EDIT: Nevermind. I thought I could restrict based on devices assigned to a specific user, but actually I just have to restrict the device instead. I am trying to set up some iPads to be used in classrooms where we are wanting to prevent anyone from being able to sign into an iCloud account on the device. Is this possible with Jamf Pro? If so, how? I've been trying to research this, but have come up empty. Our previous MDM person is no longer with us to b able to assist with any question .

For the life of me I can't figure out what keywords to use to find what I'm looking for. How can I read what proxy settings the system is using outside of the normal Network System Preference window? In Terminal there's the "export" option which sets the various proxies, but how can we then read what has been set before?

We recently had an employee leave the company and we received their machine, unfortunately we do not have his password. I booted the Macbook Air M1, into recovery mode went into terminal and performed the resetpassword command it de-activated the mac and reset the password to the new password. I rebooted the macbook and it brought up the activation windows and asked me to select the account for i know the admin password for and I entered the password that I used when I performed the resetpassword command and it does not work.  Is there another way to bypass this because of now i cannot get into the machine at all without doing the erase mac option and we would like to try and get any data off of the macbook. 

Greetings of peace,Does anyone know if the AirPrint profile in Jamf Pro for Mobile Devices is suppose to restrict what AirPrint printers show up to ONLY what is included in the profile?It doesn't appear to be doing that in my testing. In fact it appears to be doing nothing at all in iPadOS 16. I'm just not sure what the expected behavior is. A search for "AirPrint" in the Jamf Pro manual returns zero results. Thank you!

Trying to connect our AzureAD to Jamf Pro (Cloud) and this is the error we are seeing.The connection between Microsoft Intune and Jamf Pro could not be established. Try again.The Cloud Connector was created we can login and approve the app but get this every time. Any pointers of what I should be checking or changing please let me know. 

I'm trying to set up a plist that will have defaults settings for the new OneDrive Sync Client released 1/27/17. This new client enables users to also sync SharePoint folders to their Macs just like the Windows client. So, following the instructions in the article "Configure the new OneDrive sync client on macOS," I've made the following plist. However, I'm not sure if I set the DefaultFolder path string correctly. After looking at other plists in my ~/Library/Preferences folder that point to specific file paths, I think I have the right syntax. I want to turn this plist into a custom Configuration Profile to deploy to all my clients once I can test that it works. If anyone has experience with setting a default file path in a plist, and can check my work, that would be great. <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key&

Anyone know of a way to refresh the EDU profile on managed devices? We're experiencing an issue with Apple Classroom where student devices are claiming their EDU student/teacher certificates are expired, and refreshing the EDU profile appears to fix the problem, but currently the only method I'm aware of for doing so involves reassigning the device to a different user and then assigning it back to the original user. That's obviously not going to work for thousands of devices.

How do I add a EULA (Our own) agreement at the login screen? 

Just curious if anybody has tried adding Monterey to the Mac Apps and updating that way. I added it to our Mac Apps and put it in self-service, but it seems like you have to click the install twice. When you go there, click install, when it's done, the button changes to Open. The only way to kick it off is by clicking the Open button.

Hello, Just wondering if anyone else that uses Memcached with their Jamf Pro environment has found a way to enable authentication with memcached? Been searching and have not found any documentation on this. Thanks

We use Carbon Black App Control on our macs and I also have Chrome set up in the Jamf App Catalog. When Jamf tries to push Chrome out Carbon Black blocks it. My question is if Jamf fails to install Chrome via the App Catalog does it delete the installer .pkg file? The issue with getting Chrome whitelisted in Carbon Black is we can't get the hash for the files because it's gone after it fails. Also, is there a standard directory where Jamf puts the installers that we would possibly whitelist?

Is there a way to add an Active Directory user account using a Terminal command? Our normal workflow when on site is to:- log in as admin- bind the Mac to AD- log out of the admin account- have the user sign into their AD account at the macOS login screen, thus creating their user account and user profile. If we have a computer outside of our local network and need to add a network user account to a Mac, we have no way to do it. If we connect to the VPN logged into the admin account, we can hit our AD servers. But as soon as we log out of the admin account, or if we try to switch users or go to "login window..." the VPN connection drops and then we cannot add the network user account to the Mac. So my question is, is there a way to add an AD user account from Terminal? Is there a way we could log in as admin, connect to VPN, bind to AD and then add the user somehow without logging out of the admin account. We are looking at getting away from AD binding with Jamf connec

I've been trying to get the trial version of Jamf Connect Login to work since Wednesday and can't seem to figure out what I'm doing wrong. I even tried following Traveling Tech Guy's blog post : https://travellingtechguy.eu/jamf-connect-login-with-azure/ But the results are the same. Here's what's happening: Azure login window pops up asking for credentials. I put in my credentials. Next screen says create a new local password and verify with a greyed out Create Account button. Thing is - the moment I start typing the app goes black and starts over from the beginning. Any ideas?

