Hello All. I am a relatively new admin, thanks for your time and please redirect me if this topic has been covered before. I will try and be as thorough as possible. I am attempting to deploy Cylance Protect 3.0.1 using Jamf Pro to new M2 Macbooks. Following all of the documentation I can find with both Jamf and Cylance here is what I have done to this point.1. Created a configuration profile with a system extension payload.This policy is set to deploy in the prestage. 2. I have the package deploying from a cloud share point, also in the prestage.Results: The software is installed on the test machine. It did not run on its own and when I attempt to start it manually I get the following result.I need the program to install and run on its own. I think that the solution to this issue might involve some scripting, which is something that I don't have much experience with. Does anyone have any experience with this collection of variables or have a direction they can point me in? T

Is there anyway to exclude an iPad that's been scoped via group to an app? I want the group to still receive the app, except for certain iPad(s), but they still need to remain in that group to receive other configs and/or apps.This can easily be done in Jamf Pro, but I'm not seeing anyway to do this in Jamf School. Am I missing something? Or is it just not possible?Thanks for any help!

I'm trying to work with support to figure this issue out...We have a bunch of iPads/iPods in our pre-stage enrollment that are assigned but don't have device names/aren't in our inventory to manage. Some of the device names just show up blank and are unmanageable. The devices appear to have the jamf mdm profile on them and are completely locked down so I can't factory reset/restore them/log out of the apple ID even after removing the mdm profile on Apple Business Manager. I can't find them in Jamf to unmanage either.Does anyone have any idea how this could have happened? Not sure if it was an issue when they were initially enrolled or if it was a configuration we did that would cause them to disconnect from jamf somehow? Has anyone had anything like this happen to them? They are kind of stuck in limbo and I'm unable to do much of anything with the devices. 

I have a MacBook Pro here, but the user forgot his password, so i want to restore it with my Personal Recovery Key in JAMF. Now the problem i got a Personal Recovery Key in jamf but it doesnt work on the device. (says its wrong)So I have no possibility to log in to that device + another problem the firmware password doesn't work either. My question is there any way to force the macbook to send te Personal Recovery Key to JAMF without logging in.  

Hello,we use Jamf Pro Cloud 10.30 at the moment. With Jamf Pro Tools (Composer 10.31) and even older Composer versions, it is apparently no longer possible for me to include files on the user's desktop in the package, so that I can deploy these files to the user desktops via DMG and fut. The error message as shown in the picture always appears. Does anyone know the problem or has a workaround?Thank you! 

We did have LDAP working with a Linux infrastructure manager server, but it stopped working. We suspect the server may have been deleted from AD, but because no one here is a Linux expert we couldn't do any real troubleshooting - we couldn't even login to it. We decided to just build a new Infrastructure manager server but this time do it on a Windows server. We gave it the exact same hostname and IP as the previous one that we decommissioned so the firewall rules would all still point to the same location. At first we thought the new server could just slide in and pick up the role and restore LDAP but I found that when this new server enrolled, it created a new instance. I figured that's ok. I'll just give it a difference display name so I'll know where to point the new LDAP config. I cloned the existing LDAP config but changed the display name and pointed it to the new infrastructure manager instance. The new infrastructure manager (on Windows server) is listed as a viable Jamf

Hello!I am building a package to install FortiClient vpn (the free vpn standalone client) for our users.After several tests, a policy authorizing the security extension is indeed present and allows to avoid blocking it during installation, but a popup asking me to authorize the addition of VPN configuration appears right after the installation.This popup is generated by the "FortiTray" binary and after several tries and I don't know how to authorize it ahead of time so that the installation is totally invisible.It says that ""FortiTray" would like to add VPN configurations"Any idea on how I can authorize this or setup ahead of time ?

Hi,I am trying to set the push certificates privilege to read only for a single user. The user privileges are set to custom.I go and untick the create, update and delete boxes leaving only read ticked, then go and save.. and when looking at the list, all the boxes are ticked again.I am certain that there is another privilege that I have set, that might be forcing this. Spoke with JAMF Support, and all they could say is its a bug, then just closed my case, so coming here for some advice.Can anyone help?Thanks

Hello all,I wanted to share my experience with a few devices running into this error. This only became an issue after erasing the Mac and reinstalling the OS. Below is the response I received from support and this solved my issue.  "After reviewing your logs it seems as though you have quite a few smart groups. There are a few things we can definitely do here. If its more than one MacBooks that are receiving this error please try the pre-stage enrollment again with no smart groups. If the error is only happening to only one MacBook please attempt a PRAM reset by doing the following steps: -Shut down your Mac. -Turn it on and immediately press and hold these four keys together: Option, Command, P, and R. -You can release the keys after about 20 seconds, during which your Mac might appear to restart."

