Hello All,We are new in our setup of Jamf Pro and had to remove the Prestage Enrollments config so we could get a computer to our current config to test enrolls. After removing the Prestage Enrollment config and readding the computers we are testing with will not re-enroll using this https://learn.jamf.com/bundle/jamf-now-documentation/page/Re-enrolling_a_Computer_Using_Automated_Device_Enrollment.html as well as a newly wiped machine that is being activated is not going through the pre-enroll process that is configured. Also we are seeing a pop-up now which was not seen before the removing and readding of the Prestage enroll config which states "Confirm Prestage Account Settings Creastion, Prestage account settings creation may take extended time to save. Do not refresh." Click save and it goes through just fineWe ran through a user driven enroll on the computer in hopes it would fix the pre-stage and re-enroll issues we are seeing, it did not. After user enroll initiated a wipe throu

We have had the following problem or bug for the past two days. Certain iPads are receiving the (automatic) command to "update profiles." Afterwards, they become members of all dynamic device groups and load apps, restrictions, etc. Nothing has been changed either on the iPads or in the groups. What's really strange is that the group memberships should actually exclude each other. For example, students and teachers, location X and location Y (60km apart, dynamic group based on IP), school A and school B, etc.Has anyone ever encountered a similar case or have any idea what might be causing this?Thanks in advance :)

 Hello, my script continously asking for user password id blank is left empty ! any idea to fix it:  # Password validation loop.TRY=1until /usr/bin/dscl /Search -authonly "$user" "$USER_PASS" &>/dev/null; do(( TRY++ ))echo "Prompting $user for their Mac password (attempt $TRY)..."USER_PASS=$(osascript -e 'tell application "System Events" to display dialog "Please, type your Password to start the operation:" default answer "" with title "test" with hidden answer buttons {"OK"} default button 1' -e 'text returned of result' 2>/dev/null)if (( TRY >= 5 )); thenecho "[ERROR] Password prompt unsuccessful after 5 attempts. Exiting script..."exit 1fidone

Does anyone know if the 8x8 Work app can be deployed via Jamf? I tried converting the dmg to a pkg in composer, but that didn't seem to work. I'm also open to using a script to install it. Any thoughts are appreciated. Thank you!

We are using Jamf School to manage our fleet of iPads. Is there a restriction that will prevent the user from clearing their browser history in both Safari and Chrome? Also, I'd like to disable Incognito mode in Chrome.

Hi all,I want to write a scripts to auto select Monterey or Ventura installer.The scripts is here:#!/bin/bash### CHECK AVAILABLE DOWNLOADS GET_OS_UPDATE=$(softwareupdate --list-full-installer | sed -n 3p)sleep 1TRIM_OS_VERSION=${GET_OS_UPDATE#*Version: }echo "$TRIM_OS_VERSION"OS_BUILD=${TRIM_OS_VERSION%%, Size*} ### GET THE MAJOR AND MINOR VERSIONS: majorVersion=$(echo "$OS_BUILD" | cut -d "." -f 1)minorVersion=$(echo "$OS_BUILD" | cut -d "." -f 2) ### GET THE NAME: TRIM_OS_NAME=${GET_OS_UPDATE#*Title: }echo "$TRIM_OS_NAME"OS_NAME=${TRIM_OS_NAME%%, Version:*}InstallerPath="/Applications/Install\\ "$OS_NAME".app/Contents/Resources/startosinstall" osascript -e 'tell app "System Events" to display alert "Downloading '$OS_NAME $OS_BUILD' update"'softwareupdate --fetch-full-installer --full-installer-version $OS_BUILD####Variables # Determine the current usercurrentUser=$( scutil <<< "show State:/Users/ConsoleUser" | awk '/Name :/ && ! /lo

Hello,For time to time we might ask user to prompt his password if no workaround is available depending on scenarios.When deploying below script, user is not forced to type his password. He can just drag the prompt windows aside and continue working. Is there a way to:1) display the prompt windows on full screenor/&2) if not answered, user cannot continue working as per mac software installer "when admin pwd must be put"#!/bin/bash user=$(ls -l /dev/console | awk '{ print $3 }')PROMPT_TITLE="Authentication Needed"Logo="/Users/Shared/loreal.jpeg" echo "Prompting $user for their Mac password..."USER_PASS=$(sudo -u $user /usr/bin/osascript -e 'display dialog "Please, type your Password to start the xxxx operation:" default answer "" with hidden answer buttons {"OK"} default button 1' -e 'text returned of result')exit 0

