Hello:We're on a 1:1 iPad program. We use Linewize as our safety filter.Over the past few days I've had three kids report an issue with searching within Safari. I've been able to determine they have the same issue with searching within Google Chrome.If they enter in a full or even short url, the page loads. If they enter search criteria or just 'cnn' without adding the .com, they get a block page. Other apps such as PowerSchool, Schoology, etc. that rely on Internet access all work fine.I haven't changed anything in Jamf within the past few months -- other than updating their Microsoft365 email settings -- and I'm the only Jamf administrator.I can't find any proxy settings that would be in place. I tried switching one student to manual DNS using 8.8.8.8 and 4.4.4.4 but that didn't fix the problem. I also tried the OpenDNS numbers. I've confirmed they're not using a hotspot or VPNs.So if they type a URL into the Safari/Chrome field, the page loads, but if they just type in a search term

Hello everybody,fdesetup authrestart seems to be broken for accounts that have never logged in.I created a new user “test” with password “test” via Users & Groups (so it got a secure token and is a volume owner) and tried to authenticate fdesetup authrestart -delayminutes -1 with that account. I got an error and fde prompt after the next restart. After signing in as “test”, signing out and signing back in as original user, fdesetup authrestart worked for user “test”. This also applies to startosinstall and softwareupdate on ASi Macs, when trying to get either working with a managed admin account that has a secure token, is a volume owner but was never used to sign in, I always get the fde prompt after the first restart. When I try the same with the logged in user and password it works.Any workarounds for this?

Hello -Our organization recently purchased Jamf Connect for our macOS devices to manage SSO and the local accounts/their roles.I have this being pushed to the devices through Microsoft Endpoint. It worked the first couple times, but seems to be causing an issue now.I have the macOS devices to automatically be picked up upon azure registration to a dynamic group, that the Jamf Connect software and mobileconfig files push through.During the macOS setup we get to the local admin account creation. Previously, if we let it sit at this screen for a bit then restart the device through endpoint, it would pull up the Jamf Connect login page to authenticate with azure.Whenever we restart it now, the mac devices fall into a bootloop and the only way to fix it, is by erasing the drive and reinstalling the OS.Has anyone run into this issue? Am I able to skip the local admin account creation step?We had an implementation session with a Jamf consultant, but he seemed to be more of a sales guy than an

I have been tasked with creating a Policy to push out ActivTrak to MacBooks.  It installed just fine the problem I'm running into is it asks the user to grant Accessibility access.  Obviously with ActivTrak being a tracking software to see what our employees are doing we want to push it out silently and we don't want to depend on the user to grant access.This is the first PPPC Configuration Profile I've attempted.  It says completed on the machine but it isn't setting the access that ActivTrak needs. Below are the settings I created for the PPPC payload.  I got the CodeRequiment with the codesign -display command.  I also added an Extension payload of com.bgrove.scthost not sure if this is necessary.  Any help would be appreciated.Identifier: com.bgrove.scthostIdentifier Type: Bundle IDCode Requirement: identifier "com.bgrove.scthost" and anchor apple generic and certificate 1[field.1.2.840.113635.100.6.2.6] /* exists */ and certificate leaf[field.1.2

Just getting started w/ Protect.  Can it also stop the addition or use of browser extensions? Thanks!-Kevin 

Hey all!  Just updated my M1 Mac mini to 11.5.1. Everything installed just fine, however when it booted back up it could not connect to any network. When attempting to open an application it looks like Rosetta 2 was uninstalled from the machine. My attempts to install it failed since I couldn't connect to a network (only tried internal networks) I rebooted, then every time I attempted to login with Jamf connect it rebooted the computer (still no network connection, used local login). I booted through safe mode and I could get a network connection. Then the screen went pink and it rebooted to recovery. Attempting to reinstall now. Anyone seeing this on their end / know how to prevent rosetta from uninstalling during a software update? For now I have set our update policy for the company to defer for 90 days.  UPDATE - Attempted the same update on the M1 MacBook Pro. The same issue occurred. This time I attempted connecting to a hotspot. Still no network connecti

Jamf connect installed on devices. Not binded to AD.User changed their password on a windows device. When they go to a Mac and try to login, the message stating "network password does not match your local password. Please type in your old password to sync.".What do you do if they don't remember their old password? Trying to deploy a password change for the local account through jamf has been unsuccesful.Is there a way to auto update the local password without having to type in the old one?

