Hello everyone,can someone tell me why the observe feature only exists in the classroom and not in the Jamf Teacher? Is it an apple thing?Thanks for clarifying.Peter

Is anyone currently having issues with Declarative Management and its rollout? I'm receiving a command failure with the following on all my systems which hit the base requirements of Declarative Management. Command: DeclarativeManagementError/Status: JSON text did not start with array or object and option to allow fragments not set. around line 1, column 0. JAMF Version: 10.42.1-t1667311080MacOS: 13.1Enrollment Type: DEP Any guidance would be greatly appreciated.

We just set up a cloud distribution point in AWS but no objects are replicating.  The S3 bucket was created successfully and JAMF Admin says replication successful.  It even showed the individual packages copying over the first time.  However, there are no items in the bucket so something is failing somewhere along the way.  I did find this (https://ideas.jamf.com/ideas/JN-I-16521) that appears to have similar issues but a fix was implemented.  Still, the top comment is the only place I've seen the exact same problem listed.  Plus, while server side encyption is enforced on AWS side I have nothing in any policies regarding encryption like they did.  At this point, the only policy I have is the following test policy which is about as wide open as it gets:{"Version": "2012-10-17","Statement": [{"Sid": "AllowFullS3JAMFBucketsOnly","Effect": "Allow","Action": ["s3:*"],"Resource": ["arn:aws:s3:::jamf*"]},{"Effect": "Allow","Action": ["cloudfront:*"],"

Hi,I once again having issues using the new API / UAPI / Jamf Pro API.Getting error: "httpStatus" : 405, for which I cannot find description here: https://developer.jamf.com/jamf-pro/docs, anybody knows what it is?What I am trying to do is simply change computer's Site on JSS via the new API, any input would be appreciated ($id is current computer ID on JSS):curl -X PATCH "https://jss.MYCOMPANY.com:8443/uapi/v1/computers-inventory/$id" -H "accept: application/json" -H "Authorization: Bearer $token" -H "Content-Type: application/json" -d "{\\"general\\":{\\"site\\":[{\\"id\\":\\"6\\"}]}}"I have tried it using Site name as well:curl -X PATCH "https://jss.MYCOMPANY.com:8443/uapi/v1/computers-inventory/$id" -H "accept: application/json" -H "Authorization: Bearer $token" -H "Content-Type: application/json" -d "{\\"general\\":{\\"site\\":[{\\"name\\":\\"EMEA - London\\"}]}}" same error, the problem I suspect is with this: "{\\"general\\":{\\"site\\":[{\\"name\\":\\"EMEA - London\\"}]}}"

We are having a number of devcies that are not checking in. This is not a reoccuring thing but it is random.Example: I have one device that the MDM-SCEP Cert became invalid. By removing the MDM and then re-enrolling the device via User-initiaded the device is now communicating succesfully. Anyone have an idea why this is happening?

I'm trying to restrict access to Freeform on our K12 lab iMacs using Restricted Software payload in Jamf Pro. I was able to block the app on iPads in Jamf School using com.apple.freeform but that has not worked on Jamf Pro.I tried to block Freeform.app but have not had success. Anyone able to block this app from appearing?

I’m trying to package Citrix Workspace; I installed v2301, created the pkg with Composer, and uploaded it to JAMF.  I also packed the Config file as DMG and set it to FUT & FEU.  I installed Citrix Workspace and then replaced the Config file with my Config file, and I received an error message.If I uninstall Citrix Workspace with the included uninstaller and then install the original downloaded Workspace 2301 file and then run the Config settings policy to replace the Config file, then Citrix Workspace opens without any issues.  I can’t figure out why the packaged version is causing so many issues; what am I missing?Any help is greatly appreciated!

