Due to macOS13 not being supported on 2012 Mac mini, which has been providing testing via ESXi faultlessly over the years.. I'm now looking at both UTM and VirtualBuddy.I can enrol and most things work. .but.. looks like recon is not able to see the disk..  thus storage in the device record is zero! This is a problem!Any suggestions for a fix or another method for working virtualising of macOS13 using an ARM Mac?VMWare seems quite far off on this with Fusion.. as for ESXi.. I don't think that's happening...

Just wondering if anyone is using a digital signage solution (mac based)?If so, do you like it and company details? Gabe ShackneyPrinceton Public Schools

Hi folks.I try hard to get VPN On Demand to work. Unfortunately, it currently does not work with Jamf Pro's built-in way (PI-101098), so Jamf Support referred me to iMazing Profile editor. Getting bits and pieces from various web resources together, I tried to built a working VPNOnDemand.mobileconfig by myself, but as soon as I deploy it to my client, it does not have any affect.The VPN on Demand configuration should basically do the following:1.) If client connected to a certain company WiFi network ("SomeWifiNetwork" in the example), it should generally NOT use VPN at all.2.) If NOT connected to the WiFi network above, but any other network, it should ALWAYS establish a VPN connection while trying to connect to certain domains (example1.com and example2.com in the example).3.) Trying to connect to VPN server via L2TP ("1.2.3.4" in the example), shared secret included ("SHAREDSECRET" in example), user name and password should be prompted (hence not included in example).When I deploy i

I am attempting to set (or more accurately clear) recovery lock on an M1 Macbook Air using bash. I work for a school district but we are using Jamf ProWe have had an issue where several hundred of our fleet have been (seemingly) randomly getting set into Recovery Lock. Some after initial log in. Others after our end users have had the device for a few hours or days. While the larger issue of what's triggering it is being investigated, I was trying to help speed up the process of getting these devices back into our users hands and clear the recovery lock code (and then set another one) so they could get back in.We have a little under 10K M1 MacBook Airs and I was able to obtain the management ID (as detailed here) for the devices I want to do this too. I am new to scripting but was able to work my way through obtaining a bearer token and parsing the different pages to find the device in question (using jq to pull the relevant management ID).I've looked at every sample script I could fin

I have found several articles on keyboard shortcuts in the JSS and different modifications to those shortcuts over certain JSS upgrades. But I can't find any information on how to disable JSS shortcuts all together. Is there a way to do this?

Provide your users a seamless post-enrollment experience when setting up their new MacsIntroductionApple’s Automated Device Enrollment helps to streamline Mobile Device Management (MDM) enrollment and device Supervision during activation, enabling IT to manage enterprise devices with “zero touch.”Setup Your Mac aims to simplify initial device configuration by leveraging swiftDialog v2 (or later) and Jamf Pro Policy Custom Events to allow end-users to self-complete Mac setup post-enrollment via Jamf Pro’s Self Service.Continue reading …

We have deleted managed iPads from JAMF without wiping them.What is the suggested way to wipe the devices now?  They still have JAMF self-service on them and it seemingly looks as if they are still managed.  I have tried a reset already but there is no erase all content and settings option. Cheers

Hello Everyone,i have a Problem with some macBooks, some of them has no space on their HDD, System Data is about 100GB, where can i find this Data to delete ?

Deploying O365 with full pkg inc Teams.Auto update via config profile. Looking at https://macadmins.software/ I can see what the version numbers are, along with tracking in JAMF via Patch Man. Both MacAdmins and JAMF show Teams as version 1.5.00.28558 installed Teams says its up to date with version 1.5.00.2760 MAU says 'everything is up to date' I've seen this also with OneDrive going out of whack..  I have a ticket in with MS 🙄  but in the meantime.. any ideas? 

Hi folks.I try hard to get VPN On Demand to work. Unfortunately, it currently does not work with Jamf Pro's built-in way (PI-101098), so Jamf Support referred me to iMazing Profile editor. Getting bits and pieces from various web resources together, I tried to built a working VPNOnDemand.mobileconfig by myself, but as soon as I deploy it to my client, it does not have any affect.The VPN on Demand configuration should basically do the following:1.) If client connected to a certain company WiFi network ("SomeWifiNetwork" in the example), it should generally NOT use VPN at all.2.) If NOT connected to the WiFi network above, but any other network, it should ALWAYS establish a VPN connection while trying to connect to certain domains (example1.com and example2.com in the example).3.) Trying to connect to VPN server via L2TP ("1.2.3.4" in the example), shared secret included ("SHAREDSECRET" in example), user name and password should be prompted (hence not included in example).When I deploy i

So, we had an interesting task of getting Time Machine to work over SMB and making it all scripted for zero touch and automated for remounting on reboots.We have a working script! And we are sharing it with y'all.How does it work?"Autofs" is the key to making this all work.and crontab for activating the mounts on reboot or disconnect/reconnect/We use computer serials as usernames for users SMB mounts to a Time Machine share. and each computer has their own folder by serial in the share, A Sparebundle file is the TimeMachine backup destination in each folder per computer.We run the script via a policy per computer with parameters filled for the script.notes:one odd behavior, if the script fails, a reboot helps get it working, not sure why yet, Requirements:Terminal PPPC, with full disk access,Crontab PPPC with full disk access. script:#/bin/bash # INPUT PARAMETERS: # password # size # server #---------------------------------------------- # o pipefail # -E = err trap inheri

