Hey guys, I'm in the process of testing Jamf Connect, I noticed this as a sign-in option Would it be possible to remove it since no one will use it to sign in to their Mac!!? I couldn't find any related settings in our Azure AD. Thanks in advance 

For anyone who wants to put the Safari 15.4 updates for Catalina or Big Sur into Self Service:Catalina: http://swcdn.apple.com/content/downloads/38/11/002-79202-A_MMXLIHTSU2/nka279pyfdmd11tm36dds4jysecfq7b732/Safari15.4CatalinaAuto.pkgBig Sur: http://swcdn.apple.com/content/downloads/27/58/002-81938-A_JGLR6R7D8U/kfpfiwbr575oxwvs6quv4oova5gu6l6y0c/Safari15.4BigSurAuto.pkg 

HEy jamfnation we are having a major issue with clients not being able to mount the share 4 out of 5 times. I have been working with JAMF support and they thought it may be related to a patch but I removed that patch and I am still having issues. The system log on the client shows: Sep 18 11:03:40 ARNC02P904PFVH7 kernel[0]: smb2fs_smb_validate_neg_info: Server capabilities do not match Sep 18 11:03:40 ARNC02P904PFVH7 kernel[0]: smbfs_mount: smb2fs_smb_validate_neg_info failed 80 Sep 18 11:03:40 ARNC02P904PFVH7 mount_smbfs[81969]: smb_mount: mount failed to 10.40.34.26/CasperShareNBK, syserr = Authentication error Has anyone else run into this?

I'm going down the rabbit hole of fixing our devices that stopped checking in due to the invalid device signature issue that has been seemingly plaguing customers. I've had great success using Jamf API commands (jamf-management-framework) to get active devices re-enrolled and talking again.I have a sizable chunk of devices that I've marked as "Unamanged", to reclaim licenses from devices that may have fallen to the wayside. However, now that I know the device signature issue is a thing, I recognize that some of these devices could still be active and not actually stale.My plan was to send the API command to re-enroll to all the devices that are unmanaged. Based on a test, it appears that the re-enrollment just latches onto the exact same computer record in Jamf Pro, and it carries on with life.So on that note, how long do these API commands stay queued up before they time out or otherwise clear out? Or do they stay queued indefinitely?  Because my line of thinking right now is to

Here is the app configuration I have deployed for CISCO Anyconnect.  A user meant to move the icon and somehow ended up deleting it.I have since gone back in and specifically added their device's SG, however, the device never receives a deployment push.I assume I need to somehow tell JAMF the app is no longer on the device, and I remember this in training, but I have never had to use it in the field and now I need some help lol Below are the settings used, if anyone has any idea or sees anything I have done wrong please let me know.    

Hi!I have a MacBook Pro (16-inch, M2 Max, 2023) and a MacBook Pro (13-inch, M2, 2022) that did not let the user set up their own user in Setup Assistant. They went trough Setup Assistant and it never went to the user screen, and the only account on the computer is the Management Account which is set up to have the randomly-generated password. These computers are Prestaged with Apple Business Manager.My solution was having them erase the device, I delete the Jamf record, and they reinstall.  I'm wondering if anyone has any direction, since more M2s will be hitting out Fleet shortly as people upgrade, and I'd like to get to the root of why they are not being prompted to create their user in the Setup Assistant. Thanks!

Hi all, I am trying to get a macbook registered with intune, it was all working fine until last week and then we slowly started having issues with devices getting conditional access errors when trying to use outlook and teams. Looking into it, seemed to be that the issue is that the APNS cert for intune expired yesterday. However, we reupped that cert it is now all good, but I still can't get new devices to register with intune, and jamf is also being weird with Azure registration, as it says the device is registered with azure but the pop up requiring you to register it keeps showing up on the macbook. I can see the device in azure, but it never registers with intune. But then also I have machines that do show up in intune but users still getting the conditional access errors when trying to use teams/outlook! On the fresh built mac I have I get the Authentication for JamfAAD pop up but it never actually tries to sign me in. Anyone who could point me in the right di

