Hey Community, Has anybody already put in place a script to reset the spotlight configuration when a Mac experiences unexpected results when searching for it?  Any input is much appreciated! Thanks. 

Hi,I'm seeing an issue with NVivo 20.7.0 and even the previous version that I packaged - 20.6.2. The issue is that when I try and start NVivo it says:NVivo needs permission to access data on your computer before it can run.Click the button below to open your computers Security & Privacy preferences, give NVivo Full Disk Access, then restart NVivo- I use a Configuration Profile to give NVivo full disk access.- I only get this pop-up on M1 machines - not Intel ones- For Intel machines, I've tested on Mac OS 11 and 12 - no issue. On Apple Silicon (M1) computers I've tested with Mac OS 12 and get the pop up.- I tried unscoping the problem machines from the Configuration Profile and adding NVivo manually for Full Disk Access in System Preferences > Security & Privacey > Full Disk Access but no change and can't get NVivo to start- I read this post https://forums.nvivobyqsr.com/topic/10209-i-have-given-nvivo-full-disk-access-but-it-still-will-not-open/ in the QSR User Forum and

Hi I am trying to update 13.1 to 13.4.1 and all my machines that are enrolled in jamf are stuck at a black screen with the Apple logo on them. Anyone know why? I don't have any deferments set, I don't have any policies in place.  I am at a total loss.

Is anyone else having issues loading the Azure AD Integration docs link?  https://learn.jamf.com/bundle/jamf-pro-documentation-current/page/Azure_AD_Integration.html. Whenever I try and click on link to it, i get a little backwards progress bar that says "Network Error".Also anyone that is using Azure AD under the Cloud Identity Provider, are you able to access create tokens for API access via command line tools or the GUI on server.com/api?

Has anyone seen any issues with deploying Netskope on Big Sur with intel Macs? We have tried both with Kext and Network Extensions and the agent is greyed out and the configurations do not appear. Currently have a ticket with Jamf engineering. We are using the latest version of the deployment script but are having no success. Netskope keeps directing using to their support page for the answer.

Hello all We got requirement to prevent users from saving files locally and only allow saving into OneDrive. Has anyone done something like that or has an idea on how to? I would very much appreciate all and any input. Thanks in advance

Hello,I'm trying to install an iOS App on an M1 Mac via Self Service. I followed this guide: https://grahamrpugh.com/2021/08/24/jamf-ios-apps-on-macos.htmlWhich works up (as in I can see it on Self service) until the point where I am asked for App Store credentials in order to install the app. I don't want to have users signing in to download & install the app. Any ideas?On Managed Distribution I get a message saying "Content not available to assign to computers"It's a free app. Thank you,Georg

installs of office products taking over an hour.this happens in office locations and at home, wired via LAN and over WiFi.Our office apps are packaged as individual pkgs, the installs do complete, but are taking excessive amounts of time all of a sudden. previously these would complete in a matter of minutes.Jamf Pro instance is 10.47.I can not see an obvious reason for this, anyone have any input or had the same issue?I have placed some examples below but not sure why suddenly these are taking so long to complete? Microsoft Word17 minutes ago1h 26m 18sCompleted    Microsoft Outlook36 minutes ago1h 07m 49sCompleted (2 attempts)    Microsoft OneDriveToday at 11:15 AM1h 00m 07sCompleted    Microsoft ExcelToday at 10:15 AM23m 40sCompleted    Jamf daily reconToday at 9:51 AM17sCompleted    Enable Jamf Connect12/07/2023 at 5:21 PM1sCompleted  

I have a simple dock addition policy, it completed successfully but does not show the self service app on the dock afterward. the after policy user interaction pops up as well I tried killall Dock as well and nothing changed I added the Dock item via Jamf Admin and then pointed to it for the Dock Items attribute of the policy

Hi all, I'm jumping into editting plist files with scripts and I'm seeing something I don't know how to handle and I'm hoping someone has seen this kind of thing before and can point me in the right direction.  What I am tryingto do is to read a plist, edit a value, then put the result back in. I'm using 'defaults read | grep' to pull the value I want, but what is returned looks like:SyncTargets = {length = 118, bytes = 0x1a2b3c4d 11aa22bbcc ... 12345678}Is there a way to read this value into a string? I'm expecting the string to be base64 encoded when it reads the plist because this is how it appears in the plist file when I inspect it manually. I have never seen this before and I can't find the magic phrase to put into Google to find what I'm looking at and what I can do with it. I have the decoding, modifying, encoding and writing back into the plist all working, it's just this weird read result that I don't know what to do with. Help me Jamf Community, you'

If you havent up voted for this, heres a link to help you out....we have GOT to get Jamf to make some movement on this. My security team is SCREAMING at me on a weekly basis.  Please upvote this! https://ideas.jamf.com/ideas/JN-I-16171 

I am currently trying to test the new features of JC with the 2.25 release and Okta OIDC.  We have successfully been using the "old way" with JC and "Okta Classic" via Authentication API.  In Jamf Connect Configuration app under "Identity Provider" I have selected Okta (OIDC) and filled out the appropriate fields:OIDC client ID:ROPG client ID:Tenant: Can I just put the Tenant ID here or does it need to be a URL/TenantID? I have tried both ways and still getting an error I am getting a connection error when testing the new OIDC connection prob because I have not properly configured something correctly. I have not filled out anything in the "Advanced OIDC" section of the Configuration app. I have Jamf Connect configured in our Okta environment via OIDC configurations and as mentioned above we have been using it successfully via the Okta API Authentication previously. 

