I recently deployed our first enrolled M1 MacBook. I logged in and added the user as an Admin account but the user could not install Teams or Zoom. Both failed after the user put in her password for the install. I logged in as me and both apps installed OK following the user’s method of downloading from the respective websites. User logged in and was able to set up both programs. Is there a Jamf setting that is preventing her Admin account from installing or is this an Apple setting?Any insight would be appreciated

👋Hey there, Jamf community!We have some exciting news to share with you all. The Jamf User Research Team has been hard at work organizing weekly customer workshops, and we want YOU to join us! These weekly workshops are the perfect opportunity for you to have your voice heard and provide feedback on a range of topics alongside other Jamf customers. Plus, you'll get to connect with like-minded individuals in the community and learn from their experiences. We're always adding new workshops, so be sure to keep an eye out on the Jamf Nation events page for updates. Signing up is a breeze - simply click on the workshop you're interested in and follow the Calendly link to register. All sessions are recorded for research purposes and participation is limited. Have an idea for a workshop topic? Drop your idea in the comments! 👇 So what are you waiting for? Join us for our next workshop and help us shape the future of Jamf together! ❤&#6

I know this feature request is out there about 100x and I have yet to see a script that does it. Most of these logs are available via the API. So I wrote a script that will let you input either a single serial number, or a CSV of serial numbers and then output a CSV with header for any of the following logs - Screen Sharing LogsJamf Remote LogsComputer UsagePolicy LogsCompleted MDM Commands I only included those because they all leveraged the same API endpoint and it made scripting it easier. If you're handy with scripts, I'm sure you could build off this quite easliy. I'm not a scripter - so I'm sure this isn't perfect. Use at your own risk, just posting it since it seems some people would benefit from it. Since it's 1 API call per device, it'll chew up some server resources, I wouldn't run it during peak hours if you have 10,000 devices. I'm sure I'll miss linking this on a variety of feature requests, so feel free to link it on any that I missed. #!/bin/bash # # # Creat

Hi,I am currently trying to use the Jamf Pro API to run software updates on our Mac environment. I did some testing a few weeks earlier and was able to successfully update a single mac using the API command. Recently I have tried to update a whole room full of macs but receive a http 401 error when running the script. The only change I made to the script was to add the device IDs of the relevant devices.In order to try and troubleshoot this I removed all the device IDs except for the one I used in my initial test but still receive the 401 error.I have also confirmed that my credentials to Jamf Pro were correct, this is proven by the fact I do receive a valid bearer token when requested. I have also checked all of my Jamf Pro account permissions and I have every available permission assigned. Also the same bearer token is able to run this command.curl --request GET --url "$url"/api/v1/macos-managed-software-updates/available-updates --header 'accept: application/json' --header "Authoriz

We have a hidden admin account that gets created with the pre stage enrollments. When using Migration Assistant some users clicked on the replace the current admin account with their user account. Is there a way to reinstall that admin account from the pre stage enrollment or would I just have to make a new admin account with a configuration profile or policy?Thanks

Say what you will about Jamf Remote, but I found it quite useful for support. It let me keep screen sharing disabled to meet compliance, while still allowing me to use it when I needed it.I still have the app from its last version, however after upgrading my Jamf Pro server I'm now getting "This account does not have privileges in the Jamf Pro Server to use Jamf Remote". Of course, the option to give myself privileges is no longer available in the GUI.I'm wondering if maybe I can modify my database directly to add the Jamf Remote permissions flag back to my account. Has anyone else done this? Or at least, does anyone know what that database entry might look like?

Has anyone deployed Sophos Endpoint to Mac devices using Jamf School, specifically? During my deployment call, the only thing Sophos had was for Jamf Pro, which is a different animal than Jamf School. The person working with me was phenomenal and tried to adapt the instructions to Jamf School with my help, but I've got random little snags with Sophos which has caused me to pause my deployment. Instead of scoping it out and installing everything, I have to manually lay hands on the machines (my users aren't capable of doing full install) and install everything, going into security and preferences and making those changes as well.I've reached out a few times, but not heard back from Sophos.

Hi Everyone,I have recently come into a problem with users trying to install applications through MAC self service over Wi-Fi. For some reason, when users go to install an application over Wi-Fi in MAC Self Service, they get an error message. (The users are on our school Wi-Fi) This is what I see on my end: [STEP 1 of 4]Executing Policy Arduino IDE 2.0.4[STEP 2 of 4]Mounting BrooklineCould not mount distribution point "Brookline"[STEP 3 of 4][STEP 4 of 4]However, when users download it when connected through ethernet, there are no problems. Has anyone seen something like this and have any ideas? Much appreciated!Joe

We have SSO enabled (and working) in our environment, but the only thing that it does not work for is the Jamf Admin app. Is it possible to enable SSO for Jamf Admin? Or will it only accept Jamf account credentials?

HiI have a iPad Pro 12,9 - 2018 with iPadOS 14.0.1The Profile EDU fails to update.I'm looking for a solution. Thanks,Matthieu

Hello Jamf Nation, Wanted to bring awareness to this issue we've experienced with a few of our users.  Each time, this issue happened on a M2 Macbook machine (one was a brand new one). I've been unable to find a solution to this issue with the exception of completely wiping the device. The most recent time this happened the user was attempting to install software from Self Service (more specifically Docker) and each time the install would keep hanging/spinning and would not complete or error out. This is most likely because it was stuck attempting to update inventory (as our policies have inventory update once an application is installed).  Opening terminal and running sudo jamf recon yielded the following result (text/image below):  sudo jamf recon Retrieving inventory preferences from https://*REDACTED*.jamfcloud.com/. Finding extension attributes... Locating package receipts... Locating hard drive information.. Locating applications... Locatin

Hello Jamfnation,Just wondering if anyone has had any luck with configuring the new settings for blocking access to preference panes in macOS Ventura? The old method is deprecated and produces some strange results if used: https://developer.apple.com/documentation/devicemanagement/systempreferencesOne example being that blocking 'users and groups' also blocks 'screen sharing' in General > SharingHopefully Jamf will be releasing a config profile setting soon?

