I have a supervised iPhone enrolled with a blueprint that has "Prevent Changes to Bluetooth" checked. Bluetooth was ON when settings were applied and I can see the Bluetooth option in Settings > Bluetooth is greyed out with the text "some restrictions are enforced by admin". This is the expected behavior but the issue is I can still turn on/off Bluetooth via the control center. Is there a way to restrict this?

Hello! I accidentally modified the Scope on my installation of Procreate, and by the time I fixed it, the app had been uninstalled and re-installed. The new installation works fine, but all of the saved app files (".procreate" art project files) are gone. I work with students, and a lot of them are very upset about their work being deleted. Is there any way to recover deleted app files like this through JAMF? Or to restore files from the "trash" on the device? I've already checked the "Recently Deleted" folder on the iPad.  And its worth noting that these devices were NOT logged into an iCloud account, so restoring an iCloud backup is not an option here. 

Hi Team,Did anyone tried to upgrade openSSL for all the mac Endpoints with the current version 3.0.7? I wanted to upgrade the same for all mac endpoints which are enrolled with jamf pro as the current or the older versions are detected with the vulnerability.Any help will be highly appreciated.

Hi All,Has anyone come across Crowdstrike Falcon failing to install on macOS Ventura? I have downloaded v6.44 from the Crowdstrike console and when trying to install it manually on my systems it fails.. It also fails on v.645. ThanksRob

So we don't give users admin for obvious reasons and Sketch comes out with updates almost weekly at this point. The problem is their files are only compatible with the version they were made in.I haven't worked autopkg into my workflow yet (I know!) so I wrote this todaySelf service update script is as follows !/bin/sh Update Sketch Application - Created by Justin Repasky 03-03-2016 #### Remove any older versions of sketch-updates folder and re-create if test -d "/Applications/Utilities/IT/sketch-updates/" then rm -Rf "/Applications/Utilities/IT/sketch-updates/" | mkdir -p "/Applications/Utilities/IT/sketch-updates/" ;else mkdir -p "/Applications/Utilities/IT/sketch-updates/"fi; cd "/Applications/Utilities/IT/sketch-updates/"sudo curl -O http://download.sketchapp.com/sketch.zip /Applications/Utilities/IT/sketch-updates/sketch.zip; sudo unzip sketch.zip; if test -d "/Applications/Sketch.app" then sudo rm -R

Greetings,I'm familiarizing myself with PreStage Enrollments, and while for the most part it's going well, there are a couple things I was hoping to get some feedback on.The first may be a simple setting that I'm just missing - applying a Mac's previous name once the enrollment is complete (or during if that's where it needs to take place).  For example if I had a Mac called "Mac-99" that's in my Jamf Pro system, and I wipe it, once the PreStage Enrollment is complete (or during) is there a way to apply it's previous computer name "Mac-99" to it?  Right now, it gets placed back into it's previous groups, and it get its previous Config Profiles applied back to it.  However it does not receive its previous name, and now has the default macOS assigned name of "iMac".The second conundrum I'm facing it trying to get a post-enrollment script to run that correctly enables ARD, and grants all access to the local admin account that gets created during the enrollment.  The ac

Hi,I try to enable Remote Control for Big Sur with a script. I try that : /System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/Resources/kickstart -configure -access -on -allowAccessFor -specifiedUsers /System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/Resources/kickstart -configure -users admin -privs -DeleteFiles -ControlObserve -TextMessages -OpenQuitApps -RestartShutDown -SendFiles -ChangeSettings /System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/Resources/kickstart -restart -agent -menu /System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/Resources/kickstart -activate With Apple Remote Desktop I have a black screen. I run this command :tccutil reset ScreenCapture No more black screen. But, I can observe, but not control! &#x1f605

