I've noticed this on several units, an iMac, some MacMinis, and my MacBook Pro, half are on Monterey, and the others on Big Sur, all have a version of the M1 Chip, this also happens across accounts, both Admin and Standard. When the system is restarted OR on a Logout/Login several of the settings reset to the defaults. The ones I've specifically noticed are as follows. Mouse ScrollLight/Dark ModeLanguage Settings*There may be others but these are the settings I've personally confirmed between my own settings as well as what my impacted users have told me.Just wondering if anyone else has seen this.

Hi, since iOS 13.4 there is the option to log in as a guest user. We don't want our users to log in as guests.Is there a way to disable this option? We haven't found anything in the PreStage Enrollments or Configuration Profiles.

Hello all,I'm having seeing some weird issues with Adobe Remote Update Manager, which I use via policy to patch our Adobe Creative Cloud apps.  For some reason, I have applications that will no longer update to their latest minor versions of Creative Cloud 2021.  This includes my own personal workstation which has the Adobe suite installed.  We haven't deployed CC 2022 apps yet, so this post is specific to continuing to patch CC 2021 apps.  In any event, here's my scenario:Intel Macs (mostly iMacs)macOS Big Sur 11.6.1, and macOS Catalina 10.15.7Adobe Creative Cloud app version 5.6.0.788 (which seems to be the latest according to posted documentation)Adobe Remote Update Manager (/usr/local/bin/RemoteUpdateManager) version 2.6.0.9 (also seems to be the latest version)I've run the RemoteUpdateManager app via script, policy, logged in with Terminal, etc, and getting the same results.  There are no errors returned when RUM is run.  In addition, this is hap

I'm looking to distribute Apple Books and Audio Books to both one-to-one iPads and Shared iPads on Jamf School.We currently restrict most iPads and don't allow sign in to Apple Store.  It looks like you need this.  That's fine.I am able to deploy books to devices and make a user an owner of an iPad in order to deploy that content to the device.For Shared iPads I get the error: A volume purchasing license cannot be assigned because the device is not assigned to a user.  I am not able to distribute content for Shared iPads.Also I am somewhat confused because I thought Apple Books and Audio Books needed to be assign to a user and it looks like the only option I have is to assign it to a Device Group.Does anyone know what to do about this?  

Does anyone one have any learning resources for Jamf Pro, we recently got Jamf pro off the back off our parent company so we didn't get the whole integration thing or the mandatory training process, I managed to get a server up and running but now not sure how to configure certain things, so would like to find some self study material.

Wondering if there is any way to enable the Software Updates --> Automatic Updates switch on the iPads in our K-12 school district. We already defer updates by 45 days, but some of the devices fall WAY behind (some are still iOS 12) and it's hard to try to enforce updates on the devices whenA) kids have them at homeand B) kids don't want to update or don't know how to I try to force out Update / Restart via the Action command to all devices in a smart group from time to time, but for some reason we only get about 60% completion and the others will just continue to check in but never update themselves. Is this something that we can enable via configuration profile somewhere, or maybe a feature coming down the pipeline that I'm unaware of?

Hello, Jamf Nation!   Today we released Jamf Protect 3.6.0, which includes two significant security capabilities: Telemetry log data and Jamf Protect Offline Mode   Telemetry Log Data   Telemetry log data is a new feature that sends device activity feeds to one or more security information and event management (SIEM) solutions in your environment. This helps you and your information security team proactively monitor and detect threats on macOS computers.   Tiered Upgrade Schedule: Telemetry in the Jamf Protect web app will be made available based on a tiered upgrade schedule. Your tenant will be upgraded between December 12, 2022 and  December 16, 2022.   Introducing Offline Mode   Jamf Protect's Offline Mode is a stand-alone implementation of Jamf Protect specifically for customers whose environments are restricted from accessing the Jamf Protect Cloud or any other Jamf Cloud environments. For licensing information, contact your Jamf Customer Su

I just released a project that I've been working on for a while, and mentioned during my JNUC API talk, that utilizes the JSS API to automatically merge changes that are made to git repositories. Effectively version controlling aspects of the JSS. I have included two git hooks, one to manage Extension Attribute objects and another to manage Script objects. I hope the JAMFNation community finds this useful. It requires JSS 9.62 due to required API calls. UPDATE:Unfortunatley, I was asked to pull down this repository for internal reasons. And, shortly thereafter, I transitioned onto a different team and no longer work with the JAMF toolset. I had hoped that my old team would have been able to Open Source this in my absence, but it doesn't appear like they have been able to, and I'm not at liberty to do so at this time. My apologies to everyone still looking for this. I know there's a few copies floating around prior to me having to pull it down, and it was released

How is everyone handling Patch Management for Apps that have two different packages for Intel and Apple Silicon? Example: Today there was an update for VLC but there are two different downloads for it, one is for Intel Macs the other for M1 & M2 chips, but Patch Management only allows 1 instance from the catalog to be added and only 1 package per version to be mapped.

HiI just discovered that i have a lot of macs with the red marks on jamf protect. This means that they did not connect to jamf protect since one month. This is strange because those computers regularly check in with jamf pro and jamf protect is pushed automatically from jamf pro.What can be the problem and how can i solve it?