I've got a package that JAMF installs with every Mac Startup. It contains a plist file and bash script which gets placed in /Library/LaunchAgents/. The Package was created with Composer. All works fine except I had to modify the script and create a new version of the package. Even though the package on the JAMF Distribution Share shows that it is the newer version (i.e., by the date modified and by the contents of the script), JAMF continues to install the older version. The older version no longer exists on the Distribution point, and I'm deleting it from the destination folders of the macs, but after each startup, the old version continues to get installed. I've even recreated the Package in JAMF, and recreated the Policy that deploys it. Is there a cache or tmp folder somewhere that I need to look for? 

Hi everyone, acutally I got the problem, that on FileVault encrypted Macs the input menu for keyboard layouts won't show up in the boot screen. The setting for the keyboard input menu is located in /Library/Preferences/com.apple.loginwindow with the key showInputMenu and a boolean value. If I try to set the value via defaults write, the checkbox in System Preferences is active and the input menu is shown in login window. BUT if the computer is FileVault encrypted, the input menu won't show up in the boot screen. Only if I set the checkbox manually in System Preferences, the input menu shows up in loginwindow and in boot screen. I tried Composer to evaluate which files are changed during clicking in System Preferences. The only valuable file is /Library/Preferences/com.apple.loginwindow. Does anyone have the same problems? Thanks in advice,Michael

Hi All, Our Adobe user base is around 300 and they do not have admin rights on their machines. I changed the deployment package to Self Service to allow the non admin users to install updates. If the users are already using the non admin Adobe Manager and then install the new Adobe Self Service one from Jamf Self Service, will this allow them to install updates with their non admin accounts. ThanksSimon

Hi All,im using the Content Filter ( Built-in: Limit Adult Content ) in jamf-PRO, to prevent private browsing in Safari,it's works but has presented me with a few issues.. eg. it blocks seems to block PDF's and also works like "straight" "pollen tube" "tube" With the message.Restrictted Siteyou cannot browse this page at "google.co.uk" because it is restricted.  

Hello Everyone,My company is slowly moving into the Apply ecosystem and I was put in charge of setting up MDM with Jamf. I do already have some good experience with Apple itself from previous days working at the Genius Bar. But, not at the enterprise level. I want to set this up right initially so that it makes the lives of everyone else that interacts with it easier.I've gotten the bare minimum done(Setup Apple Business Manager, Jamf 100 cert). And we plan on using In-Tune for identity management. Which, at the moment will mainly be used for iOS devices.As the title says above, what are some best practices that I can follow now? What Automation's feel like magic? What pitfalls should I expect to run into?Any tips would be greatly appreciated.

Hi all, how do you all manage/handle the Azure AD registration, specifically on end-user devices?We've finally been able to get the registration to work, so objects are created in AAD and evaluated for Conditional Access. But the process is a bit fiddly. For example, if you don't press 'Always Allow' on the certificate box, it can kill it all.How do you all handle it in your environments?Thanks

Hi All,We have been able to get our AAD Registration to work again, so users can enrol their device with Azure, Azure deems the device is Compliant, and satisfies Conditional Access/allows users to sign in.Prior to the 10.43 update, this process would create an object in Azure AD under the user's name, and it would also show in Intune, with the "Managed by" field showing as Jamf. It would also create an attribute in Jamf Pro for the "Computer Azure Active Directory ID".After the 10.43 update, an object is still being created in AAD, and marked as Compliant, but I'm now not having anything come up in Intune. Not the end of the world, but we're also not getting an attribute in Jamf Pro now for the "Computer Azure Active Directory ID" - this is more problematic, as we use Smart Groups to determine which devices have registered - now we don't have any visibility of this in Jamf Pro.Has anyone seen this since the update?Thanks in advance.

