I am newbie to JAMF and its my first time using it to enroll MacOS devices into the environment. I wanted to take a couple of weeks to learn from the free JAMF 100 course and knock out the exam within that timeframe. Does this sound reasonable if I spend a couple of hours learning the material? I was curious if I could pass the exam strictly on the course material or its best to have hands on experience first. Thanks!

Hi is there a way you can import all the deviced we have on jamf pro to jamf school? Or does this have to been done manually?Thanks 

So I came across this article https://www.jamf.com/jamf-nation/third-party-products/files/658/jssid-list-to-static-group-using-the-api-script But I was wondering if I can pass along a curl command in a single line with a computers ID to a static group using the Statics Group ID instead of writing out to a tmp xml file. Here is an example of a basic script I'm using to test. For the moment, I'm using a test serial number since I can easily populate my serial numbers into the script. If this is possible with a simple (rough example to get the point across) put $JAMF_COMPUTERID to "${apiuser}:${apipass}" "${jssURL}/JSSResource/computergroups/id/${GROUP_ID}" that would be awesome #!/bin/bash #############################################

Looking to see if there's a way to create a Smart Group for Macbooks already enrolled in the Jamf database. These Macbooks need to be unenrolled from Jamf on-prem server and reenrolled to the Jamf cloud. My hope is that when we move these Macbooks over without Jamf cloud seeing them as fresh out-of-the-box Macbooks and push out the zero-touch enrollment for these devices which adds all our company apps to the process. Adding 10-20 minutes of downloads and installs unnecessarily.Can there be a Smart Group that can differentiate these devices from Macbooks that never enrolled?

Running 10.42, has any one else testing Ventura seen a device entry revert to using OS version 13.0 instead of 13.0.0? This occurs at some random point after the device has done a successful recon to report as 13.0.0. A subsequent recon or inventory update corrects this version. I've only seen this so far on a device that went from 12.6.1 > 13.0.0 and have not yet seen it occur on a device that was setup in place from 13.0.0, but still fairly early in testing.

Good morning!I had a question pertaining to the following scenerio:We have a large number of machines that are using a local non admin account most of the time in classrooms. Firefox as many of you know likes to update as often as any app I have ever seen. Because we are in this scenario the prompt can become an annoyance as the only way to update it (as far as I know) is with admin creds that our students don't have. thus they just cancel the update and use the application. Does anyone have any good strategies for keeping applications like this up to date or bypassing the admin requirements for these small annoying updates?  ThanksD   

Leverage switftDialog and Jamf Pro Policy Script Parameters to easily display engaging end-user messagesIntroductionUsing @bartreardon's swiftDialog and Jamf Pro Policy Script Parameters, creating engaging end-user messages is easy.Continue reading … 

Yeah, it's an open source product so I'm not expecting the polish of a commercial app. But I'm stumped.Need to get 2700+ machines re-enrolled from an on-prem into a new cloud instance, and I'm having some trouble with the most recommended method using Jamf ReEnroller. I've followed the included help info, the GitHub page, and Dazwallace's blog post, But I'm getting an SSL cert error from my Jamf Cloud instance, and then it times out.Anyone seen this or have any suggestions? 

HI All, Searched all over and couldn't find this. Looking to create an extension attribute that pulls the authenticated via for a specific ssid. The use case is, we currently allow users to connect to the corporate wifi with username and password , but it gives them a limited network connect , they cannot connect to all services. that shows up as Authenticated via EAP-PEAP (MSCHAPv2)we just implemented 802.1x scep cert authentication.That shows up as Authenticated via EAP-TLSWE plan on deploying the new configuration profile for the 802.1x but want to make sure users are connecting with the new profile and not the old one 

Thanks to @talkingmoose I was able to use his JSON solution to restrict the Password preference pane, since Jamf Pro PI109666 prevents that.https://github.com/talkingmoose/jamf-manifests/blob/master/macOS%20Disabled%20System%20Preference%20Panes.jsonScreenshots:   

I go to the Chrome browser on my iPad which is in the school MDM managed then to settings I scroll down and turn off Discover is there a way to turn them off and have a greyed out  for everyone we don't want students to see the headlines news on the chrome broswser homepage when a new tab is created is there an config profile or an app config that I can use to grey it instead of touch every iPad one by one. Any assistance be helpful Thank you. Should I try the managed bowser in Google Admin? Please advise 

We have signed on with ZScaler and they have provided and .app installer. I have used Composer to convert it to .pkg and uploaded it to our repository. When I setup a policy to install the app, I get a log that states it was successful but ZScaler app is not installed on the target machines. Has anyone else run into this issue and what did you do to get it resolved? Thanks,Wil

hi,the command: Sudo JAMF policy seems not to be supported on Ventura.Terminal says..This script support MacOS Catalina, Big Sur and Monterey only.Script exit code: 1Anybody else getting this issue? and if anything was changed... 

