We have 2 on-premises JAMF instances, running different versions of JAMF, on different servers.The day before yesterday, I was suddenly unable to log into the JSS on one of them; I enter my username and password, it sits there for a second, and returns me to the username/password dialogue with no comment or error. Restarting tomcat didn't help. Rebooting the server did. Meanwhile, the other server was still fine. (So it's not my browser.)Today, both of them have the same problem. As far as I'm aware, beyond Windows updates, nothing has changed.Is anyone else seeing this? Or is it just our environment?Thanks,Lisa.

Is there a way to remove or trigger the 'forget this network' command on a certain SSID with a policy? I deleted and recreated one of my configuration profiles for a wireless network thinking it wouldn't be removed from the current devices, but it was. Until the profile is installed again on the iPads I have been connecting them to a different SSID so I am hoping to be able to remove this via JSS after the profile is installed.

Hello,on Friday we update our Jamf to the 10.47 version and this morning we got an issue that any newly assigned computer during PreStage with Enrolment customization will be pushed to Site: None.So, in PreStage enrollments settings, Enrollment Site is defined and the Automatically assign new device option is enabled. This is all working fine.But as soon as we enable Enrollment Customization Configuration, which is a simple text with a button "Next", the computer will always be pushed to Site: None in Jamf.We tried to select the Site in the Enrollment customization profile, but whatever you select result is the same, Site: None.What I noticed, if is Prestage Enrollment Customization enabled, the computer will be assigned to the proper site at the beginning, but as soon as the Remote Management window is done (all config profiles installed) will be removed from that site. This happens only if is Enrollment Customization Configuration enabled in PreStage enrollment. Does anyone have

Hello All,hpefully anyone has an Idea for me. We using a long time now Jamf to enroll our Mac's by DEP and UI always working fine.Since a short while now, the enrollment process starts normally, load the MDM Profile all looks good, then it stops by load a few of the Profiles after the MDM Profile.The communciation give the standard error: Device Signature Error. If i try sudo jamf profles renew -type enrollment, nothing happen here, no changes.I need to remove the MDM Profile by Jamf, and enroll it new over the url, then it went over the stop point and enroll normal.This is by booth way to enrollment Automatic and Manually on first time.Anyone an Idea what this can happen, i search all but yet cannot find anyhting related to it.BestAJ

Someone showed me at a conference how their staff created what they said is a webclip, but looked like a widget with an icon for Google Docs, Sheets, Slides, and Drive. When you clicked any of the icons within the webclip it opened a new Doc, Sheet, etc. I've been trying to search for how to do this and haven't found a way to replicate it. Any thoughts?

Iam not sure if anyone else here is intrested, but i raised the following Feature request to allow a policy to be created in JAMF which would update all devices scroped to it to a particular OS version: Minimum and maximum patch level | Jamf Nation Feature RequestsI raised one of these before when remote commnads were first introduced but there wasnt much dammand for it. Now its been a few years on it looks like we are still resorting to sending push commnads natively within JAMF Pro. Other vendors do allow you to set patch levels so jamf should be able to implement this, and we shouldnt have to resort to third party scripts or applications just to get updates. If other agree it would help if others upvote the feature request

Can anyone help me out in figuring out how to Cisco Umbrella Root Certificate via JAMF.  The link from Cisco only shows how to deploy the certificate on a single machine.Install the Cisco Umbrella Root CertificateAny help would be really helpful. Thanks

Hi Jamf users,I've been given a couple of old iOS devices but some still have the previous user's iCloud on them (yes, we did not block it beforehand 🙄). They have been wiped and handed in and now of course these users have long been gone from the company but they are still linked to the person's iCloud.Is there a way, as a Jamf School admin, to remove the iCloud account from the device, or is it a write-off? We're talking 2014-2015 vintage so I doubt we can still find the invoices from the bulk purchases from way back but considering the devices still work fine, I'd rather give them away instead of having to throw them into e-waste bin.The iCloud account has been registered on a company e-mail address which has also been deleted after the person has left. I doubt that recreating the e-mail address in the 365 tenat would do anything to recover the iCloud password?

Is it possible to add some basic logic to the Jamf Notify script? In my scenario, I'm using it as a first boot installation of a few basic apps and one of those is Zoom. Infamously Zoom doesn't have a universal installer so depending on the architecture it'll need one of two saved packages installed from Jamf Pro.Is it possible to read the processor type in the script and add an if/else section to install the correct pkg? I had messed around with it some but it was failing and I wasn't sure why, but it was my first time testing with the Notify Screen so I wasn't sure what I was doing. Thanks everyone!

Greetings. My Company use JAMF Pro to manage our macbooks and they had policy that user must have admin access because most of them are Programmer and they must had full capability to their macbooks. One day i found that if i delete MDM Profiles, i cannot restore it again unless i re enroll the laptop to JAMF. i already implement self heal script, but it doesn't work because JAMF binary still there and i still can use the command. My friend suggesting for restriction access to "Profiles", but it can't help since our users must have access to this menu for testing or allowing their mobileconfig. Is there any possibility to restore deleted MDM profiles automatically or prevent it to be delete withouth restricting Profiles Menu?

Guys, sorry to reopen the thread. I've macOS of 13.4.1(c) and trying to deploy the customised dock using the below script. When I manually execute the script in terminal, it is getting executed successfullybut nothing appearing in the dock even after kill the dock. Kindly advice. #!/bin/zsh# dockutil pathdockutil="/usr/local/bin/dockutil"# Exit if Dockutil is not installedif [[ ! -f ${dockutil} ]]; then  echo "dockutil is not installed. Existing..."  exit 1fi# Get major macOS Versionos_version=$(sw_vers -productVersion | awk -F. '{print $1}')# Wait for the Dockwhile ! pgrep -x "Dock" >/dev/null 2>&1; do  echo "Waiting for Dock..."  sleep 1done# Get the username of the currently logged in userusername=$(scutil <<< "show State:/Users/ConsoleUser" | awk '/Name :/ && ! /loginwindow/ { print $3 }')# Cleanup Dock/usr/local/bin/dockutil --remove al

Hey Community, Has anybody put in place a script that is used in a policy so it can display computer info and this through Jam's self service?  Any input is much appreciated! Thanks. 