Is there a way to use a configuration profile or script to disable browser caching similar to manually going into Developer tools and selecting "Disable cache".  We have several remote Macs we want to disable browser caching on and would like to do it through Jamf.Thanks

We have our macs setup with a local admin account and student login with their AD info and creates a mobile account. Does anyone have a script they use that works to delete all the users minus the admin account?

My users are facing issues after Jamf connects is installed and the password sync.Once they restart or log out when they go back to login they are getting a choice of 2 accounts. When they select their previous account they are unable to log in however when they select the new account which is their Okat username why are now able to log in however since it's a new profile they have no data. Is there something that needs to be once to the config profile?

Today, Apple released macOS 13 Ventura. While many orgs may be ready to upgrade today, others may need time to do final testing and/or get verification from your vendor on the compatibility of your software. Apple has made some major improvements in the software update mechanism to make installing Ventura easier and faster for users. Instead of forcing the user to download the full installer and running it locally (like previous upgrades), a computer running macOS 12.3 or higher will perform the upgrade like a software update and only download the changes. In my testing, a full installer was over 12GB, but the new update only required 5.5GB of download. This is great news. However, there is a bug that Mac Admins needs to be aware of. Because this new upgrade process acts like an update, macOS 12.3 - 12.6 were only respecting the Minor Deferral time for Ventura, instead the Major Deferral. If you have different settings for these two deferrals, you may be surprised to find tha

I am new to Jamf Pro. I would like to get Mobile devices to enroll using a prestage or enrollment customization login.I have tried "require credentials for enrollment" , "SSO" and "LDAP" in enrollment customization. This options only work for direct users. I am using Azure Identity Cloud services. Which works find if i am searching for employee names and adding groups. 

I sure I'm just having a mild Monday senior moment. but.. I have a config profile deployed to provide settings for com.cisco.proximity, everything looks correct.. but the application makes no use of it and happily ignores everything..  what am I missing here.. ?

I'm having some trouble getting a few macs to report correctly on their firewall status. I've verified that the firewalls are enabled on all machines, that the firewall config profile is installed, but still getting several reporting back that the firewall is not enabled, which is messing with our security reports. Has anyone else run across this and have a fix? From everything I can tell, the report filter is correct, and the devices show enabled. Don't know what I'm missing here. 

The DEP process where I work doesn't allow MDM Profile removal on some Mac devices.Which is fine etc....But currently after a Cyberattack in my organization my JAMF instance is offline.I need to remove the MDM configuration profiles as something in there is stopping our Trend Micro product from launching to configure its disk access, system extensions and so forth.I've booted into recovery, disabled SIP, gone into /var/db/Configuration Profiles, removed the files as suggested in a number of places online.They seem to have disappeared, yet the Trend application still refuses to launch to configure itself.I am completely stumped. Does anyone have any suggestions?On a machine that allows the MDM profile to be removed this removes the profiles and everything works as expected.They seem to 

We're using erase-install v.28.1 and in testing so far it's been great, really enjoying the new script and swift GUI.  I want to know if anyone else has used this or something similar in conjunction with a terminal command to delete the machine calling the script from Jamf.  In this use case, the machine in question has a Self Service button to initiate a Factory Wipe, and we would like to call --postinstall-command that essentially runs: sudo jamf delete_computer ID=XXX where the machine we're running the command from is the one in question.  I've tested a few 1 line commands in " "s and they work, but I've not tried including a small script inside yet.  Unless there is an already easy way to show the machine's ID in a single line, I figured it would have to be nested in a small script, I just haven't put down the time yet to test, curious if anyone else has already done this or something similar.

Is anyone else having problems with using the feature in JAMF Admin for "Install only if architecture type is".  It does not seem to work because it will not save the setting.  The behavior from the application is it lets you set the setting, save.  But then when you quit JAMF Admin and open it backup then open the same package you just saved the setting for it is not there.  Currently using JAMF v10.43.1

question here, about airprinting from iPads - we cant seem to, settings look alright on the printer airprint is enabled, ipp and mdns are enabled as well - any thoughts on how to succesfully airprint, airprint is also allowed in jamf