Get Support
Recently active
I was in the process of testing the erase-install.sh file. I was modifying the same policy and forgot to change the policy back to specific computer and users. I added my device to the specific user and our jamf policy is set for 5min. Not realizing that until I got pinged, I disabled it. It was as 21 devices on Friday afternoon, but keeps growing. We did send out a communication to the Mac users, to not enter password. Is there some way to prevent the policy from running?
Hello, I'm trying to let non-admin users install Ventura using: eraseinstall script: https://github.com/grahampugh/erase-install.Policy is enabled in self-service. Install is not successful.Any idea?Thanks
Changing Port from 8443 to 443 on-prem hosted Windows Server clustered JSS environment running 10.41, we have been asked to make a change to the host port and currently have many devices enrolled, is there a way to preserve or re-enroll devices with a new MDM URL with minimal impact or this just wishful thinking?
I'm looking for clues on whether AoVPN using IKEv2 can be done and how. I can see that IKEv2 is available as a protocol for iOS in the VPN Configuration Profile settings but not for MacOS in the corresponding VPN Configuration Profile settings.There are hints here and there in Jamf Nation but mostly with 3rd party solutions.If anyone can point me at some info that could help I would really appreciate that
We're looking at migrating to HTTPS for our main file share distribution point from SMB. We've used SMB since we began with Jamf and have just had that port open on our state's firewall. Recently they've told us no more on that and have deleted/remove the rule, our only choice going forward would be to use port 8080. So, as of now our Mac's cannot mount our file share and get packages when off of our network. Not the end of the world but it was handy to have policies work from home, especially overnight. We followed the steps to migrate to HTTPS listed inUsing IIS to Enable HTTPS Downloads on a Windows Server 2016 or 2019 File Share Distribution Point - Technical Articles | Jamfhowever, we get a 503: Service Unavailable message when testing a download in browser and also when a Mac tries mounting to run a policy with a package. I spent several hours troubleshooting different settings as well as trying different read-only accounts, recreating certific
I am noticing that all devices encrypted before manual Enrollment in to JAMF Pro, are missing personal recovery keys. Does anyone know how can I issue a new key to already encrypted devices, bearing in mind encryption happened prior to Jamf enrollment. Thank you :)
Is there anyway to add a PM definition ourselves or we depends on Jamf?Application: TailscaleApp URL: https://apps.apple.com/us/app/tailscale/id1475387142?mt=12&uo=4The app is installed from App Store.
Trying to create something for my self-service for the end user to send the local Jamf log to the server for the team to be able to review - although I've never run into an error like this. Grateful for any input Script as follows: #!/bin/bash ##Get the serial number serialNumber=$(system_profiler SPHardwareDataType | awk '/Serial Number/{print $4}') ##Get computer ID id=$(curl -sku api:api -H "accept: text/xml" https://OURJAMFURL/JSSResource/computers/serialnumber/$serialNumber -X GET | xmllint --xpath '/computer/ general/id/text()' - ) ##API call to upload the system log to the computer running the policy curl -sku api:api https://OURJAMFURL/JSSResource/fileuploads/computers/id/$id -F "name=@/private/var/log/jamf.log; filename=system-`date +%F\\ %T`.log" -X POSTAnd the error is: ##Script result: <html> <head> <title>Status page</title> </head> <body style="font-family: sans-serif;"> <p style="font-size: 1.2em;font-weight: b
With the implementation of a recent feature request, Setup Your Mac (1.6.0) introduces additional policy validation options to help ensure critical enterprise applications are both installed and their related services are running.IntroductionApple’s Automated Device Enrollment helps to streamline Mobile Device Management (MDM) enrollment and device Supervision during activation, enabling IT to manage enterprise devices with “zero touch.”Setup Your Mac aims to simplify initial device configuration by leveraging @bartreardon's swiftDialog and Jamf Pro Policy Custom Events to allow end-users to self-complete Mac setup post-enrollment.Continue reading …
Hello all,3 of our devices were supervised and managed, but the Jamf records on our end were deleted while the devices were still active. So the devices still have Jamf on the system, but now phoning home is pretty weird. We were able to restore one of the records, but it appears to be only managed now. On this restored record, we are unable to push any commands or policies to the device that are normally available by default (Lock Device, Send Blank Push, etc.).Is there any way to get these devices reconnected to our system, or should we bag it and just re-issue new devices to these users?I'll be checking this all day so please feel free to ask any questions about anything I might have left out. Thanks!
Currently, app licenses get assigned when a user is scoped to a self service policy. I want to script an option that a user can “request” to have access to an application through self service and then automatically get added to a smart group that the application license and installation policy is scoped to. Has anyone done anything like this before? Thanks in advance!
Hi Pro,I am new to JAMF and looking in to get some help,I have to deploy the below code via JAMF and add it to the existing edge Plist defaults write com.microsoft.Edge AuthServerAllowlist org.kerberos.okta.comI have added this code to .sh and deployed it via JAMF policy and it didn't work TIA
Hey Jamf Nation,We are having issues with LockDown Browser not opening after students install the pkg or dmg created from composer. The message that pop up on their screen is "the application is damage- App installed from an unknown developer(notarization) ". Issue just happening with intel clients running on Ventura.
