Hi all,I have 3 config profiles that are deployed to over 6K systems. I need to remove a duplicate entry under the systems extension payload..What's the best / easier way - Should I create a new one and slowly migrate over or just edit and re-deploy?I'm game for edit / redeploy but don't wanna cause any user impact - These config profiles are for security tools - Falcon / Netskope and Global Protect.

Hi folks,I am testing Microsoft Defender on macOS.For setting up the configuration profiles and policies I have been using this article:https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/mac-jamfpro-policies?view=o365-worldwideandhttps://github.com/MicrosoftDocs/microsoft-365-docs/blob/public/microsoft-365/security/defender-endpoint/mac-jamfpro-policies.mdEverything is working as expected. So now it's time to make some customizations.In the Defender client I can see this in the section 'Exclusions:When setting up the configuration profile with the title 'MDATP MDAV configuration settings' I used the schema.json file from Defender's GitHub repository. Now I want to change the exclusions. Remove some from the example and add some new ones which are mentioned here: https://community.jamf.com/t5/jamf-pro/recommended-anti-virus-exclusions/m-p/42833Can anyone explain how to accomplish this? Because in the json file I can't find the exclusions for PDF or /home

Hi all, I need a report for all the apps installed on our Macs, Jamf by default shows all apps installed in Applications folder, there are apps installed in /Library/Application Support/ like JetBrains apps :/Library/Application Support/JetBrains/Toolbox/apps/PyCharm-P/is there a way to find out what apps are installed in that path?Thanks in advanced

Does anyone know if local accounts that are created in prestage are done so by using a script or mdm commands?

This suddenly started happening in our environment. Login and password syncing seems fine, but on the desktop Jamf connect will have a popup that requires sign in. Attempting to sign in here will result in "Your local password is incorrect" and this popup cannot be closed. Disabling our menu bar configuration prevents this popup, but I do not want to use that as a solution. Any idea why this suddenly started and what I can do to stop it.

Hello Team,We have added a configuration payload to bypass the HTTP Authentication for intranet site.We have also added required Certificates too. Application domain:- com.microsoft.Edge<?xml version="1.0" encoding="UTF-8"?><!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"><plist version="1.0"><dict><key>AllowCrossOriginAuthPrompt</key><true/></dict></plist>But re-opening the Microsoft Edge do not work. Even Now I get the authentication to enter the username and password.Please let me know what has to be added or changed.

I am newbie to JAMF and its my first time using it to enroll MacOS devices into the environment. I wanted to take a couple of weeks to learn from the free JAMF 100 course and knock out the exam within that timeframe. Does this sound reasonable if I spend a couple of hours learning the material? I was curious if I could pass the exam strictly on the course material or its best to have hands on experience first. Thanks!

Hi is there a way you can import all the deviced we have on jamf pro to jamf school? Or does this have to been done manually?Thanks 

So I came across this article https://www.jamf.com/jamf-nation/third-party-products/files/658/jssid-list-to-static-group-using-the-api-script But I was wondering if I can pass along a curl command in a single line with a computers ID to a static group using the Statics Group ID instead of writing out to a tmp xml file. Here is an example of a basic script I'm using to test. For the moment, I'm using a test serial number since I can easily populate my serial numbers into the script. If this is possible with a simple (rough example to get the point across) put $JAMF_COMPUTERID to "${apiuser}:${apipass}" "${jssURL}/JSSResource/computergroups/id/${GROUP_ID}" that would be awesome #!/bin/bash ######################################################################################### # Variables - Do Not Modify ######################################################################################### # API Credentials #######################################################################

Looking to see if there's a way to create a Smart Group for Macbooks already enrolled in the Jamf database. These Macbooks need to be unenrolled from Jamf on-prem server and reenrolled to the Jamf cloud. My hope is that when we move these Macbooks over without Jamf cloud seeing them as fresh out-of-the-box Macbooks and push out the zero-touch enrollment for these devices which adds all our company apps to the process. Adding 10-20 minutes of downloads and installs unnecessarily.Can there be a Smart Group that can differentiate these devices from Macbooks that never enrolled?

Running 10.42, has any one else testing Ventura seen a device entry revert to using OS version 13.0 instead of 13.0.0? This occurs at some random point after the device has done a successful recon to report as 13.0.0. A subsequent recon or inventory update corrects this version. I've only seen this so far on a device that went from 12.6.1 > 13.0.0 and have not yet seen it occur on a device that was setup in place from 13.0.0, but still fairly early in testing.

