Customer Education is back again with our next Jamf Pro Release Notes video! Join us for an overview of some of the new features and enhancements that are available in Jamf Pro 10.47. We hope this resource continues to provide additional details to support your use of the features in this release. You can even take the quiz below to gauge your understanding of the update! Thank you all for the continued feedback as we look to improve each video. Feel free to leave a comment and let us know what you liked and how we can make it even better next time. We look forward to hearing from you! And do not forget to test your knowledge with the quiz!

Can I add a Jamf App Catalog item on self Service ?I would like to be able to say that an app like Postman is available to a certain group and let them install from self Service if that want/need it. 

 Hello Everyone We are in the process of Getting TruU as an identity authorizer for our Mac fleet and are running a POC to get it tested.During the package creation and the test deployment we saw quite a few pop-ups coming from the deployment and we were able to take care of most of them but since the application uses Bluetooth-based proximity for Auth its requesting permission for Bluetooth after the installation is done as shown below.Is there any way for me to authorize this using a Script or PPPC etc....Thank you for your reply

HiI need setting wallpaper on some MacBooks, but, I don't know how to do it. please, get me a tutorial, please.  Thanks!

Hi all, has anyone experienced certain applications (in our case, Edge and Teams) completely stop working (won't refresh etc), then when you quit the app they completely disappear, then reappear around a minute later?Both apps are being deployed using the Jamf App Catalogue. I am wondering if the disappearance is, in fact, the applications updating to a newer version?It's slightly unnerving for our end users to suddenly see their man app for communications, or the main web browser, suddenly disappear, so any advice would be greatly appreciated!Thanks

Tugboat uses the JAMF API to access information on our devices, but keeps coming up with these errors? Any idea what it might be?Collection Interval: WeeklyInclude unmanaged devices: YesLast Synced: June 12, 2023 3:53 PMStatus:Warning(Updated June 12, 2023 3:53 PM)Failed to fetch sync data due to error: Error in HTTP [GET] https://<ourdomain>.jamfcloud.com/JSSResource/osxconfigurationprofiles with error: 401

I tried this a few years back but JAMF became rather unhappy - as JAMF still thinks it's the same computer.Do I still have to un-enroll the mac from JAMF to prevent problems when booting into a non-JAMF'd partition or drive? And then of course RE-enroll it when I switch back to the JAMF'd partition?I sure hope there's an easier way...

Hi all,Is there any option to play with Screen Saver time to enforce maximum minute and let users to set it up by themself, instead of enforcing a policy with fixed timing as attached screenshot?Thank you! 

We're in the process of testing the Device Compliance piece in our Jamf QA and after making the changes, we get an error when we click on the Device Compliance setting. The error comes up right after clicking on it.  

I have setup a search to email a report. This Is fine. If I email the file manually from within jamf the file is called 361 Mobile Devices in Last Inventory 24Hrs.csv but if the file is sent automatically it is called Last Inventory 24Hrs.csv. Is it possible to have file name have the number of devices in the name when it is sent automatically. All is it possible to included the date in the name. If this is not possible can the subject of the email include a field or variable for the number of devices and the date.

I am attempting to deploy Slack to our macOS Ventura devices via a curl script. When a user launches the app for the first time, they get a pop-up that says '"Slack" is damaged and can't be opened. you should move it to the Trash. '  This is only occurring in Ventura. If I download the software manually through the same URL I am calling in the curl script and install it normally, it works fine. Is there something new I have to do to get past the gatekeeper in macOS Ventura? This worked in Monterey. The script in question:#!/bin/bash # this is the full URL url="https://slack.com/ssb/download-osx-universal" # change directory to /private/tmp to make this the working directory cd /private/tmp/ # download the installer /usr/bin/curl -L $url -o slack-desktop-latest.dmg # mount the dmg hdiutil attach slack-desktop-latest.dmg -nobrowse # check if ~/Applications exists and create it if not DIRECTORY=~/Applications if [ -d "$DIRECTORY" ]; then echo "$DIRECTORY exists" elif [ ! -d "$

Hi there, We have around 500 plus managed ios devices. The frequency is to update inventory is set to 1 day. However there are so many devices thats currently active doesn't update inventory to jamf. Any ideas anything im missing. Ive checked the APNS and certificate is valid. Any ideas what causing devices not updating inventory in jamf. Thanks again

I'm trying to set up a configuration profile to put some iPads into Single App Mode. Every time I go to Options > Single App Mode, it freezes.  Even when nothing else has been configured in the profile, it will freeze as soon as I go to the Single App Mode setting. I've tried multiple browsers but it happens no matter what.  Any suggestions?

Not sure if I did something wrong of if this is an Intel vs Apple Silicon thing.Pre-enrolled 2 computers one Intel and one with the M1 chip with Filevault enabled. On a reboot the Intel computer will show the question mark next to the password field to allow you to use the Recovery Key.   On the M1 computer the question mark is not present.   If you enter the password wrong a few times it will present an option to reboot into recovery mode but then it prompts for the Computer Recovery Password before you even get to the point of using the Recovery key.  The use case is that we will have people who will change their password and go to lunch then completely forget what it was. Since there is no option to login as a different user at the Filevault prompt (Was told this was a best practice from Jamf) The helpdesk will have to boot into recovery mode and use the key from Jamf to reset it.  Just trying to make the process easier for them.   

