I just deployed jamf connect to a new fleet of imacs. They are using jamf connect with azure. I had a pervious policy that handled the "login window". This policy configed a welcome message, how the usernames are displayed, and it also configured a screen saver on the login window. This policy DOES not affect any jamf connect login imacs I have. How can i change the screen saver for the login screen on jamf connect?

Today we are releasing a maintenance version of Jamf Pro. Jamf Pro 10.48.2 fixes the following product issue: [PI112230] Jamf Pro startup is no longer suspended after upgrading to Jamf Pro 10.48.x on an on-premise Windows server with the MySQL database configured to force lowercase table names.  For additional information on what's included in this release, review the release notes via the Jamf Learning Hub. To access new versions of Jamf Pro, log into Jamf Account with your Jamf ID. The latest version is located in the Products section under Jamf Pro.

Hi there,Hoping I can entreat the Hive Mind to help me nail down why I'm getting an error in the last part of this script. I'm putting together a self service policy that will run two scripts. One grabs the current computer name as a variable, deletes all the relevant networking plist files in /Library/Preferences/SystemConfiguration, and then renames the computer to its original name. That one is working great.The second script is where I am having trouble (I split them into two because for no discernible reason, the first part would throw weird errors when they were combined in one script but now it seems to work fine with them separate despite there being no differences in the command statements).This script creates a new network location, switches to it, and deletes the old one. But I'm having trouble with the last part. I'll include the script below, and the jamf policy log output from a test machine.#Created by John Geck, 7/21/2023 #Create a new network location and substitute t

For this MacBook Air (that is managed via Jamf Pro), when you change the background image, you can see it change in the menu bar but the rest of the desktop image is black. Almost like the black screen is layering over the image (but the desktop icons are still fully visible). When you go to Mission Control to see all the open tabs, then you can see the desktop image, but only then. I made sure the configuration profile in Jamf allows changing of the desktop image in the restrictions payload and we also tried deleting the .db file in ~/library/application support/dock and restarting but it just generated again. We are trying to avoid resetting NVRAM if possible, so if there are other suggestions, it is much appreciated! The device is also running on Ventura.Thanks!~Gabby

Hey, I am searching for a method how to use patch management with Cisco Anyconnect VPN. Since it is not available in the standard jamf catalogue. I know you can create your own patches with the Title editor.But therefore I would either need an external source or a json file with the settings since I never created this before.If someone maybe has some information or hints I would really appreciate that

We are experimenting with using Managed Apple IDs as the primary Apple ID for our end users for all the reasons. We hoped the user could then use their personal Apple ID with Messages, but the option to "Enable Messages in iCloud" is disabled in this configuration. So Messages can work with their personal Apple ID, but all the syncing goes away. Any work around here? 

We deploy the Jamf Connect app via Pre-enrollment.  Everything installs and works but the Jamf Connect app that runs in the tool bar does not get added to the login items\\Run in the background until a user manually launches the app, then it adds itself to the login items.I thought it would do that on it own, what steps should I take to enable that without user intervention.

Hello.In our environment we are moving away from binding devices to Onprem AD except for a few small use cases where it is still currently required for Onprem related services such as WIFI, Printing and a couple of Network drives that are slowly being phased out.One of the tasks I am trying to get working is to elevate the status from Standard to Admin of any AD based Security Group inhabiting Local Admin account created on a Mac.So my process is as follows;* User logs into Mac via Jamf Connect authenticating to Azure via their User account* User account is created locally as Standard (not dependent on onprem AD at all).* Device has an AD object, is already bound to AD during setup and device is connected to domain via ethernet, wifi or VPN having direct sight to the AD.* A script is run that unbinds and then rebinds the device but including the name of the security group that the elevated user account is also a member of that utilises the device hostname in the security group naming c

Hey looking for help on the below please. We are in the process of deploying jamf out to our users over the coming weeks.We are using a few jamf products including jamf webfiltering.We also you crowdstrike and use the ZTA to enable users to access Okta.I have been told by a jamf support agent that the 2 will not work together due to MacOS only allowing 1 network extension.Is this the case? Any help would be much appreciated.

I do have a question regarding patch management and a smb share. We are using Jamf on premise. and we do have a DP that is in the DMZ and is using a smb share and https.So if I configure a computer outside of the internal network all policies gets installed. But if for example a patch should be installed I often get in the logs an error. Trying to mount the smb share... tried for 3 times and always fails.Shouldn't that also work? I mean of course without a vpn connection he cannot mount the smb share but then he should be dl it from the https source. Or is the patch management still broken I have the latest 10.48.1 server version installed 

 We use school profiles for our students' iPads (BYOD) with a time filter. Works pretty well but every time the profile is deactivated, the iPads forget the previously saved wifi passwords so the students have to reenter their private networks' information every single day. Is there a way to avoid this?Thanks four your help :-)

I'm having issues with uploading to JAMF. Getting the error below. WARNING: com.github.autopkg.grahampugh-recipes.jamf.zoom.us-pkg-upload is missing trust info and FAIL_RECIPES_WITHOUT_TRUST_INFO is not set. Proceeding... Expecting value: line 2 column 1 (char 1)Failed.Any ideas on what could be causing this, and how to fix it? Thanks.

