Helpful Links  We know a few things have moved around. Here is a set of links to help you find what you need. Community Guidelines Jamf Account Jamf Homepage Product Documentation Search Training Courses Training Catalog Jamf Marketplace Jamf Swag Store dogs.Jamf.com Commonly Asked Questions How do I access Product Documentation/Knowledge Base articles? You can access these documents in two places within Jamf Nation: In this post under the Helpful Links.  In the footer of Jamf Nation. Note: Knowledge Base articles have been converted into Technical Articles for consistency with the other product documentation that Jamf publishes. Where do I access My Assets? This lives within Jamf Account Where do I contact Support? You can access Support through Jamf Account Where do I access the training materials? You can  easily access the training materials in Jamf Account How do I submit a Feature Request? The Feature Requests tile on the home page of Jamf Nation con

Anyone have best practices for redirecting the ~/Library folder to a network share for Mac OS End-users? I have an Educator that insists that this happens. With a script run at first login, we can easily achieve the redirection of the Library folder to a network server using a symbolic link that points "/User/Username/Library" to the End-users home share. We do this succesfully for allother folders (e.g., Documents, Music, Movies, etc.). The problem is that we don't want to point to an empty folder, so we try to copy the contents of the local folder to the Home Share before deleting the local folder and creating the symbolic link. The folder appears to be quite large (~18GB), and copying it is impractical at first login. Furthermore, I'm finding that the Mac OS doesn't want to read plist files in the redirected library folder, which means most of our JAMF policies fail. I'm open for any suggestions.

So our Security department has found a major bug with all Git Clients that access Git repositories. https://github.com/blog/1938-vulnerability-announced-update-your-git-clients Im wondering if anyone knows what the most popular Git Clients are on Mac OS x. Thanks!

Hello all, I'm new to JAMF and I was wonder if there's a way to change the option names in Self-Service? For example, when you open Self-service and on the left you see HOME, BROWSE, NOTIFICATIONS, HISTORY as the default, is there a way I can change those to say something else? I'm sure there's a resolution to this, but I can't seem to find it. Thanks for the help.

Hi everyone, Pulling my hair out in regards to implementing Jamf Connect in a PreStage Enrollment. The SSO mechanism is using Azure. If we don't implement any PreStage Enrollment, the DEP MacOS device will prompt for our Azure credentials and then prompt for a Local Account to be created.  Once logged in, we can then push all the Jamf Connect profiles and policies to the device, reboot and Jamf Connect works like a dream. This is the same for User Enrolled devices using the web enrolment URL. The issue comes when I try to get it built closer to a Zero touch solution by adding in the PreStage enrollment. It goes through the Azure Authentication prompt, installs all the profiles (can't see if it is installing the Jamf Connect package, but I'm guessing it is because it is in the PreStage).Then I get a prompt, "Hello (User).  Please re-enter my password". I can see that this is pulling the correct User from Azure because I've changed the claims to ve

Hi, we are currently using our jamf pro istance to manage some iPads. They are shared among our users (mainly as drawing devices for our graphic designers or to present the proposals to the clients).The issue i would like to solve is this: sometimes users downlaod and log in to gmail or to the synology drive app with their personal account. This is correct because they are sometimes needed.I would like to reset those apps every day or when needed. Is there a way to do that without resetting the ipad each time?

So I'm looking at this guide on Office templates. I created a DMG and did FUT/FEU to deploy the templates. I see them in the "/Users/username/Library/Application Support/Microsoft/Office/User Templates/My Templates" folder. But I want my end users to just open Word, Excel or whatever and have the templates show up in the main screen along with the rest of the templates: Has anyone done this before in Office 2016?

