Hi y'all,We are facing a mayor issue when registrating our devices to Intune for compliancy.In the Self Service portal we initate the registration process,Company Portal show, we log in and Company Portal states: You're all set! Then JamfAAD opens with the message: To Complete the registration process, do the following. Safari starts up and shows the following question: "JamfAAD" want to use "microsoftonline.com" to sign in. When we sign in, the screen keeps loading and after a while Safari shows a error: This connection is not private. From there on, there nothing we could do and the process seems to break. When we close the browser and start the whole process again, everything works fine. Why does this not work directly? Please hulp us.Leo

We are having an issue with all new enrolled IOS devices. The device is being enrolled correctly, but when we attempt to open self service we get this error. I have verified that we have enough licenses from the VPP. Self service is running properly on our computers just not on IOS devices.

Hello, I'm hoping someone else can guide me towards a better workflow for wireless radius certificates and JAMF. Our current process is that once a year, we renew our radius certificate (publicly signed) and add it to a certificate payload configuration profile a week before the old one expires. We email all our employees and students to let them know that at some point, their phones and some Macs will prompt with a popup to trust the new certificate.But, with it being a near certainty that Google will soon require 90 day max certificates, followed by probably 10 day certificates, we'll need to find a way to full automate the process so that wireless continues to work. We should be able to ACME to renew the radius certificate itself, and then presumably use the JAMF API to move the certificate to JAMF and configure anything that needs it.Does anyone already have this running in a non-painful way? If so, will your process work for 90 day certs, and are you willing to share it? Or, does

Hello! I'm moving a client from a macOS file repo to Synology NAS. I'm having trouble mounting the repo with Jamf Admin. Manually mounting in Finder or on Windows works no problem with these credentials. Is anyone doing this in 10.47.0? I saw a couple of threads where people were trying to put / in front of the username like a Windows SMB login but had no luck there. 

Hi,I have been asked to report the initial OS installation date and user profile creation dates for Macbooks. I couldn't find a way to do this with Jamf Pro. Is there a way to get this with a script to be run through Jamf Pro or Jamf Pro? 

We have SSO enabled which works great. However, I need to create a local account that will use the ?failover url. This is an account for an intern so I can't make it an admin account. I created a custom account with the desired privileges but every time we try to use the ?failover url, we get a access denied. Our backup admin account for the ?failover url works as expected. What am I missing?

Hello All,Need your help, i have Apple script which will update the macOS for both Intel and M1 and restart if it's M1 it will prompt for the user password to install macOS. now it's working fine when i run from Apple script editor.But i need to convert the Apple script to run as bash script so that we can push from JAMF.=========================================================================================# Launch software Update preference panedo shell script "open x-apple.systempreferences:com.apple.Software-Update-Settings.extension"tell application "System Events"repeat 60 timesif exists (window 1 of process "System Settings") thendelay 3exit repeatelsedelay 1end ifend repeatif not (exists (window 1 of process "System Settings")) thenreturnend ifend tell# Click "Update Now" or "Restart Now" if presenttell application "System Events"tell process "System Settings"repeat 60 timesif exists (button 1 of group 2 of scroll area 1 of group 1 of group 1 of group 2 of splitter group 1 of

Why is it that these emails DON'T contain any specific information? Thankfully, these dont come all that often, but when they do,, it would be nice if that contained some specifics. If I need to send out an alert to my users, and i send this crap out, my users are going to lose faith in me and what I am telling them.  Hey Jamf, how about defining these a little bit, they sound like a weather report.......you never know if they're reliable or not. 

Hello Team,When we install LogMeIn on mac manually by clicking on it it opens without any issue, but when we install using by installer command downloading it from DP it is not opening. What might be the reason and what is the resolution here? How can I find the cause of this issue, which log can tell me this?

Hi Everyone,I'm new to bash scripting and the JAMF API and need some help. I'm trying to export a csv file with the Serial Number (Column A) and Computer Name (Column B) so I can then import it nightly into our inventory system. I use the computer name to assign each computer and iOS device to that user so this will help confirm who has the device in the inventory. I have figured out how to export the file, but it all seems to be in 1 cell. I'm looking for help on what I should do to break it apart. Thank you in advance. !/bin/bash server information jamfUser="apiread"jamfPass="apireadpassword"jamfURL="https://jss.url:8443/JSSResource" search computers and GET SerialNumbers and ComputerNames exported to csv file apiData=$(/usr/bin/curl --user "$jamfUser":"$jamfPass" --header "Accept: text/xml" --request GET $jamfURL/computergroups/id/1 | /usr/bin/xpath "/computer_group/computers" | /usr/bin/xmllint --format - | /usr/bin/grep -E "<serial_number>|<name>" | /usr/bin/

