When enrolling iOS devices using user initiated enrollment (sent via SMS), I had both options in settings checked (institutional and personal), per documentation this should prompt the user to pick one. This is important for us and it shows that it is supported by the docs. However, I was not being prompted and the device always showed institutional after enrollment in the device record. To test, I removed the device record, unchecked institutional and left personal as the only user initiated enrollment option. Re-sent the invitation. When I tapped the link, I get ACCESS DENIED. I sent all invitations without requiring a login, so I tried it with requiring a login. Same issue. Am I missing something? I've been through every setting and I can't see what would cause this?

In Jamf school, our iPads are set up as Shared iPads. We would love to see the students already be signed in to Teams, OneDrive,... no matter which iPad they grab. Is this possible?Is this possible in temporary guest mode? regards

Hello, I'm using DUTI to set default pdf reader as adobe instead of preview in all users and works great locally and admin accounts but for regular accounts with no sudo privileges it does not apply. Anyone know a fix? Here is my current script

I've following the instructions from the documentation to create a OS Ventura installer to test out manual OS Upgrades for our organization. I'm having issues with the command execution. The packager installs correctly and can be found in the /private/var folder, I can even go in and start the install from there. But I'm struggling with the command to get it to install. I've tried:  /private/var/Install\\macOS\\Ventura.app/Contents/Resources/startosinstall --agreetolicense. This yield a result of: No such file or directory. This was how one of Jamf's training video said to do it and I followed the instructions exactly.I've also tried /private/var/Install macOS Ventura.app/Contents/Resources/startosinstall --agreetolicenseand the result of the command is: is a directory. I'm very inexperiences with the command line so any help is appreciated.  

Hey, new to Jamf and Configurator, been working though it through trial and error and all has been well for the most partI recently set some iPads up for forcing a passcode to be used but all of a sudden after a day or so, all of the iPads this was pushed through were no longer reconnecting automatically to the wifi I setup a payload config profile for? Wifi was turned on, however nothing was showing in the listed networks... and since it wasn't joined to wifi, I couldn't do anything via JamfIs this a common issue and is there an easy resolution other than (what I assume is the only way to remedy this) not forcing an auto-join to a particular network?

Unsure if you will find this handy. I wanted to find a way to quit all Adobe processes and delete all adobe files. Made this script which seems to do the trick! #!/bin/bash ##kills all adobe processes pkill -f Adobe pkill -f adobe ##Removes all Adobe applications and files rm -rf /Applications/Adobe* /Applications/Utilities/Adobe* /Library/Application\\ Support/Adobe /Library/Preferences/com.adobe.* /Library/PrivilegedHelperTools/com.adobe.* /private/var/db/receipts/com.adobe.* ~/Library/Application\\ Support/Adobe* ~/Library/Application\\ Support/com.apple.sharedfilelist/com.apple.LSSharedFileList.ApplicationRecentDocuments/com.adobe* ~/Library/Application\\ Support/CrashReporter/Adobe* ~/Library/Caches/Adobe ~/Library/Caches/com.Adobe.* ~/Library/Caches/com.adobe.* ~/Library/Cookies/com.adobe.* ~/Library/Logs/Adobe* ~/Library/PhotoshopCrashes ~/Library/Preferences/Adobe* ~/Library/Preferences/com.adobe.* ~/Library/Preferences/Macromedia* ~/Library/Saved\\ Application\\ State/c

Hello all,Just wanted to know if anyone here has taken the Jamf 100 certification exam. I've been studying for about 3 weeks and wanted to know anyone's experience taking the exam in the past.Also I would like to know how accurate is the practice exam compared to the actual exam.

