Here's what I'm talking about: I've tried several Configuration Profile configurations and followed the instructions as provided by Cylance, but what's pictured above still appears. For now, we've been manually hitting the "Allow" button to ensure that Cylance fully installs. Any advice would be appreciated!

Hello,I have a couple iPads at remote sites that are signed in with other Apple Ids is there a way to remotely remove the Apple ID with Jamf Pro, preferably without erasing it?

New to Jamf. We're finding that a fair few of our users are no longer checking in on the frequency we've set. Also finding that sending blank pushes etc doesn't seem to be doing anything, so the assumption is they've deleted the MDM profile. Is there a way to tell this for sure without having access to the Macbook itself?

Majority of our Macs are not registered in Azure AD. We have had reports of users getting promoted way too often to MFA. We use Jamf Connect. But I noticed in the Azure logs Jamf connect shows single factor authentication most of the time and it’s successful. Anything related to Jamf connect multi factor authentication usually shows as Interrupted. If we deploy Company Portal and the Config profile to register device to Azure AD. Would that help with the prompts that users are getting? I also see there is a SSO plugin that Microsoft shows as in preview. Could that also help? It does need Company Portal to be on the device as well I see.

Anyone else had any issues signing into a Onedrive for business on a M1 Mac on Ventura ?Same package on an intel machine works fine , tried even on a 4G connection and just can't get it to sign in ? Error just says Sorry, we can't add your "Onedrive - xxxxxxxx Folder right now. Please try again   given One drive fill write permissions , updated OS and latest installer , even on a 4G connection 

I am looking for a way to password protect individual apps on an Ipad. If the user wants to open the app he must first activate it with a password? Has anyone experience and solved the problem?

Is it possible to push the Change Management Logs and Jamf Pro Access Logs to a SEIM like SumoLogic? We currently have a ComputerCheckIn webhook event that's set up to send data to SumoLogic but I don't see an option under the Webhook Event types for the two logs I mentioned above.

I have a whole department that gets a standard wallpaper but I'd like the option to assign device specific wallpaper to devices within the department. If I have a wallpaper assigned to a group of devices and I try to assign a different wallpaper to a device within that group, would one take priority? Or if they are pushed by command, would the wallpaper simply toggle between the two when each push happens?

Hi JAMF Nation, Good afternoon. Just need your guidance on the best way to update SentinelOne agents using JAMF. I am assuming that the "update agents" function in the SO UI is not the way to go for this case. Do I simply change the pkg in the configuration profiles? TIA!

Hey all,Was working on deploying a new macbook when I noticed our configuration profiles were not deploying.I looked in the logs and see this: "The current system configuration does not allow the requested operation"I saw this article from Apple: https://support.apple.com/en-us/HT212596But I honestly have no idea what they are talking about or how to build or config profiles so they have a "PayloadIdentifier" I assume this is the issue but not sure, anyone else having problems with this?

Hi,I am just bought new Apple changed the Airdrop option from "Everyone" to "Everyone for 10 Minutes". We use Jamf Pro in a huge educational enviroment with the Classrom-App. The problem is that teachers can´t send documents to students after the 10 minutes have elapsed. So every student has to change the setting again after the time period which is not practicable. Any hints to fix that problem or any workarounds? Tell CulversHelp will be appreciated 

The Block policy is not restricting any website, even after configuring the Profiles, and mapping groups in Jamf Radar.Any suggestions?

Hey everyone, When deploying a new Mac using ADE, the user first login with their Azure AD account then they get a prompt to change their temp password so they choose a new password and verify it, after that they get this window : They enter the new password they have chosen and hit "Create account" !! isn't weird that they are getting this!!?Also if they reboot their Mac, you know they need to enter first their FV password to unlock the disk but it doesn't work !!! I had to use PRK to unlock the disk then I got JC login window, entered the password they've chosen and  booom they logged in !so it seems we have an sync issue between FV password and local account password! to solve it I had to go to Users and Groups preference pane and changed the password to something else and rebooted the Mac, it worked!So this is happening i think because when the account signed in first using JC login window with Azure, the user got prompted to change their temp password. when the

I'm just wondering if there is a way to re-read the preferences for a user without logging out and back in.In particular, I've removed a plist file for a user for printer preferences 

Hey,is there a possibility to disable the Guided access? The students are frequently setting codes, which is very annoying...

Should I create smart computer groups for each of my licensed software that I want to keep updated with Jamf App catalog? I am concerned that if I choose all of my managed clients, the catalog will install licensed software on my assets that did not purchase a license. Also curious that if I use Jamf App Catalog to keep Google Chrome or Mozilla Firefox updated will it only update the assets that have it installed or will it install the latest version on all of my assets?