I am trying to achieve the following steps.  But unable to do so : 1.Launch Installer2.Place pipeline.json to the location in/Users/Shared/TheAPP3.Click Install button on Installer UI (/usr/local/theapp/macOS/installer) 

Easily clear your users’ policy-specific deferrals when using Installomator with Jamf ProBackgroundSince fully embracing Installomator v10.0, which includes support for swiftDialog, we’ve been testing Mischa van der Bent’s approach to leveraging Jamf Patch Management Software Titles for versioning information, which, on the whole, seems to be working quite well.However, allowing users to defer Jamf Pro policies introduces its own set of challenges.Continue reading …

We added a new VPP account to our JAMF instance this morning and since then, I've been repeatedly spammed with a pop up from the app store. (changed my organization name to "myorgname" but it really shows our actual org name)Invitation from "myorgname""myorgname" wants to make apps available to you. and then there's a "Not Now" and "Accept" "Not Now" causes the pop up to reappear 1-60 seconds later and it never stops."Accept" throws me to an apple page with the URL that includes "associateVPPUserWithITSAccount" and then launches the app store.I verify my email address and password and get an Apple Media Services agreement.  I click "Agree" after checking the "I have read..." box and a window opens with the title "Allow Assignment" and the text "The organization can now assign apps and books to you".I click done and 0-60 seconds later the same darn pop-up appears and if I click "Accept" it starts the whole thing over and if I click "Not Now" it comes back again and again.

A number of our supervised Pads have apps (installed by the user) which I need to get rid of en masse but there is no option to delete any of these apps through Jamf School.I'm not sure how they were installed in the first place as the profile applied to the devices shouldn't allow them access to the app store but it does.Any ideas?Thanks

Hello Community! We are facing with a "problem" with expiring local administrator account password.From security reasons we have set Maximum Passcode Age option to 180 days, but local administrator account is under this policy too.We are not using any SSO accounts.How can we exclude this account from this policy?

 Followed the instructions and everything appears to be working the status says completed, but I checked the logs and it appears I am getting the below error message.

Long story short, when AutoCAD is deployed via Self Service it completed. When I run a pop up asking for permissions for ~/Library/Autodesk on the profile that I run the installer on. I remedy this by giving read and write access to that specific profile. Once done AutoCAD runs along with other profiles. My questions is, can I run a script that gives everyone read and write access to that folder and link it to self service as an extra step in the deployment process? I keep looking but see that it's on a per user profile basis.

Hi, is there a way to install an application and activate the license on a class of computers with jamf pro ?Thanks 

Guys, need help in managing the admin access through script. I'm planing to have a script to put it on policy. In case user needs an admin access can run the policy from self service as and when required.however, that admin access can last longer for 5 - 10 mins. Kindly someone help me with the script with the timing. Thanks for understanding

I'm trying to figure out how to install apps for users that are not local admins. Of course they can install from Self Service just fine, which puts the application into /Applications.The problem is that many apps (Chrome, Firefox, Signal, etc.) will periodically try to update themselves, but the user does not have permissions to /Applications, so the app can't update itself.I was considering installing apps to ~/Applications insteadMaybe something like:Package action=cachethen a script that will runinstaller -pkg /Library/Application Support/JAMF/Downloads/application.pkg -target ~/ApplicationsBut I wanted to ask community first. Is there a "best practise" for installing apps so that non-admin users can update them?

We are starting to use Printerlogic for printer installing across the company.  Manually installing the pkg or via a Policy install from a script I found on the forums here it doesn't install the needed Safari extension.  Found 2 commands to run from Printerlogic's forum that enables it.sudo killall PrinterInstallerClientopen $(cat /etc/pl_dir)/service_interface/PrinterInstallerClient.appI tried adding the commands as Exexute Commands under Files and Processes in the Policy. Watching the install on a MacBook it looks like it works but when I open Safari and check the extension it isn't there.  I can then run both commands manually in terminal and it works as intended.  Has anyone else been able to successfully push out Printerlogic?

Hi,I believe I used to set the "Show item info" preference with a Configuration Profile in the Finder payload. Or the old Global Plist payload.Can't recall. It doesn't appear there anymore.Is anybody using a script to check this off? 

We have a fleet of iPads, some requests come in stating that they would like to print using AirPrint, now I know sometimes some of the printer's are not AirPrint enabled so we enable that functionality, and still AirPrint is non functional, we end up having to add the printer brand app to their iPads and manually enter in the IP on the app to have them use the app as like a middle man t print from the iPad - any remedy out there for traditional AirPrint to work as intended?

anyone have a scripted solution, or profile setting that can be applied to Edge for Mac to auto open specific files, eg citrix ica files, Remote desktop RDP files etc.?It can be set manually per user within the Edge browser  (right click file in downloads - set to "always open files of this type"), but looking for a way to script and deploy via JAMF for all users across the Mac fleet.  tried using composer to capture the changes when its user-initiated but cant pinpoint the change, nor how to manage that.  Ideally would be via a PLIST, (defaults write per user or manageed preference). No options within current built in schema for Edge in JAMF Pro.   

Friends, We send mass os update command from JAMF to all mac users. Even the OS is update still user getting pop up to update OS. If user select to install now, again its appearing next day. We noticed, its poping up for ventura also. Note- when this pop up coming, its says you can differ 3 timesScreenshots attached,  Thanks .