Hi,I'm testing MDM commands to force software updates (12.6.x to 12.6.2) It's worked well, but it seems that if you click on the countdown timer for the reboot, it stops the computer from rebooting. Does it stop it indefinitely? Will it install the update on the next reboot? And if not, do you send the command again? I'm only asking because I have a limited number of computers I'm able to test on and I'm just trying to work out the kinks before having to actually do this in the wild. TIA

getting the 503 service unavailable while calling the API after getting the token successfully. 

Is anybody here still running their JAMF pro instances on-prem? Our management is very anti moving things to the cloud.I am a super new Sys-admin for our Mac stuff and management has tasked me with researching what to replace our current hardware relating to our JAMF pro environment. I am having trouble finding super good data of how much hardware/specs we actually need to support what we have with some extra headroom.Management likes the idea of going VM for most of our JAMF stuff, but JAMF support seems is a little wishy-washy on if that's a good idea. I think they are really trying to push the cloud service (which I get). We're also running things mostly in Linux right now, but management has discussed going to Windows Server whenever we get new hardware.If any of you guys are still running JAMF pro on-prem, do you have any insight on how you have things structured, what hardware you are running, and how well it seems to run? Also you guys use any 3rd party applications to monitor y

Hey there, Does anyone have any experience with installing Adobe apps like Fresco, Reader, Photoshop, etc to a mobile device (iPad Pro)? I'm able to install other apps by adding them through VPP and scoping my device to them but with Adobe apps it doesn't work. The apps show up under Mobile Device Apps and it shows the license is used but they never show up on the device. I know that when installing on a computer they need to be packaged together but I'm not sure how it works with mobile apps.

Looked at dsconfigad hoping it would point upward to dsconfig.Looked at dscl which I think just lists them in alphabetical order.Looked at odutil which seems to only list connections and statistics. Any help appreciated.

I'm been running the script with success as long as the end user doesn't restart their mac before hand. I have a test mac on 12.3 and I deployed 12.6.2 via the script. I see in the logs that it selected 12.6.2, but the in the morning when I checked, the mac updated to 12.5.1. My question is, if the mac is older then a certain version, will it just update to the next big update regardless of selecting 12.6.2?

Hello, we have a local admin account for troubleshooting purposes on our macOS systems. We're seeing that we can login to a small percentage of some of them. No error message, just the password field shake. These accounts are not setup manually, so we're fairly certain that the password is correct. Logged in from another user, we can run "dscl . authonly <USER>" and then enter the password for the account when prompted. If we enter a purposefully incorrect password we get:Authentication for node /Local/Default failed. (-14090, eDSAuthFailed)<dscl_cmd> DS Error: -14090 (eDSAuthFailed) If we enter the correct password we get:Authentication for node /Local/Default failed. (-14167, eDSAuthAccountDisabled)<dscl_cmd> DS Error: -14167 (eDSAuthAccountDisabled) So from here it sounds like the account was disabled somehow. But if we run:dscl . -read /Users/<USER> AuthenticationAuthority | grep DisabledUser it doesn't have it flagged as Di

Has anyone seen a situation where the Jamf Pro UI won't accept adding a computer or group to the scope of a policy or profile right away? It usually takes multiple tries before it is finally added to the scope. Here's a screen recording demonstrating the issue:https://drive.google.com/file/d/1n3y9p5Po9BqT29bsVnh0fpZbwI4uJUFK/view?usp=sharingIt's fairly intermittent, i.e. one day it will work straightaway, but on most other occasions it will take multiple attempts. I've also seen similar behaviour when trying to add a package to a patch policy under Patch Management.This smells like a PI or if not, something specific to our DB. We run Jamf Pro v10.41.0 on a Windows Server 2019 VM.

When enrolling iOS devices using user initiated enrollment (sent via SMS), I had both options in settings checked (institutional and personal), per documentation this should prompt the user to pick one. This is important for us and it shows that it is supported by the docs. However, I was not being prompted and the device always showed institutional after enrollment in the device record. To test, I removed the device record, unchecked institutional and left personal as the only user initiated enrollment option. Re-sent the invitation. When I tapped the link, I get ACCESS DENIED. I sent all invitations without requiring a login, so I tried it with requiring a login. Same issue. Am I missing something? I've been through every setting and I can't see what would cause this?