In testing, the managed TVOS slideshow app Exhibit (https://marketplace.jamf.com/details/exhibit/) looks for perfect for our needs, with one critical drawback. In single-app mode it does not load its slides. This kind of defeats the whole point of Exhibit for us. I'm wondering if anyone has found the same bug, and if there's a workaround.

Hello, I would like to grant user admin right for some time.I have created a policy using: https://github.com/jamf/MakeMeAnAdmin/blob/master/MakeMeAnAdmin.shLogs error: Any idea ?Thanks

We have an app installed on devices in our org that needs relatively frequent removal and reinstall. Most frequently, the user provides their serial number, sometimes the asset tag associated with the device (which is in the jamf pro device inventory record). jss_url='identifier.jamfcloud.com/' username=apiuser password=apipassword authToken=$(curl -su "$username":"$password" https://"$jss_url"/api/v1/auth/token -X POST) api_token=$( /usr/bin/plutil -extract token raw - <<< "$authToken" ) #response=$(read -p "enter s/n: ") response=1070 #this is added for testing adding the device by inventory id apidata="<mobile_device_application><scope><exclusions><mobile_devices><mobile_device><id>$response</id></mobile_device></mobile_devices></exclusions></scope></mobile_device_application>" curl -ks https://"$jss_url"JSSResource/mobiledeviceapplications/id/77 -d "$apidata" -x PUT -H "Authorization: Bearer $

Weird thing. All our iPads that updated to 16.2 in JAMF PRO no longer have the ENABLE LOST MODE button in the management tab.I always seem to have strange issuesSara

We are trying to set up our Macs with a Software update policy from this link. I've set that up and deployed it to my test machine (M1 Mac running 11.2.1). I ran a 'sudo jamf policy' to kick it off and see what the process would look like. After the initial password to run the sudo command I was prompted again for my password and then it took awhile to I assume download the update (11.6). After downloading in terminal it says the update is complete and that it does not require a restart or a shutdown. However the update never installs, the Mac is still running 11.2.1, I rebooted the machine and it didn't apply any updates. Any thoughts on why its downloading but not installing? 

I need someone help from pro here on how to deploy the below config on all firefox browsers via JAMF have to enter the network.negotiate-auth.trusted-uris = .kerberos.okta.com here are the manual stepsOpen the Firefox web browser,enter about:config in the Address bar, and press Enter. If the Proceed with Caution message appears,click Accept the Risk and Continue. In the Search preference name field,enter network.negotiate-auth.trusted-uris.Click Edit, enter .kerberos.okta.com, and click Save.your help is much appreciatedThank you

Hi everyone, This seems to be very hit and miss on Yosemite. Traditionally, we enable fast users in Managed Preferences. User level enforcedDomain : .GlobalPreferencesKey: MultipleSessionEnabledValue: True This works perfectly on 10.9 and below. 10.10 seems to have problems with user level enforced mcx, sometimes it applies, sometimes it doesn't. How is everyone else managing fast user switching in yosemite? I have tried defaults write /Library/Preferences/.GlobalPreferences MultipleSessionEnabled -bool 'YES'which doesn't seem to work either. I have also tried a custom setting via configuration profile but no luck with that also. Any ideas?

Hello All,Running the following command:/Applications/Privileges/Contents/Resources/PrivilegesCLI --status > /private/tmp/status.txtcreates the file named status.txt but it is empty (stdout is not redirecting to the file)I was wondering if someone that has Privileges and or those that would be willing to install it on a machine and try the command can get it to work?  I've tested this on Big Sur, Monterey, and Ventura all with the same result.For what it's worth, I've tested the commandls -al > /private/tmp/filename.txtand it works with no issue.  It's as if the PrivilegesCLI binary is missing something to be able to redirect the stdout to a file.

I am looking at wanting a Powershell script to access the JAMF School API to pull a list of devices and their WiFi Mac addresses.Any hints or directions for a start with he JAMF API?

We've recently run into an issue where a user accidentally logged in to their personal Microsoft 365 account rather than the company account, which creates some data headaches as company files were syncing to a personal account. I'm trying to find a way to collect the Microsoft 365 and OneDrive usernames into an Extension Attribute so we can audit them, but I haven't had any luck. They don't seem to be stored in a plist anywhere, and I haven't been able to find a terminal binary that will report the login names. Any ideas? Thank you!

