Hello. From my understanding after reading through many posts on here, it is possible to enroll a Mac running Monterrey or higher OS into Jamf and not ABM, is that correct? If so, I assume that you would need to send out user initiated enrollments via email? Now, my real question is - by enrolling in Jamf and NOT in ABM, what features/control would I be missing? I am more than happy to explain more in detail the scenario, etc if need be. Thanks.

After upgrading to ventura OS 13, I cannot make restrictions on profiles, are there another way to prevent an administrator user from deleting the MDM profile?

I currently leverage a smart group, softwareupdate -aiR, custom notifications and the deferral option for an automated OS patching workflow both myself and user base are really happy with. In testing the m1 chipset I am finding softwareupdate -aiR isn't functional in the workflow. Looks like there is an additional prompt for a password prior to downloading??? Anyone seen this or have any ideas as to why?

I added an anchor certificate to a few of my PreStage Enrollments, but cannot delete it. When I click the Delete button, I only get the indefinitely spinning blue circle until JAMF times out and logs me off. Is my only option to delete and recreate the PreStage Enrollment?

Hey Jamf Nation, CleanMyMac X team here. We are a cleaning software for Mac that is notarized by Apple. Just wanted to notify you that CleanMyMac can be now installed and customized through Jamf Pro. Here’s how you can set up CleanMyMac: Visit our Business or Academia pages to purchase multiple licenses at a special price. Download PKG file Run the PKG to install CleanMyMac X through Jamf. Create a property list file (plist) with the following structure: Add your license to License.plist as an ActivationKey value Put license to Application Support (path: ~/Library/Application Support/CleanMyMac X/License.plist) Once CleanMyMac is run for the first time, the license will be read and the app activated on all Macs. And that’s it :) Hope you’ll enjoy using CleanMyMac on your clients’ computers. Please leave comments below if any questions occur.

With Python not being automatically installed as part of Monterey, the old script to adjust the dock once dockutil is installed doesn't work as written. Here is a sample of a script that has been revised to work with Monterey and dockutil 3.0.2 #!/bin/bash # NEW DockUtil Script without python v2.2 # Include Standard PATH for commands export PATH=/usr/bin:/bin:/usr/sbin:/sbin # Set up variables whoami="/usr/bin/whoami" echo="/bin/echo" sudo="/usr/bin/sudo" dockutil="/usr/local/bin/dockutil" killall="/usr/bin/killall" loggedInUser=$( echo "show State:/Users/ConsoleUser" | scutil | awk '/Name :/ && ! /loginwindow/ { print $3 }' ) LoggedInUserHome="/Users/$loggedInUser" UserPlist=$LoggedInUserHome/Library/Preferences/com.apple.dock.plist ########################################################################################## # Check if script is running as root ########################################################################################## $echo if [ `$who

I want to automatically install the Netflix app on all my Apple TVs.....but I only want to have it available for Self Service on my iPads.How do I go about doing this?Any help would be very much appreciated.

I'm getting very close to a true zero-touch deployment solution for our iPads, and I'm hoping the community can pull me across the finish line on a strange issue I'm having with managed apps. My test iPad enrolls via DEP/Prestage Enrollment fine, but the ensuing automatic install of the Self Service app is asking for iTunes credentials (I'd like this to not happen). In what might be a related issue, VPP apps set to "make app managed when possible" are not doing so, despite this option being enabled. Getting this working would be a great to have for an upcoming hardware refresh, and I appreciate all the help in advance.

Hello,Just seeking some advice on best practice for unmanaging iPads. We have an iPad program where the students keep their iPads after 3 years so we unmanage etc end of term. Up until last year it was just a matter of unmanaging and taking the iPads out of a prestage then releasing from ASM. However when we did this last year it seems that when the students then wiped their iPad the activation lock screen would appear and needed the code to unlock.Just wanting to know how we can avoid that this year, should I send out the 'Disable and prevent Activation Lock' command then unmanage?We are on JAMF Pro, any help would be fantastic thank you.

As the attachment, on mac it displays that DMG file is mounted in Google Chrome. The frequency of this display is variously which some people displayed four to six times in few hours and some has never seen it. I have tried to stop Google Chrome’s policy, which already started the program, and to pull out by using detach command below, but the display still appears. If there are related library file I will like to delete them. Does somebody have a different solution for this problem? Or have some suggest of “related library file” to this problem？ Please feel free to post any solutions! Thanks! ■This is detach command I tried /usr/bin/hdiutil detach/Volumes/"Google Chrome"

Hi, I got some issues with the computer name changes in my environment. Changing the computer names directly after the prestage enrolment and changing the computers based on serial number (HMserial). Everything is correct except for the LocalHostName change. Unfortunately this does not happen for all devices but just for some of them. Script I use: #!/bin/bash #Get Serial number SerialNumber=$(system_profiler SPHardwareDataType | awk '/Serial/ {print $4}') scutil --set ComputerName "HM-$SerialNumber" scutil --set HostName "HM-$SerialNumber" scutil --set LocalHostName "HM-$SerialNumber" ComputerName and HostName are changing correctly but for the LocalHostName change I receive a failure: SCPreferencesSetLocalHostName() failed: Invalid argument The strange part is that this is not happening for al computers but just for some of them. Anyone has an idea what can be the cause of this error and how to solve it? Help is appreciated!