We use Zoom a lot, so I modified a script that we were using for Firefox (Thanks Joe Farage!) to install or update to the newest version of Zoom. This one enables HD video, sets SSO logins to be default, and configures the URL for SSO. Below is the script: #!/bin/sh ##################################################################################################### # # ABOUT THIS PROGRAM # # NAME # ZoomInstall.sh -- Installs or updates Zoom # # SYNOPSIS # sudo ZoomInstall.sh # #################################################################################################### # # HISTORY # # Version: 1.0 # # - Shannon Johnson, 28.9.2018 # (Adapted from the FirefoxInstall.sh script by Joe Farage, 18.03.2015) # #################################################################################################### # Script to download and install Zoom. # Only works on Intel systems. # # Set preferences - set to anything besides "true" to disable hdvideo="true

When I trie to import placeholders I get an error.Could not update placeholder 'iPad xxxx' for serial 'XXXXXXXXXX', the DEP placeholder doesn't existCSV file for testing isSerialNumber,Identification,AssetTag,AssignToUser,MemberOfGroups,AutomatedDeviceEnrollmentProfile,DeviceName,LocationXXXXXXXXX,iPad xxxx,PADSX02,,BBBBBB - CCCCCC D,BBBBBB – DEP-profile,%AssetTag% - %SerialNumber%,Location XI have 'BBBBBB – DEP-profile' in Automated Device Enrollment Profiles and this works If I manually assign it to the devices. Profile name is double checked.AutomatedDeviceEnrollmentProfile is descibed in the documents https://docs.jamf.com/jamf-school/documentation/Placeholder_Devices.htmlThere's a CSV template in xxxx.jamfcloud.com/impex/devices.html but there's no AutomatedDeviceEnrollmentProfile and there are 7 labels but 8 colums???SerialNumber;Identification;AssetTag;AssignToUser;MemberOfGroups;DeviceName;Location2019XXXZDSK;Device001;Optional;Optional;Optional,Optional2;Optional;Optional2019X

Hi Folks, I've done some searching and noticed that there's been other folks who get 502 errors in the Casper Sync Log when transferring larger files from Jamf Admin to a Cloud Point. Unfortunately, we're stuck in a bad situation where we just bought cloud and we need to sync our 500+GB on prem point up to the cloud before we can make it the main point. We've tried everything on our side we can think of, switching DPs, making sure it's not some bizarre network issue or firewall thing. Small packages (usually under a GB) upload fine. Normally this is where I'd bring in JAMF support, and I did, but they've been basically sitting on it now for 2 months and all I've gotten from repeated escalations is "We're looking at it". Has anyone else ever gotten this happen recently? I noticed there were a lot of folks in 2020 (probably covid related when everyone was setting up cloud) but it doesn't seem to happen any more. I can't make it the primary point and try the web upload until I g

When applying a "Security & Privacy" config profile to a Mac with High Sierra with any combination of settings the Content Caching service is automatically disabled. I can work around this by applying a Restrictions profile and enabling "Allow Content Caching". I notified JAMF support of this, below is a snip from their response. I didn't find any existing discussions regarding this bug so I just wanted to make people aware. Turns out you were dead on right, this is reported Product Issue on our end (PI-004822) and we at this point we are trying to determine whether this is strictly a Jamf issue or if Apple has role as well. The workaround is also precisely what you indicated, adding a Restrictions payload and Allowing Content Caching. I have attached this case to the PI and the place to look for a future resolution would be via the Release Notes of the next JSS version

Hi, New admin looking for some advice. What is your typical stance on major upgrades such as Ventura? Do you guys have a normal workflow that blocks these updates for a certain amount of time or do you run with it on day 1? I am curious to see how other admins handle these updates. 

Hello and Thank you in advance for any assistance. I purchased some apple devices through my apple business account at full price. Two of the devices need to be handed off to others outside of the company and we no longer want to manage the devices or have anything to associate us with them. I was able to remove the profile from the devices and no longer can see them in our inventory of devices. They are effectively unmanaged through JAMF. In the settings on the actual device there is still a flag at the top that says "device is being managed by... (and our company name)" How do I remove this flag from the device?

Hi,I'm trying to disable the sync options in the browsers mentioned above.For Chrome I've found <key>SyncDisabled</key> https://chromeenterprise.google/policies/#SyncDisabled but for some reason is not working, not sure if this is happening because I'm not editing the correct file or saving in the correct path.Can somebody help me out with this issue?Thanks in advance.

good day.after applying the Policy to enable the FV2 in JAMF, when the user restarts the machine he still have to 1- login to decrypt the disk2- sign in again with the AD user name and password.can someone offer a solution to have the password registered?well, let me break it down in other words.1- the devices/laptops are connected to the AD.2- users always use there AD credentials to login.3- the user now login twice, first login is to decrypt the disk and the second one is to login to the device itself.4- so the problem is what if the user forgets his AD password and i did a reset on the AD, he will not be able to decrypt the disk in order to login. so my question is that if i can just bypass the 1st login requested to decrypt the disk or i should be switching to a different method of enabling the FV2.

