We recently started to deploy apps based on location instead of sharing the apps from one single location. We have notice in several locations that when we go to a specific device under manage apps. Certain apps say "pending or installing" In the actual device the app in grayed out and it says "waiting". This does not happen to all the devices but enough to be notice. Is never the same app. We have already done the following: -make sure we have enough licences -gone under apps for that location in jamf and resync licences,retry installing on missing,delete deferred items.We contacted support and after a few emails back and forth they tell us to check our network. The thing is that the moment I long press the app that says "waiting" and cancel download and reinstall the app from jamf school it downloads and installs the app. They suggest that that is the only way around this situation but you are talking about 200 devices with around 20 apps each with the same issue. Wondering if anyone

Hi,I uploaded dmg file to Jamf Pro -> Package for Libre Office. Created new Policy with the DMG file and enabled it for Self Service. And Scope only for those computers that should be able to install it.In Jamf Policy Logs it shows that´s installed, but when checking on the machines. Libre office is not there, what is going wrong ?How can I find more information why this installation fails ?[STEP 1 of 4]Executing Policy Libre Office 7.5.3 for Intel Mac[STEP 2 of 4]Downloading.. (URL...)Verifying DMG...Verifying package integrity...Installing LibreOffice_7.5.3_MacOS_x86-64.dmg...Closing package...[STEP 3 of 4][STEP 4 of 4] 

Hey there, I edited a /bin/bash script that automatically checks the devices uptime and tells the user to restart his computer after 2weeks uptime (with the help of https://www.jamf.com/jamf-nation/discussions/17336/user-has-not-restarted-in-x-number-of-days) The following part generates the ""jamf" wants access to control "system events"" message for end users: #!/bin/bash # Discover logged in user user=`stat -f%Su /dev/console` #Execute code as logged in user (instead of root) sudo -u $user /usr/bin/osascript <<-EOF tell application "System Events" activate set question to display dialog "The device has not been restared for [...]" with title "RESTART YOUR COMPUTER" buttons {"Shut Down", "Restart", "Cancel"} ¬ cancel button "Cancel" with icon caution set answer to button returned of question if answer is equal to "Shut Down" then tell application "System Events" shut down end tell end if if answer is equal to "Restart" t

Is there a way to suppress these annoying Screen Sharing dialog boxes. No, Screen Sharing, we don't have FQDN set up for many thousands Macs. #makeItStop

After a reboot, my Macs are not connecting to a wired network connection until a user with physical access logs in. After the user logs out the machine remains connected to the network until the next reboot. It causes issues because we have a couple of machines that are only used occasionally so, after reboots occur, they can go quite a while without checking into Jamf until someone logs into them.Is this expected behavior? Are there any MacOS settings I can change to prevent this?

I have an Extension Attribute that reports back the expiration date of a PIV Authentication certificate on a Yubikey.When inventory runs and a user has their Yubikey inserted it reports <result>YYYY-MM-DD</result>.This works very well. If the user does not have a Yubikey inserted when inventory runs the EA does not report any result back to the server.My issue is the EA then ends up being blank. I would prefer it to keep the old results if no result was reported.Is this the expected behavior?

Jamf Cloud: I deleted the ipad object out of Jamf but the actual ipad still has mdm profiles on it. How do I add it back to Jamf? I don't know the activation code so I don't want to wipe it.