I was trying to get iphone device informations from terminalI could get many things from termnal but i was wondering if i can get the information of find my device is turned on or off from my mac terminal.I was searching for it but could not find any command line script or anything else .. Can any one help me out please?

I'm currently testing out a Jamf Now (Fundamentals) deployment for a couple of Macs we have. I haven't used Jamf before so not too sure how Jamf connect should work, but have a feeling mines not correct.I have setup the setting "Enable password sync with Jamf Connect" and done the setup in Azure for it. When a user first logs on it asks to type in both password (microsoft & then local password) so it could sync.Then we changed the password in Microsoft to see if it worked but on the macbook we have to login with the old local password and then in Jamf connect enter the email and the new microsoft password and it says they are out of sync and input the local password.I assume this should be a bit easier as its not exactly syncing the passwords currently?

Dear all,  I have a recent problem with NOMAD.Before, a user would connect to Nomad and when his AD password was changed, NoMAD would detect it and ask the user to change his local password.Now, a user logs in to NoMAD but the AD password changes are no longer seen by NoMAD and the user remains logged in.Any luck on this one ?

 This script checks for if the Mac is an M1 Chip, then if it is not, will check for the OS. Depending on these conditions, the year will be read differently.#!/bin/sh #Set variables for processor, apple chip, & operating system versionprocessor=$(/usr/sbin/sysctl -n machdep.cpu.brand_string )AppleChip="Apple M1"AppleChipYear=$(/usr/libexec/PlistBuddy -c "print :'CPU Names'" ~/Library/Preferences/com.apple.SystemProfiler.plist | tr ' ' ' ' | grep -e "M1, 20[0-9][0-9]" -e "20[0-9][0-9]" | sed 's/[[:punct:]]$//' )os_ver=$(sw_vers -productVersion | awk -F. '{print $2}')os_ver2=$(sw_vers -productVersion | awk -F. '{print $1}')#check if the machine is an Apple M1 processorif [[ "$processor" == *"$AppleChip"* ]]; thenecho "$AppleChipYear" else#Check which operating system version is on the mac if not an Apple M1 chip processorif [[ ${os_ver} -le 14 ]] && [[ ${os_ver2} -le 10 ]]; then plistFile="/System/Library/PrivateFrameworks/ServerInformation.framework/Versions/A/Resources

Hi, I'm looking to be able to allow pairing with our fleet of iPads to one specific iMac so that they can be restored in AC2 without each one having to be put into recovery. Is this possible?I can see in JAMF that our profile for our iPads has the pair to Mac option, but I don't know if that will only pair to Mac's with the supervisor identity cert or with any Mac.

Hello all,I have gotten Notify and connect to work with my deployments. However user's screen are turning off when Notify is running. 1. Is the computer sleeping or is the screen just turning off?2. If it is sleeping I want to make config profile to turn off sleep that will push initially, but removed via smartgroup after Notify has finished. What would you suggest for the smartgroup criteria?

The long version:Previously unmanaged Mac user population at my org. Spent the last 4 months aggressively chasing the users to get their devices enrolled and setup with management. This was a battle in itself. Many Mac users struggling with the the fact that these are company owned devices and not personal computers. This isn't helped by the fact that Mac computers are about 5% of the organizations total computer inventory, so these users feel some kind of prestige feeling about having a Mac.Had maybe 1 month of peace after completion before it got out of hand. Users are blaming Jamf for every single thing that goes wrong. Printer offline? Must be that Jamf thing you installed. Outlook crashed? Jamf. Network slow? jamf. Spilled coffee on the keyboard? Probably Jamfs fault. People's managers are complaining about the false perception of Jamfs impact and now the rumor has spread.The only people that recognize the nessecatiy for Jamf are the IT Security team and my manager. However, the o

We are new to Jamf Pro. I have several users who are coaches that use software specific to their sport. The software updates at weird times and when the coaches are on the road, they can't update their software due to not having admin privileges on their laptops. Is there a way using Jamf to automate these updates so they can install them as non-admins? Better yet, install them in the background? 

Started doing some initial testing with ZScaler ZCC and noticed that while the installer didn't prompt for it, under Security and Privacy > Full Disk Access there is a ZscalerTunnel binary that's unchecked. Does anybody have a config profile for enabling that or is it okay to just have it disabled? 

