We are using Powerschool as our SIS.  We have the plug-in running for Apple School Manager.  The students sync fine, but we have always had issues with the class not working in Apple Classroom.  We have the teachers create them manually in JAMF Pro if they choose to use them.Is there a way to stop ASM and Powerschool syncing the classes.  Teachers are seeing both the auto and manual classes show in Apple Classroom and are getting confused.

Greetings! I have this script that uses the API to pull the username that's assigned to the computer in the JSS and then name the computer with it. #!/bin/sh jssUser=$4 jssPass=$5 jssHost=$6 serial=$(system_profiler SPHardwareDataType | awk '/Serial/ {print $4}') response=$(curl -k -s ${jssHost}/JSSResource/computers/serialnumber/${serial}/subset/location --user ${jssUser}:${jssPass}) real_name=$(echo $response | /usr/bin/awk -F'<username>|</username>' '{print $2}' | cut -c1-11); if [ "$real_name" == "" ]; then echo "Error: Username field is blank." exit 1 else /usr/sbin/scutil --set HostName "$real_name" /usr/sbin/scutil --set LocalHostName "$real_name" /usr/sbin/scutil --set ComputerName "$real_name" fi I think the problem is with: real_name=$(echo $response | /usr/bin/awk -F'<username>|</username>' '{print $2}' | cut -c1-11); ...but I'm

Hello all,I am working to roll out Jamf Connect to our Mac users.  We have managed to get it integrated with our IdP (PingFederate), and when working on the configuration both the OIDC and ROPG tests pass.  However, when trying to log in for the first time on our test Macbook, during conversion of the mobile account to a local account and password sync, we receive this error:I am using my verified network password, yet I am unable to get past this screen.  Any ideas?

If so, I’d love to hear from you! If you could answer the following:How many devices you haveHow often are teachers using Jamf TeacherDo you have a influx of pending commands when it’s used?Are there any features that show up, but don’t actually work?Trying to find out if using Jamf Teacher with Jamf Pro is worth it or if it’s really only worth it when using Jamf School.Thanks!

Fragestellung auf Deutsch am EndeDuring an exam, candidates should not have access to unauthorized aids. However, if you allow multiple apps through a profile or the teacher app, the search function is always active, with which you can access the built-in lexicons.So you would have to deactivate the lexica through a directive or switch off the search function.But I haven't found a way to do that.Während einer Prüfung oder Klausur sollten die Prüflinge keinen Zugriff auf unerlaubte Hilfsmittel haben. Wenn man aber mehrere Apps durch ein Profil oder die Teacher-App zulässt, ist immer die suchen-Funktion aktiv, mit der man auf die eingebauten Lexika zugreifen kann.Man müsste also die Lexika durch eine Richtlinie deaktivieren oder die suchen-Funktion abschalten.Ich habe aber keine Möglichkeit gefunden, dass zu tun.

Hi We are looking to move to Jamf but still needs Intune, recently i unenrolled my test mac's from Jamf to test something in Intune, but now Intune claims i need to use "another" MDM Has anyone seen the attached "error" from company portal and perhaps even know how to do to fix it?  My mac is - Factory reset- Delete in Jamf- Deleted in AAD/Intune Only thing missing i can some up with is that there is something in the Azure portal that is locking me.  

Hello,Does anyone know how I can pull data from Okta into JAMF Pro. Specifically, I would like to be able to pull an employees Department attribute from their Okta profile, into their enrolled computers listing in JAMF Pro > User and Location > Department.We use User Initiated Enrollment. All Apple computers, no mobile. Thank you 

Has anyone figured out a way to set the Chrome homepage (with RestoreOnStartup and RestoreOnStartupURLs keys) but allow users to change it? I've been through a lot of posts and it seems like no one has a solution.I thought it would be as simple as pushing a com.google.Chrome plist to the user’s Preferences folder, but it doesn’t take unless you also delete the user's Chrome ‘Default’ preference folder under ~\\Library\\Application Support\\Google\\Chrome. The problem with that is it can remove some preferences set by the user, which we don't want.I can’t use a profile (because we don’t want to enforce it). Also, I would use a Chrome Initial Preference file for this, but that only works for first-time run and we need it to hit existing Chrome users as well.

