Tugboat uses the JAMF API to access information on our devices, but keeps coming up with these errors? Any idea what it might be?Collection Interval: WeeklyInclude unmanaged devices: YesLast Synced: June 12, 2023 3:53 PMStatus:Warning(Updated June 12, 2023 3:53 PM)Failed to fetch sync data due to error: Error in HTTP [GET] https://<ourdomain>.jamfcloud.com/JSSResource/osxconfigurationprofiles with error: 401

I tried this a few years back but JAMF became rather unhappy - as JAMF still thinks it's the same computer.Do I still have to un-enroll the mac from JAMF to prevent problems when booting into a non-JAMF'd partition or drive? And then of course RE-enroll it when I switch back to the JAMF'd partition?I sure hope there's an easier way...

Hi all,Is there any option to play with Screen Saver time to enforce maximum minute and let users to set it up by themself, instead of enforcing a policy with fixed timing as attached screenshot?Thank you! 

We're in the process of testing the Device Compliance piece in our Jamf QA and after making the changes, we get an error when we click on the Device Compliance setting. The error comes up right after clicking on it.  

I have setup a search to email a report. This Is fine. If I email the file manually from within jamf the file is called 361 Mobile Devices in Last Inventory 24Hrs.csv but if the file is sent automatically it is called Last Inventory 24Hrs.csv. Is it possible to have file name have the number of devices in the name when it is sent automatically. All is it possible to included the date in the name. If this is not possible can the subject of the email include a field or variable for the number of devices and the date.

I am attempting to deploy Slack to our macOS Ventura devices via a curl script. When a user launches the app for the first time, they get a pop-up that says '"Slack" is damaged and can't be opened. you should move it to the Trash. '  This is only occurring in Ventura. If I download the software manually through the same URL I am calling in the curl script and install it normally, it works fine. Is there something new I have to do to get past the gatekeeper in macOS Ventura? This worked in Monterey. The script in question:#!/bin/bash # this is the full URL url="https://slack.com/ssb/download-osx-universal" # change directory to /private/tmp to make this the working directory cd /private/tmp/ # download the installer /usr/bin/curl -L $url -o slack-desktop-latest.dmg # mount the dmg hdiutil attach slack-desktop-latest.dmg -nobrowse # check if ~/Applications exists and create it if not DIRECTORY=~/Applications if [ -d "$DIRECTORY" ]; then echo "$DIRECTORY exists" elif [ ! -d "$

Hi there, We have around 500 plus managed ios devices. The frequency is to update inventory is set to 1 day. However there are so many devices thats currently active doesn't update inventory to jamf. Any ideas anything im missing. Ive checked the APNS and certificate is valid. Any ideas what causing devices not updating inventory in jamf. Thanks again

I'm trying to set up a configuration profile to put some iPads into Single App Mode. Every time I go to Options > Single App Mode, it freezes.  Even when nothing else has been configured in the profile, it will freeze as soon as I go to the Single App Mode setting. I've tried multiple browsers but it happens no matter what.  Any suggestions?

Not sure if I did something wrong of if this is an Intel vs Apple Silicon thing.Pre-enrolled 2 computers one Intel and one with the M1 chip with Filevault enabled. On a reboot the Intel computer will show the question mark next to the password field to allow you to use the Recovery Key.   On the M1 computer the question mark is not present.   If you enter the password wrong a few times it will present an option to reboot into recovery mode but then it prompts for the Computer Recovery Password before you even get to the point of using the Recovery key.  The use case is that we will have people who will change their password and go to lunch then completely forget what it was. Since there is no option to login as a different user at the Filevault prompt (Was told this was a best practice from Jamf) The helpdesk will have to boot into recovery mode and use the key from Jamf to reset it.  Just trying to make the process easier for them.   

Hi, I try to delete users from a Mac with a script in Jamf School. The script is correct and works perfectly fine in Jamf Pro.In Jamf School it results in an error:<main> delete status: eDSPermissionError <dscl_cmd> DS Error: -14120 (eDSPermissionError) (1)Has anyone an idea to solve this issue? This is the script:#!/bin/bash users=$( dscl . ls /Users | grep -v '_' | grep -v 'root' | grep -v 'daemon' | grep -v 'nobody' | grep -v 'localadmin' | grep -v 'BEHEER' | grep -v 'Guest' ) echo "Removing user accounts."for a in ${users}; do    # delete user    /usr/bin/dscl . delete /Users/"$a" || { echo "Could not remove user $a"; exit 1; }     # delete home folder    /bin/rm -rf /Users/"$a" || { echo "Could not remove home directory of $a"; exit 2; }    echo "Executed for: $a"done echo "Users accounts removed!"exit 0 

Hello,I'm having a standard user upgrade their OS from Big Sur to Ventura through system preferences. They are Volume disk owners and secure token is enabled. Also, I installed bootstrap token to be on the safe side. The endpoint is a MacBook air M1. However, they get the "You must provide authorization for this volume by setting it as your startup disk. You can relaunch the installer after authorization has been provided." Troubleshoot steps are taken:- Checked user is a VO and secure token is enabled- Check there is only one disk and selected to use as the default start up disk.- Deleted the installer and downloaded again The only workaround solution I found is to log into the admin account and update the OS from there but this is not feasible. Any suggestions? 

Currently we use this script to assign whatever user logs into their laptop it reaches out to jamf and assigns the student to that specific computer. #!/bin/bash lastUser=`defaults read /Library/Preferences/com.apple.loginwindow lastUserName` jamf recon -endUsername $lastUser  Now I want to see if it is possible to blank out the user that is assigned to that computer instead of going to each computer and editing each student out for the new school year.I have tried to see if this script would work but not thing seems to work. #!/bin/bash # Set the user details to blank using Jamf commands /usr/local/bin/jamf recon -username " " /usr/local/bin/jamf recon -realname " " /usr/local/bin/jamf recon -email " " /usr/local/bin/jamf recon -department " "  Please help as I know there must be a solution out there.