Has anyone who is running on-prem Jamf been able to successfully configure and run with HSTS enabled?  If so, I'd love to see your configuration. The following will now load any sub-pages such as inventory or policies. <filter>  <filter-name>httpHeaderSecurity</filter-name>  <filter-class>org.apache.catalina.filters.HttpHeaderSecurityFilter</filter-class>  <init-param>    <param-name>hstsIncludeSubDomains</param-name>    <param-value>true</param-value>    <param-name>hstsMaxAgeSeconds</param-name>    <param-value>31536000</param-value>  </init-param>    <async-supported>true</async-supported></filter>  <filter-mapping>  <filter-name>httpHeaderSecurity</filter-name>  <url-pattern>/*</url-pattern>  <dispatcher>REQUEST</dispatcher></filter-

Hey Jamf guys and gals! I am trying to query information from our JAMF Pro server through the API. I'm like halfway there but I definitely don't know what I am doing completely.  The name scheme we want to do is "(first 4 or 5 characters of the building)-(JAMF ID #)" . I am able to query both of those pieces of information through a script that calls the API, however I can't seem to get the "cut" command to take the first 4 or 5 characters of the building information. Any information on how to cut up the building information would be so helpful. This is what I have so far: #!/bin/bashapiuser=$4apipass=$5jssurl=https://myjamf.comserial=$(/usr/sbin/ioreg -rd1 -c IOPlatformExpertDevice | /usr/bin/awk -F'"' '/IOPlatformSerialNumber/{print $4}')computerID=$(/usr/bin/curl -u $apiuser:$apipass $jssurl:8443/JSSResource/computers/serialnumber/$serial -H "accept: text/xml" | /usr/bin/xpath -e "/computer/general/id/text()")location=$(/usr/bin/curl -u $apiuser:$apipass $jssurl:

I was wondering if anyone has this set up in their environment? Most machines are Monterey, but there are a few Big Sur machines. I tried setting it up and was encountering a few issues. When I restart the machine, it does not read the Yubikey. Will I need a 2nd piece of software to allow it to log in from restart? Is it possible to leave the account as a local user, and still enforce the verification of certificate? 

Hi,I test the deployment with "App Installers" (jamf app catalog)I want to reinstall an app. Is there a way to "force" the reinstall of the app? (like the flush button in a policy)Sébastien

Hey all,Just wanted to relay an experience we had with a company who does hardware buyback, hopefully to help others possibly avoid what we went through.We tend to sell back groups of old Macs/iPads once we refresh our fleet and in the past have had pretty good success.  When we contacted the company we normally have worked with, they said that due to the engraving on our devices, unfortunately they would not be able to purchase our units this time around.With that in mind we reached out to other companies and spoke with Diamond Assets about a buyback and we were very clear that we had engraving on the devices.  We specifically asked how much of a mark down they would receive in an email to their rep. The rep stated it would just be a $10 fee per device that are engraved which seemed reasonable.  They quoted us a great price (for all A ratings) based on the number of units we had.Once we locked in the pricing and signed the contract they finally asked to see the engravin

I am using the JSON template for com.apple.mcxprinting (https://github.com/Jamf-Custom-Profile-Schemas/ProfileManifestsMirror/blob/main/manifests/ManifestsApple/com.apple.mcxprinting.json) which works well but I can't figure out how to get more than one printer in the User Printer List.  If I work with the profile in Profile Creator or iMazing Profile editor, neither is able to specify more than one printer either.Apple's Dev. Docs show an example profile in XML and looks like just a Dictionary with a string identifier and a dictionary of print attributes (printer URI, PPDURL, Name etc). See: https://developer.apple.com/documentation/devicemanagement/printingDoes anyone have an example in JSON or XML that is working with multiple printers they can share?Thanks!

Hello,I'd like to deploy 2 network configs once mac is is enrolled as shown below: 1. Automatic: home, personal..2. Enterprise: this one for company lan/wifi Enterprise should provide below listed items:802.1x cert presence.Fulfil Proxy blank with the desired linkConnect to company's  available wifi/lan. This is done today manually as below:Any idea how to automate things ?Thanks

Even after reregisting to Intune or running below didnt resolve the issue./usr/local/jamf/bin/jamfAAD clean/Library/Application Support/JAMF/Jamf.app/Contents/MacOS/JamfAAD.app/Contents/MacOS/JamfAAD -verbose gatherAADInfo -disable-cache-read no aad id found for macos user account Does any face the same issue.

Hi, i need to update the wording on the login window configuation profile that we have deployed to our machines. Before i do, anyone have any experience doing this? I assume its simple and the change should take affect, but wondering if there is anything i should look out for or could really mess things up. 

We've locked the computer with Jamf Pro and unmanaged it without backing up the lock code. After few weeks all the completed commands disappeared :(Is there anything that can be done to unlock the laptop?

what happens if both are configured, they are compatible?It's gives preference one over the other, or it's not possible to configure one if the other is configured previously?

Hi,I am wondering how Configuration Profiles are pushed, and how often they are pushed, but I can't seem to find any documentation on it. I am editing and testing some config profiles, however they seem to be pushed to the machines at random times. Would someone be able to point me towards such documenation?Also, is there a command to force downloads of configuration profiles, similar to the command "sudo jamf policy"?Thanks!