Hi every one,so since macOS Ventura we can set login items to not be disabled by the user with the "Managed Login Items"-preference.But is there a way I can prohibit some specified launch agents to be loaded at all?Kind regards, Matthias

Hello. I've been tasked with forcing a homepage to stick within Google Chrome. I've seen many discussions, and many paths to try to manage this task. Unfortunately for me, none of them have worked. Many of these paths have taken me to places I'm not familiar with, so there has been a lot of learning needed. This is what I've tried:Managed Preferences : (MCX?) - https://www.k12techsystems.com/2014/11/using-managed-preferences-mcx-to-block-or-uninstall-chrome-extensions/https://www.jamf.com/jamf-nation/discussions/12520/chrome-managed-preferences Changing Google Chrome Manifest -

Hello Jamf people, we have recently migrated our on-premises 10.46.1 Jamf Pro to another server (Ubuntu 18 to Ubuntu 22), and everything seems to be working OK, however all clients reporting localhost IP address now - 127.0.0.1, while previously it was their actual IP address.It might be related to Apache proxy we've got running on that server as well - it was migrated to the new one with exactly the same configuration though.Is it possible it's something JAMF related or we should keep looking more into Apache config? Did someone else face this kind of issue before?Thank you!

Hey everyone this is a dumb question, I want to add the latest version of zoom which is 5.15.2 but when i go to patch management i see 5.14.7 how do i update it to show 5.15.2 so i can upload the PKG file      

Howdy!We have Jamf Pro hosted in Jamf Cloud. I am not sure when this started, as this matter was brought to my attention by another team member. However, our Change Management logs are flooded with entries from our VPP Account supposedly editing our VPP object. Screenshot:I did some searches but I could not find a similar issue. The problem is that each of these entries, if I click on the Details button, show the exact same data. Seen here: This entry appears every minute. It is making auditing nearly impossible because it is flushing out previous entries that are actually team members making changes.How can we fix this?Thank you.

Does anyone know what flavor of regex is used by Jamf Pro? I've been using PCRE for my patterns, and haven't had any problems (that I know of,) but would like to get official confirmation just to be sure.

At Jamf, we value transparency and giving you greater control over your information. As such, we are writing to inform you that we’ve updated our Privacy Policy. We encourage you to carefully review our Privacy Policy, particularly if you reside in California, as it contains specific information about your California privacy rights and how Jamf collects, utilizes, and shares your personal data. Additionally, with the expansion of our product portfolio, we have revamped and enhanced the way we offer information regarding our products and services. You can find our list of sub-processors in our Trust Center or by clicking here. If you have any questions about these changes, contact privacy@jamf.com. For more information about our privacy progra

In my environment, we use Jamf connect and user ID is the user account created as UID 501 by default, no other local account creates here, my question is how SUPER can install pending Apple updates on Apple Silicon mac devices with existing local user account? I dont want to create a service account or Jamf API account. How can I take the decision for script parameter to set in my policy, for what parameter what string I need to put there? All these are very confusing. Please help me on this.What does --reset-super parameter do? I did set under script parameter 6, every time I ran the super policy on my test mac it still saying n number of deferral remaining decreasing by 1, whereas I was expecting that it should reset and show me as N number is remaining which I did set in my config profile a deferral count.

Hi folks, Can someone help me with an EA that can collect information on if someone is logged into iMessage? Thank you, 

Here's what you need to input into the "OAuth Sign In URL" and "OAuth Token Request URL" fields for the Exchange ActiveSync device payload for when you need to account for modern authentication: OAuth Sign In URL:    https://login.microsoftonline.com/

Since we got the last Mac OS update Ventura, we have been having this failed command in Jamf Pro. Could someone help us :D

Hi, How do we create a smart group to identify devices with no Site assigned ?

Scenario: Large school with students using mainly macbooks, work is saved to OneDrive. Students are often breaking their OneDrive syncing by using illegal windows characters in file names (word docs ect) causing sync errors and are then requiring a manual fix by IT Staff renaming the files/resolving onedrive syncing. All devices are MDM enrolled, is it possible with Jamf Pro to disable the ability to use special/specific characters when naming files. I did see the following post: Solved: Any way to create a policy to prevent users from u... - Jamf Nation Community - 108934 that hinted it wasn't possible, but this is now several years old and things may have changed. Thanks a lot,JM 

Is there an application out there that lets you connect to WiFi before logging in? We have Jamf Connect, but I'm looking for a standalone app to use until it's rolled out completely. We would like to mimic our Windows environment where you connect to WiFi then VPN and can login with AD creds so our techs don't need to reset a user's password when building a new device.