Hi, I'm looking for a way to bypass the SSO login so that supporters can log into Self Service to use policies assigned to them.Currently, the user is automatically logged in when the login button is pressed in Self Service, which is also desired, but logging in again, e.g. to log in a supporter in Self Service, is not possible, because the logon is immediately made to the user again.My only approach so far is a script in the JC Menubar with kdestroy and then open the Self Service.This would also be a good method if I could get a new Kerberos ticket after ~30 seconds (after the supporter could log in).However, if I put such a long running script in the JC Menubar, it completely blocks the execution of the JC Menubar for that period, which I want to avoid.Example from my tests:( kdestroy && open jamfselfservice:// ) && ( sleep 30 && open jamfconnect://gettickets )as I said ... it works, but it's not pretty and I hope someone already has a better method for this.T

When I click on a device in Jamf Pro, some of them refuse to open.  All I get is the spinning wheel.  Some devices I click on do open.  It's rather hit or miss.  I've left the page open for 30 minutes hoping it would eventually open...nope.

Might overlap https://jamfnation.jamfsoftware.com/discussion.html?id=4701 In the past when we made monolithic images (before the enlightened days of Casper) I would install the OSX Server tools and then use it to add all domain users - an AD group - to the local printer admin group on a bound machine. Then I'd unbind, remove the Server Tools, do all the other prep and make an image of it all. When the image was applied and the target Mac rebound to AD the Print Admin group was happily respected and I'd never get calls about paused print queues. Yay! I win!Ok, so now I want to push a configuration out via Casper. How do I emulate this process? I want to make an AD group a member of a local group during imaging or pushed out with Casper remote or Self Serve or maybe even good old' ARD.Can I? Thanks for reading.- Scott

I'm sick of JAMF timing out and already upvoted the feature request for adding a session timeout...My issue is that the logout takes me to a page (https://mydomain.biz:8443/logout.html) and I have to goto the address bar, remove the logout.html and hit return, then relog.It would be nice if it logged out to the login page for our JSS.Does anyone have any workarounds or know if a feature request in process, etc?Thanks for any help.

Hello, I've been tasked with creating a screen saver with an .mp4 file. So far, it looks like SaveHollywood is the best way to accomplish this. Does anyone know how to configure the preferences of SaveHollywood to use the .mp4 file?

I'm a school teacher, I recently got a new batch of m1 mac computers, I want to use "api/preview/mdm/commands" in the api of jamf to set the recovery lock, but I don't know why but it keeps reporting an error, the error is as follows, have you encountered the same problem? curl -X POST "" -H "accept: application/json" -H "Authorization: Bearer eyJhbGciOiJIUzI1NiJ9.eyJhdXRoZW50aWNhdGVkLWFwcCI6IkdFTkVSSUMiLCJhdXRoZW50aWNhdGlvbi10eXBlIjoiSlNTIiwiZ3JvdXBzIjpbXSwic3ViamVjdC10eXBlIjoiSlNTX1VTRVJfSUQiLCJ0b2tlbi11dWlkIjoiMTgwODkwYTMtMGRmYy00YWM0LWJkNTItMmE0ZjZjYTUxOWEzIiwibGRhcC1zZXJ2ZXItaWQiOi0xLCJzdWIiOiIyIiwiZXhwIjoxNjY4MDc0ODAxfQ.Qn8KTQztpl55jdjB-gRIsvQ42wUoshG09OCSrVmwfms" -H "Content-Type: application/json" -d "{\\"clientData\\":[{\\"managementId\\":\\"aaaaaaaa-3f1e-4b3a-a5b3-ca0cd7430937\\"}],\\"commandData\\":{\\"commandType\\":\\"ENABLE_LOST_MODE\\"}}" 500Error:Response bodyDownload{ "httpStatus": 500, "errors": [ { "code": "SYSTEM_EXCEPTION", "descriptio

Hey all,Has anyone started using the new command in 11.5 as shown here:https://developer.apple.com/documentation/devicemanagement/set_recovery_lock_command  It looks like its been set up on Apple's side, but I don't see any documentation in the Jamf Admin guide related to it?  Looks like this is the closest we will get to having a firmware password on M1's.

