Trying to install/update Webroot through scripts in Jamf. We once had a script that worked very well but seems with Catalina no longer works even if it's updated with new links. This is the old script: #!/bin/sh #set -x #Set Keycode for Clients KEY=<Keygoeshere> #Proxy Settings host=X port=Y user=Z password=ZZ sleep 2 clear #Download WSA mac client cd /tmp; curl -O http://anywhere.webrootcloudav.com/zerol/wsamacsme.dmg echo Please wait while file is downloaded and mounted wait 15 #Mount the DMG file hdiutil attach -nobrowse /tmp/wsamacsme.dmg #copy app from dmg to applications sudo cp -R /Volumes/Webroot SecureAnywhere/Webroot SecureAnywhere.app /Applications/ wait 10 #run silent install if no proxy (If running a Proxy Hash out this command) sudo "/Applications/Webroot SecureAnywhere.app/Contents/MacOS/Webroot SecureAnywhere" install -keycode=$KEY -language=en -silent

FYI don't upgrade to mysql 8.0.30. There is a PI110425 for it. Jamf will not run.

We are wondering if there was a way that NoMAD can check previously used passwords and notify the user that the password they are trying to change is a previously used password.

I know iOS devices with JAMF can have Lost Mode enabled. Is there an equivalent for MacOS out there? Primarily, I want to make lost Macs scream and be able to track their physical location. I've done some digging and can't find something myself, so I'm turning to the JAMF community. Any leads would be appreciated! Thanks. 

Is there a way to restrict a major software update other than the 90 day deferred update in the configuration profile?And what about a solution to restrict installing a beta version as system updates?

We have docks that when a Macbook is restarted the external device is not displayed until you reseat the USB-C cable.  I was wondering is there a way to send a command to the device to just check if displays are connected and connect them?I know this sounds like an odd question, but some command must be being sent to the machine when you plug in a device that tells it to look for it, or is this just an electrical signal?Does anyone have any experience with this?Thanks!

I am patching known applications on our MacBook’s at the moment using Jamf Pro, is there a way to discover unknown applications without manually going through the list of installed apps on every single Mac. If a user installs a new application that I am unaware of, how do I find this or get notified so I can ensure it is patched?

Hi all. Has anyone been able to set up a mobileconfig profile to automatically set up a gmail account? We use Google Apps, and want to be able to provide a 1-touch setup through self-service to import all details into the built-in mail settings. --Nathan

Hello everyone Has anyone changed the Recovery Key Type from Individual to Institutional or the steps to do so (mostly getting an Institutional Recovery Key cert?

Testing using Mass Action for updates for our clients with 7 deferrals.Staff I've tested with click "Try Tonight" and nothing happens.  Pop-up returns later/next day-ish asking them to update, yet I don't think it subtracts a deferral from the 7.Anyone else seen this issue and have a solution?Also anyone know when the pop-up shows or is it random?Thanks for any assistance. 

I have a customer who uses Jamf Now with the fundamentals plan and wants to push a Card-DAV profile created with Apple Configurator to a Mac.The installation fails because the profile has to be assigned to a user.Is user-channel based distribution of profiles even possible with Jamf Now, or is that not supported?

Hi guys, is it possible to get Jamf logs into AlienVault to setup telemetry? Im using Jamf Pro on cloud 

Hey everyone, has anyone tried to push the new macOS 13.0 Ventura update to the clients via Jamf? I have created a new patch policy also uploaded the .pkg assigned three Test clientsBut unfortunately nothing happens. Do anyone have any idea? The funny thing is that the three Macs are not displayed in the patch management. How do you solve the issue of macOS updates in your company with Jamf? I would like to push the updates automatically to the Macs, so that the user does not have to worry about it.I am looking forward to your ideas and commentsRegards, Alex

We have an exciting update regarding the Jamf Toolkit! During our JNUC Presentation, we launched a new product meant to be a one-stop shop of scripts, tools, and workflows for Mac admins. There was a lot of excitement around this product, and have had a lot of great conversations with people over the past couple of weeks.One of the biggest pieces of feedback we received was, although these tools were all developed internally by our team, many of the original concepts were created by other individuals in the Mac Admin community, which were released free of charge.Because of this, we’ve decided to make the Jamf Toolkit open source! You can now access all of these tools on our GitHub page: https://github.com/Rocketman-TechThe paid subscription of the Jamf Toolkit has the following added benefits:A Two-Hour Onboarding SessionQuarterly 60-minu

Hi There,I have successfully been able to push Kaspersky Endpoint Security and manage to create a connection with our server.I have also managed to add the system extensions to Jamf, however I am still getting one option to allow Encrypted web traffic inspection.Has anyone been able to automatically accept this yet through Jamf?

