Hi Support,May I push a policy to control device's camera permission.We want to let some app has camera access privilege, and other apps hasn't.How can I achieve this policy.Thanks.

Hello Jamf Nation! I'm happy to announce the release of gDialog, a new utility for macOS dialogs and prompts from terminal and scripts. gDialog is available for macOS Big Sur and Catalina and currently only as an Intel package, M1 Macs will require Rosetta in order to use gDialog.The CLI was designed to be as close as possible to CocoaDialog where it made sense for an easy transition in the different workflows. Full documentation, examples and download link can be found at https://github.com/giladdarshan/gdialog. Available dialogs:Message Box          Input Box          Secure Input Box          Text Box - macOS Big Sur+          Credentials Box          HTML Box - Capable of displaying simple HTML forms and advanced pages or websites and also a "kiosk" mode for a locked down full screen dialogs    &nbsp

We're in the process of configuring multiple new M1 iMacs for deployment to our computer labs. Previously, we had successfully deployed plenty of Intel Macs and they are all bound to Active Directory via configuration profile and they have no trouble logging in with domain accounts. On the new M1 iMacs however, the AD bind appears to be successful, the settings appear correct on the Mac and the object appears in ADUC but no users are able to authenticate. It simply shakes and rejects the password. Interestingly, the domain controller logs show successful logins and do not report any failures. I have tried removing the configuration profile and binding the M1 iMac manually and I get the same results. We set our computers to create mobile account at login without requiring confirmation and we have packet signing and packet encryption both set to require although I have also tried setting them to allow which did not make any difference. We have the search policy set to all domains. Also,

I'm trying to create a plist and add it using a config profile. I found the below 2 that I tried to modify, but after deploying the profile, Teams still doesn't autostart. teams.plist · GitHubMicrosoft Teams forced Auto-Start for all Users - Jamf Nation Community - 248530 

Here's a weird one. I have an issue where when assigning a category in certain locations, scripts, and jamf apps being two of them, I can't select a category if it's alphabetically past 100. It doesn't keep scrolling.We have several sites and admins who make their own categories across thousands of machines so not being able to do this is not ideal.Anyone else seen this behavior? Again it can be replicated by making 101 categories, go into scripts, you cant assign the 101st category 

I created a couple of custom schemas in JSON for this new feature. Just cause I'm excited about it! I learned JSON schemas today to do this, so they might be a little basic but maybe someone will find them useful.Enterprise Connect: { "$schema": "http://json-schema.org/schema#", "definitions": { "share": { "type": "object", "properties": { "path": {"type": "string"} } } }, "type": "object", "properties": { "adRealm": {"type": "string", "default": ""}, "alwaysGetNewTicket": {"type": "boolean", "default": "false"}, "checkForNetworkServer": {"type": "string", "default": ""}, "checkFo

My predecessor was able to install the mobileconfig file on all the Macs in our district remotely and I'm finding some computers were missed. I'm not seeing any notes of how he accomplished this unless he hosted the file on a server and scripted it.Is this possible?

Basically this is related to the context of migrating to an Active Directory account using Centrify Direct Control Yet, Centrify DC only migrates from an existing user's local OS X account (linking with the accompanying user's local home folder). Is there a tool, terminal commands, procedure, etc. that will convert the OD account to an OS X local account. I am aware that I can create an OS X local account manually and then "move" / mv the contents into this new home folder, and then do a chown -R. I undertand this is related to UID's, and that the actual OD user account is stored on the OD server. We then use Centrify Account Migration Tool to "Link" this home folder to an AD user account name. It Links, and successfully logs in using AD creds, but the user profile / permissions are whacked. For example, do not see docs on the desktop, desktop picture, etc. thanks in advance, john k

Hi,we use our iPad's as a shared device (Only allow temporary sessions). How can i create Classes in Jamf Teacher?When i create a class and add the sharediPad (jamfcloud.com) in the Class i cant see the devices in the Jamf Teacher-App.Can someone help us? 

Hi, I have several computers that haven't connected in 30 days and would like the know the best method troubleshoot. Thank you so much. 

Hi,I have some iOS devices in Jamf Pro. Currently Jamf only reports their public IPs. How do I get it to report their private IPs as well? Thanks!

