it to my attention that a 3rd party company that does occasional network scans on our network to keep us compliant in things like, number of O365 licenses, Oracle licenses, etc has spotted an issue with our Mac's.  At first they mentioned there was a feature in Jamf that was simply a check box that would allow SSH commands to be let through, which are blocked by default in Jamf.  But the tech claims the console has changed a bit since he last worked with Jamf and isn't sure where to go, I Googled it, ran it through GPT4, and can't seem to find an answer.  Is there a simple way to open Port22 or SSH for network scanning to be performed on our Mac's that are currently enrolled in Jamf?Thanks a ton!Kerry

This only affecting one user, but thought I would see if anybody has seen this. The user is 16.74 and has been for over a month and last week he started having an issue after creating a new email, his signature would be really small to the left and when he would open an email and hit reply, the body of the email does the same thing.  

My email is going to junk, the test message successfully sends to the inbox but if a user requests an app the self-service email goes to junk email, any thoughts? it is on allow list 

I am trying to disable only Export option in Outlook from Configuration profile. when i set the value  <key>DisableExport</key> <true/>  it is disabling both Export and Import.Also i tried giving bool values separately.<key>DisableImport</key> <false/> <key>DisableExport</key> <true/>but still it is disabled both Import and export options in outlook.is this kind of bug in outlook or from jamf?do we have any other way to disable only one export option.

Hi, we are facing a problem when we install or upgrade the BeyondTrust PMC agent, the splash window (the JamfConnect login window) is not loading after the restart. is there anyone that experiences this issue? also, we tried to run this command after the installation - "/usr/local/bin/authchanger -reset -jamfconnect"but it's not working every time.  

Hello everyone - I have created an interactive Apple Script that prompts a user to input their username and it works w/o issue in terminal, but when I have it in Self Service the GUI doesn't come up unless I hit cancel, but it still works which is a plus, but I rather it work like it should and not be a happy little accident. Also this same script when setting it to run after enrollment completes I get an error of "Script result: 95:158: execution error: No user interaction allowed. (-1713)" Which I believe is because the script is being ran as root? Here is the script in its entirety. I appreciate you all.#!/bin/bash# Prompt the user to enter the new computer nameIFS= read -r -p "Enter the new computer name using department abbreviation and asset tag (Ex:DEPT-123456): " newComputerName# Execute the AppleScript using osascriptosascript <<-EOF-- Prompt the user to enter the new computer nameset newComputerName to text returned of (display dialog "Enter the new computer n