I've started to play around with the extremely versatile swiftDialog tool.  One of the things that I'm finding most interesting is the ability to provide a progress bar based on contents of a command file.  I've started to think through how this could be used for a scripted macOS upgrade.  It should be easy enough to read from the startosinstall.log file into whatever command file is being used, and the text is fairly predictable throughout.  That said, I'm still new to it and learning how to make best use of it.Has anyone already built out a script to display the startosinstall progress via swiftDialog?

Apple released Safari 16.1 today. Here are the standalone installer links from Apple's SUS catalog for anyone needing to make these updates available via Self Service:Safari 16.1 for macOS Monterey: https://swcdn.apple.com/content/downloads/04/41/012-89022-A_0O25N5267C/8vvwcsyap2nweiiv95zrqleofs2283yaa2/Safari16.1MontereyAuto.pkgSafari 16.1 for macOS Big Sur: http://swcdn.apple.com/content/downloads/06/51/012-26885-A_XE7OL6TYXT/3di69zxamb1frajv1zf4dnei1jaz0765vn/Safari16.1BigSurAuto.pkg(There is no Safari 16.1 installer for macOS Catalina or earlier)

Hello, I'm trying to install Jamf Pro on a windows PC and I'm getting this error:  

Does anyone else have an issue with Ventura being available even when you have a restriction profile in place?We use Automated Device Enrollment Jamf School. We see the 12 g version of Ventura available even though our Restriction Profile is set for 30 days. Our macOS is 12.5. We also tried disallowing application path /Applications/Install macOS Ventura.app but it still is an option in system preferences.

We updated to 10.42.  We are seeing an error where every single policy that has a package fails to install the package but the rest of the policy goes through.  So if the policy has a package payload and a script payload, the package fails with error 1200 and the script runs as expected.    We are able to open Jamf Admin and even connect to the share directly.  All file share distribution point settings are correct, the SSL cert is valid, and we verified all password are correct.  

Hello,  Just updated a test Mac to MacOS Ventura and found that I am no longer able to restrict access to Profiles. I attempted to restrict access to Extensions and that is successful, but when I check mark Profiles, it does not grey out.   Wondering if this is now only available for DEP enrolled devices vs devices that are manually enrolled and not supervised.  

Hi all, sorry for the rookie question, just getting Jamf environment set up in the (now cloud based, remote) office, and there's a lot of machines that have.... been around a little while  ;-). I would really like to have some sort of clean slate as we transition to Jamf, but I can't really wipe all these remote machines (more than 30) and start over (we can't use automated enrollment with these older machines, and many of the non tech savvy users would be totally lost if I had to talk them through a clean OS install over the phone or something), as more than half of them are spread out all over the place with all of our users working remotely now. As an alternative, I was thinking it would be nice to clean out all of the old versions of applications (we use a lot of Adobe, 3d and graphics software in general, so the older versions pile up rapidly, and no one ever has time to do much about it). Anyone know of a script that will remove not just the entries in

Hello JAMF-y boys and girls! My management has tasked me with trying to figure out a way to set hot corners for some of our student labs to defined variables. At current, we have desktop picture and screensaver system preferences disabled through config profile for student access but some of the lab teachers want to have certain things available to students. The idea would be to set the Hot Corners while keeping the screensaver and desktop settings blocked from the System preferences pane. For instance, we if are trying to keep "Notes" In the bottom right corner, put "Application Windows" in the top right, "Mission control" in the bottom left and "Launchpad" in the top left, and then force these settings to set of computers, what is the best way to accomplish this?I know this information lives in the com.apple.dock plist, but my attempts to "defaults write" to this file via script doesn't seem to produce any changes.It seems like the scri

Hi folks.I try hard to get VPN On Demand to work. Unfortunately, it currently does not work with Jamf Pro's built-in way (PI-101098), so Jamf Support referred me to iMazing Profile editor. Getting bits and pieces from various web resources together, I tried to built a working VPNOnDemand.mobileconfig by myself, but as soon as I deploy it to my client, it does not have any affect.The VPN on Demand configuration should basically do the following:1.) If client connected to a certain company WiFi network ("SomeWifiNetwork" in the example), it should generally NOT use VPN at all.2.) If NOT connected to the WiFi network above, but any other network, it should ALWAYS establish a VPN connection while trying to connect to certain domains (example1.com and example2.com in the example).3.) Trying to connect to VPN server via L2TP ("1.2.3.4" in the example), shared secret included ("SHAREDSECRET" in example), user name and password should be prompted (hence no