We would like to check all MAC user whether they using default VPN configuration on MAC System Preferences. or they were using an App(e.g Cisco Anyconnect VPN)

After logout from system or after reboot we need the list of users instead the default Jamf connect login screen windows please let me know how to enable this feature

I have a need to deploy goodsync. We use the script that downloads an install script (with the app base64 encoded into script) and installs. However, it fails to enroll to the good sync cloud. It all works fine when I run the script interactively from root.Anyone get the enrollment working when deployed with JAMF?

We have recently updated all our lab machines to the latest Adobe apps.Mostly everything has been ok, however we have had some machines the won't install Acrobat DC.The acrobat DC package has been installed on over 200 machines, so don't believe it's an issue with the package.I have created a new package from admin console and it just fails to install if you run in manually. On the problem machines.I have two policies one to cache the package and one to install packages from cache.Unsure if this ventura issue as thats where I'm seeing it currently. However.Probably worth saying this is site wide Adobe upgrade on over 300 machines. So it maybe that I have not found a Monterey machine yet from what I have checked.Does anyone have any ideas? I'm running out of idea on what it could be. Thanks 

A customer of ours had an interesting question; they want to rename their Macs based on the color of the iMac. e.g "iMac Blue SerialNumber".I can't seem to find any place where the color is referenced. In network sharing and in the about this Mac screen it shows the correct color so I assume it does store it somewhere. I found the icons but I can't pinpoint how it detects what color it is.Any tips? Macs are running Ventura by the way

Hello Team,I was looking for a way to deploy all my organisation's certificate automatically on mac after enrolment, please keep in mind that my JAMF is in cloud and Azure AD is integrated with JAMF. So in this case I cant use AD-CS connector. If I use config profile then the main issue is that auto renew is not possible after it gets expired, we need to remove the expired cert and upload the new certificate again in config profile for deployment. For on-prem JAMF we can use SCEP server to avoid this auto renew stuff or we can use AD-CS connector. But if my JAMF is in cloud and Azure AD is integrated and no on-prem AD is there, and think user are enrolling the mac from their home then how the mac device will get the certificates. Please help me out on this.

We had been looking into using Github to push scripts and configuration profiles and manage changes but we've run into some issues implementing this concept. I was wondering if anyone has found a good solution to managing versioning on scripts and configuration profiles prior to pushing to Jamf or even within Jamf besides dating something ie: scriptname-4-14-23 or scriptver2?  

Hi everyone,I am using Jamf Pro located on the cloud side and Azure integration is also done. This integration works well. As can be seen in the screenshot below a few days ago, the e-mail addresses of real persons belonging to the owners of MacOS devices began to be deleted. I add these addresses again and it pulls the necessary information from Azure AD and adds the email address. However, when users turn on their devices and connect to the internet, their email addresses are deleted again by Jamf Pro. Have you encountered such a problem? Any ideas on the solution? By the way, we also use the Jamf Connect product in the environment.  

Does anyone have the details of what we need to set up in a configuration profile / PPPC to enable Remote Management for our admin account on ADE-enrolled Macs? Apple has an article that says it can be done, at https://support.apple.com/en-us/HT209161 but it is a bit light on detail. In particular I don't understand the last sentence.Basically we have a local admin account that exists on all our Macs (it's created via policy) and we need it to have Remote Management permissions without us needing to go to every Mac and click to enable it. All our Macs are now enrolled via ADE/DEP so the UAMDM state is considered to be on.

We are retooling our 802.1x and Network profiles in response to some forthcoming network changes in ISE/RADIUS. We are reevaluating all our payloads and settings.When configuring SCEP payloads, one of the options for both iOS and Mac is the Subject Alternative Name.Jamf recommends the RFC 822 type on Mac (not the DNS type), and they recommend leaving the RFC 822 Subject Alt Name BLANK on iOS. See links below.However, we have been using DNS type on both platforms for a couple of years - per a Jamf tech’s recommendation when we first set up 802.1x. We dont recall why. Examples: $COMPUTERNAME.my.domain and $DEVICENAME.my.domain.Any ideas on why Jamf recommends RFC 822 type?Thus far, using DNS type doesn’t seem to affect us in production, How do you all have your SCEP Subject Alt Name set?Any ideas on why the Subject Alt Name should be blank on iOS?Background: We are using our on-prem JSS as a SCEP proxy to our MS Windows NDES server. We use Cisco ISE for RADIUS.For Reference, Ja

I am trying to find a way to deploy VNC and Visual Studio Code. Was wondering if anyone has a way to do it and would be able to help me on this. Thank you in advance.

I came across this article recently about how to use Github to manage and push scripts and configuration profiles to Jamf however it seems a bit out of date:https://www.pixngeek.com/jamf-pro-use-github-to-deploy-scripts/ Does anyone have more current resources, references or recommendations to utilize Github to manage script updating in Jamf? Something that hopefully takes into account the latest version of Github actions so it doesn't generate any Node.js errors? 

We have all our printers in Active Directory when computers were joined to AD they could see and add them. How do I connect to the Print Server and add printers on a Mac?