Hello, I inherited a Mac fleet that we use JAMF pro to manage. I work for an educational institution, and we have several labs that we have bound to the domain. The previous admin implemented NOMAD this past year and now we have an issue when users change their AD passwords. The new password on those lab system is not recognized, it doesn't not seem to sync to AD, so they have to keep using the old password. I found the configuration that the admin used for the Nomad settings in JAMF but in referencing different forums/threads there doesn't seem to be many settings set that relate to the NOMAD password behavior, I've never dabbled with it so I'm trying to figure this out on the fly. I just thought I would post this to see if my suspicion is correct and for some kind of direction. below is the plist that we are using. thanks in advance  <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1

Hello everyone!I'm trying to update our Mac in JAMF Pro (Cloud) to the latest MacOS versions and I'm seeing a lot of computers being Supervised: No and missing our management account in Local User. The funny thing is, they are checking in and inventory updates but I can't seem to send commands or even try to re-enroll through API, I get 401. How can I re-enroll them to have the management account back in and without them to wipe and re-enroll. There must be a way to re-enroll without impacting the user ?

I wanted to be able to have quick way of finding all of my managed Macs with a T2 chip. I made a smart group that tracks by model and it seems to work well, but I don't know if there's a way to use an extension attribute to query each system for the presence of a T2 chip. We can do this with the processor architecture. Can we do this to detect a T2 chip?

Title pretty much says it all. I have my own mac to be independent of my main organisation. On it I work on documents from many organisations some of which are confidential. My (very helpful) mac support says that JamF is take it (so my organisation have access to my machines, including apps, files, and the ability to wipe it) or leave it (and not have access to email/calendars, etc).I've asked whether I could be administrator for my own machine (and only that one), but it's a no go, apparently.Any guidance anyone can offer on what I'm getting into if I accept would be really appreciated.

I have paired my Yubikey with my mac. Pin has replaced my system password.I want to check the certificate expiry date in Jamf Inventory. I do not see the concerned certificate in Jamf inventory/computer/certificates !! I do not see the Yubikey certificate in my keychain either !!Any idea where the cert is stored ? How make it visible in Jamf ?

Hi,We've a number of Intel and M1 Labs Mac's that are running macOS Monterey for this academic year, at least so we'd planned ... They were updated to 12.6.1 to allow maximum deferral of Ventura, which is of course coming to an end imminently ...Testing various options, using Jamf's Restricted Software feature:On M1 Mac's we're seeing that you have to be logged on to and authenticate as Local Administrator to proceed with the updateHowever with Intel Mac's this simply isn't the case, even with the Restricted Software setting in place, a standard user can simply instigate the update, without any issue Might anyone know if I am doing anything wrong here? Or is this simply as it is? As if it is, this could present a potential issue in our Labs ... Thanks for any input / advice   

Hello Friends, I have a script which will run on mac and pop up will appear to enter your host name. Issue- I-  am getting this error (Script result: 37:45: execution error: System Events got an error: Application isn’t running. (-600)Rename Successful), how to solve this? Actually pop up is not appearing but if i use, sudo jamf policy then i am getting pop and able to rename Issue -2 -  how can i add one logo on pop up? Script#!/bin/bash#Freddie Cox for Knox County Schools#Edited by Justin Ellis#2012ComputerName=`/usr/bin/osascript <<EOTtell application "System Events"activateset ComputerName to text returned of (display dialog "Please Input New Computer Name as LT with asset number of the laptop EX-LT1234, Asset number can be found on bottom of your laptop" default answer "" with icon 2)end tellEOT`#Set New Computer Nameecho $ComputerNamescutil --set HostName $ComputerNamescutil --set LocalHostName $ComputerNamescutil --set ComputerName $

Hello, I am trying to deploy a script that will ask users if they've filled out and submitted their time sheet. If they click Yes, the message goes away. If they click No, it launches Safari and brings it to the front. I can get it to run on my machine just fine, but when I try to deploy it via Casper Remote or a policy, I get an error saying that "<" is an invalid character. In the very short script, I've quadruple checked, and can't find a < character at all. Can anyone offer any help as to what's going on? For reference, here's the script (website it goes to has been changed for privacy): display dialog "Have you completed your timesheet?" buttons {"Yes", "No"} default button 2 if the button returned of the result is "No" then tell application "Safari" to open location "http://google.com/" tell application "Safari" activate end tell else nu