Why is it not possible to migrate static groups to dynamic groups but the other way around?Nice RegardsPeter

Does anyone have a script that will name a Mac, and then keep the computer name and host name synced up? We typically name our Macs as app-serialnumber. The "app-" designates that it is an Apple, but the serial number is just that. Any help?

I have created an MacOs mojave for running on VMware fusion 11 and corrected serial number and hardware model of the VM, so it matches an real mac However, when enrolling the MDM profile it still shows the "Profile installatoin failed" with error "MDMresponseStatus: 500 error. And I have checked entries in jamf and it does not contain this computer Anyone have some working VMware mojave running and how this is done ?. Just want to test some basic about workflows etc, so It is not for DEP

We recently setup JAMF AD CS connector. We can see in the IIS logs that we are getting the below 200 return code so we know JAMF pro is talking to it.  2022-11-02 13:13:31 <Interanl_IP> POST /api/v1/certificate/request - 443 AdcsProxyAccessUser 52.39.2.203 Java-SDK - 200 0 0 1162  And 52.39.2.203 is an IP that belongs to JAMF.It will fail in the GUI with the error:  Failed to inject certificates into the profile  In the JAMF pro logs each time an attempt is made we see the below....  2022-11-01 16:33:08,650 [WARN ] [lina-exec-8] [Credentials ] - We don't want to return an X509 Cert from a PKCS12 data blob 2022-11-01 16:33:08,902 [WARN ] [lina-exec-8] [Credentials ] - We don't want to return an X509 Cert from a PKCS12 data blob 2022-11-01 16:33:14,194 [WARN ] [ina-exec-42] [Credentials ] - We don't want to return an X509 Cert from a PKCS12 data blob 2022-11-01 16:33:14,205 [WARN ] [i

Hi Jamf Nation,We’re here to announce that the Jamf Connect 2.18.0 beta is now open for enrollment.We've introduced a new "one-click" function for collecting relevant logs and troubleshooting information for app and network events. As always, feedback is welcome on the logging details, verbosity, etc that are most valuable. For additional details and a list of resolved issues, please join Customer Feedback Program and review the release notes.How to join the beta :Log in to Jamf Account to enroll in the Beta Program, available under Product Feedback at account.jamf.com. Once enrolled you will see a link to the Beta Forum. There's a short delay while you are approved for access to the forums. If you have any questions please email beta@jamf.com. As always, the beta program is operated under non-disclosure, so please do not share any information regarding your testing on any public forum, including the non-beta sections of Jamf Nation. Please use the Jamf Nation beta discussion area

Hi ,I am completely new to jamf.I have a requirement where the few of the basic applications ( Chrome,office,and other apps) must install while enrolling the machine.How can i achive this ?Thanks in advance

Hi All,My company currently uses Okta as our IDP but plan on moving to Azure. This will also eliminate the need for a JIM server. Before I make the switch I want to verify of any major changes or possible impact that it may have to my current jamf instance. I want to make sure that end users will not be affected by this change. Currently our Jamf connect is using Okta, will this have to be updated to use Azure if switching to Azure IDP? Regards, 

Has anyone found a way to trigger something other than a message when a Mac violates a restricted software policy?  Is there a simple way to see how many times the same machine did that?

Hi everybody, I would like to know if it is possible to find the latest available version of Cocoadialog?If so, please, where will I find it ?Is it compatible with Mojave (10.14) ? Finally, do you recommend Pashua or Cocoadialog ? Thanks for your help and i wish you all a happy new year...

Hi all, When I am try to make Update by sending a mass action command, ask from end user to enter an Administrator account and PW to install the update, anyone have the same problem?

We have scheduled our next Apple Admin Meet-up for the DFW Area. Come join us for some pizza and some great discussions! Apple Admin Meet-Up