My Script doesnt seem to be working any ideas. Can anyone see what is wrong.#!/bin/sh#get serial numberserial=$(system_profiler SPHardwareDataType | awk '/Serial/ {print $4}')#Define Laptoplaptop=$LPTcomputerName="$LPT-$serial"# Set the ComputerName, HostName and LocalHostName/usr/sbin/scutil --set ComputerName "$computerName"/usr/sbin/scutil --set HostName "$computerName"/usr/sbin/scutil --set LocalHostName "$computerName"  

I bought a MBP last year that came with Monetary OS installed. During setup I connected to the internet just fine with no issues.A year later I upgraded my computer and was going to sell the one I got last year, I went to do a full wipe of the drive and install Ventura OS. Upon setting it up and connecting to the internet I was presented with a message stating my device can be configured my Netflix remotely.I am curious as to how initially I never saw that message then when I go to upgrade the OS now my device is somehow MDM locked?Of course I have no way of contacting Netflix IT to resolve this as I feel this is some mistake. Is there any way to get this unmanaged or removed? When I continue with the setup it takes to a screen where at the bottom I can see different servers like jamfcloud as if its trying to connect and then it brings me to a screen to sign in to google, if I do that it just errors out. My only way to bypass is to not connect to the internet but I had to downgrade bac

Hello, I was wondering if any knows of a way, if it's either scripting, or making changes to the PPD file, to automate the process of configuring a printers Department ID? We are deploying a Canon copier, that is locked with a department ID, and the settings do not seem to stick, when I upload the printer to Jamf, even though, I am setting them locally, on my computer. Any insight into this would be greatly appreciated! :)  -Loren 

I'm trying to automate Department ID configuration for our Canon MFD's deployed. Composer says that changing the department ID modifies the PPD file for that printer, however I can't seem to find where in the PPD file this is being changed. Has anyone had any luck deploying printer payloads with the Department ID included? If so how? Help.

Beginning yesterday morning, we started noticing commands to our iOS devices that are removing EDU profiles. Nothing in classes or users assignment on the devices has changed, but I'm finding that many devices are losing their EDU profile. I can look at classes and see who is listed as teacher, and then I go to a device assigned to that user and it shows the EDU profile was removed in the past day even though the class is still there. Our classes are not created from Apple School manager, so it's not a change in the sync because we don't have Apple Education Support configured. I also manually created a class and added myself as the teacher, but no EDU profile has installed or come up in pending commands. Has anyone else seen a mass removal of EDU profiles, or know what would cause this?

Hello, trying to remove the demon known as SEP from a few machines. I am deploying the Broadcom provided script via PKG, then invoking it via policy with the -A switch. The following appears in the logs:Result of command: TERM environment variable not set. TERM environment variable not set. com.symantec.mes.systemextension.systemextension com.symantec.mes.systemextension.systemextension is systemextension SystemExtensionName: com.symantec.mes.systemextension find com.symantec.mes.systemextension need to be uninstall in /Applications/Symantec Solutions/Symantec Endpoint Protection.app Removing /Applications/Symantec Solutions/Symantec Endpoint Protection.app 29:114: execution error: Not authorized to send Apple events to Finder. (-1743) Failed to remove /Applications/Symantec Solutions/Symantec Endpoint Protection.app. ATTENTION: You must use the uninstall option in your product's "Symantec Endpoint Protection" menu.  It looks like it's just not permitted to remove

In our Mac classrooms we would like to standardize the right-click (as secondary button) feature on new user accounts, without having to manually make the change on setup. I'm attempting to do this with a JSON Schema affecting com.apple.driver.AppleHIDMouse.plistSo far, I've had no success. Can someone with some experience take a look at the schema and configuration profile and let me know if I'm making any simple mistakes?JSON Schema: { "title": "Enable Right-Click as Secondary Click", "type": "object", "properties": { "Button2": { "type": "integer", "title": "Secondary Click Button", "description": "Set the value to 2 to enable the right-click as a secondary click." } } }  Plist Preview: <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>Button2</key> <in

Our machine certificates are formatted by hostname.domain.comWithin the certificate payload, should I use CN=$COMPUTERNAME.domain.com or CN=$HOSTNAME.domain.com? I was hoping I could do it by DNS name only  - but the Certificate payload requires a subject.    

As you may have noticed, Jamf Nation Community updated our design! And while things may look and feel a bit different, the location of forums, resources, etc., has not changed. We hope you love these changes as much as we do. Your feedback, loyalty and engagement with our community were driving forces in wanting to provide you all with this latest update! I cannot wait to see and hear how this design change helps you all better connect, communicate and collaborate with your fellow community members!

i want to create an extension attribute to display FileVault recovery key.No luck with this one.Thanks for your advice

Customer Education is back again with our second Jamf Pro Release Notes video! Join us for an overview of some of the new features and enhancements that are available in Jamf Pro 10.45. We hope this new resource continues to provide additional details to support your use of the features in this release. We got so much wonderful feedback from you all last time to help us make this one better, so feel free to leave a comment and let us what you liked and how we can make it even better next time. Take the quiz below to test your Jamf Pro 10.45 knowledge!  

I use a Policy that runs the script below to name our MacBooks to the machine's S/N that runs after enrollment and lately it stopped working.  It might be since Ventura came out or one of the revision, but I cannot confirm.  I can run the commands manually so they commands haven't changed.  Any suggestions would be great. #!/usr/bin/env bash# Get the Serial Number of the Machinesn=$(system_profiler SPHardwareDataType | awk '/Serial/ {print $4}')# Set the ComputerName, HostName and LocalHostNamescutil --set ComputerName $snscutil --set HostName $snscutil --set LocalHostName $sn

Have issue with Sophos signed mobile config profile. Have uploaded the mobile config file provided by sophos into jamf and it works fine. I need to add the profile to another site but I can not clone the profile (which is fine) but when I try to upload the mobile config file to the other site it will not let me. I am assume since it signed and its name can not be changed this is why it would not let me upload it to another site?

