Our company is moving to Freshservice. Working on a policy to push the Freshservice agent to all our Macs. The Agnet is a pkg file and that installs fine but I can't figure out how to make it reference the json file for the registration key and account info. I tried using Composer to create a custom pkg but it flat out doesn't work. Any assistance would be appreciated.

Hey everyone, It's been awhile since I have done anything in Jamf Pro and honestly I am more of a sccm/intune engineer.  I say that because I recently deployed a registry key on all windows machines to greyout the option to enable or disable syncing on a onedrive.  My leadership has ask me to force all users to enable syncing their documents, pictures and desktop as seen in the picture.  I have successfully deployed this to all windows workstations.  Does anyone know how to do this on macOS? See the example below. 

I thought I disabled update notifications from Apple via config profile by unchecking "Allow software update notifications" in the Restrictions > Applications section, yet I still get these:Did I miss something?Thanks.

Hi, We use Jamf to auto update Microsoft apps like Word, Excel and Powerpoint. Recently all our users are now seeing this message when Jamf updates the apps. Has this happened to anyone else and is there a fix for it?   

<3 to all the people at Jamf working to fix things. In them time, shout out to #jamfnation  

We have one user with a Macbook Pro M1 Laptop. Big Sur is installed on the machine and the logged in user is a Mobile Account and has admin rights. File vault 2 is also enabled.Deployment was some month ago and everything worked fine. Two days ago the user approached me as he was not able to login with his account credentials at home. He was in the office yesterday and after I logged in with my local admin account everything was fine and he could work. So told him to also to update his Big Sur installation from 11.2.x to the latest version 11.5.2. But as he tried to enter his password the following screen states that Authentication is disabled.I grabbed this screenshot from the internet cause our dialogue is in German.Anybody have seen this? Where does this come from and how can we fix this? I would greatly appreciate your help.Thanks

Our original Jamf Pro URL is mdm.dpmhome.com, but now it's failed to use. BTW, I have to use dpmhome.jamfcloud.com for access after your cloud service going back recovered, please let us know how can I use back mdm.dpmhome.com, thank you

Curious as to what happens to paid app licenses when you wipe a device. Seems to me that we are losing licenses if we wipe an iPad. Some of these apps are expensive. I wiped an iPad this morning and 2 paid app licenses were not available to scope, even though they were on the device before. It appears that the device is no longer scoped, but the license is no longer available.  Any thoughts on this? 

Hi all, I am currently trying to enable LAPS for our computers and after reading through documentation and watching videos on the topic, I disabled the creation of the local MDM admin account in PreStage and only enabled the UIE admin account. New problem that arose with that: The account created by the user during setup is now an admin. But I don't want that. Does anyone have an easy solution for that?

Hi, new Jamf admin and not very knowledgeable about the inner workings of SSO.  I have configured SSO to our Entra ID domain and the web log into Jamf Pro and Account and no issues with log in with my account or a test account. I have been able to have devices enrolled successfully when the device (iOS only) is in ABM and have moved on to set up User Self Enrollment.   When the test user account, goes to register, at: domain.jamfcloud.com/enroll, the user is directed to the Microsoft log in.  After the credential are entered the process fails with the error : "Sorry, but we're having trouble signing you in" message with the AADSTS650056 error.  I've found a few suggestions here on JamfNation, but they haven't resolved the issue. SSO Azure AD - Misconfigured application  Cloud Identity providers has been set up and tested successfully redid the MS Application set up ensured: Jamf Pro > Settings > System > Single Sign On > Enable Singl

Configure Kerberos SSO for Microsoft Entra Platform Single Sign-On Reference: https://learn.microsoft.com/en-us/entra/identity/devices/device-join-macos-platform-single-sign-on-kerberos-configuration   The native Kerberos Single Sign-On (Kerberos SSO) extension can work in conjunction with the Microsoft Entra Platform Single Sign-On (PSSO) extension to obtain user Kerberos certificates without binding the Mac to  an on-premises domain controller.   The Kerberos SSO payload can either be deployed as a separate configuration profile or added to an existing configuration profile with a payload to deploy PSSO. Single Sign On-Extension payload settings If the Setting is not listed below, the setting should not be included in your payload and left blank.   Payload Type: Kerberos Realm: The name of your Kerberos realm which must be properly capitalized (e.g. EXAMPLE.COM) Hosts:  Add all of the following hosts.  Substitute example.com with the fully qualified

IS there an ETA on the USA hosted outage. I’m unable to apply settings or enroll a single device.

