We have an exciting update regarding the Jamf Toolkit! During our JNUC Presentation, we launched a new product meant to be a one-stop shop of scripts, tools, and workflows for Mac admins. There was a lot of excitement around this product, and have had a lot of great conversations with people over the past couple of weeks.One of the biggest pieces of feedback we received was, although these tools were all developed internally by our team, many of the original concepts were created by other individuals in the Mac Admin community, which were released free of charge.Because of this, we’ve decided to make the Jamf Toolkit open source! You can now access all of these tools on our GitHub page: https://github.com/Rocketman-TechThe paid subscription of the Jamf Toolkit has the following added benefits:A Two-Hour Onboarding SessionQuarterly 60-minute reviews of your Jamf Pro server and implementation of these toolsThe Jamf Toolkit web portal: https://www.rocketman.tech/jamf-toolkitThe following

Hi There,I have successfully been able to push Kaspersky Endpoint Security and manage to create a connection with our server.I have also managed to add the system extensions to Jamf, however I am still getting one option to allow Encrypted web traffic inspection.Has anyone been able to automatically accept this yet through Jamf?

I've started to play around with the extremely versatile swiftDialog tool.  One of the things that I'm finding most interesting is the ability to provide a progress bar based on contents of a command file.  I've started to think through how this could be used for a scripted macOS upgrade.  It should be easy enough to read from the startosinstall.log file into whatever command file is being used, and the text is fairly predictable throughout.  That said, I'm still new to it and learning how to make best use of it.Has anyone already built out a script to display the startosinstall progress via swiftDialog?

Apple released Safari 16.1 today. Here are the standalone installer links from Apple's SUS catalog for anyone needing to make these updates available via Self Service:Safari 16.1 for macOS Monterey: https://swcdn.apple.com/content/downloads/04/41/012-89022-A_0O25N5267C/8vvwcsyap2nweiiv95zrqleofs2283yaa2/Safari16.1MontereyAuto.pkgSafari 16.1 for macOS Big Sur: http://swcdn.apple.com/content/downloads/06/51/012-26885-A_XE7OL6TYXT/3di69zxamb1frajv1zf4dnei1jaz0765vn/Safari16.1BigSurAuto.pkg(There is no Safari 16.1 installer for macOS Catalina or earlier)

Hello, I'm trying to install Jamf Pro on a windows PC and I'm getting this error:  

Does anyone else have an issue with Ventura being available even when you have a restriction profile in place?We use Automated Device Enrollment Jamf School. We see the 12 g version of Ventura available even though our Restriction Profile is set for 30 days. Our macOS is 12.5. We also tried disallowing application path /Applications/Install macOS Ventura.app but it still is an option in system preferences.

We updated to 10.42.  We are seeing an error where every single policy that has a package fails to install the package but the rest of the policy goes through.  So if the policy has a package payload and a script payload, the package fails with error 1200 and the script runs as expected.    We are able to open Jamf Admin and even connect to the share directly.  All file share distribution point settings are correct, the SSL cert is valid, and we verified all password are correct.  

Hello,  Just updated a test Mac to MacOS Ventura and found that I am no longer able to restrict access to Profiles. I attempted to restrict access to Extensions and that is successful, but when I check mark Profiles, it does not grey out.   Wondering if this is now only available for DEP enrolled devices vs devices that are manually enrolled and not supervised.  

Hi all, sorry for the rookie question, just getting Jamf environment set up in the (now cloud based, remote) office, and there's a lot of machines that have.... been around a little while  ;-). I would really like to have some sort of clean slate as we transition to Jamf, but I can't really wipe all these remote machines (more than 30) and start over (we can't use automated enrollment with these older machines, and many of the non tech savvy users would be totally lost if I had to talk them through a clean OS install over the phone or something), as more than half of them are spread out all over the place with all of our users working remotely now. As an alternative, I was thinking it would be nice to clean out all of the old versions of applications (we use a lot of Adobe, 3d and graphics software in general, so the older versions pile up rapidly, and no one ever has time to do much about it). Anyone know of a script that will remove not just the entries in the /Applications dire

Hello JAMF-y boys and girls! My management has tasked me with trying to figure out a way to set hot corners for some of our student labs to defined variables. At current, we have desktop picture and screensaver system preferences disabled through config profile for student access but some of the lab teachers want to have certain things available to students. The idea would be to set the Hot Corners while keeping the screensaver and desktop settings blocked from the System preferences pane. For instance, we if are trying to keep "Notes" In the bottom right corner, put "Application Windows" in the top right, "Mission control" in the bottom left and "Launchpad" in the top left, and then force these settings to set of computers, what is the best way to accomplish this?I know this information lives in the com.apple.dock plist, but my attempts to "defaults write" to this file via script doesn't seem to produce any changes.It seems like the script would be something along the lines

Hi folks.I try hard to get VPN On Demand to work. Unfortunately, it currently does not work with Jamf Pro's built-in way (PI-101098), so Jamf Support referred me to iMazing Profile editor. Getting bits and pieces from various web resources together, I tried to built a working VPNOnDemand.mobileconfig by myself, but as soon as I deploy it to my client, it does not have any affect.The VPN on Demand configuration should basically do the following:1.) If client connected to a certain company WiFi network ("SomeWifiNetwork" in the example), it should generally NOT use VPN at all.2.) If NOT connected to the WiFi network above, but any other network, it should ALWAYS establish a VPN connection while trying to connect to certain domains (example1.com and example2.com in the example).3.) Trying to connect to VPN server via L2TP ("1.2.3.4" in the example), shared secret included ("SHAREDSECRET" in example), user name and password should be prompted (hence not included in example).When I deploy i

We use two locations within Jamf School to separate users and devices for our Middle and Lower Schools. It's time to move our rising 6th-grade users to the Middle School location. Devices do not move locations, only users. What is the easiest way to move users from one location to another? Any tips would be helpful! 