If I write a script using an if statement, and use "then exit 0", what would I enter after "else" to make the script continue running if the result of the if statement is a different value? I thought I knew how to do this but I can't think of it. 

a couple of our clients recently had some Macs stolen.  While we can lock them via Jamf MDM command I was management was curious about Activation Lock.  We currently do not let users enable Activation Lock, but we got to thinking this might be another line of device provided we have the bypass key stored.So...  Do you let uses enable activation lock on your Macs?  If yes...why?  If no...why?

Hi Jamfs,Using Inventory Pre-load for our AppleTV enrollment and it's working great. But hoping there is a way to re-name the AppleTV at enrollment time so when it enrolls in Carousel is has better descriptive name other than AppleTV. If I could name the device in the Preload it would resolve this issue for me. Issue is I don't see an option in the Pre-load template to name the device. Not being able to re-name the AppleTVs causes confusion not know who enrolled the devices.Thanks

- 2020 MBP 13" 4x Thunderbolt ports- Active Directory bound- Enterprise Connect for password sync- FileVault 2 configured (via mobileconfig profile)1. User was prompted to update AD password2. User set new password with Enterprise Connect, as instructed.3. FileVault unlock screen does not recognize new password, only the recovery key (escrowed in Jamf), and the user has immediately forgotten their old password, so I can't test if that would still have worked.4. Thinking this is some kind of AD/Keychain disconnect, I nuke the user's keychain.5. This doesn't resolve the issue, so I unbind & rebind to AD.6. This doesn't resolve the issue, so I create an exception and remove the FV mobileconfig profile, and manually turn off/decrypt FileVault, reboot, log in, remove the exception in Jamf Pro and re-enable FV. A new recovery key is escrowed.7. User's current password still doesn't unlock the volume on reboot. New recovery key works.8. I exchange the laptop to get the user up to speed, a

Hi Team, How to check JAMF on-premises DP usage?  

Hello Jamf Nation! You will find details about Jamf Pro 10.48, including the Cloud Upgrade Schedule and Release Notes Video, as well as all future versions in the new Jamf Release Info space.

Hello everyone,  Hope all is well!  We recently purchased a 16" MacBook Pro 2023 running the M2 Pro chip. This is the first time we've ran a user-initiated enrollment on this model/ processor. I am able to enroll the machine but it never checks in automatically. Has anyone ran a user-initiated enrollment successfully on the 2023 MacBook Pro M2 Pro? I'm wondering if this is a known issue or just an issue on my end. Any feedback is appreciated. Thanks for the help in advance!  

I was wondering how do you guys upgrade the cisco anyconnect VPN Client ? as we are all working from home , we need upgrade them remotely and we need to upgrade user VPN Session is not active.if you are aware of any process or any script can you please let me knowThankssantosh 

We have installed several Mac studios at my University. We attached wired Satechi Keyboards and mice to them however for some inexplicable reason, the keyboards and mice intermittently stop responding and users have to disconnect and reconnect. It has become quite a nuisance and not sure why this is the case. Has anyone come across the issue?

Currently in Jamf School when you look at a user record you can see the devices that they own or have been assigned.In an environment where Shared iPad is deployed, the user record has no information about Shared devices. So a scenario that I experience often is a support request from a teacher saying that peter.student is having a problem with his iPad. Which iPad is that? If I look up Peter Student in Users, there's no device associated.But the student is signed into a Shared iPad. There is no history searchable anywhere in Jamf School.Ideally, I should be able to search for that student name and see which Shared iPads they are currently signed into and possibly a secondary list of iPads that they have recently signed into.So the feature request is to add the state of shared iPad login under the Users section in Jamf School.What devices is this user signed into (but does not own, since nobody owns a Shared device).Many times I then have to deal with logging out and clearing cach

I noticed Adobe CC no longer being readily available in Launchpad for our end users after re-imaging to Ventura. Adobe says it's an Apple issue, which makes sense since that is the only thing that has changed, and was my original guess. I can manually create a new shortcut based off the actual application deep in the Utilities folder, but that's not a feasible solution for several hundreds of devices. I've triple checked to confirm Adobe installs correctly and with the most updated version, but Launchpad doesn't see the Adobe CC shortcut that is made in the "Adobe Creative Cloud" folder (also contains the uninstaller shortcut) at time of installation. Instead simply using the Launchpad, it has to be Launched from inside the Applications folder. Our users will give us some blow back at us for not having it exactly the same as last year and for it being "more difficult" for the students.Anyone else experience this and come up with a solution, or have a script to create a shortcut in

No text available

I am working on an extension attribute to check if Aternity is installed, running, and its version. I have to write it this way to take into account the two possible install paths for the agent while we roll out the newer version. I keep running into an error "CFBundleShortVersionString", Does Not Exist". This is being generated from the version check in my script. I have visually confirmed that "CFBundleShortVersionString" DOES EXIST!!! I can run the command in Terminal: version=$(/usr/libexec/PlistBuddy -c 'Print :CFBundleShortVersionString' /Applications/AternityAgent.app/Contents/Info.plist)When I type echo $version, I get the correct result.Only when I run the whole script in either Terminal or CodeRunner does it give me that error. Here's my EA. What am I doing wrong? #!/bin/zsh # Is Aternity installed? Is it the older version or the newer version? agentOld=(/Library/Aternity/Agent) agentNew=(/Applications/AternityAgent.app) if [[ -d $agentOld ]] || [[ -d $agentNew ]