I know there's quite a few different ways people have tackled macOS Updates.  In the past I've general leaned into the "encourage" users camp vs trying to brute force them.  I've done a number of methods all to varying degrees.  This week our CSOC identified CVE's that needed patching by getting everyone to macOS 11.6.3 or 12.2. Instead of guiding users to update, I'm actively trying to force them at certain actions (login/logout is my goal).  That being said, I checked with Jamf about best practices and was pointed to this article -> https://docs.jamf.com/technical-papers/jamf-pro/deploying-macos-upgrades/9.96/Running_Software_Update_Using_a_Policy.html (we don't have any M1's so the article applies).  I built my policy, applied it to some test boxes and, well, hit or miss.  Specifically I'm running into this running software update locally: Last login: Thu Feb 3 11:22:11 on console Ed@TestBox ~ % softwareupdate -la Software Update Tool

My apologies if this post is redundant but I'm looking for a method of naming Macs as they are enrolled from a list. For example ORG-MAC-001, ORG-MAC-002, etc using the names sequentially and not allowing them to be used again. TIA

Hi Team,After enrolling to JAMF, the Apple Icon -> System Settings -> Apple Sigin. the page is empty and shows as data is not available. I tried re-enroll [remove JAMF and enroll back] & remove the user profile from /var/db/ConfigurationProfiles then again enrolling back. Finally, reset the Mac and then enroll the mac. but no improvement. Note: before enroll the mac its showing, but after enrolling to JAMF it's showing as not available. Only this mac having this issue. other all Macs showing correctly.could you guide me. 

I am importing data from jamf into ServiceNow using the REST API (not using the graph connector because we are not licensed for it) and for some reason the Storage Section is not expanding so I can add those fields, other ones like userandlocation and hardware work and can be expanded,  any ideas why this would be? You can see in my screenshot that the section is specified but the pill on the right the storage one is a string not an object...

Hello all,Question, Has anyone come across JAMF Pro blocking some system settings options such as User Groups, Network etc? If so, how do I remove it and still have MDM installed? Once I removed JAMFcompletely from the PROFILES option in System Settings, everything comes back normally. Here's a screenshot of the block. - Thanks.

I apologize as I am very new to the area of MDM. We are deploying iPads and iPhones to our employees, but while setting up the config profiles, I can't find a way to restrict which apple ID's are used. When checking the settings menu, I would like to remove or deactivate the ability to sign into icloud because these are for business use. Is there a way to make this happen or is there a way to force it to only accept managed AppleID's? Thank you in advance!

Just curious to know what are the most complex packages are there for macOS and we can easily build those package using by composer? I am looking for their name and why it is complex and which method I need to build it? Like SAP GUI is one of them what I can say any other please?

We started getting calls yesterday afternoon about Mac's that were restarting by themselves. If they had anything open, it would close the app and restart or it would just close that app and act like it was going to restart, but wouldn't. We have no policies running for updates. We did deploy Nudge a few weeks go and removed the json file that was stored on the devices, but we had a reboot today. Checked all the logs and nothing sticks out, just a lot checking for softwareupdates. Even Jamf said nothing stuck out, but provided them the sysdiagnose to check. The only thing that updated yesterday afternoon was Jamf Protect. We also noticed in the hardware and software history, that it's showing all the apps including built in apps as deleted and then added. We have a ticket open, just seeing if any of the veteran Jamf admins have seen anything like this. 

Hi all,For a bit now our users have noticed that if they use chrome, they get prompted to sign into our various O365 logins over and over if they close their tab or window.   This doesnt happen if they "sign into google" and turn on syncing.  However anyone using a guest or unnamed profile in google loses their authentication once the window is closed.   We are in the process of requiring MFA for all our staff however anyone with google is getting prompted over and over to sign in and get their phone pin, since each time they close their window it requires re logging in. This does not happen in Safari or Firefox, where once signed in, and you close a window, it remembers that you signed in. I started playing with plists for chrome to see if we could get this to work as it used to and figured it was something with cookies or related to guest browsing and I have yet to find the right plist to make this work. Anyone else seeing this?

Before updating Jamf showed that all iPads are in 16.4.1 version and need to update. After updating the shown version in still 16.4.1 and update is required. Update status is failed.If I look info from specific device I see that version has changed from iOS 16.4.1 20E252 to iOS 16.4.1 20E772520a but Devices -> Updates shows that all iPads require an update.