Hi, I have to return an iPad managed by jamf | school to a departing school.Which is the correct option(s) and which order?Unenroll deviceDisown deviceor viceversa or else?Thanks for your support. 

Looking for some advice.  I was not involved with the initial setup of our Jamf Pro instance.  Our Jamf has been in the cloud since day one.  They set it up an on prem JIM server a VM.  All I can really see that it offers is user look up info for inventory when we assign a computer to a user.  When Jamf was setup we already had Azure in place.  Considering all the JIM is doing is providing User look up for inventory purposes wouldn't it have been easier to just add Azure as a Cloud Identity Provider?  Seems like a waste to be using VM space and Server OS license when we can just use Azure which we are already paying for.  If this is the case I'd like to ad Azure as a Cloud Identity Provider and have the server team decon our JIM.

I'm trying to write a script that feeds the new API a list of usernames, creates a mobile device advanced search where the criteria is 'username1 OR username2 OR username3...', then calls that search and writes the serial numbers of the devices returned in the search to a text file. The problem I'm running into is that on the new API, calling GET api/v1/advanced-mobile-device-searches/{id} only returns the search object itself (search name, ID number, search criteria, display fields, and site), but doesn't actually return the search results. I've gone to the web interface for the Classic API and using the Classic API to GET a search does return the search results. Is this expected or am I doing something wrong?

I'm currently testing out a Jamf Now (Fundamentals) deployment for a couple of Macs we have. I haven't used Jamf before so not too sure how Jamf connect should work, but have a feeling mines not correct.I have setup the setting "Enable password sync with Jamf Connect" and done the setup in Azure for it. When a user first logs on it asks to type in both password (microsoft & then local password) so it could sync.Then we changed the password in Microsoft to see if it worked but on the macbook we have to login with the old local password and then in Jamf connect enter the email and the new microsoft password and it says they are out of sync and input the local password.I assume this should be a bit easier as its not exactly syncing the passwords currently?

Does anyone know of any good Speech-to-text app suitable for elementary and middle school students?Thanks,

Hello Everyone,I was wondering if there is a way to setup classroom without having to create user accounts for students and teachers?  We really on use iPads for 5K and 1st Grade. 

Hi Everyone!does anyone have any idea why the managed iMovie app will say its installed on the device but not at all appearing on the home screen nor listed under apps in the settings page? The user had originally decided that they would install the app themselves but it kept asking for an apple ID.I uninstalled the app and sent it to the ipad using jamf.Jamf reports that the app is installed but it really seems that it hasn't done so. Has anyone come across this? How did you solve it?The iPads were bought this year (2021) and are iOS 14.4 and 4thGen iPad. I have tried removing the app, resending the app.i did a "check media status" where it supposedly checks the status of the app on the device, on the app and that too came back with all green ticks. Is anyone able to offer any pointers? i have added a few screenshots in one image file below. Many thanks for any help to solve this.

What is the Bundle ID for the built in Screen Mirroring? I'm trying to enable just that function on our student macbooks and I can't figure out how to allow it through the firewall. All computers are running MacOS Monterey 12.4 or better. 

We are working through a rollout of 802.1x and so our iPads will shortly be using Device Certificates in a configuration profile to access the network.One section here has ~30 iPads that they use for outreach and so want to have the ability to erase user content (browsing history, photos, etc) without wiping after a group of kids has used the iPads.Currently the devices are not managed but they can be added into Apple School Manager via Apple Configurator and so become supervised and assigned to our Jamf Pro serverThere is no logon currently on the devicesIf I erase them, then they lose their network connection so it will all have to be jumpstarted by using my phone as a hotspot to get access back to the server - not a great solution for the end users. Is there some sort of way to erase user content without erasing the device?

Hi,We are in early stages of iPad refresh for staff. restoring from backup from their 2018 deviceThe new devices are assigned to a new prestage.If a staff member restores from the backup made on their old device, then DEP proceeds as normal and device is managed. If a staff member has an issue and moves to a second new device, then the backup from the original NEW device to another NEW device completely skips DEP and the device is set free.I could see a fix for this might be to create yet another prestage and move them once ALL are activated but that might take some time and would likely have ramifications for smart groups etc. Also a pretty big HOLE in the meanwhile, is this expected behavior? if it is it is terrible.

Hi there, Whats the easiest way of clearing managed devices from Jamf and freeing up licences?Thanks

Is anyone out there willing to provide a script that can be used in a policy to prevent Citrix Workspace to open every time you log in to the device?  I came across this post and removing the 4 items does instead stop this from happening.  I'm just not that handy with creating scripts. Thanks in advance. Jim  

Does someone have a custom configuration profile to just Defer Updates on macOS? I rather not have to deploy the full Restrictions Config Profile to Defer Updates since that seems to end up controlling too many other things that we don't need controlled (or grayed out).