HelloOur school works heavily with Jamf Teacher to control student's access to apps and resources. Recently we have discovered that they can always access their Quick Notes. This is also the case when the Notes app is not allowed. Consequently, they are starting to use these Quick Notes to cheat. Noting the quickness (pun intended) of opening and closing the Quick Notes, this is a very efficient way to cheat.Other apps that restrict the students (Apple Classroom, SafeExamBrowser …) do not allow this behaviour. Sadly, these apps have the shortcoming that you can only restrict the students to one app, where in many cases two or three apps are needed.Does anybody share this experience, or maybe even know how to help?RegardsAlexander

Self Service is a cool tool I would like to incorporate at our school for employees. Is it available with Jamf School or just Jamf Pro? 

Hey guys, first post here so I hope I'm correct :)It happened a couple of times a student left the school and no one passed that information through to IT so we weren't able to put the device in lost mode and the student would return it.Now our plan is that the devices auto-lost mode after a given time when not connected to our schools wifi (our school has multiple SSIDs depending on the location). From my experience that would be possible in other MDM solutions like Citrix XenMobile, but I haven't found anything similar in jamf school. Is that even possible, if so, how? If not, how do you manage these types of situation? We're still in the process of digitizing the whole progress, so please be gentle :D Really appreciate your helpThanks :) 

No previous experience in scripting or making plist, I was tasked with creating one for setting up an automatic backup using RSync on our Mac minis. Users log in using their AD accounts. The idea is to have three folders to back up for any users that logs into the mini. We are using AD setting for a home folder on a NAS. This part is already tested and works. Now to automating this, I have asimple script in /Library/Scriptsrsync.sh (name)#!/bin/bashrsync -ahP -delete ~/Desktop /Volumes/$USER/BackupDatarsync -ahP -delete ~/Documents /Volumes/$USER/BackupDatarsync -ahP -delete ~/Downloads /Volumes/$USER/BackupData and a plist in /Library/LaunchAgentscom.backup.rsync.plist (name) <?xml version="1.0" encoding="UTF-8"?><!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"><plist version="1.0"><dict><key>Label</key><string>com.backup.rsync</string><key>ProgramArguments</key

I wanted to change the mailing server name into the configuration profil applied to all our iphones enrolled into Jamf. I then create a new profil with the new server name, exclude somes devices from the firt profil and add them into the new profil: it works fine except for 2 iPhone where the actions are pending. I ask user to reboot the iphone but without any success. Is anybody have an idea about the origine of the problem and the soluce the fix this issue?

On a daily basis, users are noticing Apps e.g Teams and Outlook disappearing from their phones and re-installing. I can see in the management history that on a daily basis it's getting a "install xxx app" The version is always the same until a new version comes around at which point will start installing daily with the new version.I do run a daily inventory on devices The apps in general have the following settings;Install automaticallydisplay app in self-service after installSchedule jamf pro to automatically check app store for updatesautomatically force App updatesMake app managed when possibleconvert unmanaged ap to managedI want to keep the apps updated when a new version comes around but don't believe the app should be uninstalling/reinstalling if there isn't a new version. Does anyone know if this is typical behavior or have any idea what might be wrong?  

Hello, When users change their Azure AD password outside of Jamf Connect and then want to log in to a workstation with Jamf Connect and type their new password, they get the message "Password no valid".When they type their old password, they are logged in, but they are not prompted to update the local password at this time.We may have waited several hours but no message inviting us to update the local password.So if they log out and log back in, they still get the "Invalid Password" message when they type their updated Azure AD password in the window. Is this normal? Is it a bad setting of our configuration profiles?in Jamf Connect Settings profiles, we have "NetworkCheck" key set to 15.We are in version 2.7.0.Thank you for your help

What's everyones preferred process for updating the OS on M1 macs? I'd like to implement a process where I can instruct macs to download and install say Monterey 12.5.1  to M1 macs during overnight hours. I've seen some posts where updates were deployed via Self Service but I'd rather not go that path if I don't have to.

I specify password settings "Require complex passcode" = Ignore. The profile is applied to a Mac, in Settings → Profiles I see "Simplpe password" = True, but I can't set a user password that contains repeating characters. For example, I specify the simple password Qwerty123 and MacOS does not allow me to save it. Why? How to allow simple passwords with repeated characters in Monterrey and Ventura? I understand that this is not safe, but this setting is there and I want it to work.

Hi All, Looking for some input from Admins who manage very large iOS estates. The current setup i manage from Jamf is around 5000+ active iOS devices.Now these devices need to be updated to at least iOS 13 with a view to moving them to iOS 14. Most of them are on iOS 12 with around 20% on iOS 13. These are all store based devices with internet breakdown via DSL. I was thinking of caching servers, but that wouldn't make a difference as it goes out over the DSL anyway. The only way i can think of is to break the updates down into smaller smart groups and update on a rolling schedule with Remote Commands.

I am looking for a solution for a smart computer group that will display the number of machines with the Symantec DLP agent installed. From what I can tell this runs under the 'edpa' process, but I am not finding any inventory data for Symantec DLP or edpa. I thought about maybe using the Application Bundle ID from the info.plist that is supposed to live in /Library/Manufacturer/Endpoint Agent/Resources/ but the info.plist file is not existent. I realize I could do "packages installed by Casper" to pull a list for a SCG but this won't be accurate if the end user uninstalls the agent down the road. Any suggestions?

