Hi all, I'm wondering if there is an undocumented API call for Lost Mode in Jamf School, since it's not in the docs. I used this extensively with Jamf Pro back in the day and am going to be in rough shape if there's not a similar API call for the School product...Thanks!Ryan

I am able to get CBDefense to install just fine however with Apple newest updates we have to go to security preferences and hit Allow. They have a recommendation on their site for this issue it says: " For enterprise deployments where it is necessary to distribute software that includes kexts without requiring user approval, you will need to configure the Apple Team IDs for our Carbon Black Products in your MDM Profile" My question is how am I able to do that? This is my first time having to do anything like that. Thanks!

Hi there, Is there a simpler way to install Ventura via self-service without the admin credentials? I've added Ventura from the Mac apps section on Jamf and it is available on self service but it requires admin credentials to install. 

I have a user that made an iCloud backup before wiping his iPhone 12 and reinstalling it. During the following setup the device was enrolled into Jamf (DEP + prestage). He also restored the iCloud backup and everything seemed to work ok. I can see it was enrolled 9/7/22 0907 am and last inventory update was 9/7/22 0908 am. Since then the iPhone doesn't communicate with Jamf anymore.It's running iOS 15.0, Jamf is v10.39.1. the device is still managed and supervised.

Can anyone guide me on how to use jamf pro and add devices to Jamf pro on a windows device. Any Help will be appreciated

I have a policy that joins a computer to the domain automatically when it is enrolled. This policy worked up until today and now I am receiving the same error message on all new Macs. I searched the error code and it says that 5103 usually means that the hostname is too long for AD but our hostnames are all 10 characters long... Has anyone run into this issue before? We tested windows machines and they work fine so I am not sure if this issue is from the AD server side or MacOS. Here is the error message. Thank you to anyone with suggestions

i see an article for Jamf School but i couldn't find anything for Jamf Pro. if available, can you provide a link for the documentation, we are trying to identify induvial users IDs for proxy server exemptions.

Hi,I now had two of my Users being locked out of their devices a day or so after turning on FileVault via Jamf. Nothing could get me back in. Has anyone had similar problems? Kind regardsAndreas Baumeister

Hi all,Just trying some API integration and the local Jamf account we have configured for API will not authorize to generate a token on our API page:https://mycompany.jamfcloud.com/api/doc/It just keeps saying "Authorization failed." and wondered if it's the privileges on the account. We have it set as follows:Read-Only on all Server Objects (apart from API intergrations which is set to create, read and update).No permission for any Server SettingsNo permission for any Server ActionsAm I missing something? Any help appreciated!

Hi all,Just started using Jamf connect with Google login.  Our Jamf Connect login configuration profile is using the option to "Create all new users as local administrator."That is working.  When it creates a new user it makes them a local admin.  problem is if you do a "Network login" with the same user, it converts it back to a Standard user.If you do a "Local login," it works and does not remove administrator rights

Hello All,Do we have a method or Script to make changes in the Software Update Pop-up window?I would like to change the word "administrator" to something "your login credentials"Thank you. 

A user has left their iPad in a location they cannot recall on the way back to the office. I am attempting to set lost mode, but it isn't staying enabled. I am assuming it is nowhere near or connected to wifi hotspot so the command cannot be sent to the device. Kind of a useless feature if this is the case. I am not sure location services are setup on the device either.

Apple has changed where Time Machine data is stored in the latest OS and how that data is organized. I've modified the original JAMF Extension Attribute to accommodate Apple's changes in Mavericks. The XML is ready for upload. I've only tested this in the Casper Suite 9.2 but it should work fine in any version that supports Extension Attributes. https://dl.dropboxusercontent.com/u/874171/TimeMachineLastBackupCompleted.xml.zip Cheers,Chad NielsenForget Computers

Hi,since our mac mini caching servers are run out of storage we're curious if it's possible to have an external volume for cache storage or other options. We#Ve already tried to use the "Content Caching" payload and entered Data Path "/Volumes/nameofexternaldisk/Cache" which didn't work with the error that the profile wouldn't install because of a wrong Data Path. Does anybody have a suggestion here?Best RegardsJonas

I have a scenario whereby I need the Jamf Pro server to execute some action, and pass on this information to the client.It should work like this -client is triggered to install 'policy A' --> client asks Jamf Pro server for infromation X (which is needed by the client to complete the policy installation) --> Jamf Pro executes some script/API call to a separate internally-hosted webservice --> Jamf Pro recevies the output from the webservice and passes it to the client The webservice is not publicly accessible, thus the client is unable to reach it, and has to rely on the Jamf Pro server to make the API call on its behalf. Is this somehow possible?

I have a policy to install a package, which I want to make available to all computers via Self Service, but I only want it to automatically install (e.g. via enrollment trigger) for some computers only.Can this be done somehow, without having 2 different policies? (e.g. 1 policy for Self Service, another policy for enrollment trigger) I presume, when configuring the scope of a policy, it applies to both 'trigger' and 'Self Service' scenarios.