I recall many years ago having students complete an online safety quiz before they could proceed onto the managed macbook. It appeared right before or after the login. Pretty cool! I was interested to see if that is still available and if so… can it be applied to a managed ipad? Profile/Script possibly. My JAMF person who helped me set up our devices like 10-12 years ago helped me with this.  Kirk

Is there a way to re-name automount shares to use a set name for each in the array instead of the root folder name? We have some file shares with "Share" or other generic nonsense name that the share gets mounted to the desktop with.

Hello Jamf NationMy boss lost their Mac book Pro and is asking if our MDM Jamf Pro 10.47 can find itThe pre-stage enrolment does require location services be enabled but I do not see anywhere to look for the laptop from Jamf ProIs this a function of Jamf Pro or can this only be done iCloud > Find My app?I don’t believe they set up iCloud

I modified the JAVA_OPTS to attempt to fix an issue we're having with our DEP token per https://macmule.com/2019/10/01/more-dep-sync-errors/#The_Solution. After doing so and restarting Tomcat it was freezing on "Analyzing web application". I restarted the VM and upon coming back up I was getting the same thing. I reverted the file back to its original settings, removing the text I added, but now I'm still getting stuck on "Analyzing web application." Does anyone have any advice?

Hi,We are trying to configure it so that computers enrolled in our company Jamf have their screens locked after 5 mins of idling. As far as I know, the way to do this is by starting a screen saver after 5 mins of idling and then forcing a passcode to unlock the computer.Is there no way to lock the screens without starting a screen saver?Thanks

I am using Composer 10.38.3 to make an installer of Karabiner - Elements, but I keep getting prompted for "System software from application 'Karabiner-VirtualHIDDevice-Manager' was blocked from loading". I am using the snapshot method to capture the installation which I am allowing said software to install. Also I have modified the owner/group to root/admin and applied to all sub folders and files. However, whenever I run the Self Service install, I still get prompted for the "Allow". The software does require Security & Privacy Input Monitoring which I have created a configuration profile for. I still think this is a permissions issue.

I'm trying to get Firefox working on our network. We have an explicit proxy via a PAC file that I'm trying to configure. Once I figured out the "ImportEnterpriseRoots" key in my config profile, I am able to login to Azure AD SSO (I had been getting unknown cert signer before). It also looks like websites that are explicitly marked as direct in our PAC file work fine (our Jamf cloud instance for example). The issue is every other website. When I try to go to github.com for example, I get:"The proxy server is refusing connections"I do get prompted for creds to our proxy servers, so I know it's connecting, plus the fact that direct websites work fine as well as the untrusted cert error that got fixed but it's just the non-direct websites that aren't fail to load. We have no problems with the PAC settings in Safari or Chrome.

Our organization's Apple Push Certificate is expiring soon. I was able to renew the cert but when I try to upload the new one it says that the Identifier is different than the old cert. Will this break the push cert that has ben pushed out previously on all our deployed machines? I believe the identifier is different because I was not the one who created the current push cert. Will using my Apple ID break the current push cert? Thanks!

We are looking at getting a design/concept for an in-room patient experience in our healthcare system.  Does anybody have any vendors that we could take a look at?

Hello Jamf Nation! You will find details about Jamf Connect 2.25.0 as well as all future versions in the new Jamf Release Info space.

Hello, I am attempting to upload two different .pkg files into Jamf School for distribution to the macOS devices in my environment. While uploading the packages i am receiving the following error "Error: This is not a product archive, parsing component packages is not yet supported" I have tried different version of the file and I also used pkgbuild to build a .pkg from a .dmg mount. Any help is greatly appreciated!!

Hello,My place of business recently purchased Jamf Pro and we are going to be moving about 200 macs from Intune over to Jamf.I'm not sure where to start. I don't seem to be able to find any articles or documentation about the process. Is this as simple as deleting all of the devices from Intune and then using Apple School Manager to change their MDM to Jamf Pro, or is there something more involved?  I would greatly appreciate any help.

We have a few hundred MacBook Airs that we're going to be deploy in the next couple weeks. On our test ones, during setup, after the MacBooks get all the settings, profiles, etc. from Jamf, the MacBooks restart without warning and never finish setup properly. I don't see anything that should be causing the restart, but I could be missing something obvious. Here's what I see in the logs Jamf-wise:Thu Jan 26 09:55:50 MacBook Air jamf[999]: The SSL Certificate for https://xxxxxx.jamfcloud.com/ must be trusted for the jamf binary to connect to it.Enrolling computer...Thu Jan 26 09:55:56 MacBook Air jamf[1012]: Skipping trustJSS command...Thu Jan 26 09:55:56 MacBook Air jamf[1012]: JMFCommons.JamfKeychain.JamfKeychainSecurityError.failedToReadJmfKeychainPasswordThu Jan 26 09:55:56 MacBook Air jamf[1012]: JMFCommons.JamfKeychain.JamfKeychainSecurityError.failedToReadJmfKeychainPasswordThu Jan 26 09:55:58 MacBook Air jamf[1012]: Creating user xxxxxx...Thu Jan 26 09:56:39 MacBook Air jamf