Hi everyone,I have a Jamf School issue I can't fix or find anything online about. This is a shot in the dark.In the summer of 2018 an IT employee no longer with our company set up and deployed Jamf School to our iPads. His account appears to have more access than myself and my colleague, who are both System Administrators. His account is called Full Access and the description says "This role is automatically generated by migrating administrator acl levels into roles"Today I tried to get access to this account via the "forgot password" old company email for the former employee. Jamf says the reset email has been sent, however it never arrives to his email account. I tested the email and checked all filters/rules etc.We are not in the USA so do not have any Jamf support. Any ideas would be awesome!

Hi everyone I need to deploy Aternity agent on MacBooks using a policy.Guide: https://help.aternity.com/bundle/console_install_guide_x_console_saas/page/console/topics/agent_ig_install_allmacs.htmlThe agent am trying to deploy is : Aternity_MacAgent_3.7.0-49Some machines have Aternity_MacAgent_3.5.0-102, some do not have any agent, i have multiple OS installed.My script was not successful, any idea? #!/bin/bash# Copy the Agent pkg file to the home or shared directory of the user.# Use the copy method for your distribution system.#Set up the pkg file with full logs, placing the Agent files in the home directory of the user.su -l $this_user -c "/usr/sbin/installer -verboseR -dumplog -pkg /Users/$this_user/mac-agent.pkg -target CurrentUserHomeDirectory"exit 0      ## Successexit 1      ## Failure

Hi.Has anyone experienced the battery drain problem after updating to Ventura and  found a fix that works for them ?I'm seeing massive battery drain on multiple macs since the Ventura update.I have read lots of forums that offer various solutions.I have tried lots of them and none have helped.Thanks.

HI there, Does anyone know of a command to remove an icon from the macOS dock? We use Google Chrome as our default browser which also works without issue if you try to sign into a Google federated managed Apple ID during Apple ID / iCloud login.

Hi there, I'm currently seeing behaviour from jamf scoping with exclusions.We have 1 configuration that applies based on "All manage devices" excluding "Devices on macOS Ventura without Sophos Monterey Config Installed".The problem is, it looks like when enrolling the device, if scope criteria is checked for "All managed devices" before "Devices on macOS Ventura without Sophos Monterey Config Installed" criteria then it will install on that Ventura device anyway as if the device is actually not part of "Devices on macOS Ventura without Sophos Monterey Config Installed" scope exclusion. I cant think of a way around this except to somehow get the criteria checked for "Devices on macOS Ventura without Sophos Monterey Config Installed" first.  Most likely what's happening is that jamf has to perform a task to verify if the criteria of the config profile existing is met but the device is already part of all managed devices and not part of the exclusion YET until that tas

Hi There, I'm not super familiar with JAMF capabilities but am wondering if something is possible. Is there currently a method of being able to prevent apps from prompting for updates that would require administrator credentials? Or is there a way of giving users rights only to update their apps?We are hearing that whenever a developer pushes out an update to some apps, our users are unable to use the product until the app is updated. I know this may be app-specific, but is there a way to do this on a broader scale? I've seen there is a way to defer updates of software/apps, but I don't know how well that works and if it works on every app. Any feedback would be appreciated!

Hello I'm really struggling to get our Macs authenticating to our Wireless Network using Certificate based authentication. I've followed a few help guides but none of them seem to work, has anyone managed to get this working. Below is a copy of our Configuration profile

Need a sanity check, I wanted to manage the DNS settings for a given network adapter and the "DNS Settings" payload really seems like it should work. Does it actually only support encrypted DNS?Thanks, Matt

Hey guys,this might be a easy question for some of you guys, but im pretty new to Jamf.How do I check the JamfConnect Version that i am currently using? If I go to JamfID it only shows methe new JamfConnect version that I can download but not the version that I am currently using or is it updating automatically. Thanks for your help.

