I set up a snipe-it instance and was able to get Google LDAPS connected. I would like to use the Jamf2snipe between my snipe-it instance and our jamf school account. Does anybody know if the Jamf2Snipe works with Jamf school?

Since Jamf Pro Restricted Software records never quite seem to work for us as we originally expect, we’ve found that adding the ID Number in the text of the error message will help us track down which record is blocking what. Error 4: macOS Ventura 13 is currently being tested.Please see KB0070400. (If this message is repeatedly displayed, please restart your computer.)

Hello We currently have in our company laptops on different OS, and I would like to know if a method to block the latest update exists? Each new update is tested before deployment, but I could only lock the update for people who are on the previous update (12.2 in this case) via a smart group and locking access to the update via a profile configuration. So if a user is not on 12.2, he has access to 12.3. Do you have an idea ? 

I created a package in composer to copy the uninstall_agent to the Endpoint folder that I received from our InfoSec team. I created a policy to install the file in the correct path and under Files and Processes, I've tried adding different options below. It copies the the agent and when I do ls -l, it is has the correct rights. If I open up terminal and change directories and run sudo ./uninstall_agent it works. Different options triedsudo ./Library/Manufacturer/Endpoint\\ Agent/uninstall_agent./Library/Manufacturer/Endpoint\\ Agent/uninstall_agentsudo /Library/Manufacturer/Endpoint\\ Agent/uninstall_agent/Library/Manufacturer/Endpoint\\ Agent/uninstall_agentI'm testing it self-service and when it runs it says complete, but the details Result of command:Could not open the log file uninstall_agent.log for writing logs. Please verify t

Update:Decided to push via Self Service using DEPNOTIFY. Sending out reminders to users to run updates.Way easier than trying to automate the process. I am currently trying to automate upgrading our macs M1 to Monterey.I have had success with our Intel macs but stuck at the following stage where to install the OS on our M1 macs I get the following message in the logs.Background:I have set up two policies:“Monterey Cache M1 Policy” caches the installer onto the machine.“Monterey Install M1 Policy” installs/updates the OS. “Monterey Cache M1 Policy” caches the installer onto the machine. 

Good afternoon, My school is switching the VPN service to also include a mandatory DUO authentication. If the person does not approve the VPN through the secondary verification then it will fail. Do you know how I can edit the Fail message to include more information?-Attached a pic to show the current message.--The VPN right now is set up as a payload in a Configuration ProfileThanks in advance!

I've had a ticket open with them for a week now, and getting any sort of response from them is like pulling teeth.When they do respond, they just ask more questions and don't actually seem to do anything with the information.Is their support really this broken/non-existent?How can you sell an enterprise application when you don't support your users?

Hi Everyone.Scratching my head a little over this one and hoping someone could point me in the right direction.I'm currently deploying a corporate wallpaper to all MacBook devices and its working fine.However, if possible, I would like to use a different image for the lock screen. Is it possible?Thanks! :-) 

Just started at a new company and they are in dire need of an endpoint AV solution (among just about every other security precaution that exists).I am working to set us up with Jamf Pro and I wanted to reach out to see if you have any experience with Jamf Protect (instead of a "more traditional" AV). Most of the posts here are from last year and before I commit to something like MalwareBytes I wanted to check to see if anyone has experience with Jamf Protect as I am a big fan of the tight MacOS integrations and the reduced risk of something breaking with OS updates.I am 100% not sold on an AV yet so I figured I'd reach out here before diving further into the weeds.Thanks!

Is there anyway of sending a reboot command to a device? Specifically an iPad, we have some in mounts and its a pain to get to them and physically reboot them when there is an issue.

My question is very simple, is it possible to search for files in my clients' recycle bin? With EA or politics?

Hi,Momentarily I have this issue with adding a MacOS app package in Jamf School.When I click Add App and select the MacOS Package option, I can drag the file into the field, but when it reaches full it gives an error.The message shows: "Fault: The uploaded asset could not be processed."Does anyone have a solution for this issue. I just want to add 2 apps like this because the previous ones were outdated.Thanks in advance.

Hello all,My team and I are new to Jamf and trying to clean up the profiles of our predecessor. Recently our Big Sur lab devices have been having issues with their login screen--in the local system preferences you can see they are toggled to Name & Password to allow all network users to sign in, however, they keep switching to a login screen where there is a list of local users and no option for new sign ins. It can be temporarily fixed by signing in and out of our admin profile to come back to the normal sign in. So I made a config. profile for all network users sign in with Name & Password with a display message but when I moved it from my test group to a device in the lab, it only displayed my message from the new config. profile but still showed a list of users. Obviously, I know it could be an issue with the new config. profile but I tested it on a completely new device that I manually enrolled and it was successful. I'm thinking it could

Hello,I would like to install ANyDesk on my client workstations and to do so I need to give my users disk access permissions in the system preferences.How can I do this?

