AfternoonAs anything changed on how Filevault works on M2 Macbooks.The key seems to being escrowed to Jamf and is appearing in the device record.However some machines dont appear to be appearing in the config profile log despite them having the profile and appear to be encrypted. If I exculde the device and turn off filevault manually they then do appear.i'm not sure if I'm explaning that very well I have only recently noticed it with M2 laptops.Thanks

Hi all,I need advise on best possible ways to backup the data from iOS devices.Currently, Apple provides limit of 5 gb Cloud storage & user needs to buy additional storageWe have around 400 users whom we need to enroll in Jamf and we need to take backup of their iOS device as part of enrollment. Any other tools or option available? 2. If users have logged in on their iphone with their personal apple ID's , what will be the impact if we block the personal ID's and allow only managed apple ID's  

Why does user-initiated enrollment need to be enabled to use a prestage enrollment?  

Hey all, i was hoping to get some guidance on deploying Think-cell. I have the package from the vendor and i need to script a license key go along with it. The vendor has the instructions here: How to deploy think-cell in a larger company :: think-cell.I am bit new and not sure how to best go about scripting the license key. I guess the specific software is irrelevant, and this likely can be asked for any softwared eployments that requrie a key to go with it. Anybody have some time to look at this and give some guidance or best practices? Also, if anyone has any sample scripts they could share for similair deployments, that would be really helpful for me to get started. Thanks in advance. 

I've recently been given the task of administering all our MACs with Jamf.  I'm completely new to Jamf.  I'm trying to set up for 2 new Mac Labs. They'd like to create 2 admin accounts, and several user accounts for each mac mini. Administrator account for ITAdministrator account for the teacher 4 student user accounts on each mac mini (1user account per student block)I've read that the prestage enrollment account user name must match the user initiated account name.  Should that account just be my "administrator" account and then it's my understanding that i should create the other "teacher admin" account using policies.  Is this correct?  Any help is appreciated. 

Ok, so a once per computer policy is set to allow deferral. If a user selects a deferral, the /Library/Application Support/JAMF/.userdelay.plist file is updated with the expected key/value pair and array with user's selections. The deferred time comes, user runs the policy, and the key is removed from the file.User is getting the deferral prompt once a day. We confirmed the file is empty, and the computer is not in scope for the policy. A colleague confirmed that there are no other policies with the deferral option.Anyone else seeing this? Posting here for now, may open a ticket if the issue continues and we can't find the culprit.TIA

Hello,we have some Users (including) me, who get the PopUP issue:"Your local and network passwords do not match. Enter your current local password to sync it with your network password"But our PWs are correct and matched. Do anyone has the same Problem ?

Hello, I'm trying to use the DELETE API in the JAMF School API but without success. What am I doing wrong ? curl -X DELETE -H "Accept:application/json" -H "X-Server-Protocol-Version: 3" -H "Authorization: Basic xxxxxxxx" https://apiv6.zuludesk.com/users/:3801107{"code":404,"message":"UserNotFound"} curl -X DELETE -H "Accept:application/json" -H "X-Server-Protocol-Version: 3" -H "Authorization: Basic xxxxxxx" https://apiv6.zuludesk.com/users/3801107{"code":404,"message":"UserNotFound"} Thank you, Antonio

I already have users banging down my door to get Visual Studio installed on their Macs. I let 1 user download it to be a guinea pig. The installation prompted 3 or 4 times for admin credentials for several different components. It's kinda similar to XCode's extra stuff it wants to install unless you've got that installation scripted (I do). Has anyone found a way to install Visual Studio yet through Casper?

I just got set up with Jamf Connect and I'm working on getting Notify set up. The documentation says the following command needs to be executed: /usr/local/bin/authchanger -reset -JamfConnect -Notify Where do I put this command so that it gets executed during my PreStage Enrollment process? And then with the Notify script... where does it need to go and how do I specify the path to the script?

Hi There, We want to push Zscaler Root CA cert to all the machines via Jamf as it's required for SSL decryption i.e. Zscaler cert needs to be added to machine's keychain access.We have the Zscaler .crt file, suggestion please for cert installation. Thanks,Ishan

Today we released Jamf Connect 2.24.0. This release includes the following changes and improvements: Offline Multifactor Authentication Users can now enroll in offline multifactor authentication (MFA) via the Jamf Connect menu bar app. This feature enables users to login with a time-based one-time password through their mobile device, without needing a connection to an identity provider. Offline MFA can be enabled under the Authentication section of the Login tab in Jamf Connect Configuration. When enabled, users enroll by clicking Offline MFA... in the Jamf Connect menu bar app and following the on-screen prompts. Note: With Jamf Connect 2.24.0, offline MFA is supported on computers with macOS 11.x or later.   Other Changes and Improvements You can now download all Jamf Connect logs from the past 30 minutes via the login window with the new Troubleshooting button.   To access new versions of Jamf Connect, log in to Jamf Account with your Jamf ID. The latest version is locate

Is there a way to easily just do a clean installation of MacOS Ventura on a machine and when that machine is finished with the installation, it will reboot and allow remote control via Remote Desktop or Screen Sharing?  It can be accessible via LAN, that's fine.  I have zero MDM experience, but this seems like it should be simple if you know what to do.  Thanks.