Hello All,I'm trying to generate the Bearer token using C# via /api/v1/auth/token API and I'm getting 401 Unauthorized error. But, when I call the same API and with the same credentials in POSTMAN I'm getting 200 with a token in the response. Can someone help me with how to generate tokens using C#?. Thanks. Code:string response = string.Empty;try{Uri tokenUrl = new Uri(ConnectionProproperties.url);WebRequest webRequest = HttpWebRequest.Create(tokenUrl);HttpWebRequest httpWebRequest = (HttpWebRequest) webRequest;NetworkCredential networkCredential = new NetworkCredential("xyzzzz", "xyzzzz");CredentialCache credentialCache = new CredentialCache();credentialCache.Add(tokenUrl, "Basic", networkCredential);httpWebRequest.Method = "POST";httpWebRequest.PreAuthenticate = true;httpWebRequest.Credentials = credentialCache;WebResponse webResponse = webRequest.GetResponse();Stream responseStream = webResponse.GetResponseStream();StreamReader streamReader = new StreamReader(responseStre

We installed Slack using the Mac Apps with the 'Install supporting configuration profiles' option selected. This led to the Alert configuration issue reported here https://community.jamf.com/t5/jamf-pro/jamf-app-installers-user-notifications/m-p/287342Recently, I noticed we now had two Profiles on our devices with the same name "App Installers - Slack". One profile had 2 settings (no update and Alert config) and the other had 1 setting (no update). I tried updating our Mac App configuration by unchecking 'Install supporting configuration profiles' option and this successfully removed the "App Installers - Slack" with the single setting, but the 2 setting Profile is still there. I have tried disabling the deploy and that did not remove the legacy profile.I have looked at other options to try and remove this profile but nothing is working since this is a signed JAMF Software profile and not one of ours. This is causing a lot of complaints from our user base since they want

Hello Community and Jamf Team,why are there so many other options in the scope to select as Rule but no "LostMode" offered?I would like to create a group with the rule that only iPad set in Lost Mode will be displayed.Is there a reason for this?Cheers,Peter

HiSo, i have a package file i want to install, but i want to check to see if a file exists before installing this package.If the file doesn't exist, then continue and install the package.If the file DOES exist, then don't install the package. Ideally i want to run a Before script in the Policy, and if Before script exit code is 0 (File doesn't exist) then it installs the package in the Policy too.But if the before script exit code is 1, then just stop the policy there, and don't install the package. Is this possible?Can you stop a package installing, if the exit code matches a certain value from a before script. Thanks

Based on the downloadable .plist for Full Disk Access from https://help.eset.com/eea_mac/7/en-US/install_remote_pre-installation.htmlThe issue that I can't upload them to jamf as it has 4 different Preference Domain inside. So I'd like to split it between 4 preferences domains:com.eset.app.Uninstaller; com.eset.devices; com.eset.eea.g2; com.eset.endpointBut looks like I'm making syntax mistakes and can find them.Tried with the example from https://developer.apple.com/documentation/devicemanagement/privacypreferencespolicycontrolSo my plists are almost the same, the difference if only in Identifier value and CodeRequirement value took from the shared plist:  <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC “-//Apple//DTD PLIST 1.0//EN" “http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>PayloadContent</key> <array> <dict> <ke

At present if you have deployed Shared iPad, the memory space occupied by the cached shared users remains in use on device, any attempt to update the OS actually results in an out of memory issue. At present the system does not report or handle this in a sensible way that follows the natural workflow. You can visit every device page and check the memory for each device but that is not efficient. A couple of feature requests come out of this:1) provide the amount of memory available on device in any OS Update page so you can see whether it is possible that this can't be installed because of memory issues2) Intelligently remove cached users that have been written back to iCloud storage when an OS update is in play

When attempting to clean up enough space to push out OS updates to Shared iPads you do need to have the current user signed out and if you don't have enough space - about 3GB - you do have to free up memory resources. This is done mostly manually on a per device basis.Interestingly, I've issued 3 remote log off commands this morning and the current user is still signed in on most devices. Unclear whether the device list level command is working properly.However, to get the ball rolling it would be good to start to clear out cache space and wait for the pending logged out user to be actually signed out and then their cache written back.The current process doesn't really support this workflow in a single command.You can sign out the current user, but you have to wait and poll the device state to know when this has happened. My experience so far is that I selected multiple devices in a class and asked them to log off the current user, 2 hours later it is still reporting some users to be s

