Hi all,Long time lurker, first-time poster. Hope everyone is doing well :DI've got this really weird issue with our config profiles and I'm wondering if anyone can point me in the right direction.It started around a week ago, I noticed that apps were downloading onto our devices ok, but the profiles themselves that carry the payloads for restrictions kept erroring out. I get quite an unhelpful error message.

Good Afternoon,I've opened a support case with JAMF but haven't heard anything so I thought I'd try here until I do.We're running JAMF 10.35.x and are unable to upload any pkgs to the cloud with JAMF Admin. The error is as follows: There was a problem uploading the package to Jamf Cloud. Connection failure: "The operation couldn't be completed. ( error 504.)This happens with any pkg file at any size.   

Just wondering whether anyone else has seen any performance issues on an on-premise instance of Jamf Pro running on Windows Server 2019?We recently upgraded to v10.37.2 but since ~10.34.2 we’ve seen a lot of unresponsiveness at various points throughout the day, such as no response when trying to log in, or lots of white space and blue circles when moving around the web UI, say from Policies to Configuration Profiles for example. After 10-15 minutes of unresponsiveness, everything is fine until it happens again. When this happens, our platform guys report “100% CPU caused by Apache Commons Daemon Service Runner”. There's nothing conclusive in the Jamf logs.The VM has 4 x 2.40GHz CPUs and has 16GBs of RAM, 8GB of which is allocated to Tomcat. Java and MySQL is fully up to date. Our (internet facing) DP is also hosted on the same server.I have a case open with Jamf who have logged in and run various MySQL commands, but they’re not really sure what is going on. Therefore I’d really apprec

I was wondering if we can build a smart group for devices based on the devices country?at the moment, we have our devices scattered around the globe (USA[Chicago/NewYork/SanFrancisco/Florida/Houston], United Kingdom, South Africa, Japan, New Zealand, Australia [Sydney/Melbourne/Brisbane/Perth]

Hi all,My goal is to delete any files or folders on the desktop when the user logs out.I'm using this command in bash script: rm -Rf /Users/<currentuser>/Desktop/*The sript is set to run at logout.Unfortunately it does not work.When I try the command in the users Terminal it prompts "sure you want to delete all X files in /Users/<currentuser>/Desktop [yn]?"According to this post under Jamf Pro the script should work if the script is set to run at 'startup', but this option is not available in Jamf School.Is there any way to get it to work?

Hi,Sorry if this is the wrong place to ask this or if has already been answered. We have purchased a large number of M2 Macbook pros from an authorised reseller. They show in ABM and in prestage, however when I go to enrol them it does not work how it should! Sometimes after the Remote Management screen it goes straight to a log in screen (even though I have not set up an account yet!) or it allows me to create the local user account but does not configure the laptop as it should do (does not clean up the dock and enable filevault). I have resolved some of them by erasing the entire disk and then reinstalling the OS, however for osme of this even this does not have any effect (tried 4 or 5 times!) Any ideas or suggestions as to how we can resolve this would be appriciated. Thanks

It's not quite a problem, and so I didn't enter it on the "issues" page for the Jamf Migrator (https://github.com/jamf/JamfMigrator/issues) but is anyone else bothered by the 2 different colors of green used for "successful" get/send jobs? I feel that has to be an error, right? #jamfmigrator

Hello Team, We are stuck in upgrading the OS version on the MAC system with the Apple Silicon processor. We are trying to upgrade the MAC system with the Apple Silicon processor with the Bash command.When we initiate installation on the system using the Bash command, it prompts credentials for the root user to proceed further even if we are executing the command using the root user. Bash script executes using the Root user and the installation on the MAC system with an Apple Silicon processor will not work until we pass credentials for the root user.Do we have steps/commands for the Bash script to perform a macOS upgrade by bypassing the password requirement on the MAC system with the Apple Silicon processor? 

