Hello all,in the past weeks I've been looking at making our users MDM Capable on their computers to push user-level profiles. While it's still a work in progress, I've noticed a few weird results that I'd like to hear if the community understands what's going on.First, the user accounts are admins created by Jamf Connect during prestage enrollment. This is the initial reason why the accounts are not MDM Capable and that I'm trying to fix.After reading many threads, it would seem that using sudo /usr/bin/profiles renew -type enrollment is how many solved that. After trying, I find that the computer is no longer Managed by JSS and this happens on every computer I tried. Why does this happen ?Testing other options, I found that the Renew MDM Profile command from Jamf Pro Management also removes the management account. Leaving the Managed field of the computer empty. I don't understand why this happens.In the end, what worked so far is1. sudo /usr/bin/profiles renew -type enrollm

For BYOD and user-initiated enrollments, Setup Your Mac (1.9.0) now provides more detailed feedback for “Previously Installed” appsIntroductionApple’s Automated Device Enrollment helps streamline Mobile Device Management (MDM) enrollment and device Supervision during activation, enabling IT to manage enterprise devices with “zero touch.”Setup Your Mac aims to simplify initial device configuration by leveraging swiftDialog and Jamf Pro Policy Custom Events to allow end-users to self-complete Mac setup post-enrollment.Continue reading …

Hive Mind, I have a need to deploy goodsync. We use the script that downloads an install script (with the app base64 encoded into script) and installs. However, it fails to enroll to the goodsync cloud. It all works fine when I run the script interactively from root.Anyone get the enrollment working when deployed with JAMF?(We work in Jamf Pro)TIAJulie

Hoping you can help but please keep it simple for me!!I have a number of iPads bought from a reseller who adds them to our Apple Business Manager (ABM) account and all good - I work with these just fine.Someone at work bought 2 iPads NOT through reseller so I have no option to have them added to ABM. You need to know I DO NOT Have a Mac so cannot use Apple Configurator software either.So what I did:1. On iPad I went to https://OURNAME/jamfcloud.com/enroll2. Logged into Jamf and added MDM Profile and CA Certificate (including going into settings to accept them)At this point the iPad should be fine. I can see it in JAMF Pro but the issue is it remains "Unsupervised" so I cannot push a Configuration Profile to it. It will however accept an App being pushed to it.What am i doing wrong to not have it supervised and configuration profile failing?With many thanks, Alan  

We are about to restrict usage of iCloud to not allow iCloud Drive or Find my Mac. Before I do this, I need a good way to find out who has these features turned on. I have an extension attribute that will tell me who has iCloud signed in but I'm stuck on trying to find out who has iCloud Drive turned on and/or Find my Mac active. Does anyone know how I can track if these services are turned on?

 I have an odd issue with Connect. I have a computer that upon initial login created the user profile, but did not open the Notify screen to run the script. However upon further examination of logs, it looks like the notify script started running in the background after the profile was created and the desktop displayed. When the devices are prepped, the last package in DEP has the command to enable Notify. However, this computer did not show the actual Notify screen. It simply created the profile, dumped to the desktop, and ran the script in the background.To tack onto this issue I'm seeing in the logs of the polices that devices are somehow running them, even though the policies are only set to run via custom trigger. At no time did anyone explicitly run sudo jamf policy -event. Any theories would be appreciated 

First time posting hear and very new to Jamf Pro.  We are using Jamf Pro in the cloud and I am trying to figure out how to get Ventura 13.3 deployed.  I have created a policy and configured the Software Updates to use Apples Software Update server and does not seem to work.  found another article that says download from Apple, use Composer to create a dmg file.  However it won't upload to Jamf Pro Cloud.  Get to 2% and stops.  I am probably doing something wrong, but thought I would ask for input from folks that have done this before.  We are still learning so will take whatever we can get!Mike

I have seen the command line to pop open system preferences and go to the update window. For previous macOS versions, often the upgrade to the newest macOS is all that shows up unless you click the blue more info... in the description. Clicking on that would show the security update and safari update for the current macOS version. Is there a command line to open that link as well?

Does anyone have experience with getting LogMeIn's RescueAssist installed and working on computers remotely? I've been able to push out the unattended installer through Jamf, but without being able to grant RescueAssist privileges through Security & Privacy -> Privacy -> Accessibility I can view the user's screen but can not take remote control over the computer. With our staff all working remotely and us not having previously used this software prior to going remote, I'm finding it impossible to remotely control these computers. Jamf Remote does not work - I assume due to the varying router firewalls that users have enabled at home. Any help is greatly appreciated. Thanks!

Four Corners and The Silver State Jamf User GroupPresentationI was honored to present at the inaugural virtual meetup of the Four Corners and The Silver State Jamf User Group, 30-Mar-2023, on “Custom Branded Notifications and Messages with swiftDialog.”Continue reading …

Hello Jamf Nation,We are preparing to host our first instance of Jamf Pro On Premises. I cannot find the documentation for the recommended server requirements for the File Share Distribution point. We plan to use Windows Server 2019 to host the File Share Distribution Point. But how much Ram and Disk Space is recommended for the Distribution Point server? Thanks! 

