We use several mac minis as caching servers in some of my company's locations around the world. To be able to access them remotely, we need our screensharing utility (Bomgar) to be approved in Security & Privacy > Screen Recording. It is important this happens BEFORE it ships out, because otherwise we've got a headless mac mini that we can't access remotely. To ensure it gets approved, I have an until loop set to prompt the end user and bring up the appropriate preference pane until access is granted. However, it looks like the osascript prompt I'm using throws an error: 020-08-04 19:19:12.566 osascript[5461:27615] -[__NSCFConstantString objectAtIndex:]: unrecognized selector sent to instance 0x7fff8f3960e0 2020-08-04 19:19:12.567 osascript[5461:27615] *** Terminating app due to uncaught exception 'NSInvalidArgumentException', reason: '-[__NSCFConstantString objectAtIndex:]: unrecognized selector sent to instance 0x7fff8f3960e0' *** Fir

If we want to use Jamf’s built-in Patch Management notifications to let clients know about new patches as they become available in Self Service, they will receive a notification for each patch title as their Macs come into scope for each patch policy. That’s not really a big deal if we only push out one or two patches at a time, but say after Patch Tuesday… yikes! That can easily result in a string of notifications which can get pretty annoying. Additionally, there may be situations where notifications do not behave as we would expect, such as with PI104511, which can result in Self Service notifications not consistently appearing in the Notification Center when they are scheduled to do so, resulting in unpatched apps quitting unexpectedly when they reach their install deadline. This is where we found ourselves and why we built our own patch notification workflow. It leverages jamfHelper and a Smart Computer Group to send our clients one notification each day while patches are availabl

Hi All,Can anyone know what is this error "availability Pending" I can't create any package with any size of the .dmg file. Does cloud DP have any space limit?

I want to add application in screen recording in Security & Privacy pane - Privacy. Can anyone suggest how to add using JAMF Pro Regards,Md Khaja Zahed.

Hi everyone,We deployed Jamf Connect to a few users in our organisation, but what we see on these computers' records in Jamf Pro, more specifically under Inventory - Local User Accounts, is a double entry for that user. One has the type local, one has empty. The other accounts on the computer (management ones) are also local and fine. The two of the user's accounts have the same names, home directories, sizes, and FileVault enabled status. Is this normal behavior for Jamf Connect?

Thought I would share this.  #!/bin/bash appFile="/Library/Application Support/Code42-AAT/Data/logs/app.log" if [[ -f "$appFile" ]]; then #Parse JSON for username and feature pack version JSON=$(cat "/Library/Application Support/Code42-AAT/Data/logs/app.log") featurePackVersion=$(plutil -extract featurePackVersion raw -o - - <<< "$JSON") username=$(plutil -extract username raw -o - - <<< "$JSON") #Setting string for feature pack if [[ "$featurePackVersion" == *"No value at that key path"* ]]; then featurePackVersionResult="No feature pack version present" alert=$alert+1 else featurePackVersionResult="Feature Pack Version: $featurePackVersion" fi #Setting string for username if [[ "$username" == *"No value at that key path"* ]]; then usernameResult="No username detected" alert=$alert+1 else usernameResult="Username: $username" fi #Setting prefi

Guys, We are moving to Intune from Jamf due to less count of device. When we register the MacBook in company portal getting 'The device is not managed'. The device is in ABM but not assigned to Jamf pro server. We did not wipe the device. We just removed the Jamf profile from system preference, deleted certificate from Keychain. Also, we are having Azure AD so no device in Azure under user information. Kindly help. Thanks.#JamfPro #Intune #ABM

Hi, looking for help in producing a report that shows the version of zoom installed on each of our Macs ?

I've been following @erikgmez 's Nudge app for macOS 11 for a while now, and I'm finally trying to jump in to it. There seems to be a lot of configuration options but they all seem pretty similar to me when reading the wiki I tried running it just with defaults and it made the nudge window active constantly... what settings are recommended to kind of tone down the aggressiveness of behavior? Our patches prior to macOS 11 would run once a day and prompt to install or defer. In hindsight that seems not aggressive enough, so maybe every couple hours? I'm open to suggestions, but with all the different timer options I'm getting a little lost and confused.