Hello,I can't find an exact answer for this question so i'm sorry if the answer already exists but we are about to go live with Jamf Pro and our security team have a potential issue with Gatekeeper that I wonder if anyone else is able to advise on?If we set Gatekeeper to "Mac App Store and identified developers", how are users without admin permissions able to install an app that is not covered by this setting but is approved by the organisation to be installed? Our security department are not happy with the "Anywhere" setting so they want some control of what users can install. Is there a configuration that can be applied to say that if a user tries to install something that is not in "Mac App Store and identified developers" that if informs IT and then the IT department can approve/deny?I know that there is a temporary override function but this is only for admins?Any advice much appreciatedThanks

Hi all, Am seeing the below on my jamf logs. How do i find the device with the UDID? Thanks com.jamfsoftware.jss.exceptions.operations.MDMActionCreationException: com.jamfsoftware.jss.mdm.actions.exceptions.DeviceNotFoundException: Unable to find device with UDID: 9B937110-2A49-5BA5-B2EA-E35381D6BB2A at com.jamfsoftware.jss.mdm.actions.MDMActionFactory.createActionForRequest(MDMActionFactory.java:326) at com.jamfsoftware.jss.mdm.enrollment.MDMController.parseRequestAction(MDMController.java:313) at com.jamfsoftware.jss.mdm.enrollment.MDMController.getMdmRequestAction(MDMController.java:231) at com.jamfsoftware.jss.mdm.enrollment.MDMController.process(MDMController.java:123) at com.jamfsoftware.jss.mdm.enrollment.MDMController.doPut(MDMController.java:105) at javax.servlet.http.HttpServlet.service(HttpServlet.java:664) at javax.servlet.http.HttpServlet.service(HttpServlet.java:742) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(Ap

We have a migration requirement and we have around 300 devices are managing from Jamf On-prem. Upon checking, we are planning for the custom DNS option where we don't need to re-enroll those devices to the cloud. But, when the AWS can validate the URL via email, it will send an email to the domain manager of the environment. If the Jamf on-prem URL is 'jss.company.com' it would be easier to do the custom DNS because when sending an email first part of the URL 'jss.company.com' will be choked off and sent to 'admin@company.com.' But our on-prem URL is 'jss.it.companyname.com' will there be any problem in doing custom DNS?

Hello, I update the mac mini (2020 M1) to VenturaAnd it looks like the content cache is having an issue. where the setting is grey out and says "Your system administrator is managing Content Caching" This was working on Monterey - the same mac mini nothing has changed except for the macOS version. I want to know if this is anything related to the previous jamf bug that did the same thing. Or this is Apple Issue? 

Provide your users more detailed feedback on CrowdStrike Falcon’s built-in falconctl diagnose commandBackgroundTesting software from potential vendors frequently involves providing vendor support with client-side logs.How easily — and timely — you can provide the requested logs will certainly influence the success of your pilot.We leveraged swiftDialog to provide our users more detailed feedback on CrowdStrike Falcon’s built-in falconctl diagnose command.Continue reading …

Here's the scenario:We have a classroom of computers. Between class sessions, we run a restart on those computers. This happens at varying times.To run this restart we used to use Apple Remote Desktop. Since that is becoming/is unsupported, we want to move away from it.To run the command to restart/shutdown, etc., we have a staff computer that is separate from the other classroom computers.So... from what I've read it is possible to call a policy from a separate policy. Say:(Policy 1) has a custom trigger, and(Policy 2) uses Files and Processes to call the custom trigger 'sudo policy -trigger [triggername]'I created (Policy 1) to deliver a restart command. I scoped it to all of the computers that I want to have restarted. I created a custom trigger 'restartComputers10'I created (Policy 2), have it call the 'restartComputers10' trigger, scoped it only to the staff computer, made the command available in Self Service.Now that policy is only visible in Self Service from the staff computer

Does anyone know if there is a command or commands that I could use to remove files left on the desktop after user logs out? This account is a generic account that other students will be using. There are other policies I will like to set as well. What I'm trying to do is keep the computers running smooth by deleting all the histories on the browsers, deleting any downloads and emptying the trash bin. Thanks in advance!