Hi there!I was asked if there is a way to lock down an iPad setting under Settings --> General --> other languages so that a student can NOT select and change the language on his/her iPad.  Once the student adds a language, he/she can go to any website and select the AA in the URL bar, and from that menu, toggle back and forth between as many languages as they add. Our Middle School Students are causing a ruckus with this. From what I can see, it's not something we can do, but I know if anyone knows it's someone here!   

Hi folks. Tried searching but couldn't find a solution (if any) to running a policy after the first setup screen is finished? We've found that some users get their laptops early, go through setup, hit enrollment and leave their computer only to finish that setup later in the day or the next day. We have a few policies that run after enrollment but require a logged in user to be present (some people haven't even created the user in the setup screen yet).  Hope that made sense! Thanks all :D

Hello,Is there possible way to change AD password after expiration on no-bind (SSO extension), external VPN client Mac device?

Hi AllWe currently have the wrong power setting in our labs. I want the machines to always be on which I think I have working with a config profile.However our machines are set lock at 20 minutes. This now doesn't happen as the machine never sleeps.Can two exist together.Any thoughts welcome.      

Hey all, we have had an issue where about 653 of our laptops didnt renew their MDM profile when it was expiring.I'm now in process of re-enrolling them with the profiles renew -type enrollment command, however it prompts the end user to go a click install on their computer to complete the process.  Since we had them approve the ability for applescript to do keystrokes and mouse clicks perviously, I am thinking I could script the click of the update button in notification center when it pops up. I'm struggling to determine the UI element that is showing this button though.  Does anyone have any clues to processing the click of the update button seen here?  I always respect @mm2270 and their work, wondering if you have any idea if I can make it click this update button.

Hello everybody,i habe a strange problem: Since a few days apps disappearing randomly. They are not removed, because everytime i save (saving is enough) a profile of this device group the apps appear again. But not much later the next user complains about the same problem.I cannot say if it are always the same apps, but often the jamf apps "teacher" and "classroom disappears and also "Goodnotes". Did someone had this issue before and knows a solution?Thank you!Marius

We have Jamf Pro on-prem and are just rolling out Jamf Teacher. Our teachers only have 5 options within Jamf teacher (Clear Restrictions, Start Lesson, Restrictions, Applock and Weblock) and I'm wondering if we've missed a setting or the other Jamf Teacher features I've heard about are only available through Jamf Schools or maybe Jamf Pro cloud. Has anyone come accross documentation about what Jamf Teacher features are available with Jamf Pro on-prem?

Hey Nation :-)So here's a challenge for the scripting guru's...I'm trying to write an EA for getting the Design Capacity for a built-in Intel MacBook Pro battery.So far I have this script:/usr/sbin/ioreg -r -c "AppleSmartBattery" | /usr/bin/grep -w "DesignCapacity" | /usr/bin/awk '{print $3}'But this yields me waaaaaay too much info and the required awk value is on it's own new line right at the bottom.The body of the result output does contain the "DesignCapacity" value mixed in among hundreds of other values!So my challenge is... how do I get rid of all that extra value output to just have the final line output?eg:me@MacBookPro ~ % /usr/sbin/ioreg -r -c "AppleSmartBattery" | /usr/bin/grep -w "DesignCapacity" | /usr/bin/awk '{print $3}'gives this result:                {"PMUConfigured"=0,"FccComp2"=5050,"ResScale"=133,"SystemPower"=1051098690,"Qmax"=(5496,5497,5510),"DesignCapacity"=5103,"CellVoltage"=(4169,4169,4169),"PassedCharge"=26,"RaT

So, now the new iPadOS has the ability to view the wi-fi passwords on the students iPad. This is not a desirable feature for us. Is there a way to block the students from viewing the password?  Thanks

To install install-rosetta-2 and packages, create a; Script, policy, add package's, to do it after enrollment is complete. This will work on Monterey 12.3-Apple Silicon and all others macOS and Intel. Here are some screen shots. Hope this helps you on you way. this is a generalization if more specifics write.1) create your script 2) Create your policy3)Upload your install rosetta 2 sh4)Add all packages you need  