When we all went home when Covid struck, I had a day or so to setup some local accounts for people to use if their usual logins failed. I created both a standard and an admin account. These were pushed out via Jamf and setup on all computers we have on our instance. Now that things are slowly returning to normal, I am wanting to remove these accounts from some computers that no longer need them. I have found that just removing them from the policy doesn't remove the account. Is there a way to do this? I assume I will need a script of some kind. If there is a way to do it through the GUI, that would be best...

Hello,We have a fleet of computers, each with an administrator session and a user session. The latter is the one that is used.I would like to change the password of the admin session. I have tried using local accounts but the change does not work.Can you help me?

I have a file that I created in Automator that essentially points the user to the proper share on a storage server. I do this as there are many different departments, with multiple shares per department. I have the file created in Automator, then wrapped up as a DMG in Composer. I then send it out via Jamf, with both FUT and FEU checked. This is working as expected.Recently, we had to change the server. In doing so, the path is ever so slightly different than it was before. This is facilitating me to need to update those "links" and redistributing them. I have thought that I could just do what I did before and make the change, wrap them up in Composer, and distribute them via Jamf with FUT/FEU checked. On my test machine, this made duplicate links on the desktop. One for the old server, one for the new server. How do I overwrite the existing files on established users and update the User Template? Did I miss something when I created the updated DMG?

Learn how to provide your users more detailed feedback when updating inventory via Self ServiceBackgroundWhile conducting some internal training earlier this week, one of our TSRs asked: “Is updating inventory where the blue circle just spins and spins but doesn’t appear to do anything?”“Yes,” was my deflated reply.Hopefully after implementing this script, you’ll never have to be asked that question again.Continue reading … Update18-Oct-2022Version 0.0.3 introduces a “debug mode” for auditing Extension Attribute execution durations.

Hi we’re a startup having 150 macs enrolled managed by intune. Our company bout jamfcloud (jamf pro) instance and now I’ve to plan a way to migrate people’s macs.I figured out the prestage enrollment, the problem is with the existing macs. Is there any guide on how to have that process smoothly and without much overhead for it team.Also any scripts that can install xcode, homebrew etc. Any github links is appreciated.

Today we released Jamf Connect 2.16.0; this release includes the following:   Password Policy Requirement Enhancements The login window now notifies and allows users to change their password when it does not meet your local password policy requirements. To direct users to the correct location to change their password, set the Change Password URL (ChangePasswordURL) setting. If Kerberos is enabled with Jamf Connect, the menu bar app now detects and displays your organization's password policy requirements for users to reference while changing their password.   Microsoft Azure AD Change Required If Microsoft Azure AD is your IdP, upcoming changes to Microsoft Authentication Library (

I've had a ticket open with them for a week now, and getting any sort of response from them is like pulling teeth.When they do respond, they just ask more questions and don't actually seem to do anything with the information.Is their support really this broken/non-existent?How can you sell an enterprise application when you don't support your users?I will be looking at alternatives.

I am reaching out to see if anyone is running into the issue about SSO not working on Beta Versions in Ventura. Thinking this will work when fully released? Not sure if this a normal when testing the Beta OS's. Ignore or Cancel it still prompts right away or sometime after 15 mins or so. AppSSOAgent looks like is not even running since it keeps quitting. Any Ideas be helpful, thanks  

I have a static group created that is used for my students communication app needs.  One of my students continually deletes the app from his iOS device.  How can I keep him from deleting the app? Under device functinality - I do have Allow removing apps unclicked. 

I work for a K-12 school district and we have been using the same staff restrictions (config profile) for a few years now. Previously, our teachers were able to collaborate in iWork without any issue. It has recently been brought to my attention that the "Collaborate" button is now grayed out and teachers are unable to work on a document together. I have found that unrestricting their device resolves this issue, so I believe that something in our staff restrictions might be causing this issue. All iCloud features are enabled in the config profile, as far are restrictions go,  so I am unsure what other field would be tied to iWork collaboration. Does anyone have any info on this or is anyone experiencing a similar issue?

Hi all,We have one iPad Air 2 which is connected to JamF School and successfully updating, sending profiles, apps etc - but it's stuck in Lost Mode. We've tried the Disable Lost Mode command, and it goes from Pending to Sent, then to NotNow. Has anyone seen this before and been able to get a device out of Lost Mode? We've tried clearing the restrictions, clicking clear pass code, restarting the device multiple times - but it's still in Lost Mode. It auto-connects to the WiFi on restart and pulls down the latest profiles from JamF - so it's not a connection issue to the server. Is there any way we can find out what NowNow means?! Thanks, James