Is anybody here still running their JAMF pro instances on-prem? Our management is very anti moving things to the cloud.I am a super new Sys-admin for our Mac stuff and management has tasked me with researching what to replace our current hardware relating to our JAMF pro environment. I am having trouble finding super good data of how much hardware/specs we actually need to support what we have with some extra headroom.Management likes the idea of going VM for most of our JAMF stuff, but JAMF support seems is a little wishy-washy on if that's a good idea. I think they are really trying to push the cloud service (which I get). We're also running things mostly in Linux right now, but management has discussed going to Windows Server whenever we get new hardware.If any of you guys are still running JAMF pro on-prem, do you have any insight on how you have things structured, what hardware you are running, and how well it seems to run? Also you guys use any 3rd party applications to monitor y

Hey there, Does anyone have any experience with installing Adobe apps like Fresco, Reader, Photoshop, etc to a mobile device (iPad Pro)? I'm able to install other apps by adding them through VPP and scoping my device to them but with Adobe apps it doesn't work. The apps show up under Mobile Device Apps and it shows the license is used but they never show up on the device. I know that when installing on a computer they need to be packaged together but I'm not sure how it works with mobile apps.

Looked at dsconfigad hoping it would point upward to dsconfig.Looked at dscl which I think just lists them in alphabetical order.Looked at odutil which seems to only list connections and statistics. Any help appreciated.

I'm been running the script with success as long as the end user doesn't restart their mac before hand. I have a test mac on 12.3 and I deployed 12.6.2 via the script. I see in the logs that it selected 12.6.2, but the in the morning when I checked, the mac updated to 12.5.1. My question is, if the mac is older then a certain version, will it just update to the next big update regardless of selecting 12.6.2?

We've got Nudge working on a single OS level, utilizing the ever changing version numbers and continually updating the minimum version to be whatever the latest point release (12.6.1, 12.6.2, 12.6.3, etc)... it's been working fine.  Users even seem to not have as many problems as before...It can be labor intensive to continually maintain each major OS level in it (11.x, 12.x, 13.x).  is there a way to 1) combine all the OS's into one profile to manage and 2) have it auto-patch to the latest minor version (so for example, 13.0 updates to 13.1 automagically or 12.x --> 12.6.3)? I've been looking at the wiki page and trying out various options in the 'osVersionRequirement' schema, but nudge always reports that conditions are met.  I can go back to manually specifying but was hoping there was a simpler solution for longer term maintenance.  

Hello,I upgrade 100 MBP for Catalina to Monterey. After upgrade to Monterey, 0 printers and I need to re-install.someone knows why ? Thanks !

What do the different statuses mean on https://ideas.jamf.com/?I was looking at a number of different statuses and most are pretty straightforward but "In Ideation" is unclear to me.  What does that mean?Some other statuses I found are:In IdeationPlannedReviewedImplementedSubmittedNot Likely to ImplementDuplicateFuture ConsiderationNeeds more informationThere may be more. 

For some odd reason on M1's & Intel Macs especially on Monterey, when the machine is going through Pre-stage enrollment the machine just shiuts downWhen enrollment reaches "Applying Settings" it either shuts down or reboots. Both on Intel and M1.I have ticked & unticked all Config Profiles in Prestage but still the behaviour remains.Has anyone else had this issue? If so how did you resolve it?

Hello, we have a local admin account for troubleshooting purposes on our macOS systems. We're seeing that we can login to a small percentage of some of them. No error message, just the password field shake. These accounts are not setup manually, so we're fairly certain that the password is correct. Logged in from another user, we can run "dscl . authonly <USER>" and then enter the password for the account when prompted. If we enter a purposefully incorrect password we get:Authentication for node /Local/Default failed. (-14090, eDSAuthFailed)<dscl_cmd> DS Error: -14090 (eDSAuthFailed) If we enter the correct password we get:Authentication for node /Local/Default failed. (-14167, eDSAuthAccountDisabled)<dscl_cmd> DS Error: -14167 (eDSAuthAccountDisabled) So from here it sounds like the account was disabled somehow. But if we run:dscl . -read /Users/<USER> AuthenticationAuthority | grep DisabledUser it doesn't have it flagged as Di

Has anyone seen a situation where the Jamf Pro UI won't accept adding a computer or group to the scope of a policy or profile right away? It usually takes multiple tries before it is finally added to the scope. Here's a screen recording demonstrating the issue:https://drive.google.com/file/d/1n3y9p5Po9BqT29bsVnh0fpZbwI4uJUFK/view?usp=sharingIt's fairly intermittent, i.e. one day it will work straightaway, but on most other occasions it will take multiple attempts. I've also seen similar behaviour when trying to add a package to a patch policy under Patch Management.This smells like a PI or if not, something specific to our DB. We run Jamf Pro v10.41.0 on a Windows Server 2019 VM.

When enrolling iOS devices using user initiated enrollment (sent via SMS), I had both options in settings checked (institutional and personal), per documentation this should prompt the user to pick one. This is important for us and it shows that it is supported by the docs. However, I was not being prompted and the device always showed institutional after enrollment in the device record. To test, I removed the device record, unchecked institutional and left personal as the only user initiated enrollment option. Re-sent the invitation. When I tapped the link, I get ACCESS DENIED. I sent all invitations without requiring a login, so I tried it with requiring a login. Same issue. Am I missing something? I've been through every setting and I can't see what would cause this?