Hi,Using Jamf cloud - very new to JamfCurrently trying to setup MS defender and deploy the App to my test Mac Devices - followed this guidehttps://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/mac-jamfpro-policies?view=o365-worldwideThe defender app (.pkg) has been downloaded from our 365 defender Portal by our Admin)I can deploy the MS Defender App manually.In Self Service When clicking on install - after a moment - it reports 'item failed'The Jamf Log on the device  it states 'The message could not be parsed'Can anyone give some further advice as to where to investigate this issue - how would I check the content status on the jamf cloud ? - thinking this is the only difference between successfu;/unsuccessful install ? Many Thanks

In Jamf Pro, we disabled the Airdrop feature for one of our systems to comply with CIS benchmarks. However, in Jamf Protect insight, it still states that the system is non-compliant. Could you please assist us in resolving this issue.

DNS ProxyOur DNS settings in Jamf are set to "Restricted" to not allow users to disable it. This is overwritten in macOS Ventura as the user can disable it.Firewall settingsThis field is "greyed out" on macOS Ventura. (Both disable option and "Options..." option. Looks like you need to unlock the setting with the "Lock" icon, which isn't present in Ventura.

I'm following the Jamf Pro Installation and Configuration Guide for Mac and it sounds like the Jamf Pro Server Tools CLI should be included with the Jamf Pro installer for Mac. However, I can't locate the jamf-pro binary after running the installer found in JamfProApps10.46.1.dmg -- am I missing something?

Hey, guys! I am testing our company's FileVault 2 workflow and I haven't been able to use the Institutional Recovery Key, simulating the scenario in which we don't have access to the enabled user's password nor his/her personal recovery key. We have an encryption configuration with both recovery keys. To test it out, I downloaded from the JSS a RecoveryKey.p12 file and put it into a USB drive. Then, booted the "affected" machine into recovery mode, obtained the logical volume's UUID and then ran the following: diskutil cs unlockVolume UUID-OFTHE-VOLUME -recoveryKeychain /Volumes/USBDrive/RecoveryKey.p12 And the response I get is: Error: -69749: Unable to unlock the Core Storage volume It's worth mentioning that this is a Sierra machine, so the drive is HFS. Is this procedure correct or am I missing something? Thanks for your support!

Hi,Does anyone here have any experience in the distribution of Avid NEXIS Client Manager using Jamf Pro? Distributing the package is no problem but after the application launches it immediately closes again. Probably because of some PPPC settings but i can't seem to find which one. 

We have several general use computers with automatic login, and the fact that Screen Lock (aka: "Require Password after screen saver begins") is killing us. Every reference I have found to disabling Screen Lock either refers to the plist from when it was still a part of the Screen Saver Preference Pane (which doesn't work now that it's part of the Security & Privacy Pane), or simply refers to Lock Screen on the Apple Menu. The best we have been able to do is to track the setting down to the following file: ~/Library/Keychains/[UUID]/user.kb We have confirmed that file is where the setting is held, but the file is encoded and we have been unable to decode the file. Does anyone know how to change this setting with JAMF, or a script, or any kind of remote management?

So I am currently working on some API extension attribute based scripts, for use with extension attributes.I have a script working that will do the following:List the assigned number of Computers to a user and List it as a number, under a computer device as a extension attributeList the assigned number of mobile devices to a user and List it as a number, under a computer device as a extension attribute   # get the number of mobile devices assigned to the user UserXML=$( /usr/bin/curl \\ --header "accept: application/xml" \\ --request GET \\ --silent \\ --header "Authorization: Bearer $token" \\ --url "$jamfProURL/JSSResource/users/name/$strassigneduser") #echo "xml results $UserXML" mobileDevicesCount=$(echo $UserXML | grep -o "<mobile_devices>" | wc -l)# get the number of mobile devices assigned to the user UserXML=$( /usr/bin/curl \\ --header "accept: application/xml" \\ --request GET \\ --silent \\ --header "Authorization: Bearer $token" \\ --url "$jamfProURL/JS

Hello all,   I'm wondering if anyone has had any issues currently/in the past with random large amounts of Apple traffic. Yesterday our network got down to 2 MB/s (usually 200+). After some investigation with our ISP, we saw large amounts of traffic coming from Apple's 17.x.x.x IP range and our Firewall CPU usage reaching well over 80% at times and staying. Our ISP specifically said it was from update servers grabbing Apple Img. files. The weird part is we have an update deferral going to all iPads/Macbooks. We are currently going to be throttling our bandwidth to these ranges, but does anyone have any other suggestions? Thanks!