In Jamf school, our iPads are set up as Shared iPads. We would love to see the students already be signed in to Teams, OneDrive,... no matter which iPad they grab. Is this possible?Is this possible in temporary guest mode? regards

Hello, I'm using DUTI to set default pdf reader as adobe instead of preview in all users and works great locally and admin accounts but for regular accounts with no sudo privileges it does not apply. Anyone know a fix? Here is my current script

I've following the instructions from the documentation to create a OS Ventura installer to test out manual OS Upgrades for our organization. I'm having issues with the command execution. The packager installs correctly and can be found in the /private/var folder, I can even go in and start the install from there. But I'm struggling with the command to get it to install. I've tried:  /private/var/Install\\macOS\\Ventura.app/Contents/Resources/startosinstall --agreetolicense. This yield a result of: No such file or directory. This was how one of Jamf's training video said to do it and I followed the instructions exactly.I've also tried /private/var/Install macOS Ventura.app/Contents/Resources/startosinstall --agreetolicenseand the result of the command is: is a directory. I'm very inexperiences with the command line so any help is appreciated.  

Hey, new to Jamf and Configurator, been working though it through trial and error and all has been well for the most partI recently set some iPads up for forcing a passcode to be used but all of a sudden after a day or so, all of the iPads this was pushed through were no longer reconnecting automatically to the wifi I setup a payload config profile for? Wifi was turned on, however nothing was showing in the listed networks... and since it wasn't joined to wifi, I couldn't do anything via JamfIs this a common issue and is there an easy resolution other than (what I assume is the only way to remedy this) not forcing an auto-join to a particular network?

Unsure if you will find this handy. I wanted to find a way to quit all Adobe processes and delete all adobe files. Made this script which seems to do the trick! #!/bin/bash ##kills all adobe processes pkill -f Adobe pkill -f adobe ##Removes all Adobe applications and files rm -rf /Applications/Adobe* /Applications/Utilities/Adobe* /Library/Application\\ Support/Adobe /Library/Preferences/com.adobe.* /Library/PrivilegedHelperTools/com.adobe.* /private/var/db/receipts/com.adobe.* ~/Library/Application\\ Support/Adobe* ~/Library/Application\\ Support/com.apple.sharedfilelist/com.apple.LSSharedFileList.ApplicationRecentDocuments/com.adobe* ~/Library/Application\\ Support/CrashReporter/Adobe* ~/Library/Caches/Adobe ~/Library/Caches/com.Adobe.* ~/Library/Caches/com.adobe.* ~/Library/Cookies/com.adobe.* ~/Library/Logs/Adobe* ~/Library/PhotoshopCrashes ~/Library/Preferences/Adobe* ~/Library/Preferences/com.adobe.* ~/Library/Preferences/Macromedia* ~/Library/Saved\\ Application\\ State/c

Hello all,Just wanted to know if anyone here has taken the Jamf 100 certification exam. I've been studying for about 3 weeks and wanted to know anyone's experience taking the exam in the past.Also I would like to know how accurate is the practice exam compared to the actual exam.

I took the great work that had already been done here: https://github.com/shbedev/jamf-recovery-lock and expanded on it to create an single file comand-line script that will allow you to supply a search parameter and it will return all Apple Silicon computers in your Jamf instance with names that match your search parameter. It has options for clearing or setting the Recovery Lock passcode, and you can specify the passcode to use or have it generate a random number.Here's the link to it:https://github.com/jcmbowman/jamf-scripts/blob/main/SetRecoveryLockJAMF.pyBefore you use it you'll need to edit the script to supply your Jamf url and a username and password that has access in Jamf to make api calls that can change the recovery lock. Since you're hardcoding your credentials into the script make sure to store the script in a secure location. This script is only for administrator use and should never be deployed to end-user computers. You will need Python3 installed, and a

Hi,Asset IT teams would like to receive a notification once a device is enrolled in Jamf.Required infos: User IDDevice Asset TagDevice S/NAny idea how to satisfy this request ?1) How to auto-populate an online Sharepoint sheet?2) Can we export to excel sheet and on a shared smb ?3) Can an API used to fulfil a web tool ?4) ....Any other trick is welcomeNote: Create and email an inventory report was not approved.

