Setup Your Mac (1.11.0) leverages several new features of swiftDialog (2.2)New Features in SYM 1.11.0Updates for swiftDialog 2.2Required selectitemsNew activate command to bring swiftDialog to the frontDisplay Configurations as radio buttonsReport on RSR version (if applicable) Pull Request No. 50 thanks @drtaru!)Specify a Configuration as Parameter 11 (Pull Request No. 59; thanks big bunches, @drtaru!. Addresses Issue No. 58; thanks for the idea, @nunoidev!)Configuration Names and Descriptions as variables (Pull Request No. 60; great idea! thanks, @theadamcraig!)Consolidated Jamf Pro-related webHookMessage variables; Set “Additional Comments” to “None” when there aren’t any failuresContinue reading …

How can I pull the specific insight's non-compliant system list as a csv file or as report in Jamf Protect? is there any options available for this?

Hi. I am IT in a school and use Jamf Pro. I tried Jamf Parent few days ago and was surprise to observe an easy way to disable the limitations for the student: he downloads Jamf Parent with a personal device, flash the QR Code from Self Service, and then disable the rules and other limitations to have a full access. Did i miss something ? Thanks, Kévin

Hello,I am preparing the deployment of a new antivirus with Jamf. A profile has been created for the authorizations following this documentation:https://www.pandasecurity.com/en/support/card?ID=700101&track=26424 However, the antivirus still requires an additional authorization (Content Filter): I did not find this information. For other antiviruses yes, not for Panda. Is it possible to authorize this on a computer and then retrieve the necessary informations with a command line? Trying in Jamf the following information, it does not work:Thanks for your help

I don't use the cli tools often, and when trying to check something today, I'm being prompted for the configuration password but none of my documented passwords are being accepted. Is there a quick and simple way to delete the cli configuration and set a new password? I believe the only thing I had set was a scheduled backup, which appears to have not been running correctly, so attempting to get in there to check it but unable to do so at the moment.

Working in end-user device management, focusing on onboarding, configuration, security, and updates, is easy. After all, getting everyone working is critical! But what happens at the end of a school year or employment contract? What about managing the sudden departure of a staff member or student with a BYO device? Do you have an end-user device offboarding process in place? Do you have licensed software to recover? Configurations to remove and permissions to reset or restore? What about the removal of the framework itself? In this article, I’ll guide you through the basics to complete these tasks and let those devices go with comfort and ease and, most importantly, satisfied end users.   In most circumstances, our users initiate device offboarding via Self Service. The policy becomes available when their computer record is scoped to our voluntary offboarding department. All institutionally licensed software and configurations are removed. Local student user accounts are elevated

Glad to see they we can finally have some insight into what is going on when we push MDM commands to attempt to enforce macOS updates. Disappointed to see that apparently none of this info can be used in a Smart Group, Advanced Search, etc for tracking and reporting. Baby steps I guess.

Hello,With the new certificate renewal procedure I had to reconnect directly to the Apple site which manages the certificates.The problem is that the specific Apple ID we used for this when originally installing the product, is now asking me for answers to the passphrases we lost. And therefore I cannot access the certificate management.To work around this I used another Apple ID from our company to generate a new certificate.But after installing it in our Jamf server, I notice that the push no longer works: In view of the logs, it comes from the certificate.Is there a way to force Jamf and associated devices to use the new certificate from another Apple account?If not, what is the procedure with Apple to recover the original account that managed the push certificate for our Jamf server?Thanks in advance for your suggestions.Regard's Stéphane

Guys,We are migrating from Jamf to Intune. Once Jamf profile removed from devices, did drive get decrypted?If not a policy is enough to escrow the key to Intune?

I keep bumping up against the issue of different things like Macports, HomeBrew, gfortran and precompiled command line executables need their own specific environment in the shell. I've been lucky most of the time that there's been enough overlap of the apps and I could negotiate to not have MacPorts or HomeBrew but I finally hit one that is just causing pain as I really need everything.  When I've seen big linux systems, they usually have something that you can run to configure your environment usually when you open the shell.I was thinking I'd try something along the lines of a script that runs when you open Terminal and it displays choices for MacPorts, HomeBrew etc and runs the environment setup for them that way rather than my existing all you can eat way from the system wide files in /etc.  I did talk with one of our big system managers who said they use something called Environment Modules (https://modules.readthedocs.io/en/latest/index.html)Just wondering what ot