I found myself today offsite on a computer without my Jamf Pro tools (Composer/Jamf Admin/Jamf Imaging/Jamf Remote/Recon) and it occurred to me to wonder if these are available to download online at Jamf somewhere? I managed to ARD into another of my computers and grab them, but had to VPN and do some other contortions. Just wondering.

Hi Nation, I am receiving the following message when trying to upload a package to Jamf Cloud:Package failed to upload The package has only 64 KB, I was able to upload other packages before, not really sure about what is going on... Has anyone been through the same issue ? Thanks you

It's been a while since working with VMs and enrolling them into Jamf Pro. I've been able to seemingly get the VM enrolled using ADE, but it's in a weird state. According to Jamf only 5 profiles are installed, yet quite a few more than that are present on the Mac. However, not all of them that should be there are there. When looking at the computer record in Jamf Pro, it appears as if it's stuck in a loop of installing/reinstalling a majority if not all the profiles again and again...I'm kind of at a loss as to what's going on and how to address.Jamf Pro 10.46.0 (Jamf Cloud)Host: Monterey 12.6.6 on 2019 Intel MBPGuest: Monterey 12.6.5 (using same serial and board-id as host)VMware Fusion 13.0.2

The Jamf Research & Insights team is hosting 4 feedback workshops: OS Updates, AI, Smart Groups, and Reporting. Sign up for a spot with Calendly and check out the Jamf Nation Events page for future workshops!

Anyone got a script for Dockutill on Monterey. Our old Python script doesn't work anymore. We are looking to keep the Self Service app permanently in the dock.  This is the current script. #!/bin/shDOCKUTIL=/usr/local/bin/dockutilsleep 10$DOCKUTIL --add '/Applications/Self Service.app' --replacing 'Self Service' --no-restart /Users/$3killall cfprefsdkillall Dockexit 0

Is there any way to turn on YouTube strict or moderate filtering within Jamf Pro without using Jamf Safe internet. I simply want to enable the native YouTube app feature to enforce strict filtering.For example on the app - I want to enforce this setting on all iPads with the YouTube App.Open YouTube, select YouTube user, top right hand corner / select settings / general / restrict mode.

I have a Prestage set up that creates a local admin user.It works correctly in Monterey or before.Ventura it stopped working.My work around right now is to not add the machine to pre-enrollment until after I manually setup the local admin user then add the machine to Pre-Enrollment and run [profiles renew -type enrollment] from CMD.I would like to get my pre-enroll working again.Any suggestions?

Hi there,My company is using JAMF to have control over the Macbook I work. Recently, I did bough a Ipad which I did connected with the company managed icloud, only to use a few application I don't want to use in the work laptop(such as personal e-mail).I am trying to use Universal control for use the same keyboard(magic keyboard) and magic trackpad only by "trespassing the mac screen barrier". I did changed all UI controls in apple's guide to make it work, but it doesn't, I can use the ipad as a extension monitor but I would like to use the Unviersal control.I imagine it is due to any restriction in Airdrop(since I try to send file to macbook through airdrop but it doesn't appear in the other device, even the control saying I can receive files from enyone) , to avoid leak of files between devices, my question is: Is there any way the security team can configure the profiles to allow airdrop only for keyboard/trackpad but not allowing file  transference?Thank you in advance!!

Hi, This may be a stupid question but I am new to Jamf and not much of a Mac user. I downloaded Jamf Composer from my Jamf Product page. Version 10.46.0.I get a .dmg file. I run the file on a test Mac and it pops up saying to drag Composer to your hard drive to start building packages. It didn't install anything. So I drag the .dmg file to my Applications folder and run it again. Same message. I plug in an external storage device same thing. USB drive, same thing.I was planning to use Composer to build a .pkg file for Figma as so Figma can be deployed using Jamf.Let me know if maybe I am dragging the Composer .dmg file to the wrong place or maybe it is a bug with Composer.Thanks.