Hi,We've a 401 Unauthorized error en trying to connect to our Jamf Pro this morning.Is there a know issue or it's just us ?Tks.

With a jamf configuration profile, is it possible for web content filtering to only allow urls starting with for example www.youtube.com but blacklist all other sites?

I'm working on an extension attribute script, that utilises API, which uses the assigned user and the MacBook serial number, to populate information of assigned devices managed and total based on the assigned user. it took a while, but I am near complete, the problem I appear to be having now is generating a clickable linkThe below will generate all the HTML code but it will just appear as text instead of insert into the web page to be clickedecho "<result><p><a href=\\"$jamfProURL/mobileDevices.html?id=${managedidmobiledevicearraydata}\\">$managedidmobiledevicename</a></p></result>"and this will just list a URL as textecho "<result>$jamfProURL/mobileDevices.html?id=${managedidmobiledevicearraydata}</result>"does any one know how this could be achieved so it would list the URL as a clickable URL? I suspect it would likely be a limitation of how the java script is treating anything between <result></result> as only text?

Hi. A few users within our organization are having a daily pop-up that will not go away. Any idea on how to get rid of this?

Good Afternoon, Has there been any updates to PI110959 ?  Thanks

Hello All,We are new in our setup of Jamf Pro and had to remove the Prestage Enrollments config so we could get a computer to our current config to test enrolls. After removing the Prestage Enrollment config and readding the computers we are testing with will not re-enroll using this https://learn.jamf.com/bundle/jamf-now-documentation/page/Re-enrolling_a_Computer_Using_Automated_Device_Enrollment.html as well as a newly wiped machine that is being activated is not going through the pre-enroll process that is configured. Also we are seeing a pop-up now which was not seen before the removing and readding of the Prestage enroll config which states "Confirm Prestage Account Settings Creastion, Prestage account settings creation may take extended time to save. Do not refresh." Click save and it goes through just fineWe ran through a user driven enroll on the computer in hopes it would fix the pre-stage and re-enroll issues we are seeing, it did not. After user enroll initiated a wipe throu

We have had the following problem or bug for the past two days. Certain iPads are receiving the (automatic) command to "update profiles." Afterwards, they become members of all dynamic device groups and load apps, restrictions, etc. Nothing has been changed either on the iPads or in the groups. What's really strange is that the group memberships should actually exclude each other. For example, students and teachers, location X and location Y (60km apart, dynamic group based on IP), school A and school B, etc.Has anyone ever encountered a similar case or have any idea what might be causing this?Thanks in advance :)

 Hello, my script continously asking for user password id blank is left empty ! any idea to fix it:  # Password validation loop.TRY=1until /usr/bin/dscl /Search -authonly "$user" "$USER_PASS" &>/dev/null; do(( TRY++ ))echo "Prompting $user for their Mac password (attempt $TRY)..."USER_PASS=$(osascript -e 'tell application "System Events" to display dialog "Please, type your Password to start the operation:" default answer "" with title "test" with hidden answer buttons {"OK"} default button 1' -e 'text returned of result' 2>/dev/null)if (( TRY >= 5 )); thenecho "[ERROR] Password prompt unsuccessful after 5 attempts. Exiting script..."exit 1fidone

Does anyone know if the 8x8 Work app can be deployed via Jamf? I tried converting the dmg to a pkg in composer, but that didn't seem to work. I'm also open to using a script to install it. Any thoughts are appreciated. Thank you!

We are using Jamf School to manage our fleet of iPads. Is there a restriction that will prevent the user from clearing their browser history in both Safari and Chrome? Also, I'd like to disable Incognito mode in Chrome.