Hi Jamf Nation, I’m a member of the technical communications team here at Jamf. Our team had some questions about how you use the Jamf Pro Live Known Issues list so we can improve your experience: If you use the Jamf Pro Live Known Issues list, what are you looking for on that page? Do you look for a PI number to track progress on an issue? Or do you search by keywords and the known issue description to find an issue that you are encountering? If you do not use the Jamf Pro Live Known Issues list, why not? Thank you!

Hello All,Im currently tweaking our company restrictions on macOS devices and was curious how others were going about this. I find the restrictions on the macOS side more difficult to sort out because of how its set up as opposed to the IOS side that just lets you turn on one item for a restriction. Specifically iCloud restrictions which in some cases I only want to restrict certain items for a some and completely restrict it for others. Same for software deferrals, since all these live in the functionality tab it makes more difficult to separate. Unless i'm going about this the wrong way Id love to see if anyone has some suggestions or a workflow that has been working good for them. Thanks in advance and please excuse this if it seems like a low level inquiry.

When installing applications like Xcode from the App Store, it installs but then it requires admin credentials for the Helper Application that installs once the user actually launches the app.  Is there a way to automate this as well.  My organization only has less than 10 Macs, but that is enough to be bothersome to have to go on every machine to enter in admin credentials for a helper app.  I know there are quite a few application on MacOS use these helper apps and I would like to automate those installs as well.Any help would be appreciated.

Not sure if anyone else is running into this, but when creating a new local account through Users & Groups in Catalina, that account when logging in receives messages that it cannot access or create a new keychain. If I try to access the keychains folder under ~/Library it says not authorized to access folder, and Keychain Access shows no "login" keychain and doesn't allow creation of another. The fix is to right click on the keychains folder in finder and give the user "read/write" permissions instead of "custom" Logging out and logging back in seems to set everything to normal and then checking in Keychain Access the login keychain is now visible This isn't an issue with the hidden admin account account created during pre-stage enrollment nor the account created during initial setup during enrollment. I've only noticed this problem in Catalina. Our Mojave machines don't have this problem.

Hello All, I deploy macOS update through Nudge, I can see those mac devices are getting updated successfully but it is not getting Safari v16 update, it is showing me pending, I need a help how can I deploy that pending Safari v16 update on all mac clients.

Okta is an identity and access management platform and whilst not identical it can be considered as an alternative to Active Directory.The basic setup involves systems being configured to redirect logins via Okta usually using SAML so that Okta handles who is allowed to login to that system and also to enforce MFA. It is however also possible to enforce device trust so that this can be further restricted to approved devices. This later aspect could be considered as equivalent to 'binding' the device to Okta like one might bind to AD.Okta Device Trust therefore uses a script to enrol the Mac and make it 'trusted'. The following is a link to Okta's documentation on this. https://help.okta.com/en-us/Content/Topics/Mobile/Okta_Device_Trust_Jamf_macOS_Devices.htmThe 1.2.x version of this script us

We have an exciting update regarding the Jamf Toolkit! During our JNUC Presentation, we launched a new product meant to be a one-stop shop of scripts, tools, and workflows for Mac admins. There was a lot of excitement around this product, and have had a lot of great conversations with people over the past couple of weeks. One of the biggest pieces of feedback we received was, although these tools were all developed internally by our team, many of the original concepts were created by other individuals in the Mac Admin community, which were released free of charge. Because of this, we’ve decided to make the Jamf Toolkit Open Source! You can now access all of these tools on our GitHub page: https://github.com/Rocketman-TechThe paid subscription of the Jamf Toolkit has the follow

Hey all,For awhile now we have had an issue with Google Chrome in which the icon just bounces up and down a few times and does not open when a user tries to open Chrome after it installs via enrollment/check-in.  We build the policy ourselves which may be the problem, but I believe the person who builds it just scans the package and uploads it directly to Jamf...Anyway, we came up with a solution that uses a script to give the login user access to the folder $HOME/Library/Application Support/Google/Chrome, and that seems to work.The only problem is, this has to be run for every user that's logged in, and what's worse we can only seem to get it to run from Self Service, which I think may have something to do with it running from root rather than as the user.  We have hundreds of shared machines that are logged into by multiple users, and it's not feasible to have every user run this.  Here is the current command we are using:#!/b

Hello,  We want to have all of our PDFs open in adobe acrobat across all users when they login to our computers. Right now it is defaulted to preview. Is there any script that will change the default for all the users in AD? 