I took the great work that had already been done here: https://github.com/shbedev/jamf-recovery-lock and expanded on it to create an single file comand-line script that will allow you to supply a search parameter and it will return all Apple Silicon computers in your Jamf instance with names that match your search parameter. It has options for clearing or setting the Recovery Lock passcode, and you can specify the passcode to use or have it generate a random number.Here's the link to it:https://github.com/jcmbowman/jamf-scripts/blob/main/SetRecoveryLockJAMF.pyBefore you use it you'll need to edit the script to supply your Jamf url and a username and password that has access in Jamf to make api calls that can change the recovery lock. Since you're hardcoding your credentials into the script make sure to store the script in a secure location. This script is only for administrator use and should never be deployed to end-user computers. You will need Python3 installed, and a

Hi All,Working through deployments remotely and had a user enter "s" for their email address in the Jamf Connect box. We use GoogleID. For some reason it took that as acceptable with their password. Anyone know how to change this to his actual email address? Thank you in advance for any insight you can offer. -Jason

Hi,Asset IT teams would like to receive a notification once a device is enrolled in Jamf.Required infos: User IDDevice Asset TagDevice S/NAny idea how to satisfy this request ?1) How to auto-populate an online Sharepoint sheet?2) Can we export to excel sheet and on a shared smb ?3) Can an API used to fulfil a web tool ?4) ....Any other trick is welcomeNote: Create and email an inventory report was not approved.

All,our internal auditor asked me to give her access to Jamf Protect. She already has acces to Jamf Pro, using the Jamf ID created for her. I set her rights to be able to use Jamf Protect there as well.I setup the account for her on Jamf Protect, with the identifier Jamf ID, but somehow she is not able to login. Username and/or password is incorrect. Funny thing is that we tried resetting the psw, using the supplied link, but that mail never arrives. And yes, her mail-address is correct en its not stuck in a junk-filter.Any thoughts?

I can't seem to find the answer to this on my own. If I set a deferral type of Date and set a date a month in the future, how do clients handle that policy when no user is logged in? Does the policy just run, or does it wait for a user to be logged in so they have the option to defer? 

Hello,I have an issue linking JAMF API to Azure to automate reports sharing.API URL can be linked to MS Power Automate but stopped to a DLP strategy. How to convert the Jamf API to Microsoft API so it can be linked to Azure app ?Thanks, 

No text available

After 2 full days of tinkering around with Jamf Connect, I successfully got it all working for our fleet of machines. I currently have a question: I wondered if it is possible to launch a browser window during the enrollment process. I ask this as since the MacBooks are utilizing Okta as an IdP for logging into Jamf Connect. The initial login would technically fail as the new user doesn't have a way to set his/her password until they are in the machine. Of course, they could do this on their laptop, but I would like to move from utilizing personal devices for Onboarding new employees. Launching a Browser window during enrollment would alleviate the issue of having Okta credentials synchronized which would be helpful when making the first login for the machine.

Hi there,We've recently migrated from Meraki to Jamf Pro using the jamf migration tools. Issue we're seeing is that for devices that are moved they exist in an unsupervised state and therefore we cannot do anything with the activation lock. i.e when we wipe devices and they trigger activation lock, we would have to contact apple and wait 2 weeks to get the activation lock removed.Our users use MAIDs which cannot release devices from activation lock and activation lock does not prompt local account credentials to release devices. If anyone has dealt with this issue what is the best practice in dealing with these devices or process to get around it?

Hey,I'm trying to find some way to suppress the autodiscover redirect popup. (YES I have search the forum here and tried the suggestions)We have an Exchange 2016 on prem hybrid solution.Autodiscover URL runs a split DNS. One points to an internal load balancer and the other points to an external reverse proxy load balancer, that points to the internal exchange servers.Our clients runs the latest version of Outlook 16.67 (O365 licensing), both on Monterey & Ventura.I have a configuration profile through Jamf with the TrustO365AutodiscoverRedirect key set to true with no luck. Have also tried with SuppressO365AutodiscoverOverride,  same result as before. The popup appears again for those users who have nog pressed "always use my response for this server..."