We recently got a ticket to install vectorworks on a bunch of managed iMacs. The iMacs are in a video lab, where the only account the student's can use is the guest account. This is causing issues with the license not sticking when the user logs in and out. Has anyone come up with a way to install vectorworks and license it for the guest account? I know Apple is fading out login scripts, but would they work for this? From what I have heard, here are the places a license file needs to be: 'HD > Library > Preferences' “net.nemetschek.vectorworks20XX.plist” 'HD > Users > (User's Home Folder) > Library > Preferences' "net.nemetschek.vectorworks.license.20XX.plist" “net.nemetschek.vectorworks20XX.plist” There is a 2018 folder in 'HD > Users > (User's Home Folder) > Library > Application Support > Vectorworks' Has anyone done anything like this? Thanks in advance.

Hi, In searching for a better way to install Apple Loops and other post-install downloadable content from apps like Logic Pro and  GarageBand, I see that Carl Ashley has created a new tool called loopdown. It basically downloads all the loops based on the app's plist and creates smaller packages (I believe based on folder structure) ready for uploading to MDMs like Jamf. It appears to work great. The only problem is that it produces a lot of packages (840 for Logic Pro and 707 for GarageBand) and I was wondering whether there is a way to bulk upload these packages? I'm not asking about deploying all these packages in 1 policy. I know we can do that but rather upload them to the cloud repo.

Appologies if this has already been addressed however after a bit of a search through the messages I am strugling to find an answer to the following scenario.  I am using JamfPro to setup and manage new company iPhones with the intention of providing staff with a work tool that is locked down for business with apps etc being pushed centrally to the devices. It is intended that Managed Apple ID's are being used to enable staff to use imessage.  The area that I am struggling with is getting the users to be able to log into their managed ID's at the enrollment stage, prior to the configurations kicking in and preventing account modifications. Witin PreStage Enrollments I have left  'Apple ID and iCloud' as a Setup Assistant Option, however devices are skipping past the question. The only work around I have found is to remove the configuration restriction for Modifying Account Settings to enable sign in and then to restrict them once more, which is less t

We have a handful devices that are not communicating with our JAMF server. They are showing with the prefix DEP- and Unsupported OS. All devices are MBP running macos13. The management tab when selecting the device just spins and never loads.Also tried running sudo jamf removeFramework to remove the profiles on the device itself to no avail.Not sure what my options are currently. A coworker recommended reformatting but not exactly something i'd like to have to do with 10 devs.

Hello all,I was just wondering what everyone's strategy is for managing Adobe Creative Cloud applications with Jamf App Catalog packages.We have Creative Cloud 2022 installed, and are looking to move to 2023 soon.  Could anyone comment on the behavior of pushing out 2023 to systems with 2022 installed using the Jamf App Catalog functionality?  Will both remain installed?  If I remove 2022 systems from the scope of the CC 2022 App Catalog smart groups scopes, will it get uninstalled automatically.  Do you need to force uninstalls of the older versions of the 2022 applications from outside of Jamf App Catalog.I know this will require testing, but looking to see if anyone else has gone through this yet.  Didn't find a Jamf Nation article that addressed this (yet) Thanks!

We have been using JAMF for a few years now and have quite a few leased and purchased Macs in our system but a lot of deprecated policies, profiles, and other settings that we are wanting to rebuild mostly from scratch. We are going to be entering into a new lease later this year so rather than try to go through each item one by one we are wanting to rebuild the system for the new lease while still being able to support the existing leased and purchased Macs.I know how to create a new PreStage Enrollment but most of our policies and profiles are set to "All Computers". I know that I can make an exception in each one by using a smart group but is there a way to immediately separate the new PreStage devices without creating a new JAMF environment to where they won't get any of the old stuff?

Hi all,Our personalised version of https://instancename.jamfcloud.com/enroll doesn't seem to be reliable - in short, it sometimes works on some machines (apparently at random).In Safari, the page starts loading but stalls fairly early on and eventually throws the error below (i've starred our instance name).Safari Can't Open the Page Safari can't open the page "******.jamfcloud.com/enroll" because the server where this page is located isn't responding.I've tried rebooting, clearing all website data, using standard and private windows, and also in Firefox, but if a particular machine doesn't want to connect then nothing seems to work. Any thoughts?..Thank you!

I have to write a python script to block computers from downloading and installing OracleJDK using JAMF how i can achieve this

Hi folks,I'm currently creating a new process for user initiated enrollments using DEPNotify. For testing, I'm removing all local device jamf components and running API scripts to unmanage/ un-enroll the device and de-selecting the "Allow Jamf Pro to perform management tasks", but keeping the JSS record intact. Then performing changes to the build script / procedure and re-enrolling again for testing purposes.However, what I've found is that if I don't delete the JSS record for the device, although the the device successfully appears to re-enroll, the actual script that is supposed to run and start DEPNotify on the Enrollment complete trigger does not startup. It's as if it performs a "silent" re-enroll. I'd like the build process to be consistent regardless if it's a new enrollment or a re-enroll. We may have instances where devices have their management disabled in the JSS and need to be re-enrolled, and if it's end users performing the enrollment then it would be helpful to have on-