My company has purchased and acquired one of our venders to make a more all in-house company.I am charged with on-boarding their computers, but I wanted to only enroll their computers in Jamf Pro but not apply any policies other than install our corporate anti-virus. I am only looking currently to monitor their computer and eventually tweak the computers, as a whole, over to our configuration.Is there a way to have a secondary Jamf Pro profile or exclude the policies to be applied?

Hey I have Jamf version 10.45.0 Installed. Is the Patch Management broken?for Instance I have Firefox configured and when I add the latest version in the definition table and click save. It doesn't save. The file that I have just added will not be there. Also I cannot even delete a software package in patch management. Is this a known issue , or are there any possible fixes?

Hello Everyone, I wanted to start up a convo around the changes coming to Microsoft Edge updates. Starting with Microsoft Edge version 113, Microsoft Edge for macOS will start using a new updater named EdgeUpdater. More details: https://learn.microsoft.com/en-us/deployedge/edge-learnmore-edgeupdater-for-macos Microsoft provided a configuration example, and it appears to use the same logic/keys as Google’s Keystone updater. Can anyone confirm this? Also, anyone know if we need to change our current MAU configuration to not include MS Edge? Thanks! 

I'm new to JAMF and Mac, so I hope this is just something I'm overlooking.I'm tinkering in a new JAMF Cloud environment, and have enrolled two Monterrey machines and a Ventura machine. I've created a Configuration Profile, and when I try to add Computers to the scope, the Monterrey machines are listed and I can select them, but the Ventura machine is not listed (however, all machine are listed in the Policy I've made).Is there something special I need to do to be able to select Ventura machines as a target for Configuration Profiles?

Has anyone run into a situation where their users are prompted to change their password without a password expiration being defined in a policy? We had a policy last fall as we were onboarding with a new MSP that runs out Jamf instance, but that policy was disabled and the scope was changed to 0. I checked the Change Management Log and nothing jumps out at me. I checked the history of the impacted users and there's nothing new running. It's really bizarre. Any ideas on what could be causing this? It doesn't seem to be universal (at least not yet), but is impacting a good number of our users. 

Hi everyone!I'm unsure if this is possible, but I figured this is the best place to ask.  Is there a way to get repair updates from GSX that can be sent to a specific Slack channel?  We basically want a channel where our Support team can see the status of repairs rather than logging into GSX check. I've tried generating an email address for the Slack channel and entering it into the email field in the Notifications tab in GSX, but that didn't work for me.Any assistance would be greatly appreciated!Thanks!!

(Jamf Pro 10.41) This is the first I've had to manage any mobile device as the company usually puts them in InTune. But these users need more gradual control as the'll be using the phones mostly as cameras. But they're not going to be exclusively just using the camera app so can't use single-app mode. But there's no need for almost any of the built-in apps like Activity, Books, TV, Calendar, Health, Mail, Music, News, Podcasts, Reminders, Wallet.I can find previous questions about this from before Apple allowed the removal of built-in apps - the technique then was to hide (old) or rearrange (older). But I'm looking at ideally removing, or hiding if that's all I can do.I've tested trying to manage Podcasts, and set it to be managed if already installed. But the log says it can't be installed because it's already installed (duh. yeah). It doesn't even show up in Apps as managed or unmanaged - just failed. And I created a profile to restrict th

We have a couple dozen Sites defined with Macs assigned accordingly. The problem is we have a bunch of Macs that are NOT assigned to any Sites. I'm trying to figure out how to craft a search or smart group to show me all Macs that are assigned to "None" for the site. There doesn't appear to be any way to define Sites as search criteria. Is there a method I'm missing that will tell me what I need to know?

Not directly related to JAMF, is there a way to get a Mac's UUID info via ABM.  We are deploying a large number of Macs and would like to get the UUID info before enrolling into Jamf.Thanks!Corbin

I have my device configured using Apple Business Manager, when I reset the device with my custom PreStage Enrollment, I should be creating a local account during the setup where the user is a non-admin, however every time it runs through my account is an admin.I've tried creating a new PreStage Enrollment, not working.  The device also becomes managed by the 'administrator' account I pre-configure.  Any help would be appreciated!!

Does anyone know if JAMF pro allows the adding removing of favorite actions on ios devices?  Looking to add a favorite to all ios devices so it shows as the first action to perform when hitting the share icon.

I'm currently testing out a Jamf Now (Fundamentals) deployment for a couple of Macs we have. I haven't used Jamf before so not too sure how Jamf connect should work, but have a feeling mines not correct.I have setup the setting "Enable password sync with Jamf Connect" and done the setup in Azure for it. When a user first logs on it asks to type in both password (microsoft & then local password) so it could sync.Then we changed the password in Microsoft to see if it worked but on the macbook we have to login with the old local password and then in Jamf connect enter the email and the new microsoft password and it says they are out of sync and input the local password.I assume this should be a bit easier as its not exactly syncing the passwords currently?

Not really a Jamf problem, but maybe someone here knows something. For a few months now I have had the problem that some Macs just wont accept a users credentials after a few weeks or months. I have no idea what triggers this. One moment it works and one restart later the user just cant log in anymore. This happened with Monterey and Ventura. It also happened multiple times and I am sure it was not just typos.This really is a problem because the Macs are encrpyted, so the users cant access their data anymore.I cant really investigate this, because once the Macs are locked I cannot access the anymore.I am using AD bound Macs with network accounts.