Does anyone here have experience connecting iPads to the NYC Dept of Ed wifi networks (ncpsp) using a configuration profile. I've got the network and password setup correctly but am not able to make a connection via the configuration profile. I can only connect entering the password by hand. I think I must have one of the parameters set incorrectly. Long ago, I remember NYCDOE required special proxy settings but I don't know what that would be currently. Any clues are appreciated. Thanks.

Hey everyone!We are relatively new to Jamf School and iPads in general for our district!We come from a Chrome environment so of course there are some abilities we had with GAC that we would like to emulate with Jamf School! Are we are to lock Chrome or Safari to only sign-in/authenticate with our @Domain accounts? Our fear is that students will just be able to login to any personal account and message/interact with each other that way (our admin is very pro-restricting student's virtual communication platforms).I appreciate any and all help!Thanks all,

Has anyone been able to this without using Configurator or touching each device?

We're installing Adobe Creative Cloud (formerly the Desktop Manager), and it needs to auto update before you can use it once it's out of date. But that auto update requires admin rights, which we don't give users for security reasons. We don't want to repackage this every time there's an update available. Working through the workflow, I noticed it first downloads the installer app to a temporary folder in /private/tmp/XXXXXXXX. If it used a local updater, I could launch it through a Self Service policy and we'd be fine. However since it's a random folder, I can't do that. Does anyone run the updater somehow without granting admin rights to users? I found this thread and tried the script, but still get prompted for admin rights:

Hi All,I can see in Menu Bar App Settings - Jamf Connect Documentation | Jamf it says that Microsoft DFS shares are not supported in Jamf Connect at the moment.Are there plans to implement Microsoft DFS support ? If so is there an estimated release date for the functionality ?Thanks !Sam

I know you can skip different setup assistant windows, but we still get an Analytics window that we'd like to hide.https://developer.apple.com/documentation/devicemanagement/setupassistantHas anyone come up with a way to hide the Analytics window?

Oops!  I deleted a computer from Jamf Pro by mistake.  The computer is still being used (I thought it was out of service).  What do I do to get it back into Jamf and managed?  I tried to manually enroll it but the MDM Profile that gets downloaded to the machine isn't fails to install ("New profile does not meet criteria to replace existing profile.")Help!Thanks! --Jeff

Hey all. I'm still fairly new to all this. I've been trying this for a couple of days now, and I cannot seem to get the proper permissions for AdminByRequest to work. Per this article, I need to allow SystemFilesAllAccess for ABR. I've been using PPPC Utility to created the profile, and I have tried a few different combinations of settings, but none of them have worked. I know it will not show in the Security settings on the Mac, but in profiles, my PPPC is there, and it still not working. I've uninstalled and reinstalled the app with the profile applied, still nothing.Has anyone had any experience like this, whether with ABR specifically, or another app, that could give me some pointers? This has all been on a singular test computer on Monterey, and I need to try to deploy this PPPC to about 80 or so machines, so the manual route is not really an option. Thanks,C

Hello dear Jamf community,I hope you can help me here. I'm very desperate and can't find any help.We have 17 iPads connected to Jamf-School at work.Some apps won't install or update. It says "Wait" all the time, but nothing happens even if you update the app via the Jamf administration etc.Does anyone know the solution to this?

I've getting reports of people that have upgraded from an older OS (anything from 10.14.x on up to 12.x) to Ventura, but it seems like a significant portion of them put in their credentials at the FV screen but never get a desktop.  The progress bar seems to halt around 3/4 of the way through.  The support technicians noticed it's a lot of the Intel Macs vs the M series, but I haven't been able to confirm it.  Further, it seems like it may be related to a login script and home drive mapping in AD for their accounts.  Typically we can clear that and have them reboot on the corporate network.  The issue becomes when users are remote and can't get to an office building. The accounts have all been AD mobile accounts.  Typically when I'm working on those devices I will convert them to local accounts and then use Kerberos Extensions to handle the AD relationship.   Curious if others have run into this?  I haven't been able to reproduce it on