Hey Guys,is there a way to build a smart group for "not used" Apps in the last (maybe) 10 days?We want to shorten our Browser List and remove Firefox, but first to all Devices that don't use Firefox.I checked the box for "Collect Application Usage" and we see the Usage Information in the Computer Objects. I just need a way to collect all information into one Group to scope the removal script.Thanks for some Advice!

hellow community, i need your help today with a DEALY issue after applying the following script in Jamf Pro. after adding the script into Jamf there is a delay with the logon for the end user.username="$3"serialnumber="$(ioreg -c IOPlatformExpertDevice -d 2 | awk -F\\" '/IOPlatformSerialNumber/{print $(NF-1)}')"ip="$(ifconfig | grep 'inet 10' | grep -m1 -o '\\d\\{1,3\\}\\.\\d\\{1,3\\}\\.\\d\\{1,3\\}\\.\\d\\{1,3\\}' | grep -m1 '10')"#echo ${username} >> /usr/local/bin/Logs/logs.txt#echo ${serialnumber} >> /usr/local/bin/Logs/logs.txt#echo ${ip} >> /usr/local/bin/Logs/logs.txt

Our clever students are now switching their bluetooth off so that Apple Classroom doesn't work on their iPads. Is there a way for me to force it to be always on? At least whilst they are on campus? Or maybe get a notification if it's turned off? Just strategizing first to see what you guys say for an easier option.

Hello,we are facing the following situation:In a 1:1 Scenario (sponsored BYOD) the provided iPads belong to the students, so we are not allowed to fully manage them with Jamf. Nevertheless we use User Registration and deploy some profiles with settings like WLAN Access etc.What we are looking for is an option for location based WLAN Access and/or deployment of profiles: The students should be able to apply a profile (automatically) when entering the WLAN at school and also the profile should be deleted when leaving  school (or the WLAN).I did some experiments with Jamf places, but it did not really work well. Some experiments with the external IP Adress of our school and various subnets/places did not work either.So is it possible to establish a workflow like described above or are there third party products to provide these functionality?We use Jamf School. i have no experience with Jamf Pro - is this possible within Jamf Pro?An help or suggestions  would be very welcome&nbs

We are having numerous (but not all) Macbooks failing to enroll in jamf when they are first being setup. They are not installing self-service app and do not show under computers after setup. Weird thing is that config profiles are being installed. Some of these are M1's and others are Intel based systems.Can someone point me to what logs we could look at to see why these are failing?

Hi all We have an EA in place to retreive the Apple update server CatalogURL that's set on each Mac, it works consistantly on all our 10.9 machines but i'm getting incosistent results from 10.10 and 10.11 machines. We're pushing out the CatalogURL in a computer level Configuration Profile so it adds the CatalogURL to /Library/Managed Preferences/com.apple.SoftwareUpdate.plist andnot to /Library/Preferences or /var/root/Library/Preferences If i run jamf recon the EA reports back with no result on about half of the machines if i then run the command directly on that Mac in terminal (the plist definitely has a CatalogURL key within it) As root defaults read /Library/Managed Preferences/com.apple.SoftwareUpdate CatalogURL i get Segmentation fault: 11 as admin sudo defaults read /Library/Managed Preferences/com.apple.SoftwareUpdate CatalogURL i get no result as admin without sudo defaults read /Library/Managed Preferences/com.apple.SoftwareUpdate CatalogURL i either

I'm trying to run Crowdstrike on a VM for macOS Ventura 13.0 but it fails to install - when I check the logs in jamf I get this error:Installation failed. The installer reported: installer: Cannot install on volume / because it is disabled.installer: The version of macOS is too new.Does anybody know how to fix this?

Hi all,I have enrolled 25x ipad before I upload the inventory preload csv, is there a method for jamf pro to sync/update the data information from inventory preload? 

We are having issues connecting to Monterey Macs with ARD suddenly.  We enable Remote Management during setup with a script (down below) that uses the kickstart command to activate, set access to specified users, specify the local Administrator account that is on all machines, and finally allow that account all privileges.  This allows us (IT) to remote into machines while they are in one of our buildings/on our network to work on them or help users.  Some of our machines run a second script that allows another local account on them for teachers to access but with fewer privileges (basically observe and message only).  When connecting to a machine, ARD will give the following error:Screen Sharing is grayed out in System Preferences as usual, but unchecked.  We're not really sure what caused this sudden change.  We do get the occasional 'black screen with mouse only' issue, which we resolve by sending the Disabled Remote Desktop command from the Mac's manag

