I'm using the JSON configuration profile in Jamf and for some reason every time I try I save the text verbiage in the configuration profile it doesn't update on the end device so I'm stuck with the default wording. I've also tried changing it in the JSON file directly and still the same issue. Anyone run into this before?  

Anyone experiencing any problem behind proxy (corprorate network)on macOS Monterey?On earlier version of macOS Monterey, we experienced a bug that safari didnt load any external sites when the device was connected to corporate network(wifi or VPN) as described in this post: https://community.jamf.com/t5/jamf-pro/monterey-safari-proxy-bug/m-p/251972From Monterey 12.6 and now on Monterey 12.6.1, we have network problem on many of clients that occur ramdomly.We have noticed the following problem:MS Teams: cant sync with the error: we ran into a problem. Outlook: Same as MS Teams. Mail cant sync. we get the sync status on the bottom right corner with the error "connecting to $Email Address and Not connected to $Email"Safari: cant load any external sites. Chrome and other browser works more or less betterOneDrive: Sync problem_____________________________________________________________________Our proxy is still http and I know that http will be deprecated and should work still. S

Hello, I am try to push a package of a bunch of macs. I have the list of macs in excel. How do I import it in jamf and create a policy to push a package to these macs?  Thanks, 

Dear all,  A handful of pupils at our school have reported that they have either accidentally deleted a built-in app, e.g. Shortcuts, Notes etc. or it has just disappeared. I doubt that it has just disappeared(!) but either way, we cannot reinstall it. They are not available as apps in ASM, and they do not appear in Self Service, so I'm not sure how to reinstall them. One of them no longer has notes available in their iCloud a/c either. Very odd.  Any advice is much appreciated.  Jo

Hi all,I have 3 config profiles that are deployed to over 6K systems. I need to remove a duplicate entry under the systems extension payload..What's the best / easier way - Should I create a new one and slowly migrate over or just edit and re-deploy?I'm game for edit / redeploy but don't wanna cause any user impact - These config profiles are for security tools - Falcon / Netskope and Global Protect.

Hi folks,I am testing Microsoft Defender on macOS.For setting up the configuration profiles and policies I have been using this article:https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/mac-jamfpro-policies?view=o365-worldwideandhttps://github.com/MicrosoftDocs/microsoft-365-docs/blob/public/microsoft-365/security/defender-endpoint/mac-jamfpro-policies.mdEverything is working as expected. So now it's time to make some customizations.In the Defender client I can see this in the section 'Exclusions:When setting up the configuration profile with the title 'MDATP MDAV configuration settings' I used the schema.json file from Defender's GitHub repository. Now I want to change the exclusions. Remove some from the example and add some new ones which are mentioned here: https://community.jamf.com/t5/jamf-pro/recommended-anti-virus-exclusions/m-p/42833Can anyone explain how to accomplish this? Because in the json file I can't find the exclusions for PDF or /home

Hi all, I need a report for all the apps installed on our Macs, Jamf by default shows all apps installed in Applications folder, there are apps installed in /Library/Application Support/ like JetBrains apps :/Library/Application Support/JetBrains/Toolbox/apps/PyCharm-P/is there a way to find out what apps are installed in that path?Thanks in advanced

Does anyone know if local accounts that are created in prestage are done so by using a script or mdm commands?

This suddenly started happening in our environment. Login and password syncing seems fine, but on the desktop Jamf connect will have a popup that requires sign in. Attempting to sign in here will result in "Your local password is incorrect" and this popup cannot be closed. Disabling our menu bar configuration prevents this popup, but I do not want to use that as a solution. Any idea why this suddenly started and what I can do to stop it.

Hello Team,We have added a configuration payload to bypass the HTTP Authentication for intranet site.We have also added required Certificates too. Application domain:- com.microsoft.Edge<?xml version="1.0" encoding="UTF-8"?><!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"><plist version="1.0"><dict><key>AllowCrossOriginAuthPrompt</key><true/></dict></plist>But re-opening the Microsoft Edge do not work. Even Now I get the authentication to enter the username and password.Please let me know what has to be added or changed.

I am newbie to JAMF and its my first time using it to enroll MacOS devices into the environment. I wanted to take a couple of weeks to learn from the free JAMF 100 course and knock out the exam within that timeframe. Does this sound reasonable if I spend a couple of hours learning the material? I was curious if I could pass the exam strictly on the course material or its best to have hands on experience first. Thanks!

