Hi,I forgot my Jamf Pro login password. How can I forget my password?Thanks,Trinh Tran

Hello all.What is the best naming convention to use for Jamf. We recently talked to a systems engineer, who stated that having the Serial Number in the name is not a good practice, from a security standpoint. That it is not good to have serial numbers exposed.What naming convention do you use for your devices in jamf?

I just wanted to know how I will be able to manage the app notification on macOS through JAMF. Like as SwiftDialog app is installed on my mac but I can see its notification is turned off by default in System Settings/Notification. I want to turn on for SwiftDialog and also its feature has to be managed for both type, banners and alerts, any idea?

Hi JAMF Nation We're starting to use JAMF in our business and so far, everything is working smooth. We have a special namingconvention for our Windows notebooks and now also want to mirror this naming convention to our Macbooks - so they would start with MBSMB**** (4-numbers) Is there a way to create a script that automatically sets the computername & local host name to that naming convention that also automatically counts upwards? So starting from MBSMB0001 and automatically counting upwards. Otherwise we'd have to manually type in the name for every Macbook. If this is not possible: what would be the easiest script to give that specific naming convention? I'm not very familiar with scripts at all, so I thought I'd ask you guys for help. :-) Thanks a lot. 

So none of our devices are prompting users to sync their passwords after they change it via IdP.  I checked the Jamf Connect configuration profile and it looks to have all the settings correct.  NetworkCheck is set to 15 and we have the Jamf Connect notification profile enabled under Settings>Computer Management>Security.Jamf Support told me it could be hidden behind the time and that i should click on it to look for the notification.  I had a device that updated the password days ago and when i click on the time there is no password notification there.Has anyone seen this?  Any way to force a password sync? EDIT - After messing around on my device right after posting this I have noticed that the Jamf Connect icon is not in my menu bar.  If i launch it and click Connect it then prompts me to sync the password.  Is there a way that I can have this app launch on boot and have it automatically logged into?

I configured the wonderful Support app today, and everything seems to be working the way I want it to, except for the custom logo I'd like to use (our institution's logo). I edited the image size down to 48x48, and put the file in the recommended location (/Library/Application Support/[our institution name]/[image file]), though the image will not appear in the Support menu on my test device. When I edit other features in the config profile, the changes take place almost immediately, but the logo has yet to change. Anybody familiar with deployment of this app have any pointers/ideas?

Lightspeed just released the newest version of filter agent that completely changes how it works based on Apple's system extensions. This is completely different from the way it worked before. If I were to update it via auto update it would give the users a number of permission prompts that they could decline. LS released some documentation for updating these permissions automatically via MDM but frankly the instructions are kind of confusing for a relative newb. Could one of you kind experts perhaps take a look at these instructions and boil down what I need to do? Thanks in advance!

I was curious to know how I will understand that if any app is creating any issue on my mac or to other app installed on my mac? Which log will help me to understand that this app is creating issue on mac or creating issue to other app running on my mac? Like as wifi log, system log, install log they do have their own purpose for administrator to let them understand what is done or going on. I need a solution like that. Any help will be appreciated.  

Hey all. I finally got a chance to refine this little Self Service app and it works great. User can now pick a folder to sanitize in preparation for moving to the OneDrive Synch folder. Still have a lot of non-compliant Mac users who need to get important stuff in the Cloud. The script we have now in production doesn't give the user a choice. It automatically runs on their existing OneDrive Folder, which is okay, but I would like users to be able to run it in advance before they even sign into OneDrive for the first time to avoid synch errors right off the bat. Before this gets into production, however I have two questions. How to best prevent a user from selecting any any folder outside their own home directory, where illegal character removal might break something. How to make it so this script also fixes illegals in the parent directory? It may not seem much to ask someone to fix ONE illegal filename manually after the script fixes the other 3,000, but I want to make it bul

Hi everyone, I am hoping someone might be able to help me out with an issue I just started running into. Also wondering if anyone else is having this problem.We have been using the built in "Software Updates" policy in Jamf for years now, and it has been working great for installing macOS updates for our end users. However, the last couple of months, something has changed where the policy no longer only installs security updates and feature updates for the current OS, but will force the device to upgrade to the latest macOS without any warning or prompts. This is problematic for us, as some of our users have software that has not been made compatible with macOS Ventura yet. The only way to downgrade from Ventura is to wipe the computer, so that becomes extremely time consuming and annoying for our users.Is this a bug with the Software Updates policy or is this now the intended design? If it is the latter, does anyone have a better way to run updates for the current OS the user is on, i

Hi,I try to install VPP apps on an iPad, but the following message appears: Device was busy. Will try again. It is the same with the automatic installation of the Self Service app. iPad : battery :more 90%unlocked, but temporary session onlyconnected on WiFi (Internet access ok) I try : Clear code : Bad requestSend blank notification -> nothing on the iPadRestart : work I don't see the problem. Thanks for your help.

on windows i can right click on a file or folder and choose "scan with cortex". i may just be an idiot... but how to you start a manual scan from a mac?