We were just made aware of this, and Jamf and Apple have confirmed. The Ventura release on Monday will be considered a minor update for anything 12.3 and higher, so major OS deferrals will not apply. Apple's recommendation is to defer all minor updates as well as major until you can get your clients to 12.6.1 (not released yet, maybe also on the 24th?). Jamf confirmed to us that you should have all your clients at 12.6.1 by Wednesday, November 23, 2022 if you wish to defer Ventura past that date. Just passing on info. Hopefully this helps someone avoid a rough Monday.Edit: Adding direct quote from our Jamf rep that explains better than I did:Ventura major deferral bug, in a nutshellOn macOS 12.2 or earlier? - You're all good. Not affected.On macOS 12.3 or later?There's a bug. It's fixed in 12.6.1 and Apple has made a change so even 12.3+ will be fine for 30 days - make sure to get 12.6.1 installedIf you don't get 12.6.1 installed, Ventura updates published after 30 days might

為了支援 macOS 使用者能完成工作，從部署各式各樣的第三方軟體，像是文書軟體、瀏覽器、程式編輯器、回報目前使用者所使用的軟體版本，一直到更新已裝在 Mac 上的第三方軟體，都能在 Jamf Pro 的幫忙下完成。然而，有別於 macOS 對於升級作業系統有延後最大 90 天的機制，第三方軟體在 macOS 作業系統上的更新方式顯得更為多元，但對於 IT 同仁來說也增加了理解的成本與選擇困難。這篇文章簡要的整理出，在 Jamf Pro 的幫忙下，能以哪些型式派發更新至 macOS 設備上，主要分成以下 3+1 點：Jamf App CatalogPatch ManagementSelf Updater使用 Mac App Store 部署的Jamf App CatalogJamf App Catalog 是一個非常方便的 Jamf Pro 功能，只要你是使用 Jamf Cloud 就能在 Jamf Pro > 電腦 > Mac App > 新增 > Jamf App 目錄下找到它。有別於以往部署軟體和更新軟體是兩件事情，Jamf App Catalog 將它整合在一起。IT 人員再也不需要去重新打包第三方軟體的安裝程式，也不用去追蹤某個軟體是否出了新版、不需要擔心這個軟體的安裝檔是否為合法正版。Jamf App Catalog 直接搞定所有的事情。Jamf App Catalog 是一個由 Jamf 維運的雲端服務，它會主動的去了解清單上的軟體有沒有最新版，如果有便會自動進行打包，確保軟體的來源合法。這個功能有幾個好處：IT 人員不用自己追蹤版本號、不用自己打包該第三方軟體在使用者電腦上永保如新當然，也帶來幾個不方便的地方：截至寫作當下，Jamf App Catalog 會自動更新電腦上的該應用程式，不能夠放在自助服務區給用戶自行選擇更新時間。因為會確保第三方軟體為最新，IT 人員無法控制更新時序。例如想要先測試過後才部署給用戶，這個就無法。Jamf App Catalog 的清單如列：https://docs.jamf.com/jamf-app-catalog/App_Installers_Software_Titles.htmlJamf App Catalog 的使用文件：https://docs.jamf.com/zh/jamf-pr

I'm having an issue uploading a configuration profile for nudge. When I install the profile locally, there are no issues and everything worksThis is the content. Not sure What I'm doing wrong here. <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>PayloadContent</key> <array> <dict> <key>PayloadDescription</key> <string>Configures all Nudge preferences</string> <key>PayloadDisplayName</key> <string>Nudge Preferences</string> <key>PayloadIdentifier</key> <string>com.github.macadmins.Nudge.preferences.example</string> <key>PayloadOrganization</key> <string></string> <key>PayloadType</key> <string>com.github.macadmins.Nudge</string> <key>PayloadUUID<

Hello I'm still learning. I have created a smart group with systems that were compatible with Big Sur which I got this value(MacBook(10|9|8)|MacBookAir(10|[6-9])|MacBookPro1[1-7]|Macmini[7-9]|MacPro[6-7]|iMacPro1),\\d|iMac(14,4|1[5-9],\\d|20,\\d) I was wondering how I could get the opposite of it. Like create a smart group with systems that aren't compatible with Big Sur. I'm still new to this well at least with the regex stuff on finding the hardware. Thank you any help would be greatly appreciated.

One of the questions on the test exam is: "Supervision is available as part of a computer PreStage Enrollment configuration." Which the answer key says is false. I assume this is because it isn't part of the PreStage Enrollment settings but my question is if this is misleading because PreStage Enrollment requires DEP which can be used to supervise a device. Considering that DEP is a prerequisite is it not fair to say that PreStage Enrollment can supervise a device? Or is it somehow important to split hairs like this because of where the setting is even though the ultimate outcome is the same?