Hi all,I want to write a scripts to auto select Monterey or Ventura installer.The scripts is here:#!/bin/bash### CHECK AVAILABLE DOWNLOADS GET_OS_UPDATE=$(softwareupdate --list-full-installer | sed -n 3p)sleep 1TRIM_OS_VERSION=${GET_OS_UPDATE#*Version: }echo "$TRIM_OS_VERSION"OS_BUILD=${TRIM_OS_VERSION%%, Size*} ### GET THE MAJOR AND MINOR VERSIONS: majorVersion=$(echo "$OS_BUILD" | cut -d "." -f 1)minorVersion=$(echo "$OS_BUILD" | cut -d "." -f 2) ### GET THE NAME: TRIM_OS_NAME=${GET_OS_UPDATE#*Title: }echo "$TRIM_OS_NAME"OS_NAME=${TRIM_OS_NAME%%, Version:*}InstallerPath="/Applications/Install\\ "$OS_NAME".app/Contents/Resources/startosinstall" osascript -e 'tell app "System Events" to display alert "Downloading '$OS_NAME $OS_BUILD' update"'softwareupdate --fetch-full-installer --full-installer-version $OS_BUILD####Variables # Determine the current usercurrentUser=$( scutil <<< "show State:/Users/ConsoleUser" | awk '/Name :/ && ! /lo

Hello,For time to time we might ask user to prompt his password if no workaround is available depending on scenarios.When deploying below script, user is not forced to type his password. He can just drag the prompt windows aside and continue working. Is there a way to:1) display the prompt windows on full screenor/&2) if not answered, user cannot continue working as per mac software installer "when admin pwd must be put"#!/bin/bash user=$(ls -l /dev/console | awk '{ print $3 }')PROMPT_TITLE="Authentication Needed"Logo="/Users/Shared/loreal.jpeg" echo "Prompting $user for their Mac password..."USER_PASS=$(sudo -u $user /usr/bin/osascript -e 'display dialog "Please, type your Password to start the xxxx operation:" default answer "" with hidden answer buttons {"OK"} default button 1' -e 'text returned of result')exit 0

Hi,Using Jamf cloud - very new to JamfCurrently trying to setup MS defender and deploy the App to my test Mac Devices - followed this guidehttps://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/mac-jamfpro-policies?view=o365-worldwideThe defender app (.pkg) has been downloaded from our 365 defender Portal by our Admin)I can deploy the MS Defender App manually.In Self Service When clicking on install - after a moment - it reports 'item failed'The Jamf Log on the device  it states 'The message could not be parsed'Can anyone give some further advice as to where to investigate this issue - how would I check the content status on the jamf cloud ? - thinking this is the only difference between successfu;/unsuccessful install ? Many Thanks

In Jamf Pro, we disabled the Airdrop feature for one of our systems to comply with CIS benchmarks. However, in Jamf Protect insight, it still states that the system is non-compliant. Could you please assist us in resolving this issue.

DNS ProxyOur DNS settings in Jamf are set to "Restricted" to not allow users to disable it. This is overwritten in macOS Ventura as the user can disable it.Firewall settingsThis field is "greyed out" on macOS Ventura. (Both disable option and "Options..." option. Looks like you need to unlock the setting with the "Lock" icon, which isn't present in Ventura.

I'm following the Jamf Pro Installation and Configuration Guide for Mac and it sounds like the Jamf Pro Server Tools CLI should be included with the Jamf Pro installer for Mac. However, I can't locate the jamf-pro binary after running the installer found in JamfProApps10.46.1.dmg -- am I missing something?

Hey, guys! I am testing our company's FileVault 2 workflow and I haven't been able to use the Institutional Recovery Key, simulating the scenario in which we don't have access to the enabled user's password nor his/her personal recovery key. We have an encryption configuration with both recovery keys. To test it out, I downloaded from the JSS a RecoveryKey.p12 file and put it into a USB drive. Then, booted the "affected" machine into recovery mode, obtained the logical volume's UUID and then ran the following: diskutil cs unlockVolume UUID-OFTHE-VOLUME -recoveryKeychain /Volumes/USBDrive/RecoveryKey.p12 And the response I get is: Error: -69749: Unable to unlock the Core Storage volume It's worth mentioning that this is a Sierra machine, so the drive is HFS. Is this procedure correct or am I missing something? Thanks for your support!

