Hello All,Hope you all wonderful people having a nice and relaxing days.I am trying to package and deploy AutoCAD 2023 with Network server license but It is not working for me. I am using script from following sites with customising to our licensing server and pKey but still no joy:https://community.jamf.com/t5/jamf-pro/autocad-2021-deployment-with-network-server/m-p/229028Also try to customise the scripts from following site but didn't work.https://www.autodesk.com/support/download-install/admins/create-deployments/create-deployments-for-autocad-for-mac The issues that it is coming up with are like:Crashes while launching the app.Sometime after installation it starts to roll back!! And uninstalls AutoCAD folder from  /Application Folder.Doesn’t create data file then comes up with error can’t find the data file while doing activation.Any idea please.  

I tried deploying application via smart groups but it says pending All licenses are in use or the license is not assigned yet , issues like these are mostly caused by volume purchase token renewal , but when check through ASM to get the token it shows be the below error in ASM apps and books . Any solution suggestion to this issue or it’s just a generic issue ?  

Hey guys. We have a few policies run with trigger of “enrollment complete” for new prestage loads. We’ve typically had these install packages, mostly for Microsoft stuff. We’d like to make sure the machines get the latest version at load, and don’t necessarily want to update the package every time. We thought we could use the InstallLatestMSProduct.sh script within one of these policies to test, and it turns out, the package being called via linkID won’t download, and the policy fails. We have the same policy set for self service and that downloads the package just fine, so we think there’s something with the enrollment process that isn’t allowing the policy with a script to download the package properly. Has anyone seen this? Is it not advised to run a script as part of a policy with “enrollment complete” as trigger? Thanks in advance.

We have gotten some feedback from users that are working remotely about our Macs imaged through Jamf Connect. Users are seeing the message on their wifi, "Wi-Fi networks are currently unavailable." Users without hardline options are unable to login to the machines. We are currently using Jamf Connect v. 2.37.0 Has anyone seen this issue before and if so, how did you resolve it? Note: Potentially 16 machines affected as we halted production until we resolve this.

Hello everyone,We're having problems with students changing the DNS configuration to access forbidden sites.Is it possible to block the Manual DNS option in JAMF Pro? See screenshot belowThank you in advance for your help.

In our Azure logs, it shows the Jamf Pro Azure AD Connector authenticating with one of our administrator’s accounts multiple times per hour. I’ve tried looking into the documentation here: Azure AD Integration - Jamf Pro Documentation 10.43.0 | Jamf but I am wondering if this could work with a service account just to keep our user sign-in longs clean. Or if there are other best practices, I’m open to suggestions. Thanks!

I’m having an issue where packages uploaded via JAMF Sync or from the JSS GUI to our AWS cloud distribution point are uploading as zero KB. JSS version is 11.23.1.  If I go into settings and check the cloud distribution point, the connection tests fine. If I log into AWS and browse the bucket, I can see the file and it shows the size as zero KB. We are an on premise deployment with two clustered JSS, an on premise file share distribution point and an AWS cloud distribution point.  Files upload fine  to the local file share distribution point.  I’m not sure where to even start on this. Anybody else experience this behavior?

Hello, we have a few users whose SS+ screen is blank on the right side. All the left sidebar menu items are present ( Home, Bookmarks, Catalog, etc. ) but clicking on them doesn’t display anything to the right. Logging in via the login link on the lower left shows the user’s name but yields the same result. We typically have people sync their Entra ID password via the ‘change password’ link on the Home page but the option to do so is no longer there. We’ve tried reinstalling SS+, as well as deleting its cache from the Library, but nothing changes. Any suggestions on what to check next? All affected users are on Tahoe but so are many others in the org and they aren’t seeing the same issue. Thanks,

 When I look back on where I started, joining the Matter Career Readiness Institute (MCRI) was one of the most defining decisions of my tech journey. What began as an opportunity to learn about career readiness quickly became a launchpad into a world of innovation, purpose, and growth. Laying the Foundation: Learning Beyond the CodeAt MCRI, I didn’t just learn how to code, I was taught how to be a better professional and, honestly, a better person. Through communication workshops, critical thinking sessions, and collaborative projects that mirrored real-world work environments, I discovered that being “career ready” in tech isn’t just about what you can build, it’s about how you approach problems, adapt to change (roll with the punches), and connect with others.One of my biggest takeaways from the program was understanding the importance of continuous learning and curiosity, realizing that in technology, the moment you stop evolving, you risk falling behind. From Learning to Building:

