Hello community,we are using jamfschool to push wifi profiles to our iPads.What settings in the restrictions tab are best practice to prevent sharing these connectionsor to show the password?thanks 

Hello,we are a school with many iPads that are managed but also able to be privatly used by the students. For this we allow parents to use the Jamf Parent app. We have currently an iPad that keeps getting a profile installed that restricts a lot of the apps and other functions as well, basically rendering the iPad almost useless. I have talked to the parent who installed the app and he said "something went wrong" and he had to uninstall the app and now he cannot set up it anymore after reinstalling. When trying to rescan the QR code by the parent, the parent app  says: "This device has already been added to the overview page" (translated from the german: "Dieses Gerät wurde bereits zu ihrer Übersichtsseite hinzugefügt").This is a snippet from the activity log:It seems to me as if the jamf server keeps thinking it needs to install the profile without the parents app issuing the command. Can this happen? If I manually clear the parents restrictions on the device it is in fact c

So the first time around the MDM profiles didn't install correctly. Now when I try to manually delete the old profiles it won't let me because of the above error.  Even if I logon with local admin rights ... I even tried to logon with local admin rights and run sudo /usr/bin/profiles remove -allBut it errors and says profiles: There are profiles installed that marked non-removableI need to get this laptop built today can anyone help? 

Hi allIs there any way that we can find out what is the current Apple ID on the Mac ??

We are attempting to build a compliance dashboard for senior leadership.  One of the top compliance items is that macOS be up to date.  That criterion is defined as that the endpoint must be on the latest patch and version of macOS within 30 days of release.  What we need is a data source that we can poll for the most recent version of macOS and when it was released so that we can feed the logic in the dashboard.Has anyone put together something like this, and if so, what did you use for the data source for the current version and patch level of macOS?

My Script doesnt seem to be working any ideas. Can anyone see what is wrong.#!/bin/sh#get serial numberserial=$(system_profiler SPHardwareDataType | awk '/Serial/ {print $4}')#Define Laptoplaptop=$LPTcomputerName="$LPT-$serial"# Set the ComputerName, HostName and LocalHostName/usr/sbin/scutil --set ComputerName "$computerName"/usr/sbin/scutil --set HostName "$computerName"/usr/sbin/scutil --set LocalHostName "$computerName"  

I bought a MBP last year that came with Monetary OS installed. During setup I connected to the internet just fine with no issues.A year later I upgraded my computer and was going to sell the one I got last year, I went to do a full wipe of the drive and install Ventura OS. Upon setting it up and connecting to the internet I was presented with a message stating my device can be configured my Netflix remotely.I am curious as to how initially I never saw that message then when I go to upgrade the OS now my device is somehow MDM locked?Of course I have no way of contacting Netflix IT to resolve this as I feel this is some mistake. Is there any way to get this unmanaged or removed? When I continue with the setup it takes to a screen where at the bottom I can see different servers like jamfcloud as if its trying to connect and then it brings me to a screen to sign in to google, if I do that it just errors out. My only way to bypass is to not connect to the internet but I had to downgrade bac

Hello, I was wondering if any knows of a way, if it's either scripting, or making changes to the PPD file, to automate the process of configuring a printers Department ID? We are deploying a Canon copier, that is locked with a department ID, and the settings do not seem to stick, when I upload the printer to Jamf, even though, I am setting them locally, on my computer. Any insight into this would be greatly appreciated! :)  -Loren 

I'm trying to automate Department ID configuration for our Canon MFD's deployed. Composer says that changing the department ID modifies the PPD file for that printer, however I can't seem to find where in the PPD file this is being changed. Has anyone had any luck deploying printer payloads with the Department ID included? If so how? Help.

Hello, trying to remove the demon known as SEP from a few machines. I am deploying the Broadcom provided script via PKG, then invoking it via policy with the -A switch. The following appears in the logs:Result of command: TERM environment variable not set. TERM environment variable not set. com.symantec.mes.systemextension.systemextension com.symantec.mes.systemextension.systemextension is systemextension SystemExtensionName: com.symantec.mes.systemextension find com.symantec.mes.systemextension need to be uninstall in /Applications/Symantec Solutions/Symantec Endpoint Protection.app Removing /Applications/Symantec Solutions/Symantec Endpoint Protection.app 29:114: execution error: Not authorized to send Apple events to Finder. (-1743) Failed to remove /Applications/Symantec Solutions/Symantec Endpoint Protection.app. ATTENTION: You must use the uninstall option in your product's "Symantec Endpoint Protection" menu.  It looks like it's just not permitted to remove

In our Mac classrooms we would like to standardize the right-click (as secondary button) feature on new user accounts, without having to manually make the change on setup. I'm attempting to do this with a JSON Schema affecting com.apple.driver.AppleHIDMouse.plistSo far, I've had no success. Can someone with some experience take a look at the schema and configuration profile and let me know if I'm making any simple mistakes?JSON Schema: { "title": "Enable Right-Click as Secondary Click", "type": "object", "properties": { "Button2": { "type": "integer", "title": "Secondary Click Button", "description": "Set the value to 2 to enable the right-click as a secondary click." } } }  Plist Preview: <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>Button2</key> <in

Our machine certificates are formatted by hostname.domain.comWithin the certificate payload, should I use CN=$COMPUTERNAME.domain.com or CN=$HOSTNAME.domain.com? I was hoping I could do it by DNS name only  - but the Certificate payload requires a subject.    