In this blog we will assume you have Jamf Pro, Jamf Connect, and Jamf Protect or a combination of those and look at it through the lens of Microsoft and Jamf Device Compliance, but the exact same workflows can be achieved with the integration between Jamf and Google BeyondCorp, which was added in Jamf Pro 10.45!     For several years now, Jamf Pro has allowed organizations to integrate with Microsoft Azure AD and Microsoft Endpoint Manager to provide Conditional Access to Apple endpoints; initially it was only available for macOS using the Conditional Access feature in Jamf Pro, but Device Compliance for iOS was then added some time later.   Recently we received the deprecation notice for Conditional Access for macOS; Jamf now offers an alternative solution with macOS added as a supported platform to Device Compliance in Jamf Pro, which is good news!   With Conditional Access for macOS, Jamf Pro offered basic information like the state of FileVault, the firewall, a

Hey All,Need some help regarding reseting user password on MacOS devices.I'm trying to avoid separate admin account with LAPS on all company devices. To do that I want to use manageable Apple ID's so the user can reset it by themselves . Unfortunately we are using integration from ABM to Azure with SSO and my problem is that the MacOS recovery window is not visualizing the pop up window in which I have to confirm my credentials. Dose anybody find any solution for this ?

Got this Error while handing out apps on my Ipads. Is there a solution?

Hello,I am trying to add an EA's value "YES" to the existing EA's name "Decommed:" in JamfPro.Spending hours and still not being able to figure it out! New to API/XML and learning along the way by watching the presentation from JUNCxxx.so far this is what I have and I am sure the curl statement is not working with the error message <p>ERROR in XML file</p>Appreciated your help.-------------------------#!/user/bin/shjamfuser="jamf_account"jamfpw="jamf_password"jamfURL="https://jamf_server:8443/JSSResource/computerextensionattributes/name/Decommed"/usr/bin/curl \\ --user "$jamfuser":"$jamfpw" \\ --header "Content-Type: Text/xml" \\ --request PUT \\ --data "<value>YES</value>" \\$jamfURL------------------------------------------above URL "$jamfURL" has this data. <computer_extension_attribute><id>38</id><name>Decommed</name><enabled>true</enabled><description>Decommissioned devices.</d

Apple Script format #Created by Kyle Ericson Date July 24th 2018 #If you want to remove from JAMF uncomment this #do shell script "sudo jamf removemdmprofile" user name "Administrator" password "superpassword" with administrator privileges #do shell script "sudo jamf removeFramework" user name "Administrator" password "superpassword" with administrator privileges #Remove Company Portal Items do shell script "killall 'JAMF' || True " do shell script "killall 'Company Portal' || True" do shell script "sudo rm -R '/Applications/Company Portal.app/'|| True" user name "Administrator" password "superpassword" with administrator privileges do shell script "sudo rm -rf '/Library/Application Support/com.microsoft.CompanyPortal.usercontext.info'|| True" user name "Administrator" password "superpassword" with administ

Hi all,I am currently facing a really bizzare issue and not really getting far with support.I have a prestage enrolment which for the most part works fine. It prompts for authentication and ive set it to pre populate the 'user creation' screen with the username used on the enrolment authentication prompt.Policies run in the background as normal, however after the user is created and it logs in (automated process with the prepopulated fields) any subsequent polices set to run on enrolment complete do not run.If i use a prestage enrolment which doesnt automatically create the user (so it sits on the login screen) all policies run, however I then face issues with other things)If i set the prestage enrolment to create a user (but for me to enter the details manually on the user creation screen) all policies run if I leave it on this screen. If i create the user and log in as it while policies are still running it will interrupt the process again.I have tried turning off all check in option

Following the upgrade of our cloud instance to 10.46.1 over the weekend, we have machines that are reporting the following in their jamf.log on a repeated basis:Mon May 22 17:47:51 TEST-MBA13 jamf[299]: Upgrading jamfHelper.app...Mon May 22 17:47:51 TEST-MBA13 jamf[299]: The checksum of /Library/Application Support/JAMF/tmp/jamfHelper.app/Contents/MacOS/jamfHelper did not match. (259218dc3c490c86db89be5bc936db11 != e9a1923730a36128986922e6d3a9b9d0)Mon May 22 17:47:51 TEST-MBA13 jamf[299]: Upgrading JAMF notification service...Mon May 22 17:47:51 TEST-MBA13 jamf[299]: The checksum of /Library/Application Support/JAMF/tmp/Management Action.app/Contents/MacOS/Management Action did not match. (35247d66f433b9b6406e4d2f62d737bd != 0ccbad7bef47314eca5e58ac7ab373c2)Beyond the fact that this is showing up repeatedly in the logs, it also appears to be causing self-service triggered policies to falsely report failures (the user receives a "Item failed" notification, but the policy performs the ta