Does anyone know what specific permission/privilege in Jamf Pro allows a Jamf Pro user to view and scope existing policies? I can't seem to find the right checkbox in the privileges page of Users and Groups. The user in question just gets a blank page but there should be a bunch of policies showing.
Has anyone implemented the API for Superman? Specifically the api details. I am a little lost on the configuration of it any help would be appreciated. https://github.com/Macjutsu/superThanks!
Is Jamf using the "softwareupdate" command line tool to collect the details on the Mac client?I am just wondering because even on clients with a major software update deferral profile (90 days set),Jamf Inventory shows the macOS Ventura Upgrade on macOS 12.6.1 Clients?Thanks in advance, Bjoern
Hello all,we use Shared iPads on schools. It would be fine to enable location services on shared iPads or at least to set the time zone in the DEP profile, but it is not possible in Jamf School.Is there any solution for that?Thank you in advance.Best RegardsAngelo
Hello!Since November or so I see HTTP Downloads (from an HTTP-DP served by IIS on our Jamf Pro Server)Server is Jamf Pro 10.42.1 running on Windows 2016 Server (it is the "DMZ"-Server of our clustered pair)Jamf only logs a "Package not found" although the Packages are definitely there, and I get a "404 0 2" error in the http-Logs. That mostly happens when the machine is first set up (DEPNotify is started right after the Setup Assistant finishes and users see the Finder for the first time.When the machine retries after setup ist finished (Policies are triggered through custom triggers and have retries set) then everything downloads ok.I am really stumped, has anybody seen something similar? MIME-Types are all set, the IIS on that Server was working fine up until November, when we moved the main Server to a different Datacenter. Bye, Fridolin.
Hello , I've got problem with python script , first line of script have command to import :import os.path ,os , getpassbut Jamf PRO have problem like below:line 1: import: command not foundDo you have some tips how to solve it ?
I've had this issue since about January 2022. It hasn't been a huge issue because I am operating in an enterprise environment with less than 100 Macs. However, we are growing and this is steadily becoming more prevalent. The reason I post this here is because I'm the main point of contact for Jamf, but I'm still fairly new to setup in this environment so I'd love to hear if anyone has suggestions for this issue. Here's what's happening:I utilize SSO sign-in through Azure AD. Since about 12.2 and later, any new setup of Mac OS (brand new or refreshed) I have not been able to get users signed into their OneDrive app. We launch the app, put in their email, and then it is 'supposed' to go to the SSO splash page, but OneDrive does not go there. It just seems to refresh the page and ask for the email address again. Once you click next, the app does not ask for the password and then asks where the folder should be synced. You select a location, the app thinks for a moment, and then gives the
For a computer policy that has a script object in it, is it possible to update the script parameters via the API? I found in the classic api documentation (seen below) that you can update some parts of a policy with xml. Would it be possible to update a specific parameter (7 in this case) for a script. Ideally that would be the only thing that would change. <policy> <general> <name>Firefox</name> <enabled>true</enabled> <trigger>string</trigger> <trigger_checkin>false</trigger_checkin> <trigger_enrollment_complete>false</trigger_enrollment_complete> <trigger_login>false</trigger_login> <trigger_logout>false</trigger_logout> <trigger_network_state_changed>false</trigger_network_state_changed> <trigger_startup>false</trigger_startup> <trigger_other>string</trigger_oth
Hi, Which is the best practice to enroll the users via User Invitation Enrollment ?From Security Perspective it is not feasible to use share accounts amongst all users during enrollment process, would like to understand various approaches followed in other organisation
I'm been experimenting with some scripts that we want to run at each user's log in. We're using Outset to handle them now, but it's been unreliable for us and seems to break part way through our semester, every semester. In light of that, I've been exploring new ways to get our users files and other things set up for them.I've had luck calling scripts using Jamf's Login Trigger, but the commands in the script are processed as a root user, not the currently logged in user, which causes the scripts to fail. I've found some documented fixes, but they're from previous less secure OSes and earlier versions of Jamf/Casper and I'm not sure they'd be successful under Ventura.Does anyone have some suggestions on getting the scripts ran as the user at login? Should I be going down the launchd rabbit hole?
I’m at a loss here. I’ve been suddenly fighting Zoom screen sharing being completely “blocked” with my JAMF Pro setup on all new computers. All machines are running 12.4, Zoom 5.11, and I have a PPPC payload deployed on some that allows non-admins to allow screenrecording and the other half does not have this. No matter which configuration I use, even when I allow full disk access and screen recording, Zoom still tells me to open my Security & Privacy to whitelist the app to screen record. I have tried both the IT installer PKG and the regular PKG to no success. Does anyone have advice on what I need to check for?? I’m at a total loss right now. Thanks in advance!!
Hey I was wondering if anyone else was having issues with the new macOS Ventura update? After pushing the new update to the students none of them are able to use Safari. When Safari is launched it will open for a split second then close. I rebooted and reinstalled update macOS but no changes. Please advise on how to correct issue. I tried: Holding Shift and click on Safari to openRight click and open methodRebootReinstallUpdate Safari
Earn a cool badge and Jamf Nation Reward Bytes for your published articles. We’re looking forward to your submissions!
