Jamf has updated our Hosted Services Availability Commitment effective May 15, 2019. For more information, please review the full document here: Hosted Services Availability Commitment

HelloI want to pass a multiline description as a parameter from the policy to a script.The script is using the jamfHelper app. How can I define a manual line break in the description parameter? btw, is there a way to get the policy name or id to a script? thanks

Hi,I have On my iPad  General > VPN & Device Management only displayed VPN - not anything to do with MDM Upgraded to the latest OS from the device and now I see all the Configuration Profiles in General > VPN & Device Management but still when I try and do anything that uses a remote command from Jamf Pro such as restart or Inventory it stays with a status of "Pending". The MDM Profile looks to be current. Before upgrading iOS there were a bunch of failed commands like this in Jamf The UUID for the profile “Self Service Web Clip” is not unique. My current idea is to wipe it and rebuild with Apple Configurator. If it was a Mac I'd try a "profiles renew -type enrollment" command but I can't see how to do that for an iPad This is 1 of 80 but the only one that is misbehaving It, like the other 80 received a new config profile to access the wifi a week or so ago changing from user authentication to certificate authentication. It can access the internet fine so it's n

I am using Jamf Admin to try and add printers. When I click on the add printer the printer window does not open. Any ideas why it is not opening? When i click on the add dock items the little pop up window to add items pops up, just not for the add printers.Thank You

Hello! I am trying to create a script that would remove certain lines/strings from a .txt file. I have tried: sed "/$String/ d" File.txtBut had no luck, any thoughts or tips? 

https://community.jamf.com/t5/jamf-pro/macos-ventura-amp-blocking-access-to-users-amp-groups-pane-in/td-p/276553here there are some good suggestions regarding blocking panes inside the system settings.My question is- can you block the System Settings app altogether from launching? Like PathBlackList magic?So that it'd require admin password to launch? <key>pathBlackList</key>this doesn't seem to work. 

EDIT: Removing the usual rant, worked with a Wacom dev team contact, verified these settings work with Monterey on Intel and M1:Codesign commands, to gather the info needed for the PPPC configuration profile:$ codesign -dr - /Applications/Wacom\\ Tablet.localized/Wacom\\ Desktop\\ Center.app Executable=/Applications/Wacom Tablet.localized/Wacom Desktop Center.app/Contents/MacOS/Wacom Desktop Centerdesignated => anchor apple generic and identifier "com.wacom.Wacom-Desktop-Center" and (certificate leaf[field.1.2.840.113635.100.6.1.9] /* exists */ or certificate 1[field.1.2.840.113635.100.6.2.6] /* exists */ and certificate leaf[field.1.2.840.113635.100.6.1.13] /* exists */ and certificate leaf[subject.OU] = EG27766DY7)$ codesign -dr - /Applications/Wacom\\ Tablet.localized/Wacom\\ Display\\ Settings.app/Executable=/Applications/Wacom Tablet.localized/Wacom Display Settings.app/Contents/MacOS/Wacom Display Settingsdesignated => anchor apple generic and identifier "com.wacom.Wacom-Di

Hello, Today I setup Licensed Software titles using Software Identification Tags as per the kb article and cross-referencing Adobe's documentation. I need to get license counts for all Adobe products as we need those counts to purchase and true-up on licenses. The funny thing is that the Software Identification Tag method, and the Application search method does not come out even close to eachother. I know that both searches are probably incorrect. What have others out there done to ensure your software counts are good? Thanks,Ken Edgar

Does anyone have any advice on how to package JMP 17 and the license txt file in a silent install?

Hi AllMy problem is, I have restricted to "Only some Apps allowed", this works great, there is only one problem.I dont find how to allow Apple Sidecar on iPads.Please help me,thank you!

I have been using the erase-install.pkg successfully for some time, placing it within Self-Sevice and allowing users to install at their convenience. However, with one user, I have run into an issue where is appears that the step of grabbing the latest installer is failing.Background:This particular user attempted to install Ventura on their own through Software Update within System Preferences. It looks like the installer was downloaded, however they were blocked when they reached the prompt requiring an administrator to allow the installation.I directed them to Self Service where the erase-install.pkg is loaded (28.0). The attempt to install, the progress wheel begins to spin for a bit, stops, and nothing is installed.LogTaking a look at the applications installed on this user's machine, it looks like they have an older version of the installer present (Install macOS Ventura.app 18.0.02) likely from when the first attempted their own update. The script sees a newer version,

I know this has been asked many times, but I can't seem to find a specific script I can use in a policy to demote a specific user from admin to standard.  All our accounts are local accounts.  We have been doing some auditing and see too many admin accounts out there and are targeting specific users on specific remote/off site Macs.  I have seen scripts that target all users except "admin123" and demote everyone else but that admin account.  I need to specifically target a user by account name.  I am not a good at scripting, which I why I am asking for help.  Appreciate any feedback or suggestions.Thank You.

