We have had to use the Jamf-management-framework API several times over the last few weeks on our laptops thanks to certificate change issues in Jamf Pro, and it works pretty well. We are now seeing several iPads that are in the Jamf Pro console but don't have any management buttons/capabilities. In these situations, we have clients who don't want to erase their devices. Is there an equivalent API for devices, similar to jamf-management-framework for computers?

Hey all.  I have a policy to place, once per computer, policybanner.rtfd in /library/security.  I noticed the other day that these are missing on our Macs now after Monterey. Do OS updates remove policybanner.rtfd from this folder?Are people using other methods of using policy banner agreements?Thanks in advance!

Can someone tell me if its possible to remove company data only from a Mac computer when we want to unmanage a device from Jamf? the use case is if a user who has been working for the company, using their personal Mac, wants to now leave and get their device unmanaged by us.  It seems the only options available are a full wipe, which aint gonna go down well with a user and their personal machine.  Or running the sudo jamf removeFramework command, which seems to only remove the profiles and configs, but not the apps and their data.   I am specifically thinking about Outlook for Mac and OneDrive for Mac.  We cannot be in a situation where we are relinquishing management of a personally owned Mac but then leaving our corporate IP (Intellectual Property) on the device.  Surely if Jamf are offering their service to enterprises this must be an option somewhere?In todays data security centric world it must be an option.  Microsoft does this we

So I have a macbook pro M1 and when enrolling the mac i see the Configuration Profiles install. But right after the Config Profiles install i get the log in screen. Usually when the enrollment process finishes it used to take me to the desktop...and then DepNotify would start its process. what am i doing wrong

I'm trying to upload a signed config profile and I keep getting "Unable to create object from file." It worked a few months ago, but I had to change the name. I changed the UUIDs, there is no duplicate named profile and the unsigned profile uploads fine. I tried both a couple signing certs I have in Xcode as well as creating a signing cert using these instructions.I can install the profile fine locally:We're running 10.41.0-t1661887915 in the Jamf cloud.

Has anyone had any luck with a good Configuration Profile for Spirion agent deployment? I'm on the struggle bus trying to deploy this software.

Since the beginning of this school year, we have been seeing some major issues with Airplay lag.    It seems to hit Apple Silicon Macs the most but has affected some Intel systems.   Systems are on different  OS versions from Big Sur to Monterey.    The common factor seems to be the Apple TVs and tvOS 16.   The issue goes away for a period of time if we restart the Apple TV.Has anyone else experienced this recently?

Hi,How do we change the wording pushed out by Jamf App Catalog when there are updates?Thanks.

We have this issue ongoing for a long time now. Almost every morning, Outlook prompts our users and asking for credentials. I would say it happens when a computer has been for sleep i.e over the night and next coming morning the user open the lid and the pop up is already there. Probably because Outlook is pushing in the background while there is no connection to our domain? Is there any way to prevent or disable it? If I close the popup and wait 3-5sec, Outlook established a connection to the server and everything works as usual. This is very annoying for our users that have to enter their credentials every morning.We have tried with the office reset tool and nuking the keychain etc..The problem comes back after a whiel.We are running Exchange on Prem 2019.Running latest version of Outlook, macOS 12.6.x 

Hello community,hope, you're all well and healthy :) I need some help and hope, what I want to do (set up) will be possible.At the message center of MacOS, it is possible to configure, if applications can send messages or not. If the messages for an application are enabled, the user can set up, which kind of message will be shown. The messages of the management actions can not be configured by user itself. Is there a way to configure in Jamf Pro, to enable usersettings for this kind of messages ?I tried to find a setting in the configuration profiles, but was not successful. Thanks a lot for your replies and stay health, Michael

Greetings and salutations! I have a script that displays a prompt to rename the Mac during provisioning to my org's naming convention.  It was working until relatively recently and the policy logs show it fails with "Script result: 69:189: execution error: Application isn’t running. (-600)".  my guess is some Apple update broke the script but scripting is a weaker part of my skills so help would be fantastic.  Thanks! #!/bin/zshdefaults=/usr/bin/defaultsCurrentUser=$(/usr/sbin/scutil <<< "show State:/Users/ConsoleUser" | awk '/Name :/ && ! /loginwindow/ {print $3}')MacName=$(sudo -u "$CurrentUser" /usr/bin/osascript -e 'tell application "System Events" to set MacName to text returned of (display dialog "Enter the new Computer Name:" buttons "Continue" default button "Continue" default answer "" with icon 1)')scutil --set ComputerName "$MacName"scutil --set HostName "$MacName"scutil --set LocalHostName "$MacName"defaults write /Library/Preferenc

I was wondering if there's an updated script on installing vlc on macOS Catalina machines. I have tried modifying older scripts with no luck. Any help would be appreciated. Thank you.