We are using Jamf Pro and are setup as shared devices using Setup and Reset. and microsoft authenticator.What is involved in switching over to user assigned still using reset for a device format and logging into a device with Azure creds?Is Jamf connect required for this?I am trying to achieve a shared device that users make their own for their shift and reset and wipe at the end, during their shift they can use outlook/teams/word/onedrive etc with app protection policies and conditional access.

Here are the direct Apple CDN download links for the Safari 16.4.1 update released today (2023-04-07) for macOS Monterey and Big Sur:Monterey: https://swcdn.apple.com/content/downloads/13/10/032-71505-A_VXEPHZXHA7/cceqmuarwutena64ohro71ydpukpip72i9/Safari16.4.1MontereyAuto.pkgBig Sur: http://swcdn.apple.com/content/downloads/47/23/032-72735-A_HUFOGBJPRZ/580izn9uc683ima5tc9fykya8lkbhkji4t/Safari16.4.1BigSurAuto.pkgThe macOS Ventura 13.3.1 update contains the Safari 16.4.1 update for macOS Ventura, and there is no standalone updater for it.

I am testing no-touch app installs and configuration with DEP Mac devices in JAMF.I have a DEP Mac that I registered with JAMF and initially the device info did note that YES it was enrolled via DEP. After testing many settings I wiped the MAC and deleted the entry in JAMF so it can be configured as a new machine. However, thereafter, in the JAMF computer info, the info states that NO it was not enrolled via DEP. The thing is I have a smart group to add devices enrolled via DEP so now this workstation cant be added and the policies i have created that are tied to the smart group do not apply to this machine.What is the trick to get JAMF to recognize that this mac was enrolled via DEP?I also have one error come up: Command requires DEP enrollment: UserList <MDMClientError:74>Thanks!

Does anyone know if and when Okta will be added as a Cloud Identity Provider in Jamf Pro? 

Been searching around in integration, company portal, and azure documentation but the specific item I am trying to figure out is when it prompts for Admin elevation, is it possible to configure to use an Admin group from Azure AD to use Azure AD Admin Credentials? That way we aren't using a local account or logging into an Admin account each time. Similarly as we would do with UAC on a Windows device. Similarly if you were AD bound with an on prem, you could designate an Admin group so could use your credentials. 

Hi there,  When setting up a new laptop for someone, what's the best practice for what Apple ID they should use? I know this all depends on what the user wants etc. But would it be possible for them to just create an Apple ID using there work email for example to sign in? It's just they want to stop using there personal ones.If they have a laptop that is being used by 2 or more people what Apple ID should they use, or is that not a problem as when they sign into the other account it will prompt them to sign into another apple ID?  Thank you!

Our Macs are now coming in NOT added to ABM. So I need to spend a little extra time adding them in to ABM first, before setting them up. No big deal.However - about half the time I am having a problem getting the "Fuzzy Bubble" to appear so I can point my phone at the Mac and add it to ABM. It just never shows up on the Mac, or, if it does, the phone doesn't recognize it to add it in to ABM.Todays blog post talks about how it is supposed to work when everything goes smoothly:https://www.jamf.com/blog/use-configurator-2-with-apple-business-manager/But here is where it breaks down:"5. After the Mac restarts, you’ll be presented with the Setup Assistant. Click Continue on the Mac, then stop at the Country or Region pane.6. The mobile device host must be paired with the Mac to proceed. Bring the host close to the Mac and scan the image that appears in the Setup Assistant or select Pair Manually to pair the two devices."I have tried:On the Mac: rebooting, wiping and reinstalling the OS, dis

Hey Everyone,I'm looking to make an app available for employee's to use when their disk is getting full and to help them easily identify what is taking up space. I see a lot of people on the internet suggesting OmniSweeper or DiskX. I'm used to using TreeSize on PC, and that works really well. There is a macOS version, paid version but for something this lightweight I really don't want to shell out cash for something like this. I'm wondering what all of you use 😁. Edit: I suppose the cleaning portion is not 100% necessary, more so the ability to have visibility what is taking up all the space. 

Hello All,I just wanted to get a way to restrict the Office 365 activation for company devices only, I dont want user to use their company license on their personal device after installing the office 365 app from https://software.macadmins Is it possible to use conditional access in Azure AD, so that only registered company device will be able to activate the office license else no, if yes then still user will be able to register their mac in Azure AD what I think, please clarify me. Thanks in advance.

Simple modifications to enhance your users' experience when using swiftDialog and Installomator with Jamf Pro's Self ServiceBackgroundAs a self-proclaimed swiftDialog evangelist, I was especially excited when Installomator v10.0 was released earlier this month with Jamf Pro-specific examples from Armin Briegel and Søren Theilgaard.This article presumes you’ve successfully implemented Installomator with swiftDialog into your Jamf Pro Self Service policies and then builds on Armin’s, Bart’s and Søren’s work by adding some so-called “racing stripes” based on previous posts, which we’re still testing out in our lower-lanes.Continue reading …

We have some internal websites that are http only.  Without getting into the history: iOS 16 the website launchesiOS 15 or below they get "This Connection is not Private".  I've asked if they click Show Details and the option to continue to the site what happens but haven't heard back yet.  Is there any way with supervised devices to allow Safari to skip this message?  I do have this site on a allowed content filter.

Is there a way to automatically enable location services for the Jamf Connect app?