Hello, I searched Jamf Nation for a similar issue and came up short, if I missed a post that would provide info please let me know.  My networking lead has brought it to my attention that a 3rd party company that does occasional network scans on our network to keep us compliant in things like, number of O365 licenses, Oracle licenses, etc has spotted an issue with our Mac's.  At first they mentioned there was a feature in Jamf that was simply a check box that would allow SSH commands to be let through, which are blocked by default in Jamf.  But the tech claims the console has changed a bit since he last worked with Jamf and isn't sure where to go, I Googled it, ran it through GPT4, and can't seem to find an answer.  Is there a simple way to open Port22 or SSH for network scanning to be performed on our Mac's that are currently enrolled in Jamf?Thanks a ton!Kerry

This only affecting one user, but thought I would see if anybody has seen this. The user is 16.74 and has been for over a month and last week he started having an issue after creating a new email, his signature would be really small to the left and when he would open an email and hit reply, the body of the email does the same thing.  

My email is going to junk, the test message successfully sends to the inbox but if a user requests an app the self-service email goes to junk email, any thoughts? it is on allow list 

I am trying to disable only Export option in Outlook from Configuration profile. when i set the value  <key>DisableExport</key> <true/>  it is disabling both Export and Import.Also i tried giving bool values separately.<key>DisableImport</key> <false/> <key>DisableExport</key> <true/>but still it is disabled both Import and export options in outlook.is this kind of bug in outlook or from jamf?do we have any other way to disable only one export option.

Hi, we are facing a problem when we install or upgrade the BeyondTrust PMC agent, the splash window (the JamfConnect login window) is not loading after the restart. is there anyone that experiences this issue? also, we tried to run this command after the installation - "/usr/local/bin/authchanger -reset -jamfconnect"but it's not working every time.  

Hello everyone - I have created an interactive Apple Script that prompts a user to input their username and it works w/o issue in terminal, but when I have it in Self Service the GUI doesn't come up unless I hit cancel, but it still works which is a plus, but I rather it work like it should and not be a happy little accident. Also this same script when setting it to run after enrollment completes I get an error of "Script result: 95:158: execution error: No user interaction allowed. (-1713)" Which I believe is because the script is being ran as root? Here is the script in its entirety. I appreciate you all.#!/bin/bash# Prompt the user to enter the new computer nameIFS= read -r -p "Enter the new computer name using department abbreviation and asset tag (Ex:DEPT-123456): " newComputerName# Execute the AppleScript using osascriptosascript <<-EOF-- Prompt the user to enter the new computer nameset newComputerName to text returned of (display dialog "Enter the new computer n

Hey Community, Has anybody already put in place a script to reset the spotlight configuration when a Mac experiences unexpected results when searching for it?  Any input is much appreciated! Thanks. 

Hi,I'm seeing an issue with NVivo 20.7.0 and even the previous version that I packaged - 20.6.2. The issue is that when I try and start NVivo it says:NVivo needs permission to access data on your computer before it can run.Click the button below to open your computers Security & Privacy preferences, give NVivo Full Disk Access, then restart NVivo- I use a Configuration Profile to give NVivo full disk access.- I only get this pop-up on M1 machines - not Intel ones- For Intel machines, I've tested on Mac OS 11 and 12 - no issue. On Apple Silicon (M1) computers I've tested with Mac OS 12 and get the pop up.- I tried unscoping the problem machines from the Configuration Profile and adding NVivo manually for Full Disk Access in System Preferences > Security & Privacey > Full Disk Access but no change and can't get NVivo to start- I read this post https://forums.nvivobyqsr.com/topic/10209-i-have-given-nvivo-full-disk-access-but-it-still-will-not-open/ in the QSR User Forum and

Hi I am trying to update 13.1 to 13.4.1 and all my machines that are enrolled in jamf are stuck at a black screen with the Apple logo on them. Anyone know why? I don't have any deferments set, I don't have any policies in place.  I am at a total loss.

Is anyone else having issues loading the Azure AD Integration docs link?  https://learn.jamf.com/bundle/jamf-pro-documentation-current/page/Azure_AD_Integration.html. Whenever I try and click on link to it, i get a little backwards progress bar that says "Network Error".Also anyone that is using Azure AD under the Cloud Identity Provider, are you able to access create tokens for API access via command line tools or the GUI on server.com/api?

Has anyone seen any issues with deploying Netskope on Big Sur with intel Macs? We have tried both with Kext and Network Extensions and the agent is greyed out and the configurations do not appear. Currently have a ticket with Jamf engineering. We are using the latest version of the deployment script but are having no success. Netskope keeps directing using to their support page for the answer.

Hello all We got requirement to prevent users from saving files locally and only allow saving into OneDrive. Has anyone done something like that or has an idea on how to? I would very much appreciate all and any input. Thanks in advance

Hello,I'm trying to install an iOS App on an M1 Mac via Self Service. I followed this guide: https://grahamrpugh.com/2021/08/24/jamf-ios-apps-on-macos.htmlWhich works up (as in I can see it on Self service) until the point where I am asked for App Store credentials in order to install the app. I don't want to have users signing in to download & install the app. Any ideas?On Managed Distribution I get a message saying "Content not available to assign to computers"It's a free app. Thank you,Georg