We are testing Nudge, and will be deploying soon. Until then, we are having someone manually send Remote Commands to address a 0-day vulnerability, to get macOS Big Sur 11.0-11.6 to 11.7, and macOS Monterey 12.0-12.5 to 12.6.We seem to have lost the ability to specify the Specific Version. Anyone seeing this? We're opening a Jamf ticket, but wanted to post here for any feedback. 

Hi, I have few devices in my environment where its not updating inventory even after macOS is updated to 13.4. we have policy for same and i tried manually as well by running "sudo jamf recon" and it gets stuck before sending details to Jamf. (attached is the screenshoot).Any possible way to resolve this before i reset the device ?Thanks 

Need help in disabling TLS 1.0 & 1.1 on MAC's using JAMF

I have an app PKG file to deploy as a Policy in Jamf Pro.  The app requires a certificate be placed on the Keychain and some System Extensions be configured.  I can deploy the certificate and extensions as part of a Configuration Profile.  Is there a way I can deploy both to a user's Mac so that they will have them at about the same time?  

Hi all, I have a software for macOS with an installation that includes a pkg and txt file (contain arguments). Both files must be on the same folder for the installation.After installation and giving full disk access, I used the PPPC Utility to create the profile. But how can I attach the txt file for future installations?Or- once I installed once and created the profile, I don't need the txt file anymore? Thanks!Ben.

Hi everyone,I am trying to set up Google LDAP for MacBooks according to this article: https://apps.google.com/supportwidget/articlehome?hl=en&article_url=https%3A%2F%2Fsupport.google.com%2Fa%2Fanswer%2F9089736%3Fhl%3Den&assistant_id=generic-unu&product_context=9089736&product_name=UnuFlow&trigger_context=aI was able to successfully login as another user on the domain, but the JAMF policies do not run as intended. Has anyone who has set up a JAMF Pro environment been able to successfully implement Google LDAP with JAMF Pro using these instructions from Google?Thanks! 

We are using Jamf School to manage iPads (and soon computers) across our district with multiple locations. Recently tightened up our LDAP sync across the district so that all users sync to a single location and only a single location. We do, however, have a number of staff/teachers who are "itinerant" and will need access to classes, etc., across locations, generally from a single district-issued, managed device.  (We are currently managing classes directly in Jamf School, but are planning to do so through our SIS via ASM in the near future.)Anyone have an input on a good way to handle this?  

Hi,Regards conditional access do its need to be done anything extra regards browsers? for windows browsers i had to fix via policy, not sure how it looks regards JAMF. All macos are in JAMF and in Intune.

Is there a way in a single policy to allow install on reboot or enrollment at all times but restrict install on recurring check in to a maintenance window?

Does anyone know of a way to make the Autolock time longer than default on a shared iPad deployment? Students are complaining that it locks the device too quickly when they are referencing it as a textbook.

Hey everyone, I have a question about Jamf Pro hosted on site. Currently, we host Jamf Pro on a Windows Hyper-V instance with the public IP address directly on the network adapter of the virtual server. Our Internet Service Provider has informed us that we will no longer be able to have a public IP address on the physical adapter on our equipment without major changes to our network. If we did not want to make these major modifications, we’d need to set a private IP address internally/on the adapter and use a translated address for outside access to Jamf Pro and Web services. I am curious how if we went to this Private IP how it would affect our Jamf installation. I know that I can set a custom Forward Lookup Zone in our Windows server DNS servers to make the domain work internally, but will this have any drawbacks if our Jamf Pro URL is resolving to different IP addresses internally versus externally? Is the Jamf Binary, Apple MDM, and/or macOS DNS smart enough to re-resolve the

During JNUC2020 I opened my BIG MOUTH (I do that some times) and mentioned that I manage my Network Printers with Jamf Self Service. It seems that many people want to know my secret sauce for making this happen. So I promised a write up. Time to make good on that promise! Without further ado, here's the write up... Managing Network Printers with Jamf Computer Policies and Self Service Policies You're going to need a few tools to make this happen... A network printer Printer drivers for said Network Printer A computer (Preferably a Mac running OSX/macOS) A text editor (I prefer Sublime but you can use whatever makes you feel warm and fuzzy inside) A copy of ppdOptionsDiff.command (this script is mana from Heaven I tell you!) A working Jamf Pro environment that you have more than read-only access to (DUH!) SECTION 01 - Be The Hunter / Gatherer That Your Dog Thinks Your Are PART 01 - Gather Your Tools, You Tool01 - Create a folder called "Printer Stuff" (you can call it whatever

Hi, I have written a script to install CS falcon on Mac via JAMF, but script successfully install the CS falcon on Mac system but "Falcon” Would Like to Filter Network Content" in network extension and "The System Extension Blocked message" in Security & Privacy, which need to "Allow" manually.   Need help to correct the script for automatically run the process without user interaction, following script. #!/bin/bash # Set the installation parametersCLIENT_ID="YOUR_CLIENT_ID"CLIENT_SECRET="YOUR_CLIENT_SECRET"INSTALL_TOKEN="YOUR_INSTALL_TOKEN" # Define the installation directoryINSTALL_DIR="/Applications/Falcon.app" # Define the Crowdstrike bundle identifierBUNDLE_IDENTIFIER="com.crowdstrike.falcon.Agent" # Define the Crowdstrike team identifierTEAM_IDENTIFIER="X9E956P446" # Copy the Falcon Sensor packagecp /private/tmp/ # Install the Falcon Sensor packageecho "Installing Falcon Sensor..."sudo installer -pkg "/private/t