Hi,I have a strange issue with a Mac, it's enrolled in Jamf and I can add it into Policies or CP most of the time. But for a reason that I can explain, I can't add it to specific Profiles.When I'm filtering with name or serial number, the computer is not showing in the results… And TBH I really don't get it why since I can add it on other Policies or CP, even groups.  

There are a few iPhones that went missing a while back. We've given up trying to find them and decided to just send lock commands and move on.  If I send the lock command and it's in pending status, can I delete the device from JAMF and will it still execute if one day the device is picked up? Or is there a better way to make sure the lost device if found and wiped will not allow the person who found it use it at all and contact us? 

Good morning I would like to ask if it is possible to check the status of privacy preferences in mail on mac jamf pro with a policy or something similar. The second question is if I can enable Privacy Mail Activity for all Macs I manage. Thanks a lot. 

Hi all,We have a problem with accessing sharepoint files using Safari or Chrome browser on Mac.Safari and Chrome are unable to access the files on the corporate SharePoint site.In Safari, a blank page is received, and in Chrome, the following message is received:"The webpage at File Address might be temporarily down or it may have moved permanently to a new web address."Windows computers can successfully access the files.Thanks 

Dear All, i have trouble deploying Nexthink collector though JAMF. I have re-package the 'Nexthink collector' installer using "composer", I do not have any error on deloyment but we lack files. Does anyone of you know a proper way to deploy the Nexthink collector with Jamf?

We are implementing 802.1x using Cisco ISE on the back end. Currently, the project is in a testing stage, so we are using very basic configurations on the client side. The protocols used are PEAP and MSCHAPv2. I’ve created a configuration profile that enables PEAP in the login window context and deploys the certificate. When this configuration profile is deployed, the 802.1x connection can be made manually in the Network system preference pane and it works as intended – prompting the user for credentials and placing the connection in the appropriate VLAN. Our Macs are all joined to AD. We would like our users to authenticate to the 802.1x network at the login window. All the guides I found for this seem to imply that this is a basic configuration that should work with the settings I’ve deployed. I’ve tried using ProfileCreator and Jamf to create the configuration profile with both producing the same results. The only thing I’ve really been able to try is adding the

Hi,one of my clients has requested that I distribute some files so that they will be added not only to the currently existing accounts on the mac, but also to all that are created in the future. I think that should be possible by adding the files into the default file structure that is copied by macOS each time a new user is created, but I can not find them and I have had no luck with googling. Can anyone help me out or suggest a different solution to the problem? Much appreciated!

Hello, Does anyone know how to add JNUC 2022 badge to the profile? Please help.Thanks!UPD. and 2021, too 

Hi, Users are not able to login to their Mac device as their Azure password are no longer accepted This issues arised after few weeks of enrolling their device by User-Invitation method

Hey, there are some machines that have SSH enabled with the following Startup Configuration: Now I am looking for a way to disable it. I found the following script: sudo systemsetup -f -setremotelogin off Will disabling SSH interfere with anything related to JAMF? My common sense tells me it won't but I thought I'd ask anyway. Better safe than sorry :)

I am currently trying to fix a weird situation. We have a Jamf Pro install, and we use PreStage Enrollment for new machines. Old machines are wiped, re-installed, and treated as new machines.Sometimes we encounter during the setup procedure, no option is given to let the end user create a local user account. We see these steps (from memory):1. Choose WiFi2. Authenticate via Google (Enrollment Customization)3. All kinds of profiles are downloaded and installed4. Computer is rebootedOur settings:PreStage Enrollments > Our company > General: Setup Assistant will not automatically advance, and all Setup Assistent Options are checked.PreStage Enrollments > Our company > Account settings: A local (hidden) admin account will be created, and the local user account type is also an administrator.But no Setup Assistant is started, so we end up with a computer that has a local admin account that is managed by Jamf Pro, but without a local account for the user. I also found some setting

Hello,When installing teams, the language is in English. I would like to know which file modified to switch the language to French.Here is a snapshot of Composer. 

You heard us talk a lot about Jamf Trusted Access at last week's JNUC'22.  It is a workflow that is designed to protect organizational data while enabling hybrid work from anywhere.Now you can learn how to implement many of the capabilities you saw during the keynote, including private-by-design BYOD, active threat prevention, and data access lockdown to managed devices only by visiting https://trusted.jamf.com.This technical resource dives into architecture, an implementation roadmap, and step-by-step instructions for realizing Trusted Access in your environment (and much more!).  It can also be really useful to share with your networking and security teams to help them understand the capabilities Jamf can deliver beyond device management on your Apple fleet.We will be updating this site over time with deployment improvements, new capabilities, and other details as the workflow evolves, but we'd love to hear your feedback and journey to keep data secure while seamlessly

Hello Jamf NationWe are using Okta as SSO and LDAP directory. It's working fine for authentication on the prestage pane, but I'm unable to pre-fill a user account during setup assistant. The fields are always empty (and not locked), no matter what kind of authentication I try to use in Prestage Pane (LDAP or SSO). I've tried with the "Device owner's details" and Custom, using $FULLNAME and $EMAIL as variable, but it's not working either.When I test the LDAP, all the mappings seems correct.Is there a place where I could find logs or anything that could help me why the account is not filling ?Thanks for your help !