A Read-only Friday post by William Smith “I’m not a terrible procrastinator. I’m a great procrastinator!” It’s Monday morning. You’ve tumbled out of bed and stumbled to the kitchen and poured yourself a cup of ambition. You sit down to check email and in your inbox is a message: Dear <insert your name here>, Congratulations! We are excited to inform you that the following session (or sessions) identified below have been accepted for presentation at this year’s <insert conference name here>. 😳 It’s been weeks (maybe months) since you submitted your session proposal and, frankly, you’d forgotten all about it. Are you excited? Terrified? You need more caffeine to process what you’re reading. The first thing you should do is fist pump the air. Yes! The second is go to your manager, tell them your proposal was accepted, and get the go-ahead to attend. Remember, conference speakers usually get conference costs waived. That can be a few hundred to a thousand dollars o

Does anyone grab the Office VL installers from the following site = https://macadmins.software/based on what i see Office 2019/2021 use the same installer 16.57.0 ?but different Volume License serializer depending on what version you are licensing? so if i install 16.57.0 and run the LTSC 2021 License serializer it will be running Office 2021?does this have different features than if i ran the 2019 License serializer?    

Hello Everyone,I looked through several threads but couldn't find an answer to the above question. This may be because no one has had this issue. In our school district our staff are all standard local accounts. I've been testing Nudge and am pleased with how it works however when I go ahead with the "Update Device" it asks for an Admin password to install the update. Kind of what I would expect. However I don't think staff would like it if they had to get a hold of tech every time they want to update.Does anyone have a similar workflow that allows Standard users to install the update/upgrade?Thanks

Has anyone had issues with FileVault 2 automatically reenabling itself? Several months ago I set up a Self Service policy to encrypt boot drives with an Institutional + Individual key. After some successful testing I scoped it to 3 of my own Macs and encrypted those boot drives. Everything has been working fine and I have not had any reason to think anything is amiss. I even recently successfully tested it again with two test Macs. So I now have 5 devices encrypted with this policy. I’m now needing to mass deploy FileVault configurations in other JSSs I control, and for the sake of reinforcing my knowledge from my past effort, I decided I wanted to start with a clean slate and create new keys and new policies. So I started the process by turing off FileVault on two of the Macs, one being my own. The decrypting process went without a hitch. Then upon rebooting one of the Macs I was presented with the same encryption process dialog I would exptect to receive after initiating an encryp

I'm sending out a System level Dock mobileconfig (which I've been doing for years now) to our computer labs, and it has always worked well.  Until recently...When I upload my mobileconfig file created by dock-master, I get a dock full of question marks.If I check the dock plist in the Managed Preferences folder, all of my Application locations have had '/System' added to the front of their strings.i.e.: This:<dict><key>file-data</key><dict><key>_CFURLString</key><string>/Applications/Google Chrome.app</string><key>_CFURLStringType</key><integer>0</integer></dict></dict> Turns into this:<dict><key>file-data</key><dict><key>_CFURLString</key><string>/System/Applications/Google Chrome.app</string><key>_CFURLStringType</key><integer>0</integer></dict></dict> Why on Earth would either JAMF or macOS think a

Having some issues with Company portal registration and receiving a generic error message which has no proper logs to dive into unfortunately. Deploying company portal via mac apps and targetting all managed clients Afterwards I created a smart group to locate any devices that have company portal installed and targetted a policy to trigger Microsoft Device Compliance.This triggers the policy once the device recognizes that Intune Company portal has been installed.It launches flawlessly, but unfortunately during the registration portion, I do the following and receive a generic error. Company portal launches on its own with the policyI login w/ my corporate credentials and provide my username/password and then authenticate with 2fa.I then receive this generic error below.If I try to force quit company portal, i'm prompted with JAMFAAD wants to use microsoft to sign in .But, upon going through the process and logging in with my corporate credentials again, I am prompted to

Hello, some of our customers are sending multiple PDF Documents via the Documents Feature (Documents-Inventory-Add Document) to the Ipad Devices and its working flawlessly. They are shown in the books App on the Device. Today I received an Support Ticket saying it is not working with Word Document. And I can confirm this! I uploaded some Word Documents in .doc and .docx format and when sending them to the Ipad Devices it stucks in the Status "pending." Does anyone have an idea whats the problem here? PDF Documents working like charm, Word Documents are stuck in pending. Thanks in advance, kind regards. Christian

We have a question, when we enroll a device it lock the ipad with the account configured in Jamf, if you connect with that account on Apple there are the device list there? We have that account linked with Apple School and we think that then you cannot login to Apple to see devices linked inside. Thank you