Thought I would share this incase anybody else needed to see if they had a certificate installed on the local machine. The variables can be set to look for a specific name of a variable and the location where it should be installed. Tested on 10.9 & 10.8 #!/bin/bash ## Used to check for a certificate & it's location. # VARIABLES cert_name="certname" desired_keychain="/Library/Keychains/System.keychain" if [[ `security find-certificate -c "$cert_name" $desired_keychain 2>/dev/null` ]]; then echo "<result>Installed</result>" else cert_search=`security find-certificate -c "$cert_name" 2>/dev/null | grep "keychain:" | awk -F """ '{ print $2 }' 2>/dev/null` if [[ $cert_search ]]; then echo "<result>Non-System Keychain: $cert_search</result>" else echo "<result>Not Found</result>" fi fi ex

Hello Community, At the moment we have 50 Macs. On all Macy, the user are local admin. On all Devices we have a local account with admin rights, too. Now we want to delete the local admin rights for all user. Only our local account geht local admin rights. My question is: Can every help me to delete the local admin rights with a script? That only our local admin get the admin rights? Many Thanks for help!Christian

Hello everyone,We starting to use/distribute Jamf Teacher. We don't have any problems with device at all. But when it comes to Macs the app gets installed but you can't use it. When starting it prompts for server adress, username and password as shown bellow.I think there's something we missed? For devices you need to configure with an app code. But shouldn't it be the same for computers?

Hi All,We suddenly have few Macs, after restart/shutdown, user not able to login to their account.All Macs are Filevault enable and users are default added into Filevault (we use AD – mobile account). Our local admin, is also Filevault user and disk owner. But we can’t even login as our local admin. It just will then show a black screen and then will loop back to the login page.We are able to temporarily fix this by reinstalling macOS (without erasing the disk).Has anyone experienced the same issue?There were no changes to any of our exsiting policies in JAMF.We are also using McAfee as our endpoint security, including the encryption as well.

I am looking for suggestions on the best way to disable the touch ID / fingerprint prompts that come up when a new user logs into a Mac for the first time.  This is specifically on an iMac with the new keyboards with the fingerprint reader, I'm not sure if this differs from the MacBook Pro so I thought I would mention that.

Hello right now I have the dock set via config profile. The users are able to add items just two things are unremovable. I want to switch to dock utility instead of config profile. The question is can I run a script to backup what their current dock is, remove the config profile and the apply this backed up dock?

Hi all,  I am new to jamf and still understanding the intricacies with deploying config profiles using smart groups. I have a config profile being deployed to computers via a smart group.  The smart group is defined as computers that dont have the config profile installed.  Its been working well, but due to changes in the way we are installing a particular application,  I no longer want that config profile active in the environment for net new devices but I dont want the profile removed from the computers that already have it.  How would I go about doing this?   thanks

Jamf noob here, I need to copy a file to a single mac computer in the /library/application support folder using Jamf Pro.  I have a copy of the file.  I have gone into settings- scripts and I'm trying to write a script with a simple CP terminal command, but how do I supply the file?  Do I need to create a package for that?  I should mention that I am working from home on a PC and don't have access to a Mac at the moment.  So I think that means I can't use Composer?

Looking at Computer Extension Attributes in Jamf Summary… at the end of every bash script is says ” Windows Script …” Just trying to figure out what that is about and should I be concerned about it at all? This does not show up when you look at the Jamf Pro editor for the script.   ========================================================================================== ID 4 Name ............. Last Reboot Enabled true Type ............. String Mac Script #!/bin/bash echo "<result>$(date -jf "%s" "$(sysctl kern.boottime | awk -F'[= |,]' '{print $6}')" +"%Y-%m-%d %T")</result>" Windows Script ... ========================================================================================== 

Hello!We have run into an issue with one of our profiles disabling communication to internal services, JAMF Pro and/or Apple for app downloads prior to completing initial enrollment for enterprise network policies.Is there a way to delay or stall a single configuration profile from installing until after a specified trigger (time idle, last app to download, rename, next restart etc.) for an iPad? Thank you

I've rolled out several new iPhones in the last week and the configuration state of iMessages is completely inconsistent from device to device. These are all phones that are the same model, same IOS version, same department profile. Some show iMessages in the settings app as editable to toggle on and off. Others show it greyed out. And the ones that have it greyed out, it's greyed out and enabled on some, and grey out and turned off on others. I have not been able to see any pattern in the behavior. In fact, I deployed 2 phones to people in the same office with the same work roles. The phones were set up at the same time, same model, same IOS, same department/profile etc. Both have the iMessage toggle greyed out. One is enabled and the other is turned off.Unless I am missing something, this is problematic because unless a message sender specifically sends a bare bones SMS message, the recipient will not receive it until iMessages is enabled. I have checked the status of the setting bef

Hi, I'm new to Casper (hi) and I'm a bit confused about the Policy FUT and FEU options. Do I just use Composer to capture user-level preferences etc. from whatever account I'm logged into, then create a DMG from the result, or do I have to place user items in a particular place? Is it possible to mix user files and non-user in the same DMG? Sorry for the silly questions, but this doesn't seem to be covered in the Casper manual. Cheers, a|x

Hello!I am a relatively new JAMF admin in my org, but have been with my organization for almost 10 years most of that in a helpdesk or Desktop support role. I work in a K-12  organization. For most of the time I've been here, after every summer we often have high number of iPads (close to 20%) that just drop out of communication with our JAMF pro instance (on-prem) and have to be reset and re-enrolled to be properly managed again.  I've gone a few rounds of support tickets with JAMF without much headway until a recent ticket that I opened. The support tech noticed that our APNS push certificate is getting renewed around the time that we come back from school and it was hypothesized if we renewed the push cert more towards the middle of the school year that all of the devices would have time to get the new MDM profile.  Does this make sense? To me, because the topic code string is the same on the old cert and the renewed cert, the iPad's shouldn't have to g