Hi, We are using QR codes to open websites but some do not work through Safari and want to know if you can change the ipads to open chrome by default, i know you can change it in the settings but want to know if i can change the setting globally. 

I have been working on this all day and cannot find a way to make this work. We want in our IT lab, to show ALL filename extensions for all users. Essentially, if we use the com.apple.finder.plist for the user template and enable it for one user, it is set for true. However, when we use this as our basis, new users logging in have it set to true, but the filename extensions is still unchecked in Finder preferences. There must be a trigger for this I am simply missing or overlooking. Has anyone done this successfully? Thanks for any insights you can offer me. Mick

Trying to get Autopkg installed, fresh install following all the steps and i keep getting the following error... google has got me no where so far.  Using Autopkgr anything i do brings up this error... every error points back to default preferences. WARNING: Did not load any default preferences. WARNING: Could not set RECIPE_REPOS preference: Could not synchronize preference RECIPE_REPOS WARNING: Could not set RECIPE_SEARCH_DIRS preference: Could not synchronize preference RECIPE_SEARCH_DIRS 

Hello Team,This is with regards to MAC performance testing .We are in process of streamlining and identifying a tool which would help us to benchmark MAC system performance across various models (PREFERABLY A LICENSED SOFTWARE) and various enrollment plan changes .Basically, we need a tool to benchmark system performance like CPU,GPU and Disk speed (Read/Write) after the every change we make to our environment.Can anyone suggest on the tools that we can use.Thanks,Manivannan

We have been through multiple phases launching Jamf Pro. We began on Jamf Now and migrated many users and now we are enrolling directly onto Jamf Pro. In the process, we discovered that a number of computers do not have Activation Lock Bypass configured. I have searched for ways to resolve this without success.Is there a Configuration Policy or Policy I can create that will enable that? If so, I am all eyes/ears.

Hello everyone,I have noticed that out macs local admin account has secure token disabled. Standard accounts are not admin and have secure token enabled.I wonder I can push a script on logged in accounts to enable secure token for local accounts.I ran below command locally: sudo sysadminctl -secureTokenOn "username" -password "password" -adminUser "username" -adminPassword "password"Got error: 2023-04-24 11:37:52.233 sysadminctl[2349:18595] ### Error:-14090 File:/AppleInternal/Library/BuildRoots/a0876c02-1788-11ed-b9c4-96898e02b808/Library/Caches/com.apple.xbs/Sources/Admin_sysadminctl/addremoveuser/main.m Line:3772023-04-24 11:37:52.234 sysadminctl[2349:18595] Operation is not permitted without secure token unlock.Grat stand account admin rights: same,Any idea?

Hey all, I'm looking to restrict our users (K-12 students) from enabling Full Keyboard Access in System Preferences - Accessibility - Keyboard. I've identified the plist key value, FullKeyboardAccessEnabled and FullKeyboardAccessFocusRingEnabled, created a plist and set the -int to 0 and uploaded it to Jamf in a profile with Application & Custom Settings. While I'm used to custom .plist files "graying out" the option to enable/disable items, this one doesn't seem to do anything to restrict the user. Thoughts? This would only be a temporary management profile to get our district through state testing. I don't like locking down Accessibility options, but a request has been made.

Education School in Reading Pa - Running into a issue for sevaral months now where I get the following error message - Oranage saying Jamf School is unable to communicate with the device in a timely manner. Also I have having a issue where the app's will not download or stay grayed out and awaiting download. Another issue i see is that my Device name is reverting back to  "iPad" after a IOS update.  Jamf School states it is a issue with Apple and not able to communciation with the device. Anyone else seeing these issues and are able to help ?

Hi folks.I try hard to get VPN On Demand to work. Unfortunately, it currently does not work with Jamf Pro's built-in way (PI-101098), so Jamf Support referred me to iMazing Profile editor. Getting bits and pieces from various web resources together, I tried to built a working VPNOnDemand.mobileconfig by myself, but as soon as I deploy it to my client, it does not have any affect.The VPN on Demand configuration should basically do the following:1.) If client connected to a certain company WiFi network ("SomeWifiNetwork" in the example), it should generally NOT use VPN at all.2.) If NOT connected to the WiFi network above, but any other network, it should ALWAYS establish a VPN connection while trying to connect to certain domains (example1.com and example2.com in the example).3.) Trying to connect to VPN server via L2TP ("1.2.3.4" in the example), shared secret included ("SHAREDSECRET" in example), user name and password should be prompted (hence not included in example).When I deploy i

If you have multiple virtual MDM's in apple school manager linked to different sites in Jamf, you assign a device to one of the MDM's in ASM and you have the setting Automatically assign new devices that is in the assigned MDM/Site's PreStage will it only assign devices linked to that MDM/Site in ASM? I.E. does the PreStage setting "Automatically assign new devices" work when you have more than one MDM in Apple School Manager?

Hello , I want to deploy Zscaler app using self service , but when standard user want to install it , need to type admin password for modify system keychain. Do you know some way how to solve this? or add more admin privileges to this app?Thank for help 

I'm pondering the idea of leveraging a Extension Attribute that could theorietically report/verify the existence of a specific root CA certificate in the OS X System Keychain. Based on the results it yields, I could add/delete certificate(s) as needed via scripts/policies, etc. Has anyone invented this wheel yet?