I finally ran across the 1st application we use that needs a separate installer for ARM64 and x64 platforms that we used Patch Management for. Here we are 3 years in to Apple Silicon, and JAMF still does not have a solution for this.  The best JAMF has is to package both the ARM64 and x64 packages in to a temp directory, and run the correct package with a post install script which detects the platform. Take that package and use it for the Patch Management package. If anyone wonders why I almost never recommend using Patch Management and say just use polices, this is one of the reasons. After 3 years this is just lazy and we deserve better. Here is a feature request from 2 years ago with 4 votes. Lets see if we can give it some traction. Architecture Specific Patch Definitions | Jamf Nation Feature Requests

It's been a while and I have a question about Self-Service.Can Self-Service be accessed by a user via a URL on an unmanaged computer or even a mobile app on an unmanaged mobile device?Ideally, there are some areas that would be great to make available via Self-Service for a user when they're not necessarily on their managed Mac.  For example, after being strongly authenticated into Self-Service, I would like to get my personal FileVault recovery token because as a user, I forgot my local password to my managed Mac.Please let me know if you have good direction here or if this just doesn't exist today.  Thanks All!

I am doing testing and I don't want to wait for the recurring checkin trigger to time out. Is there a command that forces a checkin right now?

We have iPad Air 2 devices that we are trying to enroll.  The devices are 7 years old, but the organization is requesting we use them.1. Unable to push applications to the devices (application licensing error)2. Verified we have plenty of licenses available and the devices contain the serial number in the portal3. Older devices that still have apps on them get an error in Teams when they try to open a new document.Is there a known issue with these devices in JAMF Pro?

We have some Macs that were "gifted" to departing staff and I need to remove them from management without wiping them. I am referencing the Unmanaging Computers from Jamf Pro article but it assumes having physical or direct network access, which I don't have. Is it possible to effect this using a Policy?I was thinking I could use the "nohup" utility to allow the commands to continue running without being terminated as the Jamf utility itself is removed. Something like this:nohup bash -c "sleep 30; jamf removeMDMProfile; jamf removeFramework; reboot" &This seems to work if I initiate the Policy from Self Service, but not if it is triggered by the Recurring Check-in. What am I missing?

Hi Everyone, new here! Does anyone know where I can find an administrators guide for Jamf School? The one for Jamf Pro is there but nothing for school? Any documents/pdf's welcome :) 

I am encountering some issues with Jamf School and our iPads. I needed to erase and reset a device yesterday and the apps would not load. After erasing and resetting numerous times, I noticed that the profile was pulling in on our guest network. This profile shouldn't pull through until I put the device on the dedicated network.  I also am having an issue with the weblinks  on the devices not opening. It shows a black screen then changes to a white screen, but the weblink never loads. 

so after applying the Policy for enabling the FV2, all works fine but the user password isn't synced with the AD, in another word, when the user restarts the machine he still have to 1- login to decrypt the disk2- sign in again with the AD user name and password.can someone offer a solution to have the password registered?

Using ABM, Intune and Jamf Connect, things are happy and deploying I think correctly but could use a second opinion on the Connect installation.On first boot, Mac os laptops ask to sign in via SSO (Azure AD), then it still asks me to create a local account. That local account once all the config profiles and Jamf menu bar install get back ground synced and the password to log into laptop becomes the AzureAD passwords. Jamf Connect is registered to correct user in menu bar etc after signing in once local user is created. Is this correct? should we still have to create a local user?

When I try to turn on "Enable Activation Lock on the device (Apple School Manager, Apple Business Manager)" in PreStage Enrollments, and the Shared iPad option is also selected, when I click Save it always ends up clearing that Activation Lock option. I can only turn it on if I disable the Shared iPad option. Do you guys see this as well?