Hey folks, some news about MUT:It has been over 7 years since the first version of MUT became available, and in that time, the userbase and feature set have both grown drastically. What started out as a small learning project for me has grown into something bigger and more awesome than I ever thought possible. My life has also changed drastically in that time, and while MUT has gotten bigger and more popular, my time to work on it has significantly decreased.In the very near future, MUT will be moving from my personal GitHub repository to her new "fur-ever home" on the Jamf open-source repository on GitHub. MUT will remain open source and will remain available for download from GitHub. The App Store listing will also move from my personal Apple Developer account to Jamf's account. Both of these transitions will be seamless, and there should be no interruption in app usage for any current users of MUT.Jamf will continue to support MUT after the transition in the same capacity that they

A couple users upgraded to Monterey and got a notice that updated audio drivers were available in Teams. In other Office testing, I grabbed the standalone Teams installer and noticed this when running:Has anyone gotten an updated Distribution file working after expanding/flattening the package? Alternatively, the command line to use with the installer would help too.The audio driver is a separate package when I expand the main .pkg, but I'd like to avoid having separate packages in Jamf.

This community has been helpful for me in setting up Jamf in our small 40 person company, so I wanted to give back with a script you may find helpful. With the recent security and privacy issues around Zoom, our organization decided to ban Zoom from running on our corporate computers. SpaceX made that decision last week, and Google banned it as well this week. While we can add Zoom to the restricted software in Jamf, it doesn't remove all the additional cruft that Zoom leaves behind. It also doesn't uninstall the software right away, it only removes it when a user attempts to start the software. Zoom has an uninstaller built into the app, but it does not uninstall everything. I put together a script you can run both locally and as a policy on macOS devices. The script will report which files and folders it found and deleted after stopping the Zoom process and deleting the application. I recommend using this in addition to the restricted software in Jamf. This script to uninstall an

Hey My JAMF People! We've been noticing lots of issues with re-enrolled devices hanging on random VPP apps. So far 95% of the time if we delete a device record and re-enroll the device it fixes the issue. We're about to have a bunch of computers go through updating the OS to Monterey because they are a few versions out of date.I've packaged up a version of the Eraseinstall script by Graham Pugh that has a post install script baked into it to kick off the Erase install process automatically after running the package. I also have made a Self-Service script for our Field techs that makes an API call and deletes the device record of the computer that it is run on.My Plan would be to have a self-service policy to drop that Erase/Install package on the desktop and then have the techs run API call to delete the Device Inventory Record and then run the package on the desktop to actually perform the erase/install of Mac OS. What I am having trouble figuring out is getting a the p

Earlier this year a small group of passionate Mac Admins community members announced the formation of a new 501(c)(3) non-profit organization called the Mac Admins Foundation. You may have heard of it thanks to sessions at the PSU Mac Admins conference, the mention by Jamf CIO Linh Lam in the JNUC keynote this year, the MacSysAdmin conference session, in the Mac Admins Slack, or maybe even from seeing our popular VoiceOver shirt.   It’s been a fun journey getting the Mac Admins Foundation built and shared with the community, and we’re actively looking for ways to share what’s happening at the MAF. Conference presentations, social media outreach, and posts like this are just a few of the ways we want to stay connected with y’all. This week Co-Chair Tom Bridge posted our first quarterly update which provides news on the Training Scholarship program we’re working on (with the support of Apple and Pearson), the expansion of the board of directors, and upcoming initiatives for 2023 and

I know there are some topics and solutions to lock Profiles, but none of them are working right now to prevent users from removing MDM Profile and uninstall Jamf from the company laptop.May be someone can advise and help what is the solution for Ventura to lock removing MDM Profile option? We are not using ADE, thats why cant select option to disallow removing MDM. Please help guys.