Hey Jamf guys and gals! I am trying to query information from our JAMF Pro server through the API. I'm like halfway there but I definitely don't know what I am doing completely.  The name scheme we want to do is "(first 4 or 5 characters of the building)-(JAMF ID #)" . I am able to query both of those pieces of information through a script that calls the API, however I can't seem to get the "cut" command to take the first 4 or 5 characters of the building information. Any information on how to cut up the building information would be so helpful. This is what I have so far: #!/bin/bashapiuser=$4apipass=$5jssurl=https://myjamf.comserial=$(/usr/sbin/ioreg -rd1 -c IOPlatformExpertDevice | /usr/bin/awk -F'"' '/IOPlatformSerialNumber/{print $4}')computerID=$(/usr/bin/curl -u $apiuser:$apipass $jssurl:8443/JSSResource/computers/serialnumber/$serial -H "accept: text/xml" | /usr/bin/xpath -e "/computer/general/id/text()")location=$(/usr/bin/curl -u $apiuser:$apipass $jssurl:

I was wondering if anyone has this set up in their environment? Most machines are Monterey, but there are a few Big Sur machines. I tried setting it up and was encountering a few issues. When I restart the machine, it does not read the Yubikey. Will I need a 2nd piece of software to allow it to log in from restart? Is it possible to leave the account as a local user, and still enforce the verification of certificate? 

Hi,I test the deployment with "App Installers" (jamf app catalog)I want to reinstall an app. Is there a way to "force" the reinstall of the app? (like the flush button in a policy)Sébastien

Hey all,Just wanted to relay an experience we had with a company who does hardware buyback, hopefully to help others possibly avoid what we went through.We tend to sell back groups of old Macs/iPads once we refresh our fleet and in the past have had pretty good success.  When we contacted the company we normally have worked with, they said that due to the engraving on our devices, unfortunately they would not be able to purchase our units this time around.With that in mind we reached out to other companies and spoke with Diamond Assets about a buyback and we were very clear that we had engraving on the devices.  We specifically asked how much of a mark down they would receive in an email to their rep. The rep stated it would just be a $10 fee per device that are engraved which seemed reasonable.  They quoted us a great price (for all A ratings) based on the number of units we had.Once we locked in the pricing and signed the contract they finally asked to see the engravin

I am using the JSON template for com.apple.mcxprinting (https://github.com/Jamf-Custom-Profile-Schemas/ProfileManifestsMirror/blob/main/manifests/ManifestsApple/com.apple.mcxprinting.json) which works well but I can't figure out how to get more than one printer in the User Printer List.  If I work with the profile in Profile Creator or iMazing Profile editor, neither is able to specify more than one printer either.Apple's Dev. Docs show an example profile in XML and looks like just a Dictionary with a string identifier and a dictionary of print attributes (printer URI, PPDURL, Name etc). See: https://developer.apple.com/documentation/devicemanagement/printingDoes anyone have an example in JSON or XML that is working with multiple printers they can share?Thanks!

Hello,I'd like to deploy 2 network configs once mac is is enrolled as shown below: 1. Automatic: home, personal..2. Enterprise: this one for company lan/wifi Enterprise should provide below listed items:802.1x cert presence.Fulfil Proxy blank with the desired linkConnect to company's  available wifi/lan. This is done today manually as below:Any idea how to automate things ?Thanks

Even after reregisting to Intune or running below didnt resolve the issue./usr/local/jamf/bin/jamfAAD clean/Library/Application Support/JAMF/Jamf.app/Contents/MacOS/JamfAAD.app/Contents/MacOS/JamfAAD -verbose gatherAADInfo -disable-cache-read no aad id found for macos user account Does any face the same issue.

Hi, i need to update the wording on the login window configuation profile that we have deployed to our machines. Before i do, anyone have any experience doing this? I assume its simple and the change should take affect, but wondering if there is anything i should look out for or could really mess things up. 

We've locked the computer with Jamf Pro and unmanaged it without backing up the lock code. After few weeks all the completed commands disappeared :(Is there anything that can be done to unlock the laptop?

what happens if both are configured, they are compatible?It's gives preference one over the other, or it's not possible to configure one if the other is configured previously?

Hi,I am wondering how Configuration Profiles are pushed, and how often they are pushed, but I can't seem to find any documentation on it. I am editing and testing some config profiles, however they seem to be pushed to the machines at random times. Would someone be able to point me towards such documenation?Also, is there a command to force downloads of configuration profiles, similar to the command "sudo jamf policy"?Thanks!

Hello, Per ABM, we have two Logic Pro licenses in use. Per JAMF, we have 0. JAMF > Computers > Mac Apps > Logic Pro > I did place two Macs in Scope, the Logic Pro shows as something I can install in Self service, when I click install I get an error "Cannot connect to a JAMF MDM profile". My unit is configured correctly however. Can anyone advise?Thank you, 

I'm pretty new to Jamf Pro so please excuse my ignorance. I have Splashtop setup in Jamf Pro and the deployment works great except for the fact that screen recording it not being enabled by Splashtop's script. I tried to post the script below but it's too long. I don't see any reference to screen recording in the script but I may very well be missing something. Can anyone able to offer any insight? I'm waiting to hear back from Splashtop support on this as well.Thank you,-Jason  

Hi Everyone,I need some help with the Zoom auto-update bash script for MacBook Pro/Air M1. Does anyone manage to script the Zoom auto-update? Thanks!RJ 

HelloOur school works heavily with Jamf Teacher to control student's access to apps and resources. Recently we have discovered that they can always access their Quick Notes. This is also the case when the Notes app is not allowed. Consequently, they are starting to use these Quick Notes to cheat. Noting the quickness (pun intended) of opening and closing the Quick Notes, this is a very efficient way to cheat.Other apps that restrict the students (Apple Classroom, SafeExamBrowser …) do not allow this behaviour. Sadly, these apps have the shortcoming that you can only restrict the students to one app, where in many cases two or three apps are needed.Does anybody share this experience, or maybe even know how to help?RegardsAlexander

Self Service is a cool tool I would like to incorporate at our school for employees. Is it available with Jamf School or just Jamf Pro? 