Why do we encounter the "VPP redownload call timed out <MDMClientError:72>" error on all Mac Appstore apps? I read that it is not an Apple issue, but a Jamf issue?Will it try agan later?Can i run a command or push a script to re-try? Maybe some document of Jamf that can help here?

Filevault was disabled at our organization due to issues with secure tokens. A lot of devices are in student labs, or shared between co-workers. Enabling filevault caused issues when the previous user didn't logout, or the device experienced power failure/random restart. The device was locked until the user came back and signed in. This caused problems when students wouldn't log out. The device was rendered useless. Could not deploy commands to the device. The only solution was to erase and reinstall the OS. We've been told by Jamf support  Filevault is does not work well in environments with multiple users logging into devices. We have intels and M1s sprinkled throughout the company. Our Security departmnets wants this enabled, and I'm not sure where to start.  What is best plan? Just create bootstrap tokens? create institutional keys? Are those two things related?

Hi all !!New on Jamf Pro, and perhaps my question is all-ready answered in an other post but I just could'nt finde it.Is there any place in Jamf where I can find library of Scripts with his behavior ??Thanks a lot in advance !!Cheers !

I fully intend to contact support tomorrow because I cannot find any documentation that relates to Jamf Now specifically for this issue or really anything online but I figured I'd post here and see if you guys might have any insight.My company is going from unmanaged devices to using the Jamf Now Fundamentals package which includes Jamf Connect. I set up some managed Apple IDs and federated authentication using Azure but whenever I do a fresh install on a computer after entering the Apple ID / Microsoft login I'm then prompted to create a password for the device itself. This password does not sync to the managed Apple ID / microsoft, and furthermore it seems that the user that is created is always an admin and I am unable to change this.This essentially makes the management useless as not only does the user have admin privileges, but if they were to forget this password I wouldn't be able to change it. Furthermore, it seems like they could simply sign out of their managed Apple ID and

I'm curious as to what happens when a computer hits the "MDM Profile Expiration Date". Will MDM commands stop working?Will the profile be renewed automatically or do I have to issue a new profile using 'Action' -> 'Send Remote Commands' -> 'Renew MDM Profile'? Thanks!

Does have information on how to enable PPPC for webex?Identifier ID, type , etc.

I'm working on a plist to remove cloud storage and to remove enhanced security. I'm able to get the cloud storage removed, via a script I found here and added a things. Here is the main body of the plist. Not sure why it changed the format.<key>cGeneral</key><dict><key>bToggleCustomOpenSaveExperience</key><false/></dict><key>cServices</key><dict><key>bToggleAdobeDocumentServices</key><false/><key>bToggleAdobeSign</key><false/><key>bTogglePrefsSync</key><false/><key>bToggleWebConnectors</key><false/><key>bToggleMobileLink</key><false/><key>bToggleDocumentCloud</key><false/><key>bToggleDocumentConversionServices</key><false/><key>bUpdater</key><false/><key>bEnhancedSecurityInBrowser</key><false/><key>bEnhancedSecurityStandAlone</key><false/> &nbsp

Hi to all.I'm new here, and new using JAMF Pro.I need to create a report to list all machines without CyberArk installed, and the name of the local admin account existing.My question is: How can I create this report? I know how to create reports, but I'm failing with the criterias.Thank you in advance.

We have an issue whereby users trying to login to JAMF Self Service via SSO fail to pass conditional Access.The issue appears to be that the SSO login that pops up seems to be some stripped down browser that does not send any of the relevant details such as details of the Browser or the Device ID of the device. Is there a setting I am missing somewhere or is this just a bug in JAMF ?? Please help

Hi everyone,If we have Jamf Connect going with Okta and a passcode policy defined for Okta accounts, and the user is required to change their computer password at the next reboot/login, will the Okta password requirements be enforced when the user is setting a new password, or do we need a passcode policy for the computers as well?Thanks!

Hey members,I have got some good resource like script to update mac OS in particular version on M1 Mac Patches and security updates) like 10.1.2.....10.3.5......10.4.1 etc. and (as I understand this script works in 3-4 stages 1. Free space check 2. Deferment notification 3. Run software update according to the users deferral) till postpone response it works fine till 2nd stage but after user postponing it at last day it seems doesn't enforces user to forcefully download and install updates.can somebody please help here?you can refer the script repo here Regards,Vinayak