Hi,Does anyone here have any experience in the distribution of Avid NEXIS Client Manager using Jamf Pro? Distributing the package is no problem but after the application launches it immediately closes again. Probably because of some PPPC settings but i can't seem to find which one. 

We have several general use computers with automatic login, and the fact that Screen Lock (aka: "Require Password after screen saver begins") is killing us. Every reference I have found to disabling Screen Lock either refers to the plist from when it was still a part of the Screen Saver Preference Pane (which doesn't work now that it's part of the Security & Privacy Pane), or simply refers to Lock Screen on the Apple Menu. The best we have been able to do is to track the setting down to the following file: ~/Library/Keychains/[UUID]/user.kb We have confirmed that file is where the setting is held, but the file is encoded and we have been unable to decode the file. Does anyone know how to change this setting with JAMF, or a script, or any kind of remote management?

So I am currently working on some API extension attribute based scripts, for use with extension attributes.I have a script working that will do the following:List the assigned number of Computers to a user and List it as a number, under a computer device as a extension attributeList the assigned number of mobile devices to a user and List it as a number, under a computer device as a extension attribute   # get the number of mobile devices assigned to the user UserXML=$( /usr/bin/curl \\ --header "accept: application/xml" \\ --request GET \\ --silent \\ --header "Authorization: Bearer $token" \\ --url "$jamfProURL/JSSResource/users/name/$strassigneduser") #echo "xml results $UserXML" mobileDevicesCount=$(echo $UserXML | grep -o "<mobile_devices>" | wc -l)# get the number of mobile devices assigned to the user UserXML=$( /usr/bin/curl \\ --header "accept: application/xml" \\ --request GET \\ --silent \\ --header "Authorization: Bearer $token" \\ --url "$jamfProURL/JS

Hello all,   I'm wondering if anyone has had any issues currently/in the past with random large amounts of Apple traffic. Yesterday our network got down to 2 MB/s (usually 200+). After some investigation with our ISP, we saw large amounts of traffic coming from Apple's 17.x.x.x IP range and our Firewall CPU usage reaching well over 80% at times and staying. Our ISP specifically said it was from update servers grabbing Apple Img. files. The weird part is we have an update deferral going to all iPads/Macbooks. We are currently going to be throttling our bandwidth to these ranges, but does anyone have any other suggestions? Thanks!

I found myself today offsite on a computer without my Jamf Pro tools (Composer/Jamf Admin/Jamf Imaging/Jamf Remote/Recon) and it occurred to me to wonder if these are available to download online at Jamf somewhere? I managed to ARD into another of my computers and grab them, but had to VPN and do some other contortions. Just wondering.

Hi Nation, I am receiving the following message when trying to upload a package to Jamf Cloud:Package failed to upload The package has only 64 KB, I was able to upload other packages before, not really sure about what is going on... Has anyone been through the same issue ? Thanks you

It's been a while since working with VMs and enrolling them into Jamf Pro. I've been able to seemingly get the VM enrolled using ADE, but it's in a weird state. According to Jamf only 5 profiles are installed, yet quite a few more than that are present on the Mac. However, not all of them that should be there are there. When looking at the computer record in Jamf Pro, it appears as if it's stuck in a loop of installing/reinstalling a majority if not all the profiles again and again...I'm kind of at a loss as to what's going on and how to address.Jamf Pro 10.46.0 (Jamf Cloud)Host: Monterey 12.6.6 on 2019 Intel MBPGuest: Monterey 12.6.5 (using same serial and board-id as host)VMware Fusion 13.0.2

The Jamf Research & Insights team is hosting 4 feedback workshops: OS Updates, AI, Smart Groups, and Reporting. Sign up for a spot with Calendly and check out the Jamf Nation Events page for future workshops!