Is anyone using printer presets in Ventura?I've been trying to make two - one for Greyscale and one for Colour but it keeps going back to colourIf I do this on Monterey it works fineI've tried it on several machines with the same result

I'm just wondering if there is a way to re-read the preferences for a user without logging out and back in.In particular, I've removed a plist file for a user for printer preferences 

Hey,is there a possibility to disable the Guided access? The students are frequently setting codes, which is very annoying...

Should I create smart computer groups for each of my licensed software that I want to keep updated with Jamf App catalog? I am concerned that if I choose all of my managed clients, the catalog will install licensed software on my assets that did not purchase a license. Also curious that if I use Jamf App Catalog to keep Google Chrome or Mozilla Firefox updated will it only update the assets that have it installed or will it install the latest version on all of my assets?

We recently got a ticket to install vectorworks on a bunch of managed iMacs. The iMacs are in a video lab, where the only account the student's can use is the guest account. This is causing issues with the license not sticking when the user logs in and out. Has anyone come up with a way to install vectorworks and license it for the guest account? I know Apple is fading out login scripts, but would they work for this? From what I have heard, here are the places a license file needs to be: 'HD > Library > Preferences' “net.nemetschek.vectorworks20XX.plist” 'HD > Users > (User's Home Folder) > Library > Preferences' "net.nemetschek.vectorworks.license.20XX.plist" “net.nemetschek.vectorworks20XX.plist” There is a 2018 folder in 'HD > Users > (User's Home Folder) > Library > Application Support > Vectorworks' Has anyone done anything like this? Thanks in advance.

During Covid we had a lot of Macs built offline, then before they were sent to the users we logged onto our VPN and bound them to AD, then run: sudo /System/Library/CoreServices/ManagedClient.app/Contents/Resources/createmobileaccount -n username to give them mobile accounts, this worked fine, however we are now moving everyone over to Jamf connect and have noticed that theses accounts even though they are working on the mac as mobile accounts and authenticating through AD as well as show in the users pref to be mobile accounts the JSS does not see them as mobile accounts, we have noticed that the UID is still at the original value example 503 so think this is the issue however we are unable to find a way create a extension attribute to display if the user is mobile or not? any ideas?

Hi, In searching for a better way to install Apple Loops and other post-install downloadable content from apps like Logic Pro and  GarageBand, I see that Carl Ashley has created a new tool called loopdown. It basically downloads all the loops based on the app's plist and creates smaller packages (I believe based on folder structure) ready for uploading to MDMs like Jamf. It appears to work great. The only problem is that it produces a lot of packages (840 for Logic Pro and 707 for GarageBand) and I was wondering whether there is a way to bulk upload these packages? I'm not asking about deploying all these packages in 1 policy. I know we can do that but rather upload them to the cloud repo.

Appologies if this has already been addressed however after a bit of a search through the messages I am strugling to find an answer to the following scenario.  I am using JamfPro to setup and manage new company iPhones with the intention of providing staff with a work tool that is locked down for business with apps etc being pushed centrally to the devices. It is intended that Managed Apple ID's are being used to enable staff to use imessage.  The area that I am struggling with is getting the users to be able to log into their managed ID's at the enrollment stage, prior to the configurations kicking in and preventing account modifications. Witin PreStage Enrollments I have left  'Apple ID and iCloud' as a Setup Assistant Option, however devices are skipping past the question. The only work around I have found is to remove the configuration restriction for Modifying Account Settings to enable sign in and then to restrict them once more, which is less t

We have a handful devices that are not communicating with our JAMF server. They are showing with the prefix DEP- and Unsupported OS. All devices are MBP running macos13. The management tab when selecting the device just spins and never loads.Also tried running sudo jamf removeFramework to remove the profiles on the device itself to no avail.Not sure what my options are currently. A coworker recommended reformatting but not exactly something i'd like to have to do with 10 devs.

Hello all,I was just wondering what everyone's strategy is for managing Adobe Creative Cloud applications with Jamf App Catalog packages.We have Creative Cloud 2022 installed, and are looking to move to 2023 soon.  Could anyone comment on the behavior of pushing out 2023 to systems with 2022 installed using the Jamf App Catalog functionality?  Will both remain installed?  If I remove 2022 systems from the scope of the CC 2022 App Catalog smart groups scopes, will it get uninstalled automatically.  Do you need to force uninstalls of the older versions of the 2022 applications from outside of Jamf App Catalog.I know this will require testing, but looking to see if anyone else has gone through this yet.  Didn't find a Jamf Nation article that addressed this (yet) Thanks!

We have been using JAMF for a few years now and have quite a few leased and purchased Macs in our system but a lot of deprecated policies, profiles, and other settings that we are wanting to rebuild mostly from scratch. We are going to be entering into a new lease later this year so rather than try to go through each item one by one we are wanting to rebuild the system for the new lease while still being able to support the existing leased and purchased Macs.I know how to create a new PreStage Enrollment but most of our policies and profiles are set to "All Computers". I know that I can make an exception in each one by using a smart group but is there a way to immediately separate the new PreStage devices without creating a new JAMF environment to where they won't get any of the old stuff?