Just checking if anyone might help me find what I am overlooking.We got a new Cloud-instance and the migration is done. I would like to populate/edit the computer name field and has done so with MUT on other JAMF instances. But I´m getting a 401 error. The data loads in MUT and everything looks fine but when submitting the data to Cloud the log shows this and just runs threw the file without any PUT being set.  </html> 2023-02-23 12:36:03 [INFO ]: Submitting a PUT to https://xxx.jamfcloud.com/JSSResource/computers/serialnumber/xxx 2023-02-23 12:36:03 [ERROR ]: Failed PUT. 401. 2023-02-23 12:36:03 [ERROR ]: <html> <head> <title>Status page</title> </head> <body style="font-family: sans-serif;"> <p style="font-size: 1.2em;font-weight: bold;margin: 1em 0px;">Unauthorized</p> <p>The request requires user authentication</p> <p>You can get technical details <a href="http://www.w3.org/Protocols/rfc2616

Hello,I am very stupid because this topic has been talked earlier, but I haven't been able to find it. My question is: Can you run two MDM solutions at the same time? I have both MS Intune and JamF available to me and I was wondering if it was possible? I don't think it is, but I want to make sure. TellCulvers

Happy Friday everyone! I'm sure that I'm probably missing something very obvious to the right person... My experience with bash is currently limited (hopefully not for too long!). I'm trying to mount an SMB share using the below script, there is more to the script, however I've removed it as I know the issue lies in this part.If I run the below locally on my machine replacing $3 with $USER the script works perfectly and the Apps share maps straight away. #!/bin/bash mkdir /Users/$3/Apps mount -t smbfs //userName:userPassword@myServer/Apps /Users/$3/Apps As soon as I deploy the above from the JSS and perform Sudo Jamf Policy on the targeted machine it creates the directory Apps and somewhat mounts the drive. The directory stays as just a folder and does not change to the intended SMB share, as soon as you click in it the folder then disappears and takes you up a level. If I run df in terminal you can see the SMB share is mapped to the folder created, run ls and you se

Hey guys,  I have an old Mac 2018 that I wanted to add to ABM, I deleted .AppleSetupDone sudo rm /var/db/.AppleSetupDoneand I thought I would get the setup assistant but no, instead I got the login window, after I enter the password of the account it logins then reboots again and so forth !!it's like running in a loop, can't boot to the desktop and can't get the setup assistant !Any ideas please?

HelloI'm currently working a job where I need to connect several iPads to a jamf pro network. These iPads are either brand new or being formatted after previous usage. There have been details given to me on how I would get them to connect to jamf but there has been an odd batch that refuses to be picked up by the network proper.What I mean is when I input the proxy settings for the iPads, usually it would detect the jamf server and enroll into it. However I have been having an issue where it doesn't give me this at all and goes through a standard iPad set up procedure. I've formatted the iPads over and over again but results are generally the same.Is anyone able to determine my problem?

I'm currently working on the Jamf 100 course.  Is there a simulator I can use to do the practice sections on Section 3 Lessons 19-21? 

I’d like to get some more information on the recommendation for this setting from Jamf. A dedicated Password was the only option when we initially set this function up. I agree the concept of a randomly generated Password for each account makes sense going forward, but I would like to know if this change is added, whats the impact, and does this affect existing enrolled devices? Any recommendations?  

We have started seeing an issue lately where devices get stuck on the Jamf Connect screen.  It stalls on the part where it states "Passing command and control to Jamf Pro" and even after multiple reboots it gets stuck there.  The most recent one was our CIO who got stuck at that screen after updating the OS.  Previous users randomly just got there after rebooting.Has anyone seen this?

I have a new field tech whose LDAP account I need to add to several policy scopes.  The policies are scoped using Static User Groups, and up until today have never had any issues.I can add the tech's LDAP account to the JSS console (Settings/User accounts and groups) without issue, so I know the LDAP lookups are working as expected.  The tech has the same privilege set as all of my other field techs.I watched the tech log into the JSS console and self service app, so the LDAP account is active, they know their password and the login works.Our JSS is hosted in the cloud w/ Jamf Infrastructure Manager, which passes all communications tests, and we are using SSO with external 2fa, all of which works fine.What I cannot do, in any way, shape or form, is add the tech's LDAP account to a scope or a static group.When I try to add to a Static user group, I edit the group, go to "Assignments" tab, where I see a list of all users that can be added, enter their LDAP account to the search

I see that we can add assets like computers/iPads etc with a formatted CSV. I am looking to add over 650 printers for our college to JAMF. Ultimately want to have a new user who is receiving a new laptop have the appropriate printer assigned and the drivers installed. Being I have so many printers to add I was hoping that I could add them via a similarly formatted CSV but one for printers instead of the one for general assets. Thanks

For anyone that prefers to make Safari updates available via Self Service, here are the standalone Safari 16.3 installer download links extracted from Apple's Software Update Server catalog...Safari 16.3 for macOS Big Sur: http://swcdn.apple.com/content/downloads/57/34/032-13764-A_MOC2MSOQDD/v6gxu8f0t7pbxigu3bvlc269yyxunn7zvn/Safari16.3BigSurAuto.pkgSafari 16.3 for macOS Monterey: https://swcdn.apple.com/content/downloads/38/31/032-14452-A_5QLICQ7S0D/2ia268vj0urmw8tvwez004ngyeg0fepqse/Safari16.3MontereyAuto.pkg 

I've created this script in an Extension attribute but it's not showing.#!/bin/bashecho "<result>$(system_profiler SPPowerDataType | grep "Maximum Capacity:" | sed 's/.*Maximum Capacity: //')</result>"exit 0Could someone see what's the issue?

First time poster, looking for any help/direction.I have shared iOS devices that have a general use email account. I had everything set up using profiles and Exchange Active Sync with no issues. Username, Server, Password was auto installed on each device.We have recently moved to O365 and I'm unsure how, or if I'm able, to add a password to the email profile using either native iOS Mail or the Outlook app.For iOS Native Mail, is it as simple as changing the server URL?For the Outlook app I found a String parameter that will grab the email address from the device's User & Location Tab, but nothing for the password.Thanks in advanced!