Good afternoon!I have a Sophos Kernel that is applied via Configuration Profile to to both Intel and Silicon macs. The issue is that the Silicon Macs show a failure to install but the Kernel does install on the Mac profile when I check on each Mac. The problem is that the configuration sees it as a failure so it continues to try and install it and piles up lots of failures on each Silicon mac. The status error is "The current system configuration does not allow the requested operation". As far as what I have researched, Silicon Macs don't really use external kernels. If this is true, is this kernel actually needed (It does install)? Bonus Question: Sophos will only install on 2/3rds of my Silicon Macs. The other third won't take it (the kernel is installed on all of them and they are all on Monterey). If you have any idea why it won't install then please let me know (Jamf shows that it installs but that's not the case).

I feel like a complete bone head but can’t get past this issue. Any help would be appreciated.I am studying for the JAMF 100 and setup a simple trial account.  I want to enroll an iPhone to test it.   When I go to /enroll it prompts for my jamf account, then my managed Apple ID.  No matter what I do I cannot get past this step and skip the managed Apple ID like they do in the training videos as I don’t use managed Apple id’s.  Below are the settings I verified:1.  I created a test user with enrollment rights2. under settings > global management > user-initiated enrollment under iOS I selected ‘enable personally owned devices’ via profile driven enrollment via url.  The two other boxes are unchecked.  3.  under settings > global management > user-initiated enrollment under access the group is set to “all ldap users”, allow group to enroll personally owned devices is the only option set.note: I do not have an ldap server setup for

What could be done if all of a sudden student ipads are disconnecting from the internal wifi and they connect to the guest wifi and when you try to connect back to the internal its asking for a password. The ipads are setup with student information at the MDM so when the profile is in pulled in the internal wifi is in place. As of now the ipad has to be erased and re-setup in order for the device to connect back to the internal wifi. Is there a way within Jamf to tell the ipad to connect back to the internal wifi and what could be causing this issue.

I'm trying to get Nudge working with a JSON file but based on this older post:https://community.jamf.com/t5/jamf-pro/having-issues-uploading-a-config-profile-for-nudge/m-p/246960#M231095 My JSON configuration profile doesn't look the same. My understanding is that it should say Nudge and allow me to modify osVersion Requirements, userExperience,etc Also if I use a JSON I don't also need a separate mobile config is that correct? 

I took over my previous admin and now this is coming to haunt me... I am very new at server, SSL, CA, etc.Since 10.42 deprecates HTTP distribution points, I am going to prepare my Mac distribution points for the transition. to HTTPS. One of the challenge I am having is how to issue SSL for HTTPS for internal non-FQDN host names?Since the hostnames we use internally does not resolve in public, therefore external CA is not going to resolve the issue. I am reading the instructions for Windows to use CSR with JAMF built-in CA to establish trusts. Does the same process still apply to Big Sur w/ built-in Apache?  I assume the process is the same as signing profiles?The reason for this usage on Mac because I have M1 Mini at all sites as content caching. They are not going away nor I am very confident in my Linux skills to run NGINX or Node.JS yet.Thanks.

Hi,I tried to use the API to validate and then upload a CSV file to the Inventory preload:https://developer.jamf.com/jamf-pro/reference/post_v2-inventory-preload-csv-validatehttps://developer.jamf.com/jamf-pro/reference/post_v2-inventory-preload-csvI am able to use other API calls. Just these with the file upload I can not figure out and always get a 400 error.Could someone share some example code on how to use those 2 API endpoints?Thanks,Christian

I'm setting up SSO for the first time and need to map groups created in Azure to groups I have within Jamf in order to separate out Admins, techs, auditors etc - although I can't find anything on that in the documentation. Grateful for any guidance