Hi all wanted to share this in hopes it's useful for anyone. I wanted a way to be able to collect the last backup done by Druva inSync just to avoid having to go to two different interfaces to find out. It could be improved a bit more, but it does what I need it to do at this moment. I also wanted to avoid having to install anything extra. #!/bin/bash #Created: 5-05-2023 #Description: Runs through all druva insync logs for that last finished backup cycle and returns the date and time # Get the current GUI user's username gui_user=$(stat -f '%Su' /dev/console) # Loop through the log files in reverse chronological order until the "Finished backup cycle" line is found backup_finished="" IFS='' log_files=$(ls -t "/Users/$gui_user/Library/Application Support/inSync/logs/inSyncClient"*."log") while IFS= read -r log_file; do if tail -n 50 "$log_file" | grep -q "Finished backup cycle."; then echo $log_file backup_finished=$(tail -n 50 "$log_file" | grep "Finished bac

Can anyone explain the Activation code and Licensing? We are licensed for 195 and we are at 195 active computers.  I just received an Activation code for 215 which I added to Jamf Pro in Settings - Activation code.Do I have to update the license configuration file again to have computers update to the 215 licenses?  Is there a document referencing when we get a new activation code and what has to be done for licensing?  

Hi A question: How can I deploy to turn on automatic login for a local user. I found in a other discussion this script but I cant get this working: http://www.brock-family.org/gavin/perl/kcpassword.html What do I have to do to enable the automatic login? I'm a bit confused with this script. Thank you!

A couple of users departed & we don't know their iPhone passcodes.Their iPhone 12's have iOS16.x installed and are Supervised and Managed. They have been restarted. The phones have Verizon SIMs and show an LTE data connection (we have poor service in this location).It seems these phones do not connect to WiFi until the passcode has been entered.Swiping up just brings up the passcode screen with "Your passcode is required when iPhone restarts".Problem - Tried sending 'Clear Passcode' management command assuming it would go via Verizon cellular data but it just shows as Pending in Management History tab (in the queue with the Update Inventory command).Question  - should I expect 'Clear Passcode' management commend to work over a cellular data connection after an iPhone has been restarted?Many thanks!  

Update 10 May 2023: Cloud upgrades are scheduled for the weekend of 19–20 May (details below). We appreciate your patience. Today we are releasing Jamf Pro 10.46. Highlights of this release include: Declarative Status Reporting for Additional Inventory Attributes The following Jamf Pro inventory attributes are now subscribed to the declarative device management status channel: Computer Inventory AttributesOperating System Category > Operating System Supplemental Build VersionOperating System Category > Operating System Rapid Security Response Mobile Device Inventory AttributesSecurity Category > Passcode Compliance Updated Expiration Notification for the Jamf Pro Built-In Certificate Authority The expiration notification for the Jamf Pro built-in certificate authority (CA) has been changed from 90 days to 360 days. This change provides you with more time to take action. The notification will persist until you renew the built-in CA. After you renew the built-in CA, it will b

What is the best way to identify endpoints with removable MDM profiles? I suspect that some computers in my environment may have been deployed that way before I was hired.

In March of 2023 announced the release of the Jamf 170 Course, and that it was ready for learners interested in security and Jamf Protect. Well, the content became available, but there was one little component we promised would release later in the year. After all, what's a certification course without a certification exam?We're super excited to share the Jamf 170 Course has been made whole with the release of the Jamf Certified Endpoint Security Associate exam! The format and expectations to obtain certification are similar to the Jamf 100 Course. From our About the Exam page: The Jamf Certified Endpoint Security Associate Exam is available here in English. It costs USD 100.00. Customers have 1 opportunity to take the certification exam per enrollment. Customers are eligible for a full refund if cancellation is made without taking the exam and is within 10 business days of purchase. After purchase, customers have 45 days to complete the exam. The cer

Hello,We are running on-premises JAMF Pro 10.37.2 server, and today we've got our first M2 MacBook to enrol.The enrolment process  was similar to M1, however it didn't apply any policies or profiles till I manually run jamf recon and then jamf policy and jamf manage commands - it was just MDM profile sitting there for a long time and that's it. Typically it's finishing enrolment in couple minutes with no issues - at least for other Intel and M1 Macs - moreover other Macs enrolled around the same time finished the process successfully, so it doesn't look like network problem.Unfortunately, we haven't got other M2 Macs to check if this issue is related to new M2 chip or not.Has anyone else faced this kind of enrolment problems with M2 chips? Is JAMF supporting M2 Macs already or not yet?Thank you.