A Big Hello to All,I have a very annoying issue with Self Service not deploying Patch Management apps. eg Zoom, Google Chrome, Microsoft office apps, Firefox etcI am running MacOS Ventura 13.0.1 across my fleet of Mac's and running JAMF Pro 10.42.1-t1667311080This happens very randomly and the Jamf.log does not have a lot of information...All of my Patch Management apps are PKG files.What happens is when a user opens up Self Service and clicks on Notifications and attempts to install an update the wheel spins and spins away.And the update is not installed.....It does not matter if the Mac is on a Corporate Ethernet network or a VPN (I am using Palo Alto Global Protect) or even a 4G internet connection.The only way I have been able to fix the issue is delete the Mac from JAMF, Azure and Active Directory and reload MacOS and log the user back onThis is a drastic solution but my only one at this time....I would be most grateful for any help!

Okay all.  I searched through the community forums and saw some very helpful information but it also added more questions.  I figured I'd make another post  and detail everything out.  Any help would be appreciated. Goal:  Move around 280 MacOS devices from Intune to Jamf with as little interruption to the end user as possible.I know one of the first things that will need done is un-enrolling from Intune but this is where I start to get confused on best practice.  I am new to both Jamf and Intune but one thing I understood from my previous company is that the check-in time for Intune could take as long as 24 hours.  I also see how the MDM profiles are not removable by the end user for our Intune managed devices.  While i totally understand why this needs done this leads me to my first question.What is the best way to allow for User-Initiated enrollment so that there can be a seamless transition from Intune to Jamf?If I am understanding what

As the title states, no matter how many times I try or what I do, I cant seem to get Jamf Safe Internet fully integrated with Jamf School. I have even had Jamf Support assist me with it, but that went nowhere, and even they didn't seem to know exactly what to do. Does anyone have some sort of video guide or better way of integrating it? I have followed the Jamf Safe Internet integration guide on Jamf Safe Internet but that just doesn't seem to work for me.Thanks in advance.

I've noticed this on several units, an iMac, some MacMinis, and my MacBook Pro, half are on Monterey, and the others on Big Sur, all have a version of the M1 Chip, this also happens across accounts, both Admin and Standard. When the system is restarted OR on a Logout/Login several of the settings reset to the defaults. The ones I've specifically noticed are as follows. Mouse ScrollLight/Dark ModeLanguage Settings*There may be others but these are the settings I've personally confirmed between my own settings as well as what my impacted users have told me.Just wondering if anyone else has seen this.

Hi, since iOS 13.4 there is the option to log in as a guest user. We don't want our users to log in as guests.Is there a way to disable this option? We haven't found anything in the PreStage Enrollments or Configuration Profiles.

Hello all,I'm having seeing some weird issues with Adobe Remote Update Manager, which I use via policy to patch our Adobe Creative Cloud apps.  For some reason, I have applications that will no longer update to their latest minor versions of Creative Cloud 2021.  This includes my own personal workstation which has the Adobe suite installed.  We haven't deployed CC 2022 apps yet, so this post is specific to continuing to patch CC 2021 apps.  In any event, here's my scenario:Intel Macs (mostly iMacs)macOS Big Sur 11.6.1, and macOS Catalina 10.15.7Adobe Creative Cloud app version 5.6.0.788 (which seems to be the latest according to posted documentation)Adobe Remote Update Manager (/usr/local/bin/RemoteUpdateManager) version 2.6.0.9 (also seems to be the latest version)I've run the RemoteUpdateManager app via script, policy, logged in with Terminal, etc, and getting the same results.  There are no errors returned when RUM is run.  In addition, this is hap

I'm looking to distribute Apple Books and Audio Books to both one-to-one iPads and Shared iPads on Jamf School.We currently restrict most iPads and don't allow sign in to Apple Store.  It looks like you need this.  That's fine.I am able to deploy books to devices and make a user an owner of an iPad in order to deploy that content to the device.For Shared iPads I get the error: A volume purchasing license cannot be assigned because the device is not assigned to a user.  I am not able to distribute content for Shared iPads.Also I am somewhat confused because I thought Apple Books and Audio Books needed to be assign to a user and it looks like the only option I have is to assign it to a Device Group.Does anyone know what to do about this?  

Does anyone one have any learning resources for Jamf Pro, we recently got Jamf pro off the back off our parent company so we didn't get the whole integration thing or the mandatory training process, I managed to get a server up and running but now not sure how to configure certain things, so would like to find some self study material.