Hey Jamf Nation!We've just released Jamf Pro 10.42.0 Beta 2. We've added support for Apple's Declarative Device Management along with a few refinements and fixes. Jamf Pro 10.42.0 Beta features many fixes and some exciting new enhancements including redesigns of Jamf Pro Settings and iOS Self Service. It also features new background profiles which prevent users from disabling apps and new support for Cisco Identity Services Engine (ISE) 3.1. Please refer to the release notes for more details. We're excited to hear what you think!How to join the beta: We’ve also made some changes to the Beta enrollment process with our new Jamf Nation platform. Please enroll in the Beta Program under Product Feedback at account.jamf.com. Once you’re enrolled you’ll see a link to the Beta Forum. There will be a short delay between enrollment and Jamf Nation beta forum access - you will receive a notification in Jamf Nation to join the beta forum. Once you receive the invitation click on "Join t

I set up a snipe-it instance and was able to get Google LDAPS connected. I would like to use the Jamf2snipe between my snipe-it instance and our jamf school account. Does anybody know if the Jamf2Snipe works with Jamf school?

Since Jamf Pro Restricted Software records never quite seem to work for us as we originally expect, we’ve found that adding the ID Number in the text of the error message will help us track down which record is blocking what. Error 4: macOS Ventura 13 is currently being tested.Please see KB0070400. (If this message is repeatedly displayed, please restart your computer.)

Hello We currently have in our company laptops on different OS, and I would like to know if a method to block the latest update exists? Each new update is tested before deployment, but I could only lock the update for people who are on the previous update (12.2 in this case) via a smart group and locking access to the update via a profile configuration. So if a user is not on 12.2, he has access to 12.3. Do you have an idea ? 

I created a package in composer to copy the uninstall_agent to the Endpoint folder that I received from our InfoSec team. I created a policy to install the file in the correct path and under Files and Processes, I've tried adding different options below. It copies the the agent and when I do ls -l, it is has the correct rights. If I open up terminal and change directories and run sudo ./uninstall_agent it works. Different options triedsudo ./Library/Manufacturer/Endpoint\\ Agent/uninstall_agent./Library/Manufacturer/Endpoint\\ Agent/uninstall_agentsudo /Library/Manufacturer/Endpoint\\ Agent/uninstall_agent/Library/Manufacturer/Endpoint\\ Agent/uninstall_agentI'm testing it self-service and when it runs it says complete, but the details Result of command:Could not open the log file uninstall_agent.log for writing logs. Please verify that the directory exists and user has permission to create the file.The Agent uninstallation failed.

Update:Decided to push via Self Service using DEPNOTIFY. Sending out reminders to users to run updates.Way easier than trying to automate the process. I am currently trying to automate upgrading our macs M1 to Monterey.I have had success with our Intel macs but stuck at the following stage where to install the OS on our M1 macs I get the following message in the logs.Background:I have set up two policies:“Monterey Cache M1 Policy” caches the installer onto the machine.“Monterey Install M1 Policy” installs/updates the OS. “Monterey Cache M1 Policy” caches the installer onto the machine.     “Monterey Install M1 Policy” installs/updates the OS. + 

Good afternoon, My school is switching the VPN service to also include a mandatory DUO authentication. If the person does not approve the VPN through the secondary verification then it will fail. Do you know how I can edit the Fail message to include more information?-Attached a pic to show the current message.--The VPN right now is set up as a payload in a Configuration ProfileThanks in advance!

I've had a ticket open with them for a week now, and getting any sort of response from them is like pulling teeth.When they do respond, they just ask more questions and don't actually seem to do anything with the information.Is their support really this broken/non-existent?How can you sell an enterprise application when you don't support your users?

Hi Everyone.Scratching my head a little over this one and hoping someone could point me in the right direction.I'm currently deploying a corporate wallpaper to all MacBook devices and its working fine.However, if possible, I would like to use a different image for the lock screen. Is it possible?Thanks! :-)