Below is a screenshot of the Jamf School Profile/Settings interface.I am confused about how to do this overall. Is the idea that you basically create holistic settings that are all encompassing for a type of device, and you put all of the things and stuff in one, and only apply "one per device" or is the idea to be granular and only for example configure the WiFi, Certificates, DNS Proxy if needed, and that's it.If the idea is to be more modular, is there any type of guide that covers which policies can conflict in which case it's a race condition to determine which profile is applied if there are conflicting settings that would prevent the other profile from applying?If I had to guess it should kinda look like this.Modular profile 1 - Connectivity related settings only. So WiFi, Certs, and anything needed to get your content filter to work on the device. Beyond that, I don't know. How should these things be chunked up, or should it be that beyond the connectivity profile, that it

Hello Team, Our organization's mac devices are getting managed by JAMF but device has to be registered in Intune/AAD to implement conditional access policy, and this process is manual, I mean users are supposed to open Self-Service app and run the Intune registration app to follow the next steps to register their mac in Intune/AAD. My question is that, is it possible to automate this job so that all mac devices will be registered automatically in Intune/AAD at the time of enrollment in JAMF?

Dear Community! I am having a hard time finding a solution for scheduled machine restarts. I have plenty of mac devices in my fleet and my users tend not to restart their machines once in a while so I wish to set a two week / 1 restart schedule for instance every second week wednesday 17:00 in the afternoon - so they dont come complaining that they are out of memory and their machines are slowing by the day. Does anyone have any ideas on how to do this? I even wish to have a countdown and a notification to save everything because your machine will automatically reboot in 30 minutes (for instance).  Is this possible to do in Jamf?  Thank you in advance!David

Hello,Our institution is using Jamf | Pro. One of the requirements for computers in our labs is that we ensure we have the same keyboard input options (with many different languages available as inputs) across all of our Macs, while maintaining the standard U.S. keyboard as the default input.I understand there are many ways of producing the .mobileconfig files for delivering a custom payload as a configuration profile. I'm beginning to learn the options provided by iMazing profile editor, for example; however, I haven't found any configurations within it for managing keyboard inputs.So, I used a test computer and made the keyboard input preferences on it that we want (via System Settings, Ventura). I then pulled the com.apple.HIToolBox.plist containing those preferences. If I were to attempt using that .plist as a method, I then need to get the file into the .mobileconfig format for Jamf | Pro's payload. I'm not quite sure how to go about this.Jamf has documentation available online th

Hi allI have setup our Jamf Protect tenant and have integrated it with Jamf Pro.Ive setup Jamf Pro to automatically install the Jamf Protect Plan. When it trys to install the configuration profile on a macbook I get the following error message“The certificate could not be verified (authentication error)”Also, when I save the Jamf Protect configuration profile, it says Error Check your Jamf Server Software logs. When I look at the logs it doesn’t make much sense to me.Thanks,

Wondering if this is just an issue with my tenant or if others have noticed the same problem with Ventura. We use Jamf Connect for our Azure IDP and it works great on all Macs that have not updated to Ventura. My own device and Ventura test users are noticing that Jamf Connect no longer prompts for Azure Credentials when signing into computer. We only get the File Vault login and then it logs directly into user account. I had to update my password this morning and I did it with the Reset Password option from the Jamf Connect Menu. It changed my Azure password, but not my File Vault password and now Jamf Connect gives me an error and says I need to sign into my account again. The problem with that is the username and password fields are greyed out and I can't type in them.  

 We typically use Jamf to send a lock command to our MacBooks on. We have one MacBook that has the "Incorrect PIN entered too many times. Please try again in x minutes" where x = 24,321,071.Does anyone know of a way to get past this besides waiting 46 years?

Trying to write a replacement for SetDefaultMailApp which implies LaunchServices but seems to be part of CoreServices now and I've installed the python module but have no idea how to import it so I can use LSSetDefaultHandlerForURLSchemeThanks for any Python 3.11 help.

Hi EveryoneI am facing issues with Pulse Secure in macOS Ventura. Hostchecker.app is blocked by macOS as it is not from an identified developer. Any Idea how this can be allowed as this is causing SAML authentications to fail.Message in system Settings: "HostChecker.app" was blocked from use because it is not from an identified developer.Error: "HostChecker.app" is damaged and can't be opened. You should move it to the Bin.