Working with Internal Services and Jamf Safe Internet Earlier in the year, we released our education-focused security tool, Jamf Safe Internet, which focuses on keeping students and teachers safe online. As the adoption of Jamf Safe Internet increases, so do the use cases. A common use case that has become clear in the months since release is the ability to connect to internal services, such as file servers (for storing data), web servers (for platforms like Moodle) as well as a host of others.  Due to the way that Jamf Safe Internet is designed to push all DNS requests to the DoH Gateway in our Security Cloud to evaluate domains against allow/block & security policies (fig1), education institutes aren’t able to access internal services without some advanced configuration.  fig 1 - basic diagram of Jamf Safe Internet flow In order to better understand why we need to add the advanced configuration to our Jamf Safe Internet deployment, you will require a basic knowledge of

I download the O365 package from https://macadmins.software/ and then by installer command and -showChoicesXML flag I built an XML file and opened the XML file and made the value 0 for OneNote app so that it should not get installed on my mac when installing. Now if I am running the installer command with -applyChoiceChangesXML flag with the path of XML file and office package path, it is telling me below. installer: Package name is Microsoft 365 and Office for Mac installer: choices file '/Users/asif/Desktop/office.xml' either could not be found or was malformed.%What could be the cause behind it?My path for XML file and office package is correct as I copied and pasted in terminal.

I have a list of requirements/desires that have been handed to me from management and I want to make them happen. No clue how, though.-Set Scrolling to Classic (down is down, up is up)-Set default to Home Folder, not recent items-Show Hard Disks on desktop-Show Connected Servers-Show filename extensions-Set Accent Color-Set Desktop Wallpaper-Always Show Scrollbars-Warn before emptying trash-Dark mode selected by defaultAny advice or direction would be appreciated! Thanks!

I'm hoping someone here can answer my question. I'm building an app to work with our JAMF mobile environment and I want to collect the "Device Ownership Type" from the device general information. Unfortunately, I'm unable to gather which column this really is.

A Jamf Pro Computer Extension Attribute which returns enterprise-domain Apple IDsBackgroundLike most organizations, we want the best — most secure — experience for our users. So, naturally, we’ve investigated leveraging Managed Apple IDs.While Managed Apple IDs come with some fairly signification limitations, my personal favorite has to be:Allows browsing but not purchasing, paid or free in: App StoreHowever, the promise of a Shared iPad is quite alluring.The RubI also suspect “the rub” for most organizations who wish to federate their domain is Apple’s unwillingness to inform the enterprise which of their users will be impacted before federation is enabled:… but you can’t see their actual personal Apple ID.Continue reading …

Jamf Composer was used to build a simple packagepackage deposits an .app into /Applications. Tested and verified it works locallyUsed Jamf Composer and a Apple issued cert to sign the pkgUsed the IntuneWrapper to create an .intunemac file for IntuneFile was accepted by Intune and policy successfully createdErrors when trying to deploy.I’ve since been able to successfully build, sign, wrap and deploy using terminal however I would like to figure out what went wrong with the Composer build as I see the need for much more complicated packages in the future.Because I removed the policy that was failing and rebuilt a successful one I no longer have the error code Intune spit back for this post. There was no useful error message, just the error code close to, but not exactly, 0x87D13BA2. I stress this was not the exact error code as I was unable to find the exact code ANYWHERE, not even from Microsoft documentation of error codes.I post this hoping someone has run into this issue before and

We are trying to deploy the Forescout connector on a Mac machine through a Jamf policy, which requires us to deploy a .pkg file, a script, and most importantly, the folder containing the Forescout agent on the desktop. This folder includes the launch daemon and a few other commands. However, we are encountering errors and are not able to successfully deploy the folder. Can you advise us on how to proceed?

