Four Corners and The Silver State Jamf User GroupPresentationI was honored to present at the inaugural virtual meetup of the Four Corners and The Silver State Jamf User Group, 30-Mar-2023, on “Custom Branded Notifications and Messages with swiftDialog.”Continue reading …

Hello Jamf Nation,We are preparing to host our first instance of Jamf Pro On Premises. I cannot find the documentation for the recommended server requirements for the File Share Distribution point. We plan to use Windows Server 2019 to host the File Share Distribution Point. But how much Ram and Disk Space is recommended for the Distribution Point server? Thanks! 

Jamf has provided a means to control their Self Service app by using URLs.https://docs.jamf.com/10.28.0/jamf-pro/administrator-guide/Jamf_Self_Service_for_macOS_URL_Schemes.htmlThe client Mac that is enrolled in to Jamf and has the Jamf Self Service app installed would open a valid URL and this would trigger the Self Service app to perform the specified step. As mentioned in the above document, the URL for each Self Service app entry can be obtained in Jamf Pro by an administrator.It is therefore possible to write a shell script which in turn opens such a URL, however the shell script needs to both run with SUDO privileges and still show as running by the logged in user, this is something probably familiar to most Jamf Pro admins but an example script which I know works for this is available as follows.https://community.jamf.com/t5/jamf-pro/script-to-launch-self-service-from-policy/m-p/190052/highlight/true#M178853 What the above script does not yet do is detect when the Jamf Self

We have deployed over 200 macs utilizing Google Workspace IDP on Jamf Connect for all of our end user logins on macOS - Works Great!. Is there a way to take the IDP login and have all google apps logged in automatically? Example, end user opens chrome and gmail is already signed in? 

i talked to Jamf about this yesterday and posted this on the feature request, looks like Jamf is finally on the ball.  https://ideas.jamf.com/ideas/JN-I-16171 

Just wondering if anyone out there has any ideas how to create a configuration profile that will remotely change the display resolution of an Apple TV.  We have some Sony projectors that when hooked up to an Apple TV 4K w/HDMI, the "Freeze" button does not function.  We have figured out that by changing the display resolution on the Apply TV itself the issue is resolved, but we would like to be able to change the resolution remotely for all the Apple TVs we own simultaneously.  Has anyone else encountered something similar, or know of any "quick fixes"?

When I try to add Chrome PKG as a In-House macOS Package I get the erorr 'Could not parse payloads of product archive.Any ideas would be appreciated

Hello Everyone,I have recently run into a problem with trying to enable Screen Sharing in our MACs. For some reason, in sharing, I am unable to allow Screen Sharing. Remote Management is allowed and on but if I wanted to allow Screen Sharing, we get a message saying "This service is currently unavailable" and that "Screen Sharing is currently being controlled by the Remote Management Service". The reason why this is coming up is because one our of teachers is trying to screen share her IPad to her computer. We have tried most of the scripts that have been posted here. Has anyone had these same issues?Thank you in advance!Joe

I have had a a configuration profile that sets some basic System Preference restrictions. Since upgrading to macOS Ventura the computers that are assigned that configuration profile cannot access some the the System Preference categories even though they are enabled in the configuration profile.IE: Desktop & Screen Saver preferences are enabled, however, when selecting it on the computer it say it is controlled by a profile.Computers running Big Sur or Monterey allow are working as expected.

Background: Started new company. We are not using DEP, VPP, or Casper. Looking to change this at some point but hey, its my second day. Question: We currently use munki to deploy approved app's and have a request for a paid app that is only found in the App Store. Anyone have thoughts on how to deploy this app via munki? We can purchase the app via our institutional AppleID, not a problem. The problem is getting into munki.Users do no have access to the App StoreUsers are not admin's. Thanks for any thoughts you might have.

Documentation and course materiaal provides this script to Display a message to a user, if they click OK, then open Self Service. messageToDisplay="$4"policyToExecute="$5"policyAction="$6" buttonClicked=$(osascript << EOFbutton returned of (display dialog "$messageToDisplay" buttons {"OK", "Cancel"} default button 1)EOF) if [[ "$buttonClicked" == "OK" ]];thenopen "jamfselfservice://content?entity=policy&id=$5&action=$6"fi However, this fails when the script is run in a policy, due to the JSS running the script as root instead of currentUser. Working with Jamf support we were able to make the modification below, which allows the script to run as intended when deployed via policy. messageToDisplay="$4"policyToExecute="$5"policyAction="$6"currentUser=$(ls -l /dev/console | awk '{ print $3 }') buttonClicked=$(sudo -u $currentUser /usr/bin/osascript<<END tell application "System Events"activateset the answer to button returned of (display dialog "$messageToDispla

Hi,I tried to create Push Certificates but don't know where is place to upload certificate?Here's my step:1, Click on Jamf Account and input my Jamf ID2, In this step, I don't know where used to upload certificate?  Thanks,

Hi All,  We've recently been sending some old machines to a reseller. Before sending these machines out to the reseller, these are removed from ABM and then removed from Jamf.  However, our reseller has gotten in touch and told us that they are still seeing the odd machine in Apple's master DEP enrollment database. just wondering if we're missing anything and if anyone has an idea of how we can check for any other aspects of DEP enrollment. 

Team, is there a quick and easy way to export all recovery keys? Also, do we have the option to export this from smart group sorted details from Jamf Pro?

