We are trying to setup Shared iPads for one of our departments.  However, devices will timeout back to the Lock Screen after 2 minutes and we cannot locate the ability to change this to 1 hour. Our PreStage Enrollment sets the device up as a Shared iPad, Temporary Session Only, Temporary Session Timeout of 3600 secondsOur Configuration Profile targeting the device cannot set Maximum Auto-Lock or Maximum Grace Period for Device Lock settings from Passcode section or the Profile will failManually issuing a remote command to the device to Update Passcode Lock Grace Period (Shared iPad Only) or Adjust Shared iPad Settings do not seem to helpI've attempted everything I can think of at this time or have found online and no matter what, the devices will go back to the login screen after 2 minutes.  As these iPads will sit on screens that need to be referenced without interaction for several minutes at a time, this has created an issue where the devices are not functional for th

Hello,i have the problem, that the devices on their first registration ask to create manually a computer account. I don't know why this happened, because in the past the process was the following: We have SSO Azure and the user got the Microsoft Window to login with the Microsoft-Account credentials. After that the MacBook automatically created the local computer account like the Microsoft-Account.But now, after login with the Microsoft-Account the user must create manually a computer account and there is no automatically account creation. If you do that, you get an error after a few minutes.Can somebody help me? I do not know what is wrong with our configuration in Jamf Pro and i don't find something to fix that.Thank youJulien

Using the API, is it possible to get the value of a single extension attribute? For example if I have the follow XML<computer> <general>...</general> <extension_attributes> <attribute> <name>Domain</name> <value>DomainA</value></attribute> <attribute> <name>Firewall</name> <value>On</value> </attribute> </extension_attributes>Is it possible to request the value of the Firewall extension attribute?

How Erase-install script bypass the end user's admin credential to provide at the time of OS upgradation? In which step of script it is helping us to bypass the admin credential?  

We have an iPad Air software version 12.4.6 which is managed by JAMF Pro.We can no longer send commands to it through JAMF.  Everything is pending.Wifi connected fine.The capacity is full.Restriction policy does not allow to delete devices from the iPadWe simply want to wipe it.   Even unmanage device command just stays in pending.Any suggestion folks?~ Peter 

Hi all, Our Qualys console recently started reporting on Git related vulnerability - CVE-2022-41903Vulnerable git version detected on our assets: git version 2.37.1 (Apple Git-137.1)This is the native Git version that comes bundled with the OS. Apple has not yet provided a security update on this one so I'm trying to find a way for doing patching effectively and urgently.I understand that I can get the latest release (2.39.1) from here: https://git-scm.com/download/macHowever in order to be able to upgrade I would need either Homebrew or MacPorts. The problem here is that none of them seem to be installed to the impacted assets so I would need to deploy one of them first.I also tried upgrading Git via Git: git clone https://github.com/git/git Unfortunately it's not working.I'm not really experienced with Git so at this point I'm not sure about the possible best approach to address the vulnerability. I'm also not sure about what was going to happen to the c

Afternoon Jamf nationHas anyone been able successfully disable Airdrop/handoff  in Ventura.I have been having search on here and can't find anything that works.I have tried few custom config profiles but just can't get them to work even after a restart.Does anyone have workable config profile they can share?Thanks    

Hi guys!So we have this situation, the screen is just for reference purpose, from Word but we need this for Outlook.We want to configure default reply font options for both Latin and Asian language.Is that possible with a script?The OutlookFontPoke seems to only have this for the Latin field.

In September 2022 we started bundling a notification engine with most App Installers software title to enable end users to be notified that there was a pending software update available if the app was currently running (App Installers would silently update the app if the app was not running). I had previously described these changes in this Jamf Nation post. During JNUC last year we announced that we would be releasing future updates to this end user notification capability to make it easier for Jamf Pro admins to configure how often these messages appear, the message and a deadline by which the update must be applied (if desired). To prepare for this upcoming capability we have started including the new end user notification engine in the installers being distributed by the App Installers feature. Most end user notification messages will display with the icon of the application that is running such as this Firefox example.Unfortunately there are some software titles that we

Hey there - this is really doing my head in and is probably something that can be resolved in about two minutes. Where do you change the 'managed by ""company name"" ' for devices enrolled in Jamf Pro? I have looked in every setting, everywhere and cannot see how to do this - previous MSP have their name on it and it's really quite annoying!TIA

We've just completed our annual Apple GSX Certificate renewal.We got the new cert, converted it to a .p12, imported into Jamf, clicked 'Test', and got the 'A connection to the GSX Server was successful' result.When we run the GSX Lookup on all devices, though, 100% of our inventory returns as "Serial Numbers Not Found"This worked 2hrs ago on the old cert, so it seems to be a break between the cert and our GSX account.I'm trying to work this with Apple, but getting to anyone with GSX knowledge is pretty difficult.Apple's cert renewal instructions here: ( https://gsxapiut.apple.com/apidocs/ut/html/WSFaq.html ) have been wrong for 2+ years:"...The FQDN is a very important field and it's case sensitive. Please be sure to provide the following value for this field: For test environment CSR : Applecare-APP157-[SoldTo ID].Test.apple.com For production environment CSR : Applecare-APP157-[SoldTo ID].Prod.apple.com For example,if your soldTo is 0000012345, the value should be Applecare-APP157-0