In Jamf school, our iPads are set up as Shared iPads. We would love to see the students already be signed in to Teams, OneDrive,... no matter which iPad they grab. Is this possible?Is this possible in temporary guest mode? regards

Hello, I'm using DUTI to set default pdf reader as adobe instead of preview in all users and works great locally and admin accounts but for regular accounts with no sudo privileges it does not apply. Anyone know a fix? Here is my current script

I've following the instructions from the documentation to create a OS Ventura installer to test out manual OS Upgrades for our organization. I'm having issues with the command execution. The packager installs correctly and can be found in the /private/var folder, I can even go in and start the install from there. But I'm struggling with the command to get it to install. I've tried:  /private/var/Install\\macOS\\Ventura.app/Contents/Resources/startosinstall --agreetolicense. This yield a result of: No such file or directory. This was how one of Jamf's training video said to do it and I followed the instructions exactly.I've also tried /private/var/Install macOS Ventura.app/Contents/Resources/startosinstall --agreetolicenseand the result of the command is: is a directory. I'm very inexperiences with the command line so any help is appreciated.  

Hey, new to Jamf and Configurator, been working though it through trial and error and all has been well for the most partI recently set some iPads up for forcing a passcode to be used but all of a sudden after a day or so, all of the iPads this was pushed through were no longer reconnecting automatically to the wifi I setup a payload config profile for? Wifi was turned on, however nothing was showing in the listed networks... and since it wasn't joined to wifi, I couldn't do anything via JamfIs this a common issue and is there an easy resolution other than (what I assume is the only way to remedy this) not forcing an auto-join to a particular network?

Unsure if you will find this handy. I wanted to find a way to quit all Adobe processes and delete all adobe files. Made this script which seems to do the trick! #!/bin/bash ##kills all adobe processes pkill -f Adobe pkill -f adobe ##Removes all Adobe applications and files rm -rf /Applications/Adobe* /Applications/Utilities/Adobe* /Library/Application\\ Support/Adobe /Library/Preferences/com.adobe.* /Library/PrivilegedHelperTools/com.adobe.* /private/var/db/receipts/com.adobe.* ~/Library/Application\\ Support/Adobe* ~/Library/Application\\ Support/com.apple.sharedfilelist/com.apple.LSSharedFileList.ApplicationRecentDocuments/com.adobe* ~/Library/Application\\ Support/CrashReporter/Adobe* ~/Library/Caches/Adobe ~/Library/Caches/com.Adobe.* ~/Library/Caches/com.adobe.* ~/Library/Cookies/com.adobe.* ~/Library/Logs/Adobe* ~/Library/PhotoshopCrashes ~/Library/Preferences/Adobe* ~/Library/Preferences/com.adobe.* ~/Library/Preferences/Macromedia* ~/Library/Saved\\ Application\\ State/c

Hello all,Just wanted to know if anyone here has taken the Jamf 100 certification exam. I've been studying for about 3 weeks and wanted to know anyone's experience taking the exam in the past.Also I would like to know how accurate is the practice exam compared to the actual exam.

I took the great work that had already been done here: https://github.com/shbedev/jamf-recovery-lock and expanded on it to create an single file comand-line script that will allow you to supply a search parameter and it will return all Apple Silicon computers in your Jamf instance with names that match your search parameter. It has options for clearing or setting the Recovery Lock passcode, and you can specify the passcode to use or have it generate a random number.Here's the link to it:https://github.com/jcmbowman/jamf-scripts/blob/main/SetRecoveryLockJAMF.pyBefore you use it you'll need to edit the script to supply your Jamf url and a username and password that has access in Jamf to make api calls that can change the recovery lock. Since you're hardcoding your credentials into the script make sure to store the script in a secure location. This script is only for administrator use and should never be deployed to end-user computers. You will need Python3 installed, and a

Hi All,Working through deployments remotely and had a user enter "s" for their email address in the Jamf Connect box. We use GoogleID. For some reason it took that as acceptable with their password. Anyone know how to change this to his actual email address? Thank you in advance for any insight you can offer. -Jason

Hi,Asset IT teams would like to receive a notification once a device is enrolled in Jamf.Required infos: User IDDevice Asset TagDevice S/NAny idea how to satisfy this request ?1) How to auto-populate an online Sharepoint sheet?2) Can we export to excel sheet and on a shared smb ?3) Can an API used to fulfil a web tool ?4) ....Any other trick is welcomeNote: Create and email an inventory report was not approved.

All,our internal auditor asked me to give her access to Jamf Protect. She already has acces to Jamf Pro, using the Jamf ID created for her. I set her rights to be able to use Jamf Protect there as well.I setup the account for her on Jamf Protect, with the identifier Jamf ID, but somehow she is not able to login. Username and/or password is incorrect. Funny thing is that we tried resetting the psw, using the supplied link, but that mail never arrives. And yes, her mail-address is correct en its not stuck in a junk-filter.Any thoughts?

I can't seem to find the answer to this on my own. If I set a deferral type of Date and set a date a month in the future, how do clients handle that policy when no user is logged in? Does the policy just run, or does it wait for a user to be logged in so they have the option to defer? 

Hello,I have an issue linking JAMF API to Azure to automate reports sharing.API URL can be linked to MS Power Automate but stopped to a DLP strategy. How to convert the Jamf API to Microsoft API so it can be linked to Azure app ?Thanks, 

No text available

After 2 full days of tinkering around with Jamf Connect, I successfully got it all working for our fleet of machines. I currently have a question: I wondered if it is possible to launch a browser window during the enrollment process. I ask this as since the MacBooks are utilizing Okta as an IdP for logging into Jamf Connect. The initial login would technically fail as the new user doesn't have a way to set his/her password until they are in the machine. Of course, they could do this on their laptop, but I would like to move from utilizing personal devices for Onboarding new employees. Launching a Browser window during enrollment would alleviate the issue of having Okta credentials synchronized which would be helpful when making the first login for the machine.