Customer Education is back again with our next Jamf Pro Release Notes video! Join us for an overview of some of the new features and enhancements that are available in Jamf Pro 10.46. We hope this resource continues to provide additional details to support your use of the features in this release. Thank you all for the continued feedback as we look to improve each video. Feel free to leave a comment and let us what you liked and how we can make it even better next time. We look forward to hearing from you! And don't forget to take the three-question quiz below to test your knowledge!  

Hi all, i have a question about locked user accounts. Is it possible to deny complete access to a MacBook after the user has been locked in Microsoft Azure? We recently had a case where a user was locked out but still had access to his MacBook through his "local account".Is this possible or do we always have to click on Lock Computer in Jamf?

HI,Need to display a popup message for os update with steps to all devices. We have created a test policy and using interaction tab displayed the message with test devices. but unable to expand the notification and its very small too to miss. is they any script file to display the message notification in a frequent time intervals until the os got updated on that device.

One of my client is reporting high memory usage on his computer. memory usage gets higher ans higher as it's goes on. any suggestion of how to stop my client's from crashing. it's checking in every few seconds. I keep seeing this on the jamf log: No patch policies were found.Checking for policies triggered by "recurring check-in" for userChecking for patches...

An issue while ForeScout SecureConnector integration with Jamf ProAlmost the integration is completed but we have observed an issue that in most of the machines, it's not showing in the menu bar which supposes to be.is anyone integrated this before? please advise

We are managing iPads out in the field and it has become necessary to completely lock down use of apps using the "Only Allow Some Apps" setting and then providing a list of the specific list of apps that can be installed on the device This, however, leads to a problem using Web Clips....once the configuration profile with all the restrictions is distributed to the device, all of the web clips applied to the device disappear. If you remove the restrictions, the web clips reappear. Is there a way to make the web clips unrestricted, or work around the app restrictions so that they continue to appear?

Jamf Cloud - communicating with SCEP server via https, where do you obtain a 3rd party certificate, as per below diagram/ Also referenced in youtube snippet.  REF: https://www.youtube.com/watch?v=jn0HTWKubFY

I have an (non admin) end user using VMware Fusion 13.0.2 on a MacBook Pro M1 13.3.1.I've used PPPC Utility to set up a Configuration Profile that has "Accessibility - Allow" for Fusion.The end user still gets an error when they start Fusion to allow Accessibility. They are getting the profile and other profiles are working. Any insights would be appreciated. 

My org uses the Apple Mail app and I have been having calls from users somehow having threaded email view enabled without their knowledge.I'm looking for a way to use configurator to disable threaded view.  I have a config profile per user for their email settings, and a default settings profile for every user to get the same baseline system settings.Will I need to edit each profile, or is there a way I can push a new version of the mail app but they all keep their existing accounts settings, etc?I have used the configurator before for other apps, I just was unable to search the mail app by bundle ID when I tried a few minutes ago. Any help would be incredibly appreciated.

Seeking some with Jamf Connect Implementation,We have purchased Jamf Connect after a month or so of testing and even now there still appears to be issues. Initially the ability to change passwords within the Jamf Connect Application was working, and now all of sudden it has stopped with no change to the configuration received by a Jamf Engineer. The workaround implemented that we received, gave an expanded window from the Menu Bar when you selected change passwords. Now Reset Password remainsChange Password reflects "Actions"But the "Click here to change password." window remains.To make matters worse MFA is working sometimes and sometimes it is not. Any help anyone could suggest here would be great. 

Since last week every iPad gets a flashing box (see below) of an update that's failed.No-one is able to exit out of the error despite hitting OK multiple times. As a result this renders every iPad unusable.Powering it off and on again solves it; however, anywhere between 10-60 minutes it's back again!

Purpose: While Jamf Pro can deploy multiple packages as part of a pre-stage enrollment, some MDMs are not capable of this. Alternatively, if a client computer is on a slow network connection or a user proceeds through Setup Assistant very quickly before Jamf Connect can be installed, a user may experience an unexpected result of getting a macOS login screen. By wrapping the Jamf Connect installer package in another installer package with assets and a postinstaller script, administrators can add custom branding images and scripts in a single package. Tools required: Jamf Composer or similar tool to create .pkg files. Procedure: Collect wallpaper images, branding logos, help files, scripts, and any additional assets needed for a zero touch deployment of Jamf Connect. Refer to https://www.jamf.com/blog/zero-touch-deployment-with-jamf-pro-and-jamf-connect/ for a larger discussion on this topic. Keep the assets to be included in the file as small as possible. For best user experience

Hi all, I am trying to find the plist that I can target to restrict Nessus Agent from being clickable in System Prefs. Any ideas?

I am importing data from jamf into ServiceNow using the REST API and for some reason the Storage Section is not expanding so I can add those fields, other ones like userandlocation and hardware,  any ideas why this would be?