Since I don't see the info currently available in Jamf Pro as built-in Smart Group or Advanced Computer Search criteria I created the following EAs to report the macOS version and deadline date of any pending Declarative Device Management Scheduled Update command. I expect/hope Jamf will add them as eventually, but in the meantime...  EA script that returns a String Data Type with the version number for any pending DDM scheduled macOS update: #!/bin/sh DDMSoftwareUpdateInfo="/private/var/db/softwareupdate/SoftwareUpdateDDMStatePersistence.plist" result="No Update Pending" if [ -e "$DDMSoftwareUpdateInfo" ]; then pendingUpdate=$(/usr/bin/defaults read "$DDMSoftwareUpdateInfo" | /usr/bin/grep TargetOSVersion | /usr/bin/cut -d \\" -f 2) if [ -n "$pendingUpdate" ]; then result="$pendingUpdate" fi fi echo "<result>$result</result>"   EA script that returns a Date Data Type with the deadline of any pending DDM scheduled macOS update (since returning a non-date f

Hi All, Does anyone know how to add Zoom Contact Centre Extension for Google Chrome via Jamf Pro?I guess that I will need to Bundle ID which I can’t find anywhere. Thanks in Advance!

Hello Everyone, I have recently completed Jamf 200 and I am trying to fix an existing issue which Employees faces time to time on Company Provided Mac.We have a Microsoft Device Compliance Policy in place, where User registered their Mac (once per computer policy in Self Service) to make the laptop complaint as of the criteria to access company resources.However, this Policy always get stuck in Pending status when checked over Jamf Admin Portal and device fails to become compliant and hence No access to company resources. When we try to run Sudo Jamf Policy - it does not show any policy to run.But when we run MS Device Compliance policy using the Policy ID it runs successfully and helps to register the device and access to company resources. Sudo jamf policy -id xxx As a workaround I want to make this policy (using Policy ID) available in Self service so that Employees can run it from there to fix the issue of their own. Can someone please suggest me the steps to make this Policy Avail

Hello Jamf Community, iam looking for a Script to uninstall the Cisco Client Silent.I have a script that does it, but the Users will always get a Pop-Up Message that the Socket Filter needs Admin Permission. You can ignore the window, and it is uninstalled, but I would like to have it more clean. Greetings TGD

It is very tedious going one device at a time to see if there are failed commands. Has anyone been able to create a Search that shows devices with failed commands?

I have a computer configuration profile for Proxies and Proxy Bypass list.The CP is deployed with Computer Level and Install automaticallyThe proxies settings work but when I verify the Proxies, they display with no issueThe issue is the Proxy Bypass list does not seem to work/display.  When I go to a website that is supposed to skip the proxy, they are blocked.In Jamf EA I get the Proxy Enable status, Proxy IP, and Port numbers (which displays the correct info) using command scutil --proxyIn another Jamf EA, I extract the Proxy List with command scutil --proxy.  I see the list but it doesn't looks like it's enabled.  Because of this issue (Jamf Pro since 10.16.x), I have been having to use Scripts to do this work. 

Good afternoon I have a weird issue that is coming at a horrible time!  I have 6 M1 2020 Mac Minis that are failing at retrieving enrollment profiles.  Nothing has changed in my environment, and I even just pulled 4 new M4 MacBook Airs out of the box to test.  The Minis were previously in a different lab (one that I just successfully reset 16 other computers in), but these 6 continuously fail to enroll.  Any ideas?

Hi everyone!I have a macOS machine running macOS 15 (Sequoia). I created a configuration profile with the “Single Sign-On Extensions” option configured with Microsoft Entra ID.This allowed me to register with Platform SSO natively on macOS, using the notification that popped up on my machine after installing the profile.However, that requires my users to manually click the notification and register. To make the process easier, I created a new configuration profile with Jamf Connect (com.jamf.connect.login), also configured with Microsoft Entra ID.Now users are able to see the Microsoft Entra ID authentication page on their login window. However, I was under the impression that once they connected at the login window, it would automatically register with Platform SSO - but it still requires them to go through that notification.Is there a way to achieve the auto-registration with the combination of the SSO extension/JAMF connect?