Has anyone had this issue with Jamf Connect? It is becoming a widespread problem within our organization.  This (attached photo) will pop up upon login and you can't make it go away.   We thought updating everyone 2.12 would solve this problem but it's still happening.  The only fix that we've found that works is going in and manually re-installing (via Jamf id site) the latest version.  I'd like to avoid manually re-installing for our whole environment so any help/ideas would be greatly appreciated.   

Hey everyone! I having some issues enabling some users to FileVault with our local account pw. We have a set Prestage enrollment with a local account and password that FileVault 2 is enabled. I know for a fact that I’m entering the information correctly because it accepts the local account everywhere on their devices but not to turn on FileVault. I did notice one thing but not sure if its a coincidence or a bug issue. For every device that we were not able to enable, as soon we click “Turn On FileVault” the field to type goes directly to the password field and not the username field (picture is below) and never accepts the local account. However, other devices when we try to enable users to FV doesn’t do that at all. Any help would be appreciated.      

This morning we had a student lose their iPad. It was found and it was in lost mode, and I was able to remove the lost mode. The problem is, it didn't make a sound. We would have found it hours before if it played the sound. It was on and the volume was up. Also, the location wasn't showing up in Jamf. Any ideas on why, or how we can fix it?

I am setting deferred updates from jamf the com.microsoft.autoupdate2 configuration profile and typically pause the updates to give time for testing.   Does anyone know if I send select to Pause the update at like 16.66 will jamf profile push any of the patches for that version?Recently Office 16.66.0 was released and the next day the 16.66.1 patch came out to resolve a launch issue.   I rather not pause at 16.66.0 and then have a bunch of launch issues since it doesn't send the patch update.  

I've been tasked with some CIS recommendations for our apple estate. I am currently mulling over the firewall parts of this. Do you guys enable firewalls in your estate? It seems like a no-brainer, but this isn't windows and i don't know how much it really helps on the mac side. There are a lot fewer programs actively listening for ports and connections. Also with that, if i implement it now, what programs would it break? How do you guys handle this? Do you find its good to have one or not worth it?

While trying to send data from Jamf to SCCM, I am getting the following errors:-  [ 5] ERROR Jamf.ProxyService.Plugins.SCCM.SccmReports - There was an unexpected error sending the device to SCCM.- System.InvalidOperationException: Invalid registration state: Error. Cannot continue.We are using version 3.70 of the plug-in and SCCM version is 2111I have look through quite a few of the support articles and I am seeing various information, but none of them ever offer a solution and they just end. When I use the Jamf SCCM Proxy Service Helper and try to just send one machine manually I get different error.- [ 67] ERROR Jamf.ProxyService.Plugins.SCCM.Utilities.Certificates - There was an unexpected error sending the device to SCCM.- System.InvalidOperationException: Invalid registration state: Error. Cannot continue.

Hi there, Whenever we order a new batch of laptops and we turn them on with hardwired internet, it doesn't go to the Remote Management screen. It goes from Accessibility to Migration assistant, essentially allowing someone to create a local account. I'm not sure what's missing. They are in our ABM and they are in the appropriate prestage enrollment groups I have to go through setting up the laptop with a temporary account and then wipe it in system settings (erase all content and settings,) then it "activates" again in order for it to pick up JAMF connect. Is there a better way to handle these types of issues? We plan on using zero touch but we can't send out brand new laptops if they just can't connect to remote management for the first time out the box.

On Windows, you can set general DNS search suffixes (i.e. suba.domain.com, subb.domain.com, etc). Then there is also a "Connection-specific DNS suffix" setting the DNS server can share when the machine connects to the network (i.e. site1.suba.domain.com) depending on your office location. On Macs it seems to let you either take what the network gives you (which is limited to 1 entry) or use a longer list of manually specified options. Is there a way to mimic the Windows functionality of having a few general search domains which are set by script or config profile, but let the local network set a local search domain?

Hello Jamf experts! I am primarily a Microsoft Intune/SCCM admin.  I also manage our Jamf Pro environment for MacOS.  We currently use a SCEP Cert Profile in intune tied to an NDES server to deploy an 802.1x certificate to allow our azure joined Windows devices access to our on premise domain.  We currently have our macs bound to the domain to allow a cert request for this.  We recently got our Jamf Connect setup going and have no reason to bind to the domain anymore.  I have read the documentation on how to set up Jamf Pro as a SCEP Proxy but I am NOT a mac expert and don't really understand what needs to be put in the fields of this setup.  I'm assuming the URL is the Scep Server Url .  I'm not sure what to put in for Name, Subject, Subject alternative Name Type, or what options I should choose, or what Certificate I should use as the Signing Certificate.  I'm lost.  I opened a ticket with Jamf Support and they sent me the link to the