Hello,My company wants to upgrade all devices to Safari v16.4.1. I know it's possible to upgrade from each endpoint via System Settings/Preferences. But can it be done via Jamf? I figure at the very least I'll need the latest installer, and I can't find a way to get it. I'm also aware that the latest Safari is bundled in the latest version of macOS, but if possible I'd like to avoid having to upgrade the OS. In a perfect scenario I would create a policy with the Safari installer and scope it to all machines, but I'm not sure this can be done. Just throwing the question here in case somebody knows for sure. Any advice is appreciated. Thank you.  

Hi all,Wanted to share that we are actively developing to implement deferrals in an upcoming beta release of Jamf Pro, targeting between Q4 of 2021 and Q1 of 2022 to solve for the below use case.As a Jamf Admin, I want to issue a remote command for my macOS devices to update their OS, while also giving them the option to defer the OS update so that their critical workflows aren’t interrupted (ex. during a presentation), while also ensuring they stay up to dateExample mass action/remote command workflows moving forward:(Existing) Admins can issue a remote command to a set of devices to download and install to an upgraded version of macOS ASAP, restarting end-user machines as necessary(Existing) Admins can issue a remote command to a set of devices to download to an upgraded version of macOS and notify the end user(Upcoming, net new) Admins can issue a remote command to a set of devices to download to an upgraded version of macOS and notify the end user, and input a MaxUserDefe

When connecting the ipad to Apple configurator, there is a big podlock icon. And I'm unable to install profiles on it. Please help. Any recommendation/advise is much appreciated. Thanks!

Hey there,It's that time again folks! We're revving up to upgrade our Mac computer labs at the university this summer. Last time, in 2019, we traded in our Network Accounts with mobile home folders for NoMAD Login when we upgraded from macOS Mojave to Big Sur. While the just-in-time user creation of NoMAD Login is certainly slick, the AD home folder mounted as a share instead of the symlinked home folder we could get with Network Accounts has caused some headaches since last time around. Namely, students have been accidentally saving files to the local storage, leading to a search party for their missing data and lots of time wasted that could have been better spent elsewhere.I know that Network Accounts and linked home folders were far (very far) from perfect, but this file-saving mess was never an issue before. So here we are, ready to upgrade once again and looking to overhaul, or at the very least lightly revise our user management. That's where you come in, the infinitely competen

Hi Guys,We renewed our push certificate and it seems that this has not updated on the iPads we are managing meaning that we cannot send any commands out to the iPads. We know restoring them through AC2 works but we manage about 500 of them so isn't feasible to do this for every single one. Is there a way round this?We had the idea of downloading the certificate itself from somewhere and manually installing it but can't seem to find a downloadable copy of the certificate, only the jamf token.Any suggestions would be greatly appreciated.

One method of upgrading your customized Setup Your Mac script to the latest versionIntroductionApple’s Automated Device Enrollment helps streamline Mobile Device Management (MDM) enrollment and device Supervision during activation, enabling IT to manage enterprise devices with “zero touch.”Setup Your Mac aims to simplify initial device configuration by leveraging swiftDialog and Jamf Pro Policy Custom Events to allow end-users to self-complete Mac setup post-enrollment.Release CycleFor each of the last several months, an updated version of Setup Your Mac has been released (and reviewing SYM’s CHANGELOG shows it).Many Mac Admins share the same sentiment:I’d like to upgrade to the latest version, but there doesn’t seem to be an easy way to both use the new features and maintain my customizations.UpgradingThe following high-level overview is written for Visual Studio Code; James Smith has an excellent presentation on Visual Studio Code for Mac Admins.Continue reading …

Hello community,we are using jamfschool to push wifi profiles to our iPads.What settings in the restrictions tab are best practice to prevent sharing these connectionsor to show the password?thanks 

Hello,we are a school with many iPads that are managed but also able to be privatly used by the students. For this we allow parents to use the Jamf Parent app. We have currently an iPad that keeps getting a profile installed that restricts a lot of the apps and other functions as well, basically rendering the iPad almost useless. I have talked to the parent who installed the app and he said "something went wrong" and he had to uninstall the app and now he cannot set up it anymore after reinstalling. When trying to rescan the QR code by the parent, the parent app  says: "This device has already been added to the overview page" (translated from the german: "Dieses Gerät wurde bereits zu ihrer Übersichtsseite hinzugefügt").This is a snippet from the activity log:It seems to me as if the jamf server keeps thinking it needs to install the profile without the parents app issuing the command. Can this happen? If I manually clear the parents restrictions on the device it is in fact c

So the first time around the MDM profiles didn't install correctly. Now when I try to manually delete the old profiles it won't let me because of the above error.  Even if I logon with local admin rights ... I even tried to logon with local admin rights and run sudo /usr/bin/profiles remove -allBut it errors and says profiles: There are profiles installed that marked non-removableI need to get this laptop built today can anyone help? 

Hi allIs there any way that we can find out what is the current Apple ID on the Mac ??

We are attempting to build a compliance dashboard for senior leadership.  One of the top compliance items is that macOS be up to date.  That criterion is defined as that the endpoint must be on the latest patch and version of macOS within 30 days of release.  What we need is a data source that we can poll for the most recent version of macOS and when it was released so that we can feed the logic in the dashboard.Has anyone put together something like this, and if so, what did you use for the data source for the current version and patch level of macOS?