Hi is there a way you can import all the deviced we have on jamf pro to jamf school? Or does this have to been done manually?Thanks 

So I came across this article https://www.jamf.com/jamf-nation/third-party-products/files/658/jssid-list-to-static-group-using-the-api-script But I was wondering if I can pass along a curl command in a single line with a computers ID to a static group using the Statics Group ID instead of writing out to a tmp xml file. Here is an example of a basic script I'm using to test. For the moment, I'm using a test serial number since I can easily populate my serial numbers into the script. If this is possible with a simple (rough example to get the point across) put $JAMF_COMPUTERID to "${apiuser}:${apipass}" "${jssURL}/JSSResource/computergroups/id/${GROUP_ID}" that would be awesome #!/bin/bash ######################################################################################### # Variables - Do Not Modify ######################################################################################### # API Credentials #######################################################################

Looking to see if there's a way to create a Smart Group for Macbooks already enrolled in the Jamf database. These Macbooks need to be unenrolled from Jamf on-prem server and reenrolled to the Jamf cloud. My hope is that when we move these Macbooks over without Jamf cloud seeing them as fresh out-of-the-box Macbooks and push out the zero-touch enrollment for these devices which adds all our company apps to the process. Adding 10-20 minutes of downloads and installs unnecessarily.Can there be a Smart Group that can differentiate these devices from Macbooks that never enrolled?

Running 10.42, has any one else testing Ventura seen a device entry revert to using OS version 13.0 instead of 13.0.0? This occurs at some random point after the device has done a successful recon to report as 13.0.0. A subsequent recon or inventory update corrects this version. I've only seen this so far on a device that went from 12.6.1 > 13.0.0 and have not yet seen it occur on a device that was setup in place from 13.0.0, but still fairly early in testing.

HI All, Searched all over and couldn't find this. Looking to create an extension attribute that pulls the authenticated via for a specific ssid. The use case is, we currently allow users to connect to the corporate wifi with username and password , but it gives them a limited network connect , they cannot connect to all services. that shows up as Authenticated via EAP-PEAP (MSCHAPv2)we just implemented 802.1x scep cert authentication.That shows up as Authenticated via EAP-TLSWE plan on deploying the new configuration profile for the 802.1x but want to make sure users are connecting with the new profile and not the old one 

Thanks to @talkingmoose I was able to use his JSON solution to restrict the Password preference pane, since Jamf Pro PI109666 prevents that.https://github.com/talkingmoose/jamf-manifests/blob/master/macOS%20Disabled%20System%20Preference%20Panes.jsonScreenshots:   

I go to the Chrome browser on my iPad which is in the school MDM managed then to settings I scroll down and turn off Discover is there a way to turn them off and have a greyed out  for everyone we don't want students to see the headlines news on the chrome broswser homepage when a new tab is created is there an config profile or an app config that I can use to grey it instead of touch every iPad one by one. Any assistance be helpful Thank you. Should I try the managed bowser in Google Admin? Please advise 

We have signed on with ZScaler and they have provided and .app installer. I have used Composer to convert it to .pkg and uploaded it to our repository. When I setup a policy to install the app, I get a log that states it was successful but ZScaler app is not installed on the target machines. Has anyone else run into this issue and what did you do to get it resolved? Thanks,Wil

hi,the command: Sudo JAMF policy seems not to be supported on Ventura.Terminal says..This script support MacOS Catalina, Big Sur and Monterey only.Script exit code: 1Anybody else getting this issue? and if anything was changed... 

I have about 300 macs that need to be upgraded to macOS Monterey, what should be the best policy to do this and how should it be set up in jamf? 

We just started using JSS this year. Everything is up and working except for one thing. Apple Apps that are made available via the Self Service portal seem to get stuck during the updating of the app. The error on the iPad is. Unable to Download Application. "App Name Here" could not be installed at this time." This error has occurred with several apps. I could really use some help with this as we just handed out 130 iPads to students and several have already seen this error.

Hello all, We have switched from DigiCert to Let's Encrypt.With the help of this old script from Jamf, which I have tweaked a bit, we were able to flawlessly generate the Let's Encrypt certificate and install it in the Java KeyStore.Unfortunately, Jamf now crashes on startup. I see a lot of messages like this:  2022-10-28 16:13:36,544 [INFO ] [startStop-1] [efaultSecurityFilterChain] - Will secure Ant [pattern='/servicediscoveryenrollment/v1/userenroll'] with [org.springframework.security.web.session.DisableEncodeUrlFilter@7b332ffb, org.springframework.security.web.context.request.async.WebAsyncManagerIntegrationFilter@7c9d12bb, org.springframework.security.web.context.SecurityContextPersistenceFilter@7bcf9bfc, org.springframework.security.web.header.HeaderWriterFilter@3d3a5b23, org.springframework.security.web.authentication.logout.LogoutFilter@2e1d93c6, com.jamfsoftware.enrollment.web.security.AuthorizationTokenHeaderFilter@690605fc, org.springframework.

We are receiving a "Tomcat SSL Certificate Expiring in 20 days" warning. Apparently, we are using the built-in Certificate authority but since we updated this a long time ago, we aren't sure what to do. Do we need to choose the first option, since we don't want our clients to lose their connection? And if so, how and where do we obtain (download) this SSL Certificate Keystore for uploading into the JSS? Your help is appreciated.

We have Cisco AnyConnect 4.10.03104 working great on Mojave-Big Sur, with users not receiving any popups.  When upgrading from any OS to macOS Monterey, we receive the popup below, regarding a system extension being blocked.  Our configuration profile is scoped to all devices.  When reloading a Mac fresh from Monterey, users do not see the message below.  It only appears to be happening after an upgrade.  Just wondering if anyone has a solution.