Hi all,Our personalised version of https://instancename.jamfcloud.com/enroll doesn't seem to be reliable - in short, it sometimes works on some machines (apparently at random).In Safari, the page starts loading but stalls fairly early on and eventually throws the error below (i've starred our instance name).Safari Can't Open the Page Safari can't open the page "******.jamfcloud.com/enroll" because the server where this page is located isn't responding.I've tried rebooting, clearing all website data, using standard and private windows, and also in Firefox, but if a particular machine doesn't want to connect then nothing seems to work. Any thoughts?..Thank you!

I have to write a python script to block computers from downloading and installing OracleJDK using JAMF how i can achieve this

Hi folks,I'm currently creating a new process for user initiated enrollments using DEPNotify. For testing, I'm removing all local device jamf components and running API scripts to unmanage/ un-enroll the device and de-selecting the "Allow Jamf Pro to perform management tasks", but keeping the JSS record intact. Then performing changes to the build script / procedure and re-enrolling again for testing purposes.However, what I've found is that if I don't delete the JSS record for the device, although the the device successfully appears to re-enroll, the actual script that is supposed to run and start DEPNotify on the Enrollment complete trigger does not startup. It's as if it performs a "silent" re-enroll. I'd like the build process to be consistent regardless if it's a new enrollment or a re-enroll. We may have instances where devices have their management disabled in the JSS and need to be re-enrolled, and if it's end users performing the enrollment then it would be helpful to have on-

I never used JAMF protect in production. I was looking for some example in our daily life where JAMF protect is useful and JAMF Pro wont be able to do it.

Is it possible to manage the Airdrop and Bluetooth app through JAMF in such a way that it will function only on those mac devices enrolled in the same JAMF Pro console but it wont work on other Apple devices those are on different JAMF or not enrolled in any JAMF or MDM. It is for security purpose only.

I'm looking for a way to properly suppress the Ventura upgrade, as it has started appearing for our end users. We currently have a config profile scoped to defer major updates by 90 days pushed to all users, but I've gotten reports that users are getting the Ventura upgrade in Software Update. We have Ventura blocked from installing via restricted software, but I need a way to stop it from showing in Software update as the config profile to defer it by 90 days is not working. Any advice?

We for many years have used individual recovery keys for jamf. But every now and then we see issues with the individual recovery keys that is listed in jamf. Sometimes few times we are experienced the keys rapported in Jamf is not working, we stand with a unusable client that may cause data loss.Why the keys is not valid is  of course the question, but somehow rapporting keys to jamf may not always happen in time from the client ?So thinking on actually setting an additional key and using a institutional recovery key - and then every month create a new institutional recovery key for mac, so it will not give security issuesIs anyone else using institutional keys also together with individual keys ?

We have a user-level configuration profile set up for students with the "Restrict which apps are allowed to launch" checkbox checked and a whitelist of applications. We are finding that this doesn't take effect on the first login. The configuration profile is applied and other restrictions in the profile take effect (System Preferences panels are grayed out, for example) but the user is able to launch all apps until they log out and log back in again. After that second login, everything works as intended and the user can only launch apps on the whitelist. Jamf gave me the workaround of using Restricted Software to block certain applications but this doesn't work for us since it can only be scoped to computers and not users. Any ideas?

Hello!I am trying to change the mail.app settings on multiple Macs, but it is not working.If anyone knows how to solve this problem, please let me know.What I would like to achieve.-Check "Mark addresses not ending with" (mail.app>Settings>Composing)- Put any address in the blank field- Achieve the above two points using the payload function of the configuration profileWhat I have triedI thought the following plist was relevant for the configuration.~/Library/Preferences/com.apple.mail-shared.plistHowever, when I uploaded the plist reflecting the settings from Jamf>Configuration Profiles>Application & Custom settings>Upload, it was not reflected in mail.app.

Searched Jamf Nation but couldn't find anything close enough to my use case. I'm querying the Jamf API for computer IDs by way of usernames:jamfUserURL="https://[company].jamfcloud.com/JSSResource/users/name/$username" computerID="$(curl -X GET -s -k -u "$jamfUser":"$jamfPass" "$jamfUserURL" | xmllint --xpath '/user/links/computers/computer/id/text()' - )" echo $computerID This works great except for end users who have more than one computer in the environment. Then I get a result with all IDs combined into one return. Would it make sense to stick this in a for loop to iterate through the multiple IDs? If so, can someone please assist?

Where do we find the download link for the Jamf Pro admin tools?

We have a rather small Mac fleet of a few dozen MacBook Pro, a handful of iMacs. We implemented jamf with a minimum of features. The users have administrative privileges, our environment is scientific and has to be open in that way. We have to provide the best support and also want to limit the workload, while restricting the least.How do we get the most out of our jamf instance?Which policies, profiles, scripts, apps and packages do you consider must-have?

Is there any ability to suppress the Quick Start functionality in iOS for DEP/Supervised devices? The Quick Start feature is what allows you to setup one iOS device by holding another iOS device you already use near the new one and allowing them to share settings.

We want to keep track of when certain things happen on a device (USB drive plugged in, HDMI connected, etc). How can we monitor events in the system log and archive them for review later? Our review period might fall outside of when they naturally get purged from the system log.