My company is starting to roll out our company fonts. Some computers already have them installed, and some don't. If I just push the fonts through a policy it installs in /Library/Fonts/Managed, but if they were installed by the user previously they'll be in /Users/<user>/Library/Fonts. The ones installed through the policy also modify the file names, which may or may not be the cause of the issue I'm trying to alleviate: duplicate fonts.I'm installing a total of 84 fonts, all belonging to the same font family (or 2 font families, because mono spaced fonts are its own section in the font book). I attempted to create an extension attribute that will look for fonts installed by the user, and if the name is found and file count is at >84 it'll output true, else false. With this, I planned to create a smart group with which I can assign the new policy. However, the script on the extension attribute doesn't appear to be working properly (the count is outputting 1, not 85 like I get

Hello,We have deployed Qualys agent on macs for security & monitoring purposes.Admin users can disable it following these instructions:    https://success.qualys.com/support/s/article/000001832#:~:text=Navigate%20to%20Cloud%20Agent%20%2D%3E%20Agent,agent%20and%20revoke%20the%20licenseAny idea how to ban user from uninstalling/deleting a specific app/agent ?Thanks 

Hello, I have this script that emails a bunch of information to our helpdesk, however it is currently using the native mail app on macs. Is there a way to edit it to use the Outlook app instead? email computer information to help desk currentUser=$( stat -f "%Su" /dev/console ) sudo -u "$currentUser" /usr/bin/open "mailto:support@company.org?subject=Computer Information ($serialNumber)&body=$displayInfo"

We have an app that is causing some headaches. The app isn't scoped to any devices but shows that is a license is being used. We want to scope to a device but can't get the license back. Help!

We recently added a bunch of iPods to Jamf via ADE. In the Prestage we set the Time Zone, but users have reported the time is not correct and in almost all of the iPods if we look at the Management tab we see Settings - Time Zone as Pending. On one iPod it shows as Failed with the message The setting being applied is restricted.  We do have a Profile on the iPods with the Restrictions payload. Does anyone know what specific setting might be restricting this? We do have Automatic date and time - Enforced, but I wasn't sure if that could cause the problem. I looked through the rest of the Restrictions payload and didn't think I saw anything related to time.

I was at a school ipad handout event today where we saw about 10% of our iPads fail to enroll via DEP. The ipad serial numbers appear in the JSS pre-stage enrollment list. In the DEP portal, they are assigned to the server. We did use Configurator 2 beta to update them to 9.0.1 before handout (they were a mix of 8.2-8.4) but no other work on them. Any tips on how to troubleshoot? Maybe unassign and reassign in the DEP portal?

Hey guys,for an MacOS App we want to provide a MDM to enable the use of the finder extension.Currently the app still requires user actions in the setting. System Preferences --> Extensions --> Finder Extensions Currently the PayloadContent of my profile looks like:  <key>PayloadContent</key> <array> <dict> <key>AllowedExtensions</key> <array> <string>com.apple.FinderSync</string> </array> <key>PayloadIdentifier</key> <string>myApp.finderextension</string> <key>PayloadType</key> <string>com.apple.nsextension</string> <key>PayloadUUID</key> <string>9726bc46-1e51-466b-99e3-abcabcabcabc</string> <key>PayloadVersion</key> <integer>1</integer>

In Jamf school, our iPads are set up as Shared iPads. The managed Apple ID's are automatically created from Azure AD with SCIM. We have also enabled federated authentication. We would love to see the students already be signed in to Teams, OneDrive,... no matter which iPad they grab. Is this possible?

I work for a University I am the main Jamf Admin. We have other IT organizations within the University that support other schools. We are looking to opening up Jamf to the rest of those IT Professionals. How can we achieve this so their Macs/ iOS devices are added to our Jamf instance but they do not have access to make changes to our devices?My first thought is setup sites and give them access to their site only but how would a device get from Apple School Manager to that site?Has anyone ever had to set something like this up?

I have a weird issue where the inventory for my iPads isn't updating when on wifi, but it updates if I connect them to ethernet. They are all on iOS16.1.1, 9th generation wifi only - has anyone else seen this issue?

 Hello everybody. Our IT team manages 10 schools. These are equipped with over 1,000 IPads.In the future, M365 A3 will be rolled out on every device.Students should be able to work directly with Word or Excel without having to log in.I have seen that the apps for devices require the user to log in.Is there a way around this? Also:Does the Microsoft Tenant need to be connected to the Apple School Manager site of each school?Kind regards

Hello everyone,we're currently using Jamf Connect and Intune to enroll our Mac´s.For the privacy settings, we're using the PPPC-Utility from Jamf.Now the question: After applying these PPPC-Profiles the silders (In Privacy Settings) are still turned off, but it seems to work.Is this behavior normal?Thank you! 

Im looking to be able to disable the Mac os 12.5 feature of Limit IP tracking. This is preventing users from accessing an internal only LDAP server. Does any one know of a way to do this. Thanks ! 

Is it possible to edit the default/built-in iOS wallpapers? I would like to create a section for my company's provided selection of wallpapers.