Hello everyone,I would like to stop Adobe Cloud from asking each login to connect to the site: auth.services.adobe.com see capture I tried a policy, ongoing, at login and the script launchctl unload -w /Library/LaunchAgents/com.adobe.AdobeCreativeCloud.plistbut it didn't workThank you for your helpHello everyone, 

I need to manage 2 macs, our Windows devices are in Azure / Intune. I'm looking at Jamf as I've heard its the best solution for macs.We only have 2 devices and a small business so was looking to use Jamf Now but have a few queries on this setup... Does Jamf Now work with Intune, all the documentation points to Jamf Pro?Why do you run Intune & Jamf? They both seem to be similar in what they do (encryption, policies, etc)Is it viable to just use Intune when its just a few macs? One key thing is we want them to sign into macs using AzureAD accounts?

I just found out that Adobe CC 2019 no longer supports CCP. https://helpx.adobe.com/enterprise/kb/apps-not-available-in-ccp.html Adobe seems to be pushing everyone to the cloud; Adobe suggests that admins deploy named licenses. But our school doesn't work that way. Did Adobe just screw us again? ;-) IF we want our computers to work in "Kiosk" mode, similar to how serial number licenses worked in CC 2018, do we now have to use "FRL" or Feature Restricted Licenses?

Hello Jamf Nation, Most of our users are a standard user on their mac. We've had a subset of users upgrade from Monterey to Ventura already and within that subset of users, there are a few who are being prompted for administrative credentials to process minor OS updates for Ventura (ex 13.2.1 to 13.3).  One user was able to restart their system, and then they were able to process the OS updates without needing admin credentials. Another performed a restart and was still prompted. Does anyone know why this would be happening? I've checked our policies and we do not have anything selected in restrictions that requires an admin password to process updates. 

Hello Guys, Is there a way to automatically enable the memory saver in google chrome and add sites into "Always keep these sites active? maybe a Plist or Script? 

Hello Everyone, I am trying to update mac m1 computers from monterey to ventura using full fetch installer. When i run the command in terminal manually it will download the latest ventura installer which is good but when i tried it in jamf by creating a script and policy and pushed it to test m1 computer it will fail. Error that i got in jamf logs was installation failed... Any other ways or script to put in jamf to push updates to m1 mac from monterey to ventura? Appreciate you help on this. 

Hello all, How are you deploying Adobe CC packages? I just can't seem to figure it out. I tried creating individual packages for every adobe cc application I needed in the adobe admin console package creator. Then I create the policies to push them. All I am getting is failures. I then tried configuring the adobe packages from the JAMF app catalog and the installations seemed to be hit or miss, sometimes half or all the apps won't install on the target devices. Also you can only push the jamf app catalog apps to one group it seems. Does not look like you can install on an individual computer bassis. I'm getting really frustrated trying to get Adobe CC apps deployed on our new macs. Thanks

Is there a way to suppress this notification in Patch Management of Jamf Pro?I've noticed this since the new UI update, but haven't gotten around to asking about it until now.It gets in the way of pressing the edit or save button in the bottom right corner.It says "Table preferences have been saved". 

Hi all,Has anyone figured out how to allow Terminal to update or delete other applications (see screenshot) using Jamf Pro? I recently noticed this needed permission when deploying a bash script to update the Egnyte Desktop Core app with Jamf Pro. I tried using Privacy Preferences Policy Control to enable this automatically with no success.  

On Friday I had my first new iPhone enroll in Jamf Pro. Friday night the user contacted me saying when he tries to restore his data from iCloud it wipes his phone but then it re-enrolls in Jamf Pro. Everything I have researched says restoring from iCloud or iTunes will wipe the phone. I asked at the Apple store but all they would say is bring in the two phones. Other than Airdrop which they said would not bring over his contacts, does Apple have a solution for selectively bringing data over? I am new to Jamf and Apple and this seems to be an Apple issue but I would imagine this is something the Jamf community has dealt with before. Any help would be appreciated.

Does anyone know whether content filtering is a thing on the Chrome app like Safari on Jamf Pro? For our iPads, we only allow access to specific websites and as we're having issues with Safari at the moment not clearing the data and thus taking up all the storage space (already reported - known issue with Apple apparently), we need to see if it would be possible to content filter the same way on Chrome that we do on Safari. I've looked everywhere and I cannot seem to find anything.Thanks 

I am newbie to JAMF and its my first time using it to enroll MacOS devices into the environment. I wanted to take a couple of weeks to learn from the free JAMF 100 course and knock out the exam within that timeframe. Does this sound reasonable if I spend a couple of hours learning the material? I was curious if I could pass the exam strictly on the course material or its best to have hands on experience first. Thanks!

Hi Everyone,We are currently having problems with trying to re-enroll older MAC computers using Mojave. We take the computers out of JAMF and Pre- Stage enrollments. We re-enroll the computers, but the policies get stuck. The computers show up in JAMF as the serial numbers but not as the computer name. We are able to see the JAMF certificate and MDM profile but then nothing else loads up, it is like the policies are stuck. Has anyone had issues with this? Thank you so much in advance!Joe

Hi I am failry new to Jamf. we have devices that are not checked it (mostly its because the users got it at home)do we need to go to Jamf in cloud to be able to manage these Macs?