Hello,We employ Jamf in a facility where a large majority of our computers are offline / do not have access to the internet.  So far, we've had no issues with our Jamf Pro deployment by following this guide to make sure that the necessary traffic is able to get through: https://learn.jamf.com/en-US/bundle/technical-articles/page/Permitting_InboundOutbound_Traffic_with_Jamf_Cloud.htmlWe're hitting a snag in our rollout of Jamf Protect, where the only machines that are able to maintain a connection are the machines with internet access. We've added *.protect.jamfcloud.com to our whitelist, but still no luck.Any ideas on what else may need to be whitelisted in our firewall for our offline machines to be able to communicate with Jamf Protect correctly?Thanks in advance!

Hi everyone,I realized recently that during our pre-stage the Office 365 package was not installing during pre-stage. I mainly noticed this while trying to setup dock master as the only thing showing up as "?"'s was the Office apps since they had not installed before signing into the Macbook. Unfortunately, it does not fix after they finally install. Can someone explain to me if these Office packages need to be signed or if I am doing something incorrectly? I am simply grabbing the package from Microsoft and uploading to JAMF then assigning in the Pre-Stage enrollment packages. We have a total of 5 packages we install as part of the Enrollment Packages. Any help would be greatly appreciated, thank you!

Hi All,  Apologies here I am new to JAMF Pro so forgive me if I have missed something obvious:I have followed this guide here:https://trainingcatalog.jamf.com/update-macos-1/372407This is about doing a mass update of the OS. I have followed all the guides and document under Remote Commands - Update OS version and built in apps - Target version - latest version based on device eligibility - download and install the update, and restart computers after installation.Is this not supposed to then update the computer automatically? Without the users interaction?Looked into this as well and followed this but still nothing.https://resources.jamf.com/documents/technical-papers/Deploying-macOS-Upgrades-with-Jamf-Pro.pdf

Does anyone know how to create a configuration profile to make sure users are have the preference setting to load CCD on Logon ?  We have users that have unchecked the preference and need to make sure the CCD app loads on logon in order to do the updates. This is especially important on Ventura.Thank you for any advice 

Hey community, hope you're all doing greatI need your advice regarding a script I use locally on my laptop, but have some difficulties so deploy to all the other employees.Context :We're using Pritunl as VPN. It's a pain for everyone to log in 1Password (our password manager), search for their VPN credentials, and type them in to connect to Pritunl.I use a simple script which links the VPN profile to the credentials in 1password ("op" is 1password's cli).In use, I just have to click on the .command, it executes and open a popup for touchID (used to access 1password's content), gets the credentials with the name "vpn-companyname" and connect to Pritunl with this info.What would you

I am trying to capture how DEP works in Jamf. For that I am using Parallels Desktop to run a virtual Mac OS Ventura 13.4.During the Setup assistant, it is stuck in the remote management and it is not moving for the next page.I can go back, reset and start without DEP. When the device assigned to Jamf, it is not moving to next page.Is there anything I am missing out.

Does the partner device management connector token in in tune also apply to iOS devices, i only hear macOS, but most of my fleet is iOS, in the device compliance in jamf pro it does have iOS and iPadOS.

Hello everyone We have this problem that no macOS software update is available/visible in system preferences when the mac client is connected to corprorate network.if I want to download a macOS InstallAssistent.pkg directly from Apple (like this: https://swcdn.apple.com/content/downloads/63/49/032-84910A_3SSTBN1HDA/h89vitwfbzt54jcbwpfwkmrn12smedicny/InstallAssistant.pkg). Then it works without any problem.But Software Update arent visible/available in system preferences.When Connected to Internet directly (No Corprate network), the updates are then available in system preferences.AFAIK, there is no firewall rule blocking the connection. And yes we have also a proxy that could be causing this problem.The proxy-team claims that Apple servers are already listed in Allowlist and the

Hi,We are testing the Device Compliance options in JAmf to forward the compliance state to Microsoft Intune.While registering their device, users will see a list of account to choose from.Is there a yway to limit the list to only the company domain? Thanks!

Before we were able to roll out a profile that prevents students from turning on "Find My Mac", it looks like we have some students that turned this on. I have 2 computers from students who recently left the school and I can't erase the hard drive. I tried from recovery mode and entered the bypass code stored in Jamf, doesn't work. Also tried to send a command from the Jamf pro server but get an error. Will attach the error messages if anyone can advise? 

We are just switching to Jamf Connect using Google logins.  As we are testing we are having our laptops require a login (not Jamf Connect) and then instead of a normal login, the laptop then shows the Jamf Connect / Google login.  At this point we can login using our Google login accounts as expected.If we reboot or shut down the laptop, we have to do the initial login again (not Jamf Connnect), and it takes us to the Jamf Connect/Google login.Any ideas?  Thanks - Tim