Hi, I try to delete users from a Mac with a script in Jamf School. The script is correct and works perfectly fine in Jamf Pro.In Jamf School it results in an error:<main> delete status: eDSPermissionError <dscl_cmd> DS Error: -14120 (eDSPermissionError) (1)Has anyone an idea to solve this issue? This is the script:#!/bin/bash users=$( dscl . ls /Users | grep -v '_' | grep -v 'root' | grep -v 'daemon' | grep -v 'nobody' | grep -v 'localadmin' | grep -v 'BEHEER' | grep -v 'Guest' ) echo "Removing user accounts."for a in ${users}; do    # delete user    /usr/bin/dscl . delete /Users/"$a" || { echo "Could not remove user $a"; exit 1; }     # delete home folder    /bin/rm -rf /Users/"$a" || { echo "Could not remove home directory of $a"; exit 2; }    echo "Executed for: $a"done echo "Users accounts removed!"exit 0 

Hello,I'm having a standard user upgrade their OS from Big Sur to Ventura through system preferences. They are Volume disk owners and secure token is enabled. Also, I installed bootstrap token to be on the safe side. The endpoint is a MacBook air M1. However, they get the "You must provide authorization for this volume by setting it as your startup disk. You can relaunch the installer after authorization has been provided." Troubleshoot steps are taken:- Checked user is a VO and secure token is enabled- Check there is only one disk and selected to use as the default start up disk.- Deleted the installer and downloaded again The only workaround solution I found is to log into the admin account and update the OS from there but this is not feasible. Any suggestions? 

Currently we use this script to assign whatever user logs into their laptop it reaches out to jamf and assigns the student to that specific computer. #!/bin/bash lastUser=`defaults read /Library/Preferences/com.apple.loginwindow lastUserName` jamf recon -endUsername $lastUser  Now I want to see if it is possible to blank out the user that is assigned to that computer instead of going to each computer and editing each student out for the new school year.I have tried to see if this script would work but not thing seems to work. #!/bin/bash # Set the user details to blank using Jamf commands /usr/local/bin/jamf recon -username " " /usr/local/bin/jamf recon -realname " " /usr/local/bin/jamf recon -email " " /usr/local/bin/jamf recon -department " "  Please help as I know there must be a solution out there.

We are testing Nudge, and will be deploying soon. Until then, we are having someone manually send Remote Commands to address a 0-day vulnerability, to get macOS Big Sur 11.0-11.6 to 11.7, and macOS Monterey 12.0-12.5 to 12.6.We seem to have lost the ability to specify the Specific Version. Anyone seeing this? We're opening a Jamf ticket, but wanted to post here for any feedback. 

Hi, I have few devices in my environment where its not updating inventory even after macOS is updated to 13.4. we have policy for same and i tried manually as well by running "sudo jamf recon" and it gets stuck before sending details to Jamf. (attached is the screenshoot).Any possible way to resolve this before i reset the device ?Thanks 

Need help in disabling TLS 1.0 & 1.1 on MAC's using JAMF

I have an app PKG file to deploy as a Policy in Jamf Pro.  The app requires a certificate be placed on the Keychain and some System Extensions be configured.  I can deploy the certificate and extensions as part of a Configuration Profile.  Is there a way I can deploy both to a user's Mac so that they will have them at about the same time?  

Hi all, I have a software for macOS with an installation that includes a pkg and txt file (contain arguments). Both files must be on the same folder for the installation.After installation and giving full disk access, I used the PPPC Utility to create the profile. But how can I attach the txt file for future installations?Or- once I installed once and created the profile, I don't need the txt file anymore? Thanks!Ben.

Hi everyone,I am trying to set up Google LDAP for MacBooks according to this article: https://apps.google.com/supportwidget/articlehome?hl=en&article_url=https%3A%2F%2Fsupport.google.com%2Fa%2Fanswer%2F9089736%3Fhl%3Den&assistant_id=generic-unu&product_context=9089736&product_name=UnuFlow&trigger_context=aI was able to successfully login as another user on the domain, but the JAMF policies do not run as intended. Has anyone who has set up a JAMF Pro environment been able to successfully implement Google LDAP with JAMF Pro using these instructions from Google?Thanks! 

We are using Jamf School to manage iPads (and soon computers) across our district with multiple locations. Recently tightened up our LDAP sync across the district so that all users sync to a single location and only a single location. We do, however, have a number of staff/teachers who are "itinerant" and will need access to classes, etc., across locations, generally from a single district-issued, managed device.  (We are currently managing classes directly in Jamf School, but are planning to do so through our SIS via ASM in the near future.)Anyone have an input on a good way to handle this?  

Hi,Regards conditional access do its need to be done anything extra regards browsers? for windows browsers i had to fix via policy, not sure how it looks regards JAMF. All macos are in JAMF and in Intune.