Hey guys, first post here so I hope I'm correct :)It happened a couple of times a student left the school and no one passed that information through to IT so we weren't able to put the device in lost mode and the student would return it.Now our plan is that the devices auto-lost mode after a given time when not connected to our schools wifi (our school has multiple SSIDs depending on the location). From my experience that would be possible in other MDM solutions like Citrix XenMobile, but I haven't found anything similar in jamf school. Is that even possible, if so, how? If not, how do you manage these types of situation? We're still in the process of digitizing the whole progress, so please be gentle :D Really appreciate your helpThanks :) 

No previous experience in scripting or making plist, I was tasked with creating one for setting up an automatic backup using RSync on our Mac minis. Users log in using their AD accounts. The idea is to have three folders to back up for any users that logs into the mini. We are using AD setting for a home folder on a NAS. This part is already tested and works. Now to automating this, I have asimple script in /Library/Scriptsrsync.sh (name)#!/bin/bashrsync -ahP -delete ~/Desktop /Volumes/$USER/BackupDatarsync -ahP -delete ~/Documents /Volumes/$USER/BackupDatarsync -ahP -delete ~/Downloads /Volumes/$USER/BackupData and a plist in /Library/LaunchAgentscom.backup.rsync.plist (name) <?xml version="1.0" encoding="UTF-8"?><!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"><plist version="1.0"><dict><key>Label</key><string>com.backup.rsync</string><key>ProgramArguments</key

I wanted to change the mailing server name into the configuration profil applied to all our iphones enrolled into Jamf. I then create a new profil with the new server name, exclude somes devices from the firt profil and add them into the new profil: it works fine except for 2 iPhone where the actions are pending. I ask user to reboot the iphone but without any success. Is anybody have an idea about the origine of the problem and the soluce the fix this issue?

On a daily basis, users are noticing Apps e.g Teams and Outlook disappearing from their phones and re-installing. I can see in the management history that on a daily basis it's getting a "install xxx app" The version is always the same until a new version comes around at which point will start installing daily with the new version.I do run a daily inventory on devices The apps in general have the following settings;Install automaticallydisplay app in self-service after installSchedule jamf pro to automatically check app store for updatesautomatically force App updatesMake app managed when possibleconvert unmanaged ap to managedI want to keep the apps updated when a new version comes around but don't believe the app should be uninstalling/reinstalling if there isn't a new version. Does anyone know if this is typical behavior or have any idea what might be wrong?  

Hello, When users change their Azure AD password outside of Jamf Connect and then want to log in to a workstation with Jamf Connect and type their new password, they get the message "Password no valid".When they type their old password, they are logged in, but they are not prompted to update the local password at this time.We may have waited several hours but no message inviting us to update the local password.So if they log out and log back in, they still get the "Invalid Password" message when they type their updated Azure AD password in the window. Is this normal? Is it a bad setting of our configuration profiles?in Jamf Connect Settings profiles, we have "NetworkCheck" key set to 15.We are in version 2.7.0.Thank you for your help

We are migrating computers from Jamf Now to Jamf Pro. Things have been pretty smooth. I have a policy in place that prompts for a PRK reset and storage in Jamf with a smart group (unknown PRK). One computer that was enrolled about 2 weeks ago suddenly is missing the PRK, but it's really not because when I go into the computer profile, it's there. But it's still in the smart group saying the PRK is missing. It's also prompting the user at every check-in to reset the PRK, but not removing it from the smart group. It's working fine for all the other computers and I've enrolled about 20 so far. Any ideas why this keeps happening and how to stop it?

What's everyones preferred process for updating the OS on M1 macs? I'd like to implement a process where I can instruct macs to download and install say Monterey 12.5.1  to M1 macs during overnight hours. I've seen some posts where updates were deployed via Self Service but I'd rather not go that path if I don't have to.

I specify password settings "Require complex passcode" = Ignore. The profile is applied to a Mac, in Settings → Profiles I see "Simplpe password" = True, but I can't set a user password that contains repeating characters. For example, I specify the simple password Qwerty123 and MacOS does not allow me to save it. Why? How to allow simple passwords with repeated characters in Monterrey and Ventura? I understand that this is not safe, but this setting is there and I want it to work.

Hi All, Looking for some input from Admins who manage very large iOS estates. The current setup i manage from Jamf is around 5000+ active iOS devices.Now these devices need to be updated to at least iOS 13 with a view to moving them to iOS 14. Most of them are on iOS 12 with around 20% on iOS 13. These are all store based devices with internet breakdown via DSL. I was thinking of caching servers, but that wouldn't make a difference as it goes out over the DSL anyway. The only way i can think of is to break the updates down into smaller smart groups and update on a rolling schedule with Remote Commands.