 Hello,I need to prompt users with "osascript"even admin rights granted, popup not showing up on some macs only !!!instead, they got this:Any idea please?

Does anyone know if deploying the Mac OS installer through VPP speeds up MDM command updates or if it assists with speeding up the legendary Graham Pugh Erase/Install script?  Keeping Mac OS up to date though management is a pain the neck. Our MDM commands for updates seem to be *mostly* reliable, but for the ones we need to force through manual user intervention, I'm wondering if scoping out the VPP app for the Erase/Install script helps it run any faster? I know it's just a small stub file, but I'm wondering if it's deployed through VPP if it will force the computer to look at our in-network Apple Caching servers.  Sorry if this is a dumb question, just trying to wrap my head around Mac OS updates.  Thanks!

Does anyone know if it is possible to collect (e.g. via Extension Attribute) the physical Keyboard Layout of a Macbook and the color of the Macbook (Space Gray / Silver / whatever)?

I pushed out some config profiles and on 1 machine I am getting errors like this, as well as a few others that are very similar. Any thoughts? btw, clicking thru the "always allow" takes it away, but then another, similar message comes up   

Hello,I'm having an issue, after updating Microsoft Office through patch management, the office icons previously saved to the dock were removed. It would be ideal if the dock icons could be replaced after office is updated. Has anyone come across this and have a solution?  

我们的jamf pro是做的本地部署的，我们进行管控的mac是Macbook air（2017），系统：MacOS 11.6，机器正常enroll后，Parental Controls - Deny URLs是生效的，但是当我修改这条Profile后（增加deny url），重新下发后这条profile 就不生效了，只能通过重新enroll机器才能生效。请问如何解决。

Hello everyone,maybe you can help me, I'm loosing my mind here. When I try to deploy some Apps I got the error message "failed to save settings: AxiosError: Request failed with Status Code 500"Any ideas? :)Thanks in advance,Daen

Hello all,I have a JamfPro instance with about 40 Macbooks. Of those, I have 10 devices that are not accepting any management commands. To clarify, all of the management commands and configuration profiles are stuck in pending and nothing that I have done so far appears to have any effect. I have attempted the following in an attempt to fix:Canceling all pending commandsSending a blank pushRenew MDM profileIssuing the command sudo profiles renew -type enrollment via script and scoped into policy in Jamf. Results in  Script result: Error: Renewing DEP enrollment failed: (null) ((null):0)Has anyone else run into this where specific devices are not accepting management commands? Is there any way to fix this without having to physically visit all 10 devices? 

Issue: I have a shell script that when doing a "ditto" command seems to be taking an old version of a file even when the source file has a newer modified date. Is there anything that would cause 'ditto' or any copy command to get an old file? Does the drive cache copied files as the filename of the source and destination are the same each time (destination folder is different)?Explanation:I current have a script to do the following:Create a temp folder to work in - prefixed with current date/time to ensure it different every time the script is run.Copy the History file from a Google Chrome profile to a tmp folder (using "ditto") (script actually does this all present profiles, safari and Opera)Parse the files out to CSV using sqlDelete to DB's to save spaceZip the CSV files and upload to Jamf Inventory Record of the deviceRemove the temp folder using "rm -rf".This process was working great, until the past month or two. Whenever the script is run, it will upload a file that was modified

I made a new blog post on how to setup device compliance with Jamf and Intune.https://www.ericsontech.com/2023/04/setup-device-compliance-with-jamf-and.html 

Hi all. I am considering bringing up a way to better integrate Macs into our management system and wanted to check here to see if anybody had input. Currently we are using Automate and ScreenConnect for our clients as they primarily use Windows machines. However, there is a growing number of Macs entering the environment and it's not a shocker to say that Automate and SC are garbage with support and integration on macOS. I was wondering if having JAMF setup on the Mac side of things would work well in tandem with Automate. Or can it only be one or the other. Thanks.

Hey all, I've pieced together what I think are all the steps for using a Notify Screen along with our basic Jamf Connect setup, but it's been mostly a copy-paste from the JC documentation so I'm not confident it's as smart as it could be. We run a very general Jamf Connect login with Okta and are adding a Notify screen to newly enrolled computers to install basic apps on first setup. Some questions I am confused about:Is it smart to have two different Jamf Connect config profiles? One for the initial setup and one for ongoing use?The reason I ask is we have a single Jamf Connect config profile that contains all the login info in: "Jamf Applications" com.jamf.connect.login as well as "Upload" com.jamf.connect for the JC app properties but we ALSO have "Upload" com.jamf.connect.authchanger which contains the default strings of -reset, -jamfconnect, and -notifyWould it be smarter to have one 'enrollment only' config profile that has all 3, then an 'ongoi