Does anyone have a script or something to remove Adobe Air from our Macs? Our past IT guy installed it on everyone's computer but we have no use for it anymore and I'd like to get rid of it. I haven't been able to find a script anywhere to uninstall Adobe Air.

We have a handful of users having Dock issues after updating from macOS 12.5 to 12.6.1. At login the Dock will take several minutes to launch or never appear at all. Sometimes a restart will bring the dock back, otherwise manually invoking a DockLib script will give it back. Has anyone seen this issue in their environment?

I have distributed Windows ATP for Mac like described here https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/mac-install-with-jamf It works fine, but the auto update of the ATP does not work. According to https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/mac-updates And I run ./msupdate --install --apps wdav00 no updates are found - even I can see the all clients are not updated and have a "yellow" alert sign Anyone know how to add ATP so it will work with MAU?

Issue is, right now, prestage enrollment of iPads isn't working. The error I see in our Jamf cloud/Pro server logs is:2023-03-29 16:59:04,484 [ERROR] [duledPool-5] [ileAssignmentSynchronizer] - DeviceEnrollmentProgramException[responseCode=404, responseBody='PROFILE_NOT_FOUND', message='The DEP service reported an error.'] com.jamfsoftware.dep.comm.DeviceEnrollmentProgramException: The DEP service reported an error. at com.jamfsoftware.jss.objects.streamlinedenrollment.service.comm.DeviceEnrollmentProgramRequest.sendOneTime(DeviceEnrollmentProgramRequest.java:65) ~[classes/:?] at com.jamfsoftware.jss.objects.streamlinedenrollment.service.requests.AssignProfileRequest.send(AssignProfileRequest.java:34) ~[classes/:?] at com.jamfsoftware.jss.objects.streamlinedenrollment.service.requests.AssignProfileRequest.send(AssignProfileRequest.java:14) ~[classes/:?] at com.jamfsoftware.jss.objects.streamlinedenrollment.service.comm.DeviceEnrollmentProgramConnection.sendRequest(DeviceEnrollmentP

    I just want to share a quickie solution I made to address some complaints about enrolling Macs. Our setup has some policies set to install when enrollment is complete, but then others that install at the first check in. This usually means that there is usually a 15 minute gap after the EnrollmentComplete trigger before the first big bunch of apps are installed. Large installers like MS Office take a very long time to download and install. Techs usually are guessing when the enrollment is finally done. Sometimes they shut the computer down when there are still things to be run.  I know there are tools like DEPNotify that make the whole process transparent to whoever is sitting at the computer, but unfortunately I don't have the bandwidth to look into making that work for us. Here's what I did to eliminate that 15 minute gap and to let techs and users know that they may now begin using the computer.I created a policy called "zzzzz Check-in after enrollment" (the zzzzz

I seem to be having a problem with PreStage enrollment. I had 2 computers purchased recently and neither went through the process at all.The computers macbooks were purchased the same way as always. If I Open Apple business Manager and goto Assignment History, both laptops with the correct serial numbers are listed there. When I log into Jamf and goto PreStage Enrollments, and then goto scope, the devices are listed there. However, when the computers were first turned on by the remote employees, etc. Jamf did not kick in and I had to send the employees email invitations. Any ideas on what to check or troubleshoot? I don't think anything has changed.

Detailed step by step guide using Symantecs system extension as an example since that seemed to be most popular. Creating this thread for everyone to share new found knowledge, best practices & management tactics all in one place as we venture into a new Kext-Less macOS. WWDC System Extensions Keynote https://developer.apple.com/system-extensions/ Click Here for a Great Breakdown of System Extensions from Scott Knight To start, the best way I know of to obtain a list of system extensions that are present on the machine via terminal is the following command. systemextensionsctl list This command will produce the following information regarding system extensions. enabled active teamID bundleID (version) name [state] for a full example, using symantecs release for macOS 10.15, the following is populated Hugonaut$ systemextensionsctl list 1 extension(s) --- com.apple.system_extension.endpoint_security enabled active teamID bundleID (version) name [state] * * 9

(Hopefully) automate the remediation of sideways Falcon installationsBackgroundDuring the initial phases of our CrowdStrike Falcon pilot, we discovered a surprising number of sideways installations which were reporting the seemingly dreaded: Error while accessing Falcon service.ResultsIn less than 18 hours, we were able to reduce the number of sideways installations from 13 percent to well less than 1 percent. (This exercise also helped us to better detect sideways MDM enrollments.)Continue reading …

Hi All, I have setup a Jamf Setup and Reset configuration, and this works with removing the Microsoft login data from Safari, but...........the page is still open, and another user can get a "view" of a current page eg. portal.office.com, as soon as you try get to another page, it brings up the authentication page which it should.Is there anyway to close down Safari and essentially do a soft reset of Safari, and not just the Microsoft credentials. I know this can be done via settings, even if I have to use another app if possible. RegardsSimon

Hi, Does anyone have a script to enable the checkbox to admin password system-wide or configuration profile in Jamf Pro to get this done? Thank you in advance.  

We have started noticing a lot more issues with our iPads getting mdm commands towards the end of last week and today.  We did update to 10.44.1 around 9 days ago.  Inventory Updates, app installs, and profile install/removals will just be stuck pending forever.   We've restarted our jamf instance, restarted iPads, turned off caching servers (since we've had problems with app installs previously), tested on outside networks, but it seems to be the same no matter what.  Is anyone else having issues?  I'm not sure if it could be an Apple thing or maybe a 10.44.1 thing, or if it's something entirely different.Thanks!