We have a configuration profile configured in Jamf Pro. Config is set to auto join users using PEAP and radius authentication with a saved generic AD username and password. When applied the associated ipads fail to auto join. If you then remove the config profile from the ipad, you are then able to connect manually adding the username and password (or any other AD user account) to the wifi SSID on the iPad. We are using Meraki access points for WIFI config.

Hello! I've recently started using the JAMF App Catalog of applications available and i've run into an issue i can't seem to put my finger on. I know on some Applications that don't have a application updater themselves, the icons will show as th exclamation point or the Self Service icon, but either way, my users are seeing the icons with the crossed out, buster, icon on top of the application. On the applications i've disabled the built in Configuration Profile, i've rebuilt the Application notification profile needed but that doesn't seem to help. What am i missing?  

Hello! I've recently migrated a fleet of laptops into a new JAMF instance using JAMF Connect. Everything has gone smooth but i have two users with an issue i can't explain. When they log out for the first time and log back in, instead of being prompted to connect the user to a local account, it skips right past that part and creates a new user instead. I've only asked one of them to unenroll-renroll but that didn't seem to fix anything. I know i could move them over to the new account that is created but that might be painful. Any thing i'm missing or can check? Right now they are just having to log out and log back in Locally to get to their original account where all their local data is. any help would be appreciated, thanks!

I have been getting an error every time I run sudo jamf manage. Has anyone seen an error like this before? It seems to be the root of a lot of other issue in my environment. It started when I upgraded my on prem instance from 10.36 to 10.45Errors: - code=INVALID_STATE description=Internal Server Error id=0 field=null 2023-05-08 15:18:14,991 [DEBUG] [Thread-3 ] [lientCommunicationServlet] - Error processing communication content com.jamfsoftware.api.core.exceptions.ApiException: 500 INTERNAL_SERVER_ERROR "500 [code=INVALID_STATE description=Internal Server Error id=0 field=null]" at com.jamfsoftware.jamfmanagementframework.impl.computerinventorycollectionsettings.ComputerInventoryCollectionSettingsServiceImpl.lambda$collectWhenOnlyOneIsPresent$0(ComputerInventoryCollectionSettingsServiceImpl.java:49) ~[jamf-management-framework-impl-10.46.0-t1681398190.jar:?] at java.util.function.Function.lambda$andThen$1(Function.java:88) ~[?:?] at java.util.stream.ReferencePipeline.collect(Refer

Hi all,We're piloting Snipe-IT in our environment and we're trying to automate as much of the asset collection as possible.  I found Jamf2Snipe a couple of days ago (https://github.com/ParadoxGuitarist/jamf2snipe/) and got it working, but as soon as I did my sync I realized that I'd made a few mistakes in my config file.  I've fixed those, but now that I'm trying to resync...nothing is happening.  If I run Jamf2Snipe in verbose mode, it says it's processing all the computers in my Jamf Pro tenancy but the computers aren't updating in Snipe-IT. Anyone able to shine some light on what's going on here? TIA!

Does anyone here have experience connecting iPads to the NYC Dept of Ed wifi networks (ncpsp) using a configuration profile. I've got the network and password setup correctly but am not able to make a connection via the configuration profile. I can only connect entering the password by hand. I think I must have one of the parameters set incorrectly. Long ago, I remember NYCDOE required special proxy settings but I don't know what that would be currently. Any clues are appreciated. Thanks.

Has anyone been able to this without using Configurator or touching each device?

We're installing Adobe Creative Cloud (formerly the Desktop Manager), and it needs to auto update before you can use it once it's out of date. But that auto update requires admin rights, which we don't give users for security reasons. We don't want to repackage this every time there's an update available. Working through the workflow, I noticed it first downloads the installer app to a temporary folder in /private/tmp/XXXXXXXX. If it used a local updater, I could launch it through a Self Service policy and we'd be fine. However since it's a random folder, I can't do that. Does anyone run the updater somehow without granting admin rights to users? I found this thread and tried the script, but still get prompted for admin rights: