Today we released Jamf Connect 2.15.0; this release includes the following enhancements:   Users Now See Password Requirements at Sign In If a user's password syncing fails because their new password doesn't meet the requirements enforced by macOS (via MDM passcode configuration, etc.), the user now sees a list of the requirements their password must meet directly in the Sign in window.   Menu Bar App Change Password Button When a user's password doesn't meet the password policy requirements you set in your MDM/UEM solution, the user now sees a Change passwordbutton so that they can change their password.   Produc

Hello, I want to enforce a password policy with existing computers. After creating the configuration profile. How do I go about forcing the user to reset their password to something that satisfies the password profile. Also taking into account that there is a hidden localadmin account on the machine and I do not want that account to be asked to change the password. Just the employees user account. Any thoughts? Thanks

Hi everyone, We have PreStage Enrollments and we now have 2 Macs which initially enrolled and I see them registered in Jamf. The problem is, they do not check in after the initial registration and does not get our standard apps (which deploy via smart group targeting a policy for installs). I see that the device does get the configuration profiles and it registers in Jamf but after that initial it seems to not check in any more.Any suggestions where to look?   

No text available

While this is, arguably, a feature that Jamf should be able to handle at its core, what is the best method in 2021, across the gamut of supported OS's and architectures, to enforce Apple software updates? I understand that theres resistance to using any terminal commands for software updates. As stated in the Nudge channel, Since 2018 this has been a problem since Apple doesn't test softwareupdate commands that are triggered by a script. In addition to that, this requires a password if the computer is Apple Silicon. I recently rolled out the UEX-Tool-For-Jamf, and two of the components in it are no longer developed and throw gatekeeper issues in Big Sur. I would like to use Nudge, but, my confidence in my users is low enough to not expect Nudge to work fine on its own. Nudge cannot force the update to happen. What is the best way to handle software updates? Is there MDM magic I am missing? What is the downside to having the checkbox &#03

I would like to upgrade to Ubuntu 20.04 LTS but do-release-upgrade forces me to prior install all updates for my current release. I hold back the mysql update because of the issues from Jamf 10.41 with mysql 8.0.30 using apt-mark hold mysql*.Any suggestions how to get to Ubuntu 20.04 and leave mysql on version 8.0.29?

Warning! With Jamf Parent, there is currently no way to unlink parent control of a device. There is a way to clear currently pushed settings, but the parent app still has the ability to reset those settings. This becomes a huge issue especially if one student's iPad is taken into Jamf Parent by another student, and now that second student has unvetted and unbreakable access to control the first student's iPad, without any sort of tracking available. Please +1 this feature request to help resolve this issue. Thanks

Hello, we have recently received complaints  from multiple users saying their mac closes all applications which are not running when they lock their mac and log back after few min .And they are getting the below error message when they log in back 

Anyone know of a way we can allow only "Security & Privacy / Privacy / Automation" without opening up the entire Security and Privacy area of System Preferences? Thanks!

Jamf pro cloud - ipads/Iphones not updating using mass action command download, install, and restart devices.They have full battery. One is on wifi, one connected ethernet using an adapter, another device is using mobile data. Under the management commands on the device, the scheduleOS update command is just pending, and there's hundreds of them. Like it's trying every day, all day long for the last week.I saw some posts from a couple years ago on the jamf nation forum discussing this issue with no resolution. Has anyone else experienced this? 

Happy Monday all (🤣) So last week after successfully making a script on the classic api to change a site for mac using bearer tokens and properly salted/hashed api creds, i'm now on to my next challenge of using the preview api to set the recovery lock ready for all these MBP M1 pro's that are arriving shortly :- https://developer.jamf.com/jamf-pro/reference/post_preview-mdm-commandsso after getting to grips and trying to utilise the nice example generator, i send this to it in a script but all i get back is " [ ] " so not even a proper rejection.can I assume first that the "managementid" is the UDID of the device and the clienttype is correct for a macOS device??  code below..  NB. its worth noting in actually passing the managementid as a "'"$UDID"'" as i am runni

Hi,I just noticed a bunch of my computers (about 75%) stopped checking in to Jamf Pro  (cloud) on a specific day in August:On running sudo jamf policy I get:There was an error.     Device Signature Error - A valid device signature is required to perform the action. Jamf log at /var/log/jamf.log on the client shows:Sat Aug 13 06:22:26 ServerXXX jamf[15424]: Error Domain=com.jamf.jamfsecurity.error Code=-25293 "unlockWithPassword:error: : The user name or passphrase you entered is not correct." UserInfo={NSLocalizedDescription=unlockWithPassword:error: : The user name or passphrase you entered is not correct.}Sat Aug 13 06:22:27 ServerXXX jamf[15424]: There was an error.Device Signature Error - A valid device signature is required to perform the action. 

Hi All, Looking for some input .. is there a way disable the log-in prompt when a new version of Jamf connect is deployed?im current deploying 2.15.0 but some of users are getting promoted to authenticate after the new version is installed … im not installing a launch agent or daemon during this deployment …thanks Rob 

User was recently removed from old AirWatch MDM and enrolled into Jamf using pre-stage command - sudo profiles renew -type=enrollment. Before I installed the Jamf profiles on the device, I had to re-bind the machine to the domain because the local password and Okta password did not sync. I then removed it from the domain again and verified the local password now matched the users Okta password. Restarted the device and had user log in with newly updated password. Ran command to install Jamf profiles, restarted the device and had user review and install profiles. After all profiles and policies installed I tested Jamf connect (desktop app) and was able to have the user sign in via Okta. On the next restart where the user has to connect the local account to Jamf connect for the first time it does not take the local mac password that was being used. Keeps saying invalid password. Had user try the old and new password that was on the devic

I'm currently testing out a Jamf Now (Fundamentals) deployment for a couple of Macs we have. I haven't used Jamf before so not too sure how Jamf connect should work, but have a feeling mines not correct.I have setup the setting "Enable password sync with Jamf Connect" and done the setup in Azure for it. When a user first logs on it asks to type in both password (microsoft & then local password) so it could sync.Then we changed the password in Microsoft to see if it worked but on the macbook we have to login with the old local password and then in Jamf connect enter the email and the new microsoft password and it says they are out of sync and input the local password.I assume this should be a bit easier as its not exactly syncing the passwords currently?

Has anyone been able to install 1password 8? I have tried installing it on my build Mac and bundling it with Composer. The installer seems to finish, but is doesn't show up under Applications. I have tried pushing the installer to the computer and then running it with a script. the first time I tried the below script, it will download the program and then it asks for admin login.open /path/to/app.app & so I tried this scrip, but it just spins forever.su <admin user - not root> open /path/to/app.app & I know it can be installed via the Mac apps (at least 1Password 7 can), but that links to the App store and I have that locked out so the users are unable to access it.BTW, I'm wanting the app to be available in the SelfService portal.

Hello,for the past few weeks my team has seen strange scoping behavior using Jamf Pro. (on-prem, latest version, Windows host, managing iPads)We'll add a user or device to an app or profile's scope, and often times it will simply disappear after we hit "save," and takes three or more tries to actually stick.Has anyone else seen this or know of a fix?Thanks!

I'm testing the Mass Action Update on a couple of Mac's. One is an Intel and the other is M1. They both have the 12.5 available update, but when I deploy the command to both, I don't see any prompts where it gives you options when to deploy it. It does show up under their device as pending, but goes away. For the M1, have the bootstrap token on our devices. For the Intel, it looked like it worked, because the Mac is now showing 12.5. Is there a log where I can look up to see if the command ran successfully? 

Hi all, Somehow I am unable to install this driver from Apple website: https://support.apple.com/kb/dl1867?locale=en_US We use Papercut as our printer management, but we are unable to proceed due to the driver issues. Even the PPD driver from Ricoh website does not seem to work. Anyone using Ricoh MFP in their environment? How do you install printers on your users Macbook?

My client is going to be migrating from an in-house mail server (Kerio Connect) to Office 365 and I am trying to figure out how to leverage Jamf Pro for this project. The problem is that even though I have decades of experience with Mac administration and with using the VLA version of Office I have no experience with Office 365 and I am finding that some of the setup is frustratingly opaque. Take for instance the Exchange payload when setting up a User-specific Configuration Payload in Jamf: Is the Domain simply the organization's domain? More important, what do I enter for Internal/External Exchange Host, the Ports and the Internal/External Server Path fields?! I have looked at reams of documentation and I can't find a simple answer to those questions. I even asked the 3rd party company that is helping us perform the migration and they were not able to offer any suggestions

I remember being able to bypass all of the new user setup steps in macOS in the past, but I don't see how that's done now on newer versions of macOS. I remember there was a payload we could deploy in a configuration profile. We can do this during PreStage but if I setup a hidden admin account, and I later need to login using it, I would like to not have to click through all of the setup steps just to get in and do what needs to be done. Does anyone have a process for this to avoid the setup steps?

I have a LAPS solution running monthly to reset the local admin password but I also want to be able to trigger this after the password has been viewed.I have a custom trigger but without flushing the logs the custom trigger only runs monthly as well.Has anyone figured out a way to have a policy running on schedule but also be able to trigger it from a custom trigger on demand? The only way I see to do this is to create another policy which isn't best to duplicate things just for this.

I'm looking for a way to find out how many licenses I need for apps without having to note which smart groups are assigned to every single app. Ideally it would be a query (API or SQL, doesn't matter) to find an App Name and its license count, as well as the number of devices it is scoped to. In my mind it seems like such a simple thing, but I don't quite have the knowledge of what each table lists or even which is the correct table to pull that information from in the database. Does anyone have a script or query that they use themselves to pull this information? Any help is appreciated!

HIIm trying to setup a custom path on the inventory collection i want it to collect everything in the Users application folder but i dont know the syntax i need to use users/johndoe/applications ??

Hello,As of right now we enroll MacOS Devices in these steps.Depnotify -> Self Service opens -> Sign in with Microsoft account -> Click Register Device (This is a register to intune policy) -> Sign in with Microsoft again -> Keychain popup opens -> Sign in with Microsoft again -> Type local password to approve saving in keychain -> done.I already attempted to trigger the register to intune policy after depnotify ends, this should already prepare SSO so a login to the Self service is no longer needed. However, this seems to break the SSO. For some reason only triggering the policy from the Self service portal seems to work fine. Has anyone found a way to run the register to intune before opening the self service? And does that work? Additionally, any other tips to reduce the amount of times you need to sign in? Is there a way to automatically allow the keychain popup rather than having to type your local passwo