I am gathering some information around using these two products together, and so if you're using BOTH of these, I would be really grateful if you wouldn't mind sharing a few details with me: How many devices do you have?How often teachers are using Jamf Teacher?Do you have a influx of pending commands when it’s used?Are there any features that show up, but don’t actually work?I really appreciate you taking the time to check this out and respond :) 

We use several mac minis as caching servers in some of my company's locations around the world. To be able to access them remotely, we need our screensharing utility (Bomgar) to be approved in Security & Privacy > Screen Recording. It is important this happens BEFORE it ships out, because otherwise we've got a headless mac mini that we can't access remotely. To ensure it gets approved, I have an until loop set to prompt the end user and bring up the appropriate preference pane until access is granted. However, it looks like the osascript prompt I'm using throws an error: 020-08-04 19:19:12.566 osascript[5461:27615] -[__NSCFConstantString objectAtIndex:]: unrecognized selector sent to instance 0x7fff8f3960e0 2020-08-04 19:19:12.567 osascript[5461:27615] *** Terminating app due to uncaught exception 'NSInvalidArgumentException', reason: '-[__NSCFConstantString objectAtIndex:]: unrecognized selector

If we want to use Jamf’s built-in Patch Management notifications to let clients know about new patches as they become available in Self Service, they will receive a notification for each patch title as their Macs come into scope for each patch policy. That’s not really a big deal if we only push out one or two patches at a time, but say after Patch Tuesday… yikes! That can easily result in a string of notifications which can get pretty annoying. Additionally, there may be situations where notifications do not behave as we would expect, such as with PI104511, which can result in Self Service notifications not consistently appearing in the Notification Center when they are scheduled to do so, resulting in unpatched apps quitting unexpectedly when they reach their install deadline. This is where we found ourselves and why we built our own patch notification workflow. It leverages jamfHelper and a Smart Computer Group to send our clients one notification each day while patches ar

Hi All,Can anyone know what is this error "availability Pending" I can't create any package with any size of the .dmg file. Does cloud DP have any space limit?

I want to add application in screen recording in Security & Privacy pane - Privacy. Can anyone suggest how to add using JAMF Pro Regards,Md Khaja Zahed.

Hi everyone,We deployed Jamf Connect to a few users in our organisation, but what we see on these computers' records in Jamf Pro, more specifically under Inventory - Local User Accounts, is a double entry for that user. One has the type local, one has empty. The other accounts on the computer (management ones) are also local and fine. The two of the user's accounts have the same names, home directories, sizes, and FileVault enabled status. Is this normal behavior for Jamf Connect?

Thought I would share this.  #!/bin/bash appFile="/Library/Application Support/Code42-AAT/Data/logs/app.log" if [[ -f "$appFile" ]]; then #Parse JSON for username and feature pack version JSON=$(cat "/Library/Application Support/Code42-AAT/Data/logs/app.log") featurePackVersion=$(plutil -extract featurePackVersion raw -o - - <<< "$JSON") username=$(plutil -extract username raw -o - - <<< "$JSON") #Setting string for feature pack if [[ "$featurePackVersion" == *"No value at that key path"* ]]; then featurePackVersionResult="No feature pack version present" alert=$alert+1 else featurePackVersionResult="Feature Pack Version: $featurePackVersion" fi #Setting string for username if [[ "$username" == *"No value at that key path"* ]]; then usernameResult="No username detected" alert=$alert+1 else usernameResult="Username: $u

Guys, We are moving to Intune from Jamf due to less count of device. When we register the MacBook in company portal getting 'The device is not managed'. The device is in ABM but not assigned to Jamf pro server. We did not wipe the device. We just removed the Jamf profile from system preference, deleted certificate from Keychain. Also, we are having Azure AD so no device in Azure under user information. Kindly help. Thanks.#JamfPro #Intune #ABM