Hi there. I read somewhere that  GitHub Santa  can be integrated with Jamf Pro. If this is indeed true, can someone point me in the right direction to get started? And yes, I see the documentation included with the app, but was asking for more Jamf specific instructions as I am fairly new to MacOS Jamf configs. Thanks.

Hey JAMF-er's. This is probably an easy one but I'm still not super versed in scripting. I've cobbled together an script that Makes calls the Classic API to get the position, building, and asset tag information from a computer record. Here are the lines I am using to accomplish this:position=$(/usr/bin/curl -s -H "Authorization: Bearer $token" $jssurl:8443/JSSResource/computers/serialnumber/$serial -H "accept: text/xml" | /usr/bin/xpath -e "/computer/location/position/text()")location=$(/usr/bin/curl -s -H "Authorization: Bearer $token" $jssurl:8443/JSSResource/computers/serialnumber/$serial -H "accept: text/xml" | /usr/bin/xpath -e "/computer/location/building/text()")asset=$(/usr/bin/curl -s -H "Authorization: Bearer $token" $jssurl:8443/JSSResource/computers/serialnumber/$serial -H "accept: text/xml" | /usr/bin/xpath -e "/computer/general/asset_tag/text()")It all works as intended, but s there a way to combine these lines so it's not authenticating to the server 3 times to

Hello Jamf Nation! We recently released Jamf Protect 4.1.0. This release includes the following changes and improvements: Telemetry enhancements for collecting performance metrics, BIOS/EFI data, and diagnostic/crash files. These enhancements aid in meeting compliance requirements and improve incident response and IT troubleshooting workflows. A new diagnostics command for the Protect command line tool (Protectctl). Updates to existing Insights and the addition of two new insights to verify device compliance: 2.3.1.2 Ensure AirPlay Receiver Is Disabled and 2.6.1.2 Ensure Location Services is in the Menu Bar. Improvements to file quarantine and scanning functions to resolve a known conflict with some third-party security tools. Product Documentation  For additional information on what's included in this release, review the release notes via the Jamf Learning Hub. Thank you!The Jamf Protect team

Hi guys. New on the tool, and I am pretty amazed about it.The thing is that some client it is asking us to monitoring web content that the macOS users browsing.I know that is possible to configurate a profile to create white and blacklists of websites and all that (never do it, but I know is there).What we would like to know if is possible to get logs of the browsing from the users, so then implement blacklist or whitelists of websites.Thank you!

We use AD in our enviornment, but we have many local users with admin rights. Now that our use of Casper has become more robust. We want to take the local admin users and turn them into standard users. Any suggestions as to the best way to do this?

Does anyone know if there's a way with Jamf to capture, or view, who enrolled a device via the user initiated web portal (https:jamfserver.com/enroll)? My Jamf instance has SSO enabled, so manually enrolling a device requires a company login, so I'd love to be able to view what user initiated an enrollment of a device. If I look at Jamf's change management log, that info doesn't seem to be captured -  only the name of device, the device ID, and the site it was enrolled in are captured there. I also briefly looked at the Jamf Pro server logs and a machine enrolled ~90 minutes ago doesn't show up in the logs by name, serial, or ID#. There isn't anything in the computer record in Jamf, that I can see, that stores this info either - the MDM Capable User is just the first user account created on the machine, not necessarily the person who enrolled it; and when enrolling devices a person can assign the machine to an alterative user, so the user set in Jamf isn't necessarily wh

This policy trigger is already being run: root 731 0.0 0.1 660664 10948 ?? Ss 8:25PM 0:00.42 /usr/sbin/jamf policy -randomDelaySeconds 300 I saw a policy fail for user based over seas, so I remoted into her computer, flushed the log for that policy and manually triggered sudo jamf policy ... but keep getting the above error, what does that indicate?

hi. i found a way to show device-names on the lock-screen, but way too small. Is it also possible to add the device-name to the wallpaper - without individual wallpapers for each device. zuludesk has implemented that feature. you can define a payload within the screen-layout section. maybe i didn´t find that feature yet, so please, help me. Thx in advance,Roland