Good morning!I had a question pertaining to the following scenerio:We have a large number of machines that are using a local non admin account most of the time in classrooms. Firefox as many of you know likes to update as often as any app I have ever seen. Because we are in this scenario the prompt can become an annoyance as the only way to update it (as far as I know) is with admin creds that our students don't have. thus they just cancel the update and use the application. Does anyone have any good strategies for keeping applications like this up to date or bypassing the admin requirements for these small annoying updates?  ThanksD   

Leverage switftDialog and Jamf Pro Policy Script Parameters to easily display engaging end-user messagesIntroductionUsing @bartreardon's swiftDialog and Jamf Pro Policy Script Parameters, creating engaging end-user messages is easy.Continue reading … 

Yeah, it's an open source product so I'm not expecting the polish of a commercial app. But I'm stumped.Need to get 2700+ machines re-enrolled from an on-prem into a new cloud instance, and I'm having some trouble with the most recommended method using Jamf ReEnroller. I've followed the included help info, the GitHub page, and Dazwallace's blog post, But I'm getting an SSL cert error from my Jamf Cloud instance, and then it times out.Anyone seen this or have any suggestions? 

HI All, Searched all over and couldn't find this. Looking to create an extension attribute that pulls the authenticated via for a specific ssid. The use case is, we currently allow users to connect to the corporate wifi with username and password , but it gives them a limited network connect , they cannot connect to all services. that shows up as Authenticated via EAP-PEAP (MSCHAPv2)we just implemented 802.1x scep cert authentication.That shows up as Authenticated via EAP-TLSWE plan on deploying the new configuration profile for the 802.1x but want to make sure users are connecting with the new profile and not the old one 

Thanks to @talkingmoose I was able to use his JSON solution to restrict the Password preference pane, since Jamf Pro PI109666 prevents that.https://github.com/talkingmoose/jamf-manifests/blob/master/macOS%20Disabled%20System%20Preference%20Panes.jsonScreenshots:   

I go to the Chrome browser on my iPad which is in the school MDM managed then to settings I scroll down and turn off Discover is there a way to turn them off and have a greyed out  for everyone we don't want students to see the headlines news on the chrome broswser homepage when a new tab is created is there an config profile or an app config that I can use to grey it instead of touch every iPad one by one. Any assistance be helpful Thank you. Should I try the managed bowser in Google Admin? Please advise 

We have signed on with ZScaler and they have provided and .app installer. I have used Composer to convert it to .pkg and uploaded it to our repository. When I setup a policy to install the app, I get a log that states it was successful but ZScaler app is not installed on the target machines. Has anyone else run into this issue and what did you do to get it resolved? Thanks,Wil

hi,the command: Sudo JAMF policy seems not to be supported on Ventura.Terminal says..This script support MacOS Catalina, Big Sur and Monterey only.Script exit code: 1Anybody else getting this issue? and if anything was changed... 

I have about 300 macs that need to be upgraded to macOS Monterey, what should be the best policy to do this and how should it be set up in jamf? 

We just started using JSS this year. Everything is up and working except for one thing. Apple Apps that are made available via the Self Service portal seem to get stuck during the updating of the app. The error on the iPad is. Unable to Download Application. "App Name Here" could not be installed at this time." This error has occurred with several apps. I could really use some help with this as we just handed out 130 iPads to students and several have already seen this error.

So far my org has a handful of machines on Ventura. Oddly, Jamf is showing two of them as reporting version "13.0.0", and the rest are just showing "13.0".I have a script that pulls the OS versions and counts via API, and when I run the output through uniq it's treating these as two different versions. I should be able to adjust the script to deal with that, but before I go to the trouble I was just wondering if anyone had any thoughts on why that would happen. One of the "13.0.0" machines is Intel and one is Apple Silicon, the unaffected machines are some of each.

Hello all, We have switched from DigiCert to Let's Encrypt.With the help of this old script from Jamf, which I have tweaked a bit, we were able to flawlessly generate the Let's Encrypt certificate and install it in the Java KeyStore.Unfortunately, Jamf now crashes on startup. I see a lot of messages like this:  2022-10-28 16:13:36,544 [INFO ] [startStop-1] [efaultSecurityFilterChain] - Will secure Ant [pattern='/servicediscoveryenrollment/v1/userenroll'] with [org.springframework.security.web.session.DisableEncodeUrlFilter@7b332ffb, org.springframework.security.web.context.request.async.WebAsyncManagerIntegrationFilter@7c9d12bb, org.springframework.security.web.context.SecurityContextPersistenceFilter@7bcf9bfc, org.springframework.security.web.header.HeaderWriterFilter@3d3a5b23, org.springframework.security.web.authentication.logout.LogoutFilter@2e1d93c6, com.jamfsoftware.enrollment.web.security.AuthorizationTokenHeaderFilter@690605fc, org.springframework.

We are receiving a "Tomcat SSL Certificate Expiring in 20 days" warning. Apparently, we are using the built-in Certificate authority but since we updated this a long time ago, we aren't sure what to do. Do we need to choose the first option, since we don't want our clients to lose their connection? And if so, how and where do we obtain (download) this SSL Certificate Keystore for uploading into the JSS? Your help is appreciated.

We have Cisco AnyConnect 4.10.03104 working great on Mojave-Big Sur, with users not receiving any popups.  When upgrading from any OS to macOS Monterey, we receive the popup below, regarding a system extension being blocked.  Our configuration profile is scoped to all devices.  When reloading a Mac fresh from Monterey, users do not see the message below.  It only appears to be happening after an upgrade.  Just wondering if anyone has a solution.