Hi,We are in early stages of iPad refresh for staff. restoring from backup from their 2018 deviceThe new devices are assigned to a new prestage.If a staff member restores from the backup made on their old device, then DEP proceeds as normal and device is managed. If a staff member has an issue and moves to a second new device, then the backup from the original NEW device to another NEW device completely skips DEP and the device is set free.I could see a fix for this might be to create yet another prestage and move them once ALL are activated but that might take some time and would likely have ramifications for smart groups etc. Also a pretty big HOLE in the meanwhile, is this expected behavior? if it is it is terrible.

Hi there, Whats the easiest way of clearing managed devices from Jamf and freeing up licences?Thanks

Hello! Can anyone point me to a support article or an answer that addresses what happens if a device is added to an MDM profile after it has already been setup?For example, a user received an iPhone and set it up. After a few days, the device is added to the organization MDM. Would the device recognize that after some period of time, or would it need to be erased and setup again for the MDM to take effect?

Is anyone out there willing to provide a script that can be used in a policy to prevent Citrix Workspace to open every time you log in to the device?  I came across this post and removing the 4 items does instead stop this from happening.  I'm just not that handy with creating scripts. Thanks in advance. Jim  

Does someone have a custom configuration profile to just Defer Updates on macOS? I rather not have to deploy the full Restrictions Config Profile to Defer Updates since that seems to end up controlling too many other things that we don't need controlled (or grayed out). 

Hey everyone, Does anyone know if exporting a list of 'Packages Installed By Installer.app/SWU' shows macOS patches? I see the following in the list, but I wanted to confirm:-com.apple.pkg.InstallAssistant.macOSMonterey (which I assume is the upgrade to Monterey)-com.apple.pkg.CoreTypes.1500A19 Thanks! 

I have been trying to reclaim some app licenses from some ipads so that I can use the app on some newer devices instead but when I click on 'Revoke' I get this message:"Failed Something went wrong while trying to revoke this license"Even if I un-enroll the device I still cannot get the licence back.The app is 'Hairy Letters'Any ideas? Thanks

At our school the most iPads are iPad Air 2 and they have few years yet working. We didn't remember if we registered the iPads with any iTunes account and now, I restored an iPad with the last IOs version and I get a stuck iPad because it is locked and we didn't remember the account used, as the message didn't show all the account name. Any idea that we can do, change the iPad to shared and restore again maybe? Thank you very much

Hi all,I am trying to install GlobalProtect on our Macs via Jamf Pro. I have GP installed with no issues and have the policy to set to configure the default portal. This all works great; however, the problem is, during the installation, GlobalProtect is not installing 'GlobalProtect System extensions' (see linked picture). Without this, I don't have a working VPN connection. I tried a few things I found on https://docs.paloaltonetworks.com/, but nothing works. It works fine if I manually install GlobalProtect and check this box. If I deploy the package with Jamf Pro, the box doesn't get checked, and the VPN doesn't work. Any ideas?

Hello dear forum,We are using Tunnelblick to establish a VPN tunnel. We distribute Tunnelblick directly when setting up the device per policy.For the newer Macs (from M1, AppleSilicon) it is necessary to install the Tun & Tap extensions for Tunnelblick.This requires to restart the Mac in recovery mode and to change the security policy in the Startup Security Utility (see screenshot in the attachment).Since this requires admin privileges and I only create a hidden admin user via pre-stage, if I do this manually, it shows me here that there is no admin user.My question is therefore, whether it is possible to change the security policy via configuration profile or script to via Jamf to reduced security without that a manual intervention is required.Preferably the Tun&Tap extensions should also be approved automatically.I had already created a configuration profile, but this did not lead to the desired success (see attachment).

Hi Everyone,Has anyone else had issue with the white screen issue when trying to sign into teams on macOS?  I have created a clear teams cache job on Jamf Self Service portal which fixes the issue but seems to reoccur often and ideally would like to find out the root cause to stop it from happening if possible. Any advice would be appreciated :-)

Hi guys,  I created LDAP Extension Attribute which contains the MacBook user name and needs to be pre-filled as the Account name during the Pre-stage. For the pre-fill primary account information I using:$FULLNAME for Account Full name$EXTENSIONATTRIBUTE_3 for the Account Name after successful LDAP authentication in Pre-Stage, on the screen where you need to enter MacBook Account details as Full Name and Account name and Password, Full Name is pre-filled correctly according to LDAP values but in the Account name is $EXTENSIONATTRIBUTE_3 (not as a value, just as a static text)However, if I take a look at Jamf Pro, the Extension is fine, and the result is exactly what needs to be, the problem is that the value of the extension attribute does not appear in Pre-Stage when you call it.Does anyone have any idea what can be the is

Hey guys, Not sure if any one else has run into the “NEW PROFILE DOES NOT MEET CRITERIA TO REPLACE EXISTING PROFILE” when enrolling devices via DEP. At the time of writing, I haven't found any straight forward documentation around fixing this so I wrote an article that should help: https://create.ps/index.php/2018/12/24/fix-new-profile-does-not-meet-criteria-to-replace-existing-profile/ Pete

**To preface--we are still AD binded at the moment as was set up by my predecessor(s). We want to move away from this as much of the Jamf community recommends this but as we need to make this work for students now, so just focusing on the problem detailed below. I post about this previously but I have discovered that our lab macs set up with Name & Password but keep switching to a user list (such that a new user cannot sign in/create another local account) seems to be happening when users are not signing out before leaving the computer/restarting/shutting down. So I suspect the list of people are just the people who are still signed in and just lock the computer and the device doesn't allow for other users to "switch profiles". On our windows computers, we can simply click switch users, but I haven't been able to figure out how to display this on the macs. Any advice?Thanks! ~G

Anyone deployed Notion app successfully? I'm trying to place the app in self service so a non-admin user can install since it requires moving the app to the users application folder. After running from a few test machines the app installs successfully from self service but fails to open saying its not installed properly. So far i've built the installer from composer by DMG and PKG and made sure root and wheel are selected.