Hello. This is my code in .net.var client = new HttpClient();var jamfUrl = "https://{server}.jamfcloud.com/";var clientId = "xxxxxxxx";var clientSecret = "xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx";var byteArray = Encoding.ASCII.GetBytes($"{clientId}:{clientSecret}");client.DefaultRequestHeaders.Authorization = new AuthenticationHeaderValue("Basic", Convert.ToBase64String(byteArray));var response = await client.GetAsync($"{jamfUrl}/apps/");response.EnsureSuccessStatusCode();var json = await response.Content.ReadAsStringAsync();But when I execute this to get the list of applications I get following response<!doctype html><html lang="en"> <head> <meta charset="UTF-8" /> <link rel="apple-touch-icon" sizes="180x180" href="/apple-touch-icon.png" /> <link rel="icon" type="image/png" sizes="32x32" href="/favicon-32x32.png" /> <link rel="icon" type="image/png" sizes="16x16" href="/favicon-16x16.png" /> <meta name="view

I had a few devices upgrade to iOS 26 and the homescreen layout is not working….has anyone ran into an issue with this? 

So we have Google LDAP connected to Jamf. It's working great for populating User & Location information, etc. However, I'd really like to leverage 'Directory Service User Group' to scope stuff. It just doesn't seem to be working. I've tried to do some reading and I've found people saying it's unreliable. When I go to Cloud Identity Providers > Google LDAP > and do a lookup of myself or others + and also search for a group name - it correctly returns that I'm a member of ___-staff group. There's a specific policy I want to exclude for this staff group. I can go to exclusions for this policy > Directory Service User Groups > search for the staff group I'm apart of > it finds it, and I add it. After doing that, I still see my computer as pending like it's still in the scope. User & Location info is accurate, my local account matches LDAP user name, etc. How are people future-proofing scoping? My other option is to hand-build Departments in Jamf that match Departm

Hi,I have recently deployed a new wifi cert for our wifi office network and I am testing it at the moment.Once I choose the network, it will ask me to choose a certificate or enter credentials. I choose the new certificate and then afterwards the “eapolclient” prompt pops up. I click Deny and then I am able to connect to the Wifi with the new cert. I am wondering if there is a way to either always click Deny, or during these network authentications allow it to have permissions to the System keychain. Also if someone has a way to allow users to use our new certificate without even having to choose the new cert themselves, that would be even better. What I am trying to do is to minimize the steps that users have to do to connect to our Wifi with the new certificate. On the configuration policy, I only have the p12 cert and the network part 

Hi! Looking for a way to disable the "Restart and show password reset options" as mentioned in https://support.apple.com/en-us/HT202860 We have firmware passwords set on our laptops (by policy the firmware password is only known to IT) and when a user clicks that, it gets stuck at the firmware password screen. Reboots go right back to the firmware screen. Unfortunately, with all the work from home, we can't just stop by to fix it. 

Hello,Before asking my question, I’d like to briefly describe our current environment:We are using Jamf Pro on-premises. MacBook devices are enrolled using the User-Initiated Enrollment method. During enrollment, a hidden local account named jamf is created on the machine. All devices are domain-joined, and FileVault is enabled. Users log in with their Active Directory (AD) accounts, which are configured as mobile accounts. Initially, we manually create a local admin account named support during setup. This ensures that both the support account and the user’s AD account are enabled for FileVault.Our security team has raised a concern because the support account currently uses the same password across all devices. They have requested that we either remove this account or implement automatic password rotation, similar to a managed account.Could you advise on the best approach? How do you typically handle this scenario?Additionally:Is it possible to add the jamf account to FileVault? Woul

New behaviour in iPadOS 17 - when you only define a lock screen wallpaper and do not define the home screen wallpaper and you do not click the check box to use the same image for lock and home, iPadOS 17 now magically makes home and lock screen identical. (Huh? That's not what I asked for)I filed an Apple Feedback Assistant ticket and they said it is "currently functioning as intended".It didn't do this in 16.So what's the issue? If you make a reasonably great looking lock screen wallpaper it is totally distracting as a home screen wallpaper. The app icons become too cluttered with the background - there's no visual sense of depth to separate. If you use the QR code, it looks terrible on every page.The consequence is that you have to allow changes to wallpaper and you have to choose a plain style home screen. Then if you want your beautiful lock screen to stay "locked" so that students don't remove it you have to play the restrictions dance in both Restrictions and the Wallpaper payloa

Hi All,  I am trying to remove the phone icon and nothing is working.  This device does not have a SIM card, it uses Wifi only.  I have tried adding it to a Restrictions profile where I am removing all other system apps and it's the only icon that is not being hidden.  I am also applying a Home Screen layout and this icon is not one of the icons I wish to display in that policy.  What am I missing?Appreciate the help!