Need to find out who in my company has this turned on. Don't seemed to see any search criteria for that specifically... Any help appreciated.

Hi, I'm looking for a script to run for all users so that it deletes files older than 60 days from the user's trash (preferably from "date added" to the trash, not when file was created), but either way is fine. I can run some commands as some suggested from local terminal, but I can't executed from Jamf Pro:find ~/.trash -mindepth 1 -mtime +60 -delete Please advise. Thanks in advance.

Hi Support,May I push a policy to control device's camera permission.We want to let some app has camera access privilege, and other apps hasn't.How can I achieve this policy.Thanks.

Hello Jamf Nation! I'm happy to announce the release of gDialog, a new utility for macOS dialogs and prompts from terminal and scripts. gDialog is available for macOS Big Sur and Catalina and currently only as an Intel package, M1 Macs will require Rosetta in order to use gDialog.The CLI was designed to be as close as possible to CocoaDialog where it made sense for an easy transition in the different workflows. Full documentation, examples and download link can be found at https://github.com/giladdarshan/gdialog. Available dialogs:Message Box          Input Box          Secure Input Box          Text Box - macOS Big Sur+          Credentials Box          HTML Box - Capable of displaying simple HTML forms and advanced pages or websites and also a "kiosk" mode for a locked down full screen dialogs    &nbsp

We're in the process of configuring multiple new M1 iMacs for deployment to our computer labs. Previously, we had successfully deployed plenty of Intel Macs and they are all bound to Active Directory via configuration profile and they have no trouble logging in with domain accounts. On the new M1 iMacs however, the AD bind appears to be successful, the settings appear correct on the Mac and the object appears in ADUC but no users are able to authenticate. It simply shakes and rejects the password. Interestingly, the domain controller logs show successful logins and do not report any failures. I have tried removing the configuration profile and binding the M1 iMac manually and I get the same results. We set our computers to create mobile account at login without requiring confirmation and we have packet signing and packet encryption both set to require although I have also tried setting them to allow which did not make any difference. We have the search policy set to all domains. Also,

I'm trying to create a plist and add it using a config profile. I found the below 2 that I tried to modify, but after deploying the profile, Teams still doesn't autostart. teams.plist · GitHubMicrosoft Teams forced Auto-Start for all Users - Jamf Nation Community - 248530 

Here's a weird one. I have an issue where when assigning a category in certain locations, scripts, and jamf apps being two of them, I can't select a category if it's alphabetically past 100. It doesn't keep scrolling.We have several sites and admins who make their own categories across thousands of machines so not being able to do this is not ideal.Anyone else seen this behavior? Again it can be replicated by making 101 categories, go into scripts, you cant assign the 101st category 

I created a couple of custom schemas in JSON for this new feature. Just cause I'm excited about it! I learned JSON schemas today to do this, so they might be a little basic but maybe someone will find them useful.Enterprise Connect: { "$schema": "http://json-schema.org/schema#", "definitions": { "share": { "type": "object", "properties": { "path": {"type": "string"} } } }, "type": "object", "properties": { "adRealm": {"type": "string", "default": ""}, "alwaysGetNewTicket": {"type": "boolean", "default": "false"}, "checkForNetworkServer": {"type": "string", "default": ""}, "checkFo

My predecessor was able to install the mobileconfig file on all the Macs in our district remotely and I'm finding some computers were missed. I'm not seeing any notes of how he accomplished this unless he hosted the file on a server and scripted it.Is this possible?

Basically this is related to the context of migrating to an Active Directory account using Centrify Direct Control Yet, Centrify DC only migrates from an existing user's local OS X account (linking with the accompanying user's local home folder). Is there a tool, terminal commands, procedure, etc. that will convert the OD account to an OS X local account. I am aware that I can create an OS X local account manually and then "move" / mv the contents into this new home folder, and then do a chown -R. I undertand this is related to UID's, and that the actual OD user account is stored on the OD server. We then use Centrify Account Migration Tool to "Link" this home folder to an AD user account name. It Links, and successfully logs in using AD creds, but the user profile / permissions are whacked. For example, do not see docs on the desktop, desktop picture, etc. thanks in advance, john k

Hi,we use our iPad's as a shared device (Only allow temporary sessions). How can i create Classes in Jamf Teacher?When i create a class and add the sharediPad (jamfcloud.com) in the Class i cant see the devices in the Jamf Teacher-App.Can someone help us? 

Hi, I have several computers that haven't connected in 30 days and would like the know the best method troubleshoot. Thank you so much. 

Hi,I have some iOS devices in Jamf Pro. Currently Jamf only reports their public IPs. How do I get it to report their private IPs as well? Thanks!

My company is starting to roll out our company fonts. Some computers already have them installed, and some don't. If I just push the fonts through a policy it installs in /Library/Fonts/Managed, but if they were installed by the user previously they'll be in /Users/<user>/Library/Fonts. The ones installed through the policy also modify the file names, which may or may not be the cause of the issue I'm trying to alleviate: duplicate fonts.I'm installing a total of 84 fonts, all belonging to the same font family (or 2 font families, because mono spaced fonts are its own section in the font book). I attempted to create an extension attribute that will look for fonts installed by the user, and if the name is found and file count is at >84 it'll output true, else false. With this, I planned to create a smart group with which I can assign the new policy. However, the script on the extension attribute doesn't appear to be working properly (the count is outputting 1, not 85 like I get