Jamf has provided a means to control their Self Service app by using URLs.https://docs.jamf.com/10.28.0/jamf-pro/administrator-guide/Jamf_Self_Service_for_macOS_URL_Schemes.htmlThe client Mac that is enrolled in to Jamf and has the Jamf Self Service app installed would open a valid URL and this would trigger the Self Service app to perform the specified step. As mentioned in the above document, the URL for each Self Service app entry can be obtained in Jamf Pro by an administrator.It is therefore possible to write a shell script which in turn opens such a URL, however the shell script needs to both run with SUDO privileges and still show as running by the logged in user, this is something probably familiar to most Jamf Pro admins but an example script which I know works for this is available as follows.https://community.jamf.com/t5/jamf-pro/script-to-launch-self-service-from-policy/m-p/190052/highlight/true#M178853 What the above script does not yet do is detect when the Jamf Self

We have deployed over 200 macs utilizing Google Workspace IDP on Jamf Connect for all of our end user logins on macOS - Works Great!. Is there a way to take the IDP login and have all google apps logged in automatically? Example, end user opens chrome and gmail is already signed in? 

Just wondering if anyone out there has any ideas how to create a configuration profile that will remotely change the display resolution of an Apple TV.  We have some Sony projectors that when hooked up to an Apple TV 4K w/HDMI, the "Freeze" button does not function.  We have figured out that by changing the display resolution on the Apply TV itself the issue is resolved, but we would like to be able to change the resolution remotely for all the Apple TVs we own simultaneously.  Has anyone else encountered something similar, or know of any "quick fixes"?

When I try to add Chrome PKG as a In-House macOS Package I get the erorr 'Could not parse payloads of product archive.Any ideas would be appreciated

Hello Everyone,I have recently run into a problem with trying to enable Screen Sharing in our MACs. For some reason, in sharing, I am unable to allow Screen Sharing. Remote Management is allowed and on but if I wanted to allow Screen Sharing, we get a message saying "This service is currently unavailable" and that "Screen Sharing is currently being controlled by the Remote Management Service". The reason why this is coming up is because one our of teachers is trying to screen share her IPad to her computer. We have tried most of the scripts that have been posted here. Has anyone had these same issues?Thank you in advance!Joe

I have had a a configuration profile that sets some basic System Preference restrictions. Since upgrading to macOS Ventura the computers that are assigned that configuration profile cannot access some the the System Preference categories even though they are enabled in the configuration profile.IE: Desktop & Screen Saver preferences are enabled, however, when selecting it on the computer it say it is controlled by a profile.Computers running Big Sur or Monterey allow are working as expected.

Documentation and course materiaal provides this script to Display a message to a user, if they click OK, then open Self Service. messageToDisplay="$4"policyToExecute="$5"policyAction="$6" buttonClicked=$(osascript << EOFbutton returned of (display dialog "$messageToDisplay" buttons {"OK", "Cancel"} default button 1)EOF) if [[ "$buttonClicked" == "OK" ]];thenopen "jamfselfservice://content?entity=policy&id=$5&action=$6"fi However, this fails when the script is run in a policy, due to the JSS running the script as root instead of currentUser. Working with Jamf support we were able to make the modification below, which allows the script to run as intended when deployed via policy. messageToDisplay="$4"policyToExecute="$5"policyAction="$6"currentUser=$(ls -l /dev/console | awk '{ print $3 }') buttonClicked=$(sudo -u $currentUser /usr/bin/osascript<<END tell application "System Events"activateset the answer to button returned of (display dialog "$messageToDispla

Hi,I tried to create Push Certificates but don't know where is place to upload certificate?Here's my step:1, Click on Jamf Account and input my Jamf ID2, In this step, I don't know where used to upload certificate?  Thanks,

Hi All,  We've recently been sending some old machines to a reseller. Before sending these machines out to the reseller, these are removed from ABM and then removed from Jamf.  However, our reseller has gotten in touch and told us that they are still seeing the odd machine in Apple's master DEP enrollment database. just wondering if we're missing anything and if anyone has an idea of how we can check for any other aspects of DEP enrollment. 

Team, is there a quick and easy way to export all recovery keys? Also, do we have the option to export this from smart group sorted details from Jamf Pro?

Does anyone have a script or something to remove Adobe Air from our Macs? Our past IT guy installed it on everyone's computer but we have no use for it anymore and I'd like to get rid of it. I haven't been able to find a script anywhere to uninstall Adobe Air.

We have a handful of users having Dock issues after updating from macOS 12.5 to 12.6.1. At login the Dock will take several minutes to launch or never appear at all. Sometimes a restart will bring the dock back, otherwise manually invoking a DockLib script will give it back. Has anyone seen this issue in their environment?

I have distributed Windows ATP for Mac like described here https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/mac-install-with-jamf It works fine, but the auto update of the ATP does not work. According to https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/mac-updates And I run ./msupdate --install --apps wdav00 no updates are found - even I can see the all clients are not updated and have a "yellow" alert sign Anyone know how to add ATP so it will work with MAU?

Issue is, right now, prestage enrollment of iPads isn't working. The error I see in our Jamf cloud/Pro server logs is:2023-03-29 16:59:04,484 [ERROR] [duledPool-5] [ileAssignmentSynchronizer] - DeviceEnrollmentProgramException[responseCode=404, responseBody='PROFILE_NOT_FOUND', message='The DEP service reported an error.'] com.jamfsoftware.dep.comm.DeviceEnrollmentProgramException: The DEP service reported an error. at com.jamfsoftware.jss.objects.streamlinedenrollment.service.comm.DeviceEnrollmentProgramRequest.sendOneTime(DeviceEnrollmentProgramRequest.java:65) ~[classes/:?] at com.jamfsoftware.jss.objects.streamlinedenrollment.service.requests.AssignProfileRequest.send(AssignProfileRequest.java:34) ~[classes/:?] at com.jamfsoftware.jss.objects.streamlinedenrollment.service.requests.AssignProfileRequest.send(AssignProfileRequest.java:14) ~[classes/:?] at com.jamfsoftware.jss.objects.streamlinedenrollment.service.comm.DeviceEnrollmentProgramConnection.sendRequest(DeviceEnrollmentP