As you may have noticed, Jamf Nation Community updated our design! And while things may look and feel a bit different, the location of forums, resources, etc., has not changed. We hope you love these changes as much as we do. Your feedback, loyalty and engagement with our community were driving forces in wanting to provide you all with this latest update! I cannot wait to see and hear how this design change helps you all better connect, communicate and collaborate with your fellow community members!

i want to create an extension attribute to display FileVault recovery key.No luck with this one.Thanks for your advice

Customer Education is back again with our second Jamf Pro Release Notes video! Join us for an overview of some of the new features and enhancements that are available in Jamf Pro 10.45. We hope this new resource continues to provide additional details to support your use of the features in this release. We got so much wonderful feedback from you all last time to help us make this one better, so feel free to leave a comment and let us what you liked and how we can make it even better next time. Take the quiz below to test your Jamf Pro 10.45 knowledge!  

I use a Policy that runs the script below to name our MacBooks to the machine's S/N that runs after enrollment and lately it stopped working.  It might be since Ventura came out or one of the revision, but I cannot confirm.  I can run the commands manually so they commands haven't changed.  Any suggestions would be great. #!/usr/bin/env bash# Get the Serial Number of the Machinesn=$(system_profiler SPHardwareDataType | awk '/Serial/ {print $4}')# Set the ComputerName, HostName and LocalHostNamescutil --set ComputerName $snscutil --set HostName $snscutil --set LocalHostName $sn

Have issue with Sophos signed mobile config profile. Have uploaded the mobile config file provided by sophos into jamf and it works fine. I need to add the profile to another site but I can not clone the profile (which is fine) but when I try to upload the mobile config file to the other site it will not let me. I am assume since it signed and its name can not be changed this is why it would not let me upload it to another site?

Hi, We are using QR codes to open websites but some do not work through Safari and want to know if you can change the ipads to open chrome by default, i know you can change it in the settings but want to know if i can change the setting globally. 

I have been working on this all day and cannot find a way to make this work. We want in our IT lab, to show ALL filename extensions for all users. Essentially, if we use the com.apple.finder.plist for the user template and enable it for one user, it is set for true. However, when we use this as our basis, new users logging in have it set to true, but the filename extensions is still unchecked in Finder preferences. There must be a trigger for this I am simply missing or overlooking. Has anyone done this successfully? Thanks for any insights you can offer me. Mick

Trying to get Autopkg installed, fresh install following all the steps and i keep getting the following error... google has got me no where so far.  Using Autopkgr anything i do brings up this error... every error points back to default preferences. WARNING: Did not load any default preferences. WARNING: Could not set RECIPE_REPOS preference: Could not synchronize preference RECIPE_REPOS WARNING: Could not set RECIPE_SEARCH_DIRS preference: Could not synchronize preference RECIPE_SEARCH_DIRS 

Hello Team,This is with regards to MAC performance testing .We are in process of streamlining and identifying a tool which would help us to benchmark MAC system performance across various models (PREFERABLY A LICENSED SOFTWARE) and various enrollment plan changes .Basically, we need a tool to benchmark system performance like CPU,GPU and Disk speed (Read/Write) after the every change we make to our environment.Can anyone suggest on the tools that we can use.Thanks,Manivannan

We have been through multiple phases launching Jamf Pro. We began on Jamf Now and migrated many users and now we are enrolling directly onto Jamf Pro. In the process, we discovered that a number of computers do not have Activation Lock Bypass configured. I have searched for ways to resolve this without success.Is there a Configuration Policy or Policy I can create that will enable that? If so, I am all eyes/ears.

Hello everyone,I have noticed that out macs local admin account has secure token disabled. Standard accounts are not admin and have secure token enabled.I wonder I can push a script on logged in accounts to enable secure token for local accounts.I ran below command locally: sudo sysadminctl -secureTokenOn "username" -password "password" -adminUser "username" -adminPassword "password"Got error: 2023-04-24 11:37:52.233 sysadminctl[2349:18595] ### Error:-14090 File:/AppleInternal/Library/BuildRoots/a0876c02-1788-11ed-b9c4-96898e02b808/Library/Caches/com.apple.xbs/Sources/Admin_sysadminctl/addremoveuser/main.m Line:3772023-04-24 11:37:52.234 sysadminctl[2349:18595] Operation is not permitted without secure token unlock.Grat stand account admin rights: same,Any idea?

Hey all, I'm looking to restrict our users (K-12 students) from enabling Full Keyboard Access in System Preferences - Accessibility - Keyboard. I've identified the plist key value, FullKeyboardAccessEnabled and FullKeyboardAccessFocusRingEnabled, created a plist and set the -int to 0 and uploaded it to Jamf in a profile with Application & Custom Settings. While I'm used to custom .plist files "graying out" the option to enable/disable items, this one doesn't seem to do anything to restrict the user. Thoughts? This would only be a temporary management profile to get our district through state testing. I don't like locking down Accessibility options, but a request has been made.

Education School in Reading Pa - Running into a issue for sevaral months now where I get the following error message - Oranage saying Jamf School is unable to communicate with the device in a timely manner. Also I have having a issue where the app's will not download or stay grayed out and awaiting download. Another issue i see is that my Device name is reverting back to  "iPad" after a IOS update.  Jamf School states it is a issue with Apple and not able to communciation with the device. Anyone else seeing these issues and are able to help ?