We are using Powerschool as our SIS.  We have the plug-in running for Apple School Manager.  The students sync fine, but we have always had issues with the class not working in Apple Classroom.  We have the teachers create them manually in JAMF Pro if they choose to use them.Is there a way to stop ASM and Powerschool syncing the classes.  Teachers are seeing both the auto and manual classes show in Apple Classroom and are getting confused.

Greetings! I have this script that uses the API to pull the username that's assigned to the computer in the JSS and then name the computer with it. #!/bin/sh jssUser=$4 jssPass=$5 jssHost=$6 serial=$(system_profiler SPHardwareDataType | awk '/Serial/ {print $4}') response=$(curl -k -s ${jssHost}/JSSResource/computers/serialnumber/${serial}/subset/location --user ${jssUser}:${jssPass}) real_name=$(echo $response | /usr/bin/awk -F'<username>|</username>' '{print $2}' | cut -c1-11); if [ "$real_name" == "" ]; then echo "Error: Username field is blank." exit 1 else /usr/sbin/scutil --set HostName "$real_name" /usr/sbin/scutil --set LocalHostName "$real_name" /usr/sbin/scutil --set ComputerName "$real_name" fi I think the problem is with: real_name=$(echo $response | /usr/bin/awk -F'<username>|</username>' '{print $2}' | cut -c1-11); ...but I'm

Hello all,I am working to roll out Jamf Connect to our Mac users.  We have managed to get it integrated with our IdP (PingFederate), and when working on the configuration both the OIDC and ROPG tests pass.  However, when trying to log in for the first time on our test Macbook, during conversion of the mobile account to a local account and password sync, we receive this error:I am using my verified network password, yet I am unable to get past this screen.  Any ideas?

If so, I’d love to hear from you! If you could answer the following:How many devices you haveHow often are teachers using Jamf TeacherDo you have a influx of pending commands when it’s used?Are there any features that show up, but don’t actually work?Trying to find out if using Jamf Teacher with Jamf Pro is worth it or if it’s really only worth it when using Jamf School.Thanks!

Fragestellung auf Deutsch am EndeDuring an exam, candidates should not have access to unauthorized aids. However, if you allow multiple apps through a profile or the teacher app, the search function is always active, with which you can access the built-in lexicons.So you would have to deactivate the lexica through a directive or switch off the search function.But I haven't found a way to do that.Während einer Prüfung oder Klausur sollten die Prüflinge keinen Zugriff auf unerlaubte Hilfsmittel haben. Wenn man aber mehrere Apps durch ein Profil oder die Teacher-App zulässt, ist immer die suchen-Funktion aktiv, mit der man auf die eingebauten Lexika zugreifen kann.Man müsste also die Lexika durch eine Richtlinie deaktivieren oder die suchen-Funktion abschalten.Ich habe aber keine Möglichkeit gefunden, dass zu tun.

Hi We are looking to move to Jamf but still needs Intune, recently i unenrolled my test mac's from Jamf to test something in Intune, but now Intune claims i need to use "another" MDM Has anyone seen the attached "error" from company portal and perhaps even know how to do to fix it?  My mac is - Factory reset- Delete in Jamf- Deleted in AAD/Intune Only thing missing i can some up with is that there is something in the Azure portal that is locking me.  

Hello,Does anyone know how I can pull data from Okta into JAMF Pro. Specifically, I would like to be able to pull an employees Department attribute from their Okta profile, into their enrolled computers listing in JAMF Pro > User and Location > Department.We use User Initiated Enrollment. All Apple computers, no mobile. Thank you 

Has anyone figured out a way to set the Chrome homepage (with RestoreOnStartup and RestoreOnStartupURLs keys) but allow users to change it? I've been through a lot of posts and it seems like no one has a solution.I thought it would be as simple as pushing a com.google.Chrome plist to the user’s Preferences folder, but it doesn’t take unless you also delete the user's Chrome ‘Default’ preference folder under ~\\Library\\Application Support\\Google\\Chrome. The problem with that is it can remove some preferences set by the user, which we don't want.I can’t use a profile (because we don’t want to enforce it). Also, I would use a Chrome Initial Preference file for this, but that only works for first-time run and we need it to hit existing Chrome users as well.

Hi Jamf Nation, I’m a member of the technical communications team here at Jamf. Our team had some questions about how you use the Jamf Pro Live Known Issues list so we can improve your experience: If you use the Jamf Pro Live Known Issues list, what are you looking for on that page? Do you look for a PI number to track progress on an issue? Or do you search by keywords and the known issue description to find an issue that you are encountering? If you do not use the Jamf Pro Live Known Issues list, why not? Thank you!

Hello All,Im currently tweaking our company restrictions on macOS devices and was curious how others were going about this. I find the restrictions on the macOS side more difficult to sort out because of how its set up as opposed to the IOS side that just lets you turn on one item for a restriction. Specifically iCloud restrictions which in some cases I only want to restrict certain items for a some and completely restrict it for others. Same for software deferrals, since all these live in the functionality tab it makes more difficult to separate. Unless i'm going about this the wrong way Id love to see if anyone has some suggestions or a workflow that has been working good for them. Thanks in advance and please excuse this if it seems like a low level inquiry.