All,our internal auditor asked me to give her access to Jamf Protect. She already has acces to Jamf Pro, using the Jamf ID created for her. I set her rights to be able to use Jamf Protect there as well.I setup the account for her on Jamf Protect, with the identifier Jamf ID, but somehow she is not able to login. Username and/or password is incorrect. Funny thing is that we tried resetting the psw, using the supplied link, but that mail never arrives. And yes, her mail-address is correct en its not stuck in a junk-filter.Any thoughts?

I can't seem to find the answer to this on my own. If I set a deferral type of Date and set a date a month in the future, how do clients handle that policy when no user is logged in? Does the policy just run, or does it wait for a user to be logged in so they have the option to defer? 

Hello,I have an issue linking JAMF API to Azure to automate reports sharing.API URL can be linked to MS Power Automate but stopped to a DLP strategy. How to convert the Jamf API to Microsoft API so it can be linked to Azure app ?Thanks, 

After 2 full days of tinkering around with Jamf Connect, I successfully got it all working for our fleet of machines. I currently have a question: I wondered if it is possible to launch a browser window during the enrollment process. I ask this as since the MacBooks are utilizing Okta as an IdP for logging into Jamf Connect. The initial login would technically fail as the new user doesn't have a way to set his/her password until they are in the machine. Of course, they could do this on their laptop, but I would like to move from utilizing personal devices for Onboarding new employees. Launching a Browser window during enrollment would alleviate the issue of having Okta credentials synchronized which would be helpful when making the first login for the machine.

Hi there,We've recently migrated from Meraki to Jamf Pro using the jamf migration tools. Issue we're seeing is that for devices that are moved they exist in an unsupervised state and therefore we cannot do anything with the activation lock. i.e when we wipe devices and they trigger activation lock, we would have to contact apple and wait 2 weeks to get the activation lock removed.Our users use MAIDs which cannot release devices from activation lock and activation lock does not prompt local account credentials to release devices. If anyone has dealt with this issue what is the best practice in dealing with these devices or process to get around it?

Hey,I'm trying to find some way to suppress the autodiscover redirect popup. (YES I have search the forum here and tried the suggestions)We have an Exchange 2016 on prem hybrid solution.Autodiscover URL runs a split DNS. One points to an internal load balancer and the other points to an external reverse proxy load balancer, that points to the internal exchange servers.Our clients runs the latest version of Outlook 16.67 (O365 licensing), both on Monterey & Ventura.I have a configuration profile through Jamf with the TrustO365AutodiscoverRedirect key set to true with no luck. Have also tried with SuppressO365AutodiscoverOverride,  same result as before. The popup appears again for those users who have nog pressed "always use my response for this server..."

A Big Hello to All,I have a very annoying issue with Self Service not deploying Patch Management apps. eg Zoom, Google Chrome, Microsoft office apps, Firefox etcI am running MacOS Ventura 13.0.1 across my fleet of Mac's and running JAMF Pro 10.42.1-t1667311080This happens very randomly and the Jamf.log does not have a lot of information...All of my Patch Management apps are PKG files.What happens is when a user opens up Self Service and clicks on Notifications and attempts to install an update the wheel spins and spins away.And the update is not installed.....It does not matter if the Mac is on a Corporate Ethernet network or a VPN (I am using Palo Alto Global Protect) or even a 4G internet connection.The only way I have been able to fix the issue is delete the Mac from JAMF, Azure and Active Directory and reload MacOS and log the user back onThis is a drastic solution but my only one at this time....I would be most grateful for any help!

Okay all.  I searched through the community forums and saw some very helpful information but it also added more questions.  I figured I'd make another post  and detail everything out.  Any help would be appreciated. Goal:  Move around 280 MacOS devices from Intune to Jamf with as little interruption to the end user as possible.I know one of the first things that will need done is un-enrolling from Intune but this is where I start to get confused on best practice.  I am new to both Jamf and Intune but one thing I understood from my previous company is that the check-in time for Intune could take as long as 24 hours.  I also see how the MDM profiles are not removable by the end user for our Intune managed devices.  While i totally understand why this needs done this leads me to my first question.What is the best way to allow for User-Initiated enrollment so that there can be a seamless transition from Intune to Jamf?If I am understanding what