Hi For some reason Power Apps isn't syncing to Jamf School when bought via Apple School Manager. Here's what I've done: - despite having 50 available licenses left over from when we used to use Meraki, I have bought another 50 in the hope it kicked it in but it didn't - bought a different app to test whether that worked and it did. Bought them via ASM and it immediately showed on Jamf. I have heard it might take 24 hours to sometimes sync over, which is fine but the original 50 licences are a new purchase. They were bought on ASM like 2 years ago.   Any help appreciated. Thanks

This one is for all of those wanting to issue the .p12 certificate to computers via Jamf Pro for Google LDAP Authentication with Jamf Connect. I've recently performed an integration for a customer with Jamf Connect and their G-Suite tenant following the article provided here: https://learn.jamf.com/bundle/jamf-connect-documentation-current/page/Integrating_with_Google_Identity.html and found that when attempting to issue the certificate via a configuration profile, I would get the error "the certificate could not be verified (authentication error)" I ended up going down a long rabbit hole of troubleshooting that ended with having me attempt to install the certificate manually, which lead me to find that the password I created wasn't being accepted within keychain access.This lead me to the following article going over an open issue with OpenSSL 3.x and it's deciphering issues:https://stackoverflow.com/questions/70431528/mac-verification-failed-during-pkcs12-import-w

Hi All,   Does anybody know how to default the edge browser and also add bookmarks within Jamf Pro? Thanks in advance

Hi All,  Does anyone know how to remove the configuration profile for the passcode policy deployed during prestage enrollment? In Prestage Enrollment settings, we have set the Passcode requirement, and now we want to deploy a new requirement, but I can't see the option to remove the existing profile.   Thank you all in advance.

My senior give me an EML Files for migrating Into MSG Outlook. So Where can I convert EML files to MSG Outlook for Mac?

I noticed that there are 2 Managed Local Administrator Accounts listed in the Inventory > General page of our computers. All our computers and devices are all under Apple School Manager and are automatically enrolled via PreStage Enrollment (so I am thinking that User-Initiated Enrollment never happens for us).   My questions are: 1. Under Settings > Global > User-initiated enrollment > Computers, do we need to check the box for "Enable user-initiated enrollment for computers"? And if yes, do we need to check the box for "Create managed local administrator account" (everything else is unchecked) given that each PreStage Enrollment also creates a managed local administrator account?   2. Under Settings > Global > User-initiated enrollment > Devices, do we need to check the box for "Enable for institutionally owned devices" (everything else is unchecked)?   3. If we disable User-Initiated Enrollment, will the currently enrolled devices be affected?

How do I toggle this feature off or prevent it from being toggled on?  I went to reset the users password via Recovery Setup Options, user had logged into personal Apple ID when MacBook was issued but didn't remember the password.  FileVault is enabled an we escrow those PRK's, but it wasn't until after the user reset their Apple ID password and logged in with it on the recovery side before the system would even allow me to put in the escrow'd PRK.  We don't manage Apple IDs, I really don't see the point in them if they can't purchase anything through them.  Yes I've had a VPP setup for yrs, but there are those few who like to connect their watches and such.  Any advice would be welcomed.VickiH

We want to block Apple Intelligence while not signed in to ChatGPT, but allow it to be linked to ChatGPT with a specific workspace ID. This is because we recognize that Apple Intelligence while not linked to ChatGPT is a learning target. Do you know anything about this control?I know that sign-in can be managed by specifying a workspace id.

Hi everyone,  I'm starting to deploy some Mac Mini for a school, although they don't have any LDAP or Federation, they want to deploy Mac mini with Jamf School for a Lab. No problem for that, I've made the DEP profile, started every mac, and create several standard account in them. The problem is when I want to add some restriction to this mac, I would like to know if there are any possibilities that the restrictions only apply to the Standard account, not the Admin account. Because Standard accounts are the student's account, and we don't want them to have access to some functionality of the mac. Thanks for your help and sorry if this question seems to be too Noob style. Ben    

Does anyone have an EA that will bring into inventory those applications that have been authorized in Location Services?

Hi, I am looking for a Universal Version of aria2c that I can deploy as PKG to the Mac Clients. On Brew I found Version 1.37 which seems to be the latest Universal Build? We do not want to have Brew on every Client. Is there a way to create a PKG of the local installed aria2 from Brew and to distribute it to other Mac Clients who do not of Brew installed? Thanks!

  This time, looking for a job was a bit different. In the past when you looked, there always seemed to be a few options out there you could choose from. At the very least, a list you could rank and go after a few based on priority. These days it seems you may still see what appear to be quite a few options out there, but unfortunately the times they are a changing as the saying goes. I don't want to sound dire, but between new factors that have chipped away at what you see and what you actually get. It's quite a bit more difficult out there right now. Because of that, I wanted to jot a few things down to see if I could help about my recent experience. So whether you're in the midst of your job search or about to embark on that journey, here are some observations that I think could help. Things aren’t totally what they appear to be. Between AI being tier zero to any job applicant, and the fact that companies are posting ghost jobs just to compile data, my first takeaway from that

Hey Everyone, I have been battling this issue for quite some time and have done rigorous testing but have sincerely hit a wall with this issue. My organization is prepping to remove Administrator access from all users on our macOS systems, this requires them all to be converted to a Standard user. (We have a "MakeMeAnAdmin" script in place in JSS we plan to utilize) MacOS: 14.3.1Jamf Connect: 2.32.0 We use Jamf Connect with Azure/EntraID so users can authenticate on login, we have the app roles setup for the app registration in Azure with two groups, MacUserAdmin-Entra & MacUserStandard-Entra with the correct roles tied to each (Administrator & Standard) The Problem:Whenever a user is moved into the group tied to the STANDARD role in Azure and attempts to login to Jamf Connect on one of our Macs they can enter the O365 email, PW, verify 2FA, but then hit a "Yellow Exclamation Point" box with simply an "Okay" button. Once you click "Okay" you are kicked back