Hi All,is it possible to import Notes over .csv?So looks my .csv IdentificationSerialNumber Notes     AssetTagI just can't get these to take. Am I doing something wrong? Is it even possible or would this be a case for Service Request?Best RegardsPeter

I noticed Crowdstrike Falcon was added to Third Party Products. It was added by @pingebrigtsen who works for the company. Is anyone using it? Asking because there are no discussions about it on this forum. Zero. Nada. Zilch. Did you replace another solution (McAfee, Symantec, etc.) with it? What does it do that you like? What does it not do that you hoped it would? How is it working out for your environment? Just curious, not trying to start an anti-malware war. :)

Hey everyone, how can I go about zero touch macOS deployments? What are the Pre-Reqs for it? I have my Policies and apps build out. But device seems to still require a lot of “touch” by IT before providing it to the user.Any suggestion would be appreciated.

Hi All,We just started using Jamf Connect with Google.  We noticed when using the network login our users have to do 2-step authentication each time.  Usually Google session will remember you on a device.Does anyone know how to get around this?  I know you can "log in locally."

Has anyone had success with getting the time machine profile to work. I have configured it with server address and verified from a device that the server can be reached using this address.The profile is loading onto the device however system preferences and the menu bar icon show that time machine isn't configured.  

Hey all! I am looking for a script that when a laptop is connected to ethernet (either by dongle or docking station) WiFi will turn off. I am having a terrible time with people that plug in their laptops to the docks at their desk and are now connected to ethernet. Even with the service order set to Ethernet as primary or first, the fact that the WiFi is still turned on and connected to a WiFi network that has less privs is making the computer unable to access some internal resources. Once they turn off WiFi, issue is resolved. The WiFi connection is sent out as a configuration profile. I found a script that does this at boot (ethernet has to be plugged in before the computer is turned on), but nothing while on the fly.Ideas?

So we have used the mass deployment of Backblaze for the users, however now that software is getting out of date and there are updates. Though we want to silently also hit machines with updates too. I haven't been able to find anything about doing this and so far in my tests using the bzdoinstall -nogui doesn't seem to update the software. Do we have to script it like we did with the silent install for further updates? Anyone else keeping their fleet updated with the latest version of the software?

Hi there,has anyone figured out what the (new) Jamf Pro API is for EraseDevice?I could find some of the commands referenced below but missing Erase Device commandhttps://developer.jamf.com/jamf-pro/reference/post_preview-mdm-commands Classic API is still available and workshttps://developer.jamf.com/jamf-pro/reference/createcomputercommandbycommandidandpasscodecurl --request POST \\ --url https://yourserver.jamfcloud.com/JSSResource/computercommands/command/EraseDevice/passcode/000000/id/1 

Hey! I thought I'd try my luck here as well. Im trying to use checkJSSconnection in a while loop but the computer just get stuck in the loop. This happens after setup assistant is complete and the account is logged in.Code:jamf checkJSSConnection -retry 0 >> null status=$? until [[ $status == 0 ]]; do jamf checkJSSConnection -retry 0 >> null status=$? echo "$(timestamp) Unable to connect to Jamf, retrying ..." | tee -a $log /bin/sleep 2 doneThe exit code returned is 1, and never stops being 1 so the loop continues forver.The thing is, I do have connection to jamf. If I start a new terminal window and run checkJSSconnection it will return 0. If I kill the jamf process and rerun the script via manual trigger, checkJSSconnection will return 0 on the first try.This happens every time I run a new test enrollment via prestage, so its not a one time thing.If I disconnect my wifi, start the loop and then reconnect the wifi the loops exits as soon as the connection is established,

I have built a config profile exactly to Crowdstrike's specifications to preapprove the Crowdstrike system extension, but I still see prompts every now and then on the computers to allow it because the system extension was updated. I am pretty sure the updates are being pushed by the crowd strike server, but why would we need to re-allow the system extension every time it is updated? Shouldn't the config profile take care of this no matter how many times it was updated? Is there a setting in the config profile I may be missing?