Anyone know how to return the value of <user_approved_mdm since="10.4.0"> using Powershell?I can get the info in bash using xpath, but I've tried pulling it via powershell (I've got limited knowledge) for one of our teams that only uses Windows.  I know the value is under computer>general>management_status<management_status> <enrolled_via_dep>true</enrolled_via_dep> <user_approved_enrollment deprecated="10.4.0">true</user_approved_enrollment> <user_approved_mdm since="10.4.0">true</user_approved_mdm> </management_status>

I am trying to figure out a way to authenticate my AD admin user accounts while doing 'su' or 'sudo' commands. (or even unlocking the System Pref)  Our Macs are bound to AD and we add a few AD Groups to the local Admin group.  This is setup and working while the mac is on-network. (and had been for years)  We can run sudo with an AD admin account, while on-net and it can reach the AD servers to auth.My goal is to be able to do this while the mac is at home / off network.  We do use JAMF Connect with PingFederate, so I'm thinking there should be a way to do this.  I'm just not sure how to get the pam.d to go to Jamf Connect while trying to auth our admin account.Anyone out there done anything like this?

Hi all, I have setup Azure AD SSO for accessing our JAMF Pro Cloud host. Each time I login I get this error: It only works if I use an incognito window from Chrome. Any way I can get it to work using our default browser (Edge) or at least without having to use an incognito window?

Hello All I am having an issue where it seems securetoken is not being enabled on our accounts, thus FV2 enablement window shows up and asks to enable but it doesnt work after entering the users password. We are using jamf connect with OneLogin for user accounts. What process is everyone here using to enable FV2?

I wish to download a 50Mb pkg installer from a website onto macs. when I run the bellow command it only downloads 152 bytes of the pkg instead of 50Mb. What am I doing wrong?curl https://somewebsite.com/packname.pkg -o /Users/Shared/packagename.pkg 

I recently update my AutoPkgr server to 12.6 and I am not getting an error. Looks like a Python error. I did replace the "is not" with "!=" in the 2 scripts but then got a "Failed Local Trust" error. Anything I can do to get this fixed?? /Library/AutoPkg/JSSImporter/jss/auth.py:61: SyntaxWarning: "is not" with a literal. Did you mean "!="? if r.status_code is not 401:/Library/AutoPkg/JSSImporter/jss/jssobject.py:531: SyntaxWarning: "is not" with a literal. Did you mean "!="? if self.can_put and self.id is not "0":Failed local trust verification.

After removing Admin rights from local users, they cannot update some apps. They're getting a popup to enter Administrator rights and click on Add helper. Not sure what this is. Please advise. 

I’m trying to add iOS update compliance to jamf when the iOS device is first setup. So if the iPhone is on 15.4 it will check and say device needs to be updated to 16.0.2 whatever.. is this something I can do or anyone have any experience with this?

Hi All,Been using Jamf School for a while now with AD binding, this is really slowing down the log in time so have switched to Jamf connect with Azure AD, I've followed the training videos and done some googling, and have managed to get it to work but not ideally how I want the experience.Currently user is greeted with a Microsoft log in, put details in, then it wants to create a local account password, and possibly creates a local account.Would like microsoft log in then it just goes straight to the desktop, no local account, almost want the same experience that AD binding gave but authenticate with microsoft account.In Jamf connect config under authentication I have ticked Always require network authentication, but this has made no difference.Is this possible, am I not understanding the mechanics?Any ideas, suggestions, help is very much appreciated.

Scenario: Some iOS devices that have been set to lost mode, including always enforce lost mode, aren't actually in lost mode. The reason why that has happened seems to be due to the following: 1. An administrator enabled lost mode in JAMF. The device was offline at the time.2. Sometime later, all pending and failed commands are cleared (regular maintenance of JAMF, good to do when you have a large environment with 60k iOS devices, where some are more active than others)3. Sometime later, the device comes online and never receives enable lost mode because the pending command was deleted. Now, JAMF still believes that this device is in lost mode, but it isn't.I understand this is probably due to limitations in the implemented logic in JAMF. For instance, if a configuration profile was never installed because it was cleared when it was still pending, JAMF detects that and reissues the install command for the missing configuration profile on the next inventory update. However, it

Hi everyone,I recently joined an IT team using jamf and I'm in charge of automating small tasks to relieve the load of the support one of them was to check the installed application on every computer.The script is done and running fine the only problem is that since the list of apps is in the script output the only way for me to access it is by going into the policy logs and then click on the details button.Is there a faster way to do this with the platform or the API because we would need a monthly report on installed apps and the fleet is growing exponentially (if not I'll build something else to do it for me but a legit way would be nice)Thank you all in advance

Just throwing this out there to see if anyone has had any similar experiences. We have Managed Apple IDs created through ASM. Our iPads are in Shared iPad mode. This small school district that is using a set of 30 iPads (which are managed by us through Jamf Pro) will not let students log in with their Managed Apple IDs. It will let them use the "Guest" option though. When you go to the wi-fi network, this "no internet connection" error shows up. However, they do have internet and are able to work within GChrome, etc without issues. Their I.T. Director says that other devices (desktops, etc) tend to have this same error populate at random moments. It is my understanding that this usually means there is a good connection from the device to the Access Point, but there is a routing issue from the Access Point to the gateway. I have not been able to determine the hardware this district uses yet (awaiting email from him on that). He did say the following: "We have replaced all the switc

I am messing around with Jamf pro and trying to add a printer. I go through settings>Computer Management>Printers How do I find the CUPS name for my printer?