Hi Jamf Nation,As a newbie to the Jamf space, this may be a relatively easy question I just have found it is quicker to just ask first before struggling through a lot of documentation haha.I want to allow our student network users to be able to print from all applications to our secure print server because  they currently receive pop-ups like these:And there is not always an admin like a prof\\lab manager\\technician around to approve. I just want to set a Jamf config. profile that allows printing from all applications, especially from Adobe products for our art students. Currently there doesn't look to be a config. profile preventing this but maybe this is a default for standard users and how the print server is configured via Jamf. However, one of my former colleagues created a config. profile to allow users to modify the printer list which looks like: Does this look like this could fix my issue because the printer isn't locked and allow modifications is selected? Than

Hey All,As part of our DEP workflow, we have Jamf Connect Login to create the account but as a previous step we have the Jamf SSO + PreStage LDAP auth features enabled - Has anyone seen where this can cause issues with corrupting users' account when they try and log-in after a reboot. Im currently investigating where after a reboot users are getting stuck at a macOS loading bar after they have auth'd to FileVault and wondered if the above is causing a conflict.let me know what you think ...Rob 

Hey all!I'd like to have an alias that points to Self Service available on the desktop of all Macs across our fleet. I guess there are several ways of doing this. Just looking to get some ideas on what a quick and easy method would be.Thanks!

I'm still kind of new to Jamf, I had an incident on Friday and need to disable iMessage and Facetime but can't figure out how.

I am at a loss with this issue. I have uploaded a PLIST to JAMF and I am scoping it to my test machine. Chrome is showing that the policy is taking affect but it is not being enforced. ( I have attached a screen shot of the policy within Chrome). Here is the PLIST that I have configured <?xml version="1.0" encoding="UTF-8"?><!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"><plist version="1.0"><dict> <key>RestrictSigninToPattern</key> <array> <string>scsd2.com</string> </array></dict></plist> Anyone who could offer some advice would be greatly appreciated.

I have a new iMace that the user edits pages and numbers files off a windows SMB share. She is constantly getting a message that the file cannot be saved. I had assumed it was autosave, so I disabled that via the general settings in the system preferences. but the issue is still happening. the windows share is on a windows 2019 server. this was not a problem on her previous iMac that was replaced. any suggestions?

Hello, I am just starting with Jamf and was wondering if there is a way to put different options in configuration profile in order, set by me.Here's what I mean:We are trying to deploy a profile with 2 options:- Network, with PEAP configured to 'any ethernet'- Certificate with, well. A certificate. Our intention is to have users authenticate on the login screen, so they don't receive any additional pop ups. So far it looks like it works just fine, when the certificate is on the machine.However, because I deploy both certificate and network configuration in the same profile, it looks like sometimes the network part applies before the certificate is installed, which causes pop-up with 'choose certificate' to appear. So the question is - is there a way to deploy both options in 1 configuration profile, but delay the network part until the certificate is installed?If not, is there maybe any other way to achieve what we are trying to do?  Thanks in advance

We currently use LANDesk/Ivanti for Windows management, but they're moving towards Intune. With that, they want to have one MDM for all devices. In the meeting I was just in, I explained briefly that when we tried that years ago pre-Jamf it was an awful experience for us and the users. Remote only worked 50% of the time, no ability to push software, etc.There's another meeting next week to discuss that more in-depth, and I'm currently writing up a justification for what we use Jamf for as I don't know if Intune can do all of it. They also mentioned that Ivanti might now be able to do better software packaging/remote access for Macs now compared to 6 years ago before we got Jamf. I really want to convince them to not go the Ivanti route, and only go with Intune if it can actually replace Jamf properly. We have about 450 Mac clients, plus at least 50 iPads, various iPhones, and a few Apple TVs we're managing through Jamf. Anyone who can speak on experience with this would be appreicated.

Example of today's headline: School bus driver who raped a 14yr old won't go to prison. We have suppressed the News App, we have turned off the Notifications for News. And still, the News Widget is splashing these "Headlines" across Student iPads.I have searched through Config Profile options for any reference to Widgets, not finding anything.Has anyone found a way to make it stop?

Has anyone managed to get IPP printing working from macOS?We are predominately a Windows shop and our print server is hosted on a Windows 2019 Server VM. As SMB is no longer a possibility, I set up an IPP queue on it and am attempting to send jobs to it from test Macs but nothing appears in the printer queue on the server.On the client side, when sending the job I see an information pop-up appear but I can't work out what it is saying as it disappears after half a second. I don't get the printer icon in the Dock like we used to with SMB printing.Is the IPP version on Windows compatible with later macOS revisions, or is this where third-party solutions come in (such as PaperCut etc.)?

I have to imagine this is coming, or maybe I missed something, but I cannot find a way in JAMF Pro 10.36.1 , to stop a user from connecting an iPad via Universal Control to their computer without restricting iCloud accounts. Does anyone has anyone have any knowledge on how to prevent this?

Does anyone have experience deploying printers in JAMF with Mojave? I've tried to use JAMF Admin to capture it, built a script using lpadmin, etc, and none of it works. There seems to be something missing. #!/bin/sh sudo lpadmin -p "PRINTER" -L "Location" -D "Printer Name" -E -v "ipp://<local_ip>" -P "/Library/Printers/PPDs/Contents/Resources/HP Color LaserJet M750.gz" There always seems to be something missing. When attempting to open the Print Queue, I'm prompted that the printer is missing software. When you try to install it, it looks like it is going to load, but never does anything beyond this.

We are thinking about switching from Apple MDM to JAMF and the municipality already has a JAMF server with regular Pro licenses, so my question is, can we add EDU licenses to the same server and select on device basis or do we need 2 separate servers. Can't find any clear info on it so I'll just ask here if anyone knows.

Hello Team,The project I am currently working in, has got some vulnerabilities with installed Apache Tomcat into the JSS serverThe Apache Tomcat needs to be upgraded. Could you please guide with the instruction process of upgrading the Apache? Thanks,Abhik