I have about 300 macs that need to be upgraded to macOS Monterey, what should be the best policy to do this and how should it be set up in jamf? 

We just started using JSS this year. Everything is up and working except for one thing. Apple Apps that are made available via the Self Service portal seem to get stuck during the updating of the app. The error on the iPad is. Unable to Download Application. "App Name Here" could not be installed at this time." This error has occurred with several apps. I could really use some help with this as we just handed out 130 iPads to students and several have already seen this error.

So far my org has a handful of machines on Ventura. Oddly, Jamf is showing two of them as reporting version "13.0.0", and the rest are just showing "13.0".I have a script that pulls the OS versions and counts via API, and when I run the output through uniq it's treating these as two different versions. I should be able to adjust the script to deal with that, but before I go to the trouble I was just wondering if anyone had any thoughts on why that would happen. One of the "13.0.0" machines is Intel and one is Apple Silicon, the unaffected machines are some of each.

Hello all, We have switched from DigiCert to Let's Encrypt.With the help of this old script from Jamf, which I have tweaked a bit, we were able to flawlessly generate the Let's Encrypt certificate and install it in the Java KeyStore.Unfortunately, Jamf now crashes on startup. I see a lot of messages like this:  2022-10-28 16:13:36,544 [INFO ] [startStop-1] [efaultSecurityFilterChain] - Will secure Ant [pattern='/servicediscoveryenrollment/v1/userenroll'] with [org.springframework.security.web.session.DisableEncodeUrlFilter@7b332ffb, org.springframework.security.web.context.request.async.WebAsyncManagerIntegrationFilter@7c9d12bb, org.springframework.security.web.context.SecurityContextPersistenceFilter@7bcf9bfc, org.springframework.security.web.header.HeaderWriterFilter@3d3a5b23, org.spr

We are receiving a "Tomcat SSL Certificate Expiring in 20 days" warning. Apparently, we are using the built-in Certificate authority but since we updated this a long time ago, we aren't sure what to do. Do we need to choose the first option, since we don't want our clients to lose their connection? And if so, how and where do we obtain (download) this SSL Certificate Keystore for uploading into the JSS? Your help is appreciated.

We have Cisco AnyConnect 4.10.03104 working great on Mojave-Big Sur, with users not receiving any popups.  When upgrading from any OS to macOS Monterey, we receive the popup below, regarding a system extension being blocked.  Our configuration profile is scoped to all devices.  When reloading a Mac fresh from Monterey, users do not see the message below.  It only appears to be happening after an upgrade.  Just wondering if anyone has a solution. 

Can we use Microsoft Office applications like Outlook Client, One Note,One Drive Business and other office applications on Mac Machines managed via Jamf Pro. If possible please help .. Thanks again. RegardsSagar

Hi,Once the user is enrolled via User-Invitation method, Jamf connect do not identify the Azure password and prompts user with JC login screen asking to enter credentials .There are no password restriction policy deployed via Jamf on our devices

Hello, it seems that users are able to delete apps even when the box is unchecked to "Allow user to remove the app" on the specific app page.We have Lightspeed relay smart agent app that we don't want deleted. iPads on iPadOS 15 work correctly, they have a profile to allow removal of apps but the relay app does not allow removal so they can't remove it. iPads on iPadOS 16 with the same config allow removal of the app.It seems that is is all or nothing as far as app removal goes on iPadOS 16.1 Anyone else experiencing this?

Hello,Our marketing department tasked IT with providing office signage for our two offices- originally we were looking at BrightSign which seemed fairly expensive per device. With the recent discount on Apple TVs, I thought they would provide a cost effective solution as well as giving AirPlay capability to the monitors around the offices.The thought was to give each department a Managed Apple ID to drop their own photos and slides into iCloud photos and have the Apple TVs cycle through those images when not in use. And if whoever is managing that account leaves the company, we could reassign the Apple ID owner in Apple Business Manager.When attempting to sign into a managed Apple ID on the Apple TV that is enrolled in ABM & Jamf, we receive the message, "This Apple ID is not supported on this device." It has already been logged into www.icloud.com as well as on a Mac- but for whatever reason

I'm not sure if this is even possible but is there a way to lock a computer in JAMF with a timer? Say we give a user a new mac to replace their old one but they want 2-3 weeks to transfer their data. Instead of putting it on my calendar or remembering to lock that mac when time is up, is there a policy that we can set to automatically lock that mac with either a specific lock number or random lock number that can be shown in JAMF? This would be a pretty good feature to have in JAMF.

I noticed that our macOS Monterey app still shows an older version of the app (latest is 12.6.1 but shows 12.6). Is there a way to refresh it so it can grab the latest version or is this normal for macOS updates? All other apps are up to date. I don't want users updating to an outdated version only to have to update it again.