Hello, was wondering is there a away to have a Progress bar on the desktop to know whats being installed and what is missing as far as Policies during the enrollment. 

When using the API to pull out some policies, I discovered a good amount of policies that don't show in the web front end. They appear to be old policies but all have the naming scheme similar to "2016-07-29 at 9:42 AM | user-name | 1 Computer". If I enter the ID in the policy URL I'm able to view them. They appear in any policy API call, e.g. ../JSSResource/policies. Some of them still have a scope and enabled is checked which is concerning. Has anyone come across this? Is this on purpose for deleted policies? Is my DB messed up? Are they still active?

Hi All , very new to this and really trying to get my head around stuff.it doesnt helping that I get to work on it for 1 day a month. Anyhow, i need to enable ssh for all user, all the computers have ssh enabled but for some reason, it changed to only this users. can someone explain step by step how to create a policy for it to change to all users or to add the local admin account to the list?

Hey all, here's a question.We are transitioning from utilizing our DEP Notify provisioning script to enable filevault, to instead use configuration profiles to manage/enable filevault.If we enabled the config profile to enforce fielvault on next login and scoped it to machines, should I ensure to not scope it to a machine with FV already turned on and enabled? I would assume this could cause some weirdness with the profile. Obviously I would test with a few machines, but just wondering before we started.Thanks for any answers!

Experts, I am new to the Casper and struggling second day with dock util on 10.10.OS. Since that functionality was removed in JAMF casper work around like custom script with dockutil 2.0.2 needs to be enabled. !/bin/bash sudo dockutil --remove 'Launchpad' --allhomessudo dockutil --remove 'Mail' --allhomessudo dockutil --remove 'Contacts' --allhomessudo dockutil --remove 'Calendar' --allhomessudo dockutil --remove 'Notes' --allhomessudo dockutil --remove 'Maps' --allhomessudo dockutil --remove 'FaceTime' --allhomessudo dockutil --remove 'Photo Booth' --allhomessudo dockutil --remove 'iPhoto' --allhomessudo dockutil --remove 'Pages' --allhomessudo dockutil --remove 'Numbers' --allhomessudo dockutil --remove 'Keynote' --allhomessudo dockutil --remove 'iBooks' --allhomessudo dockutil --add /Applications/Firefox.app --after 'Safari' --allhomessudo do

I've been trying to wrap my brain around what to do to get four .crt files from our SSL provider into the JSS. The file names are as follows: AddTrustExternalCARoot.crt COMODORSAAddTrustCA.crt COMODORSADomainValidationSecureServerCA.crt <our domain>.crt What's the easiest way to get these into the PCKS12 or JKS format? I've been Googling and it seems I'm probably missing something. For the CSR I needed to generate on the server, I have the .csr file along with a .jks file they had me generate (From these instructions: https://www.namecheap.com/support/knowledgebase/article.aspx/9422/0/tomcat-using-keytool) Anyone who can shed some light on what I can do? I'm out of options that I'm aware of.

Hello All, I have been attempting to implement a level one CIS Benchmark and I haven't figured it out just yet. Any advice would be great. Also, I have stumbled across a script that was made for BigSur has anyone adjusted this script to work for Monterey?https://github.com/gocardless/CIS-for-macOS-BigSur-CP  Thank you in advance !!

In Chrome ( 105.0.5195.127 64bit, windows) When I go to any system > history and click on policy, the page loads but does not show the history. If I do this in firefox or safari it loads fine 

Has anyone deployed UberAgent for macOS using JAMF Pro and willing to provide some steps they took to achieve this?https://uberagent.com/docs/uberagent/latest/installation/installing-uberagent/installing-the-macos-endpoint-agent/ 

I have some systems that are checking in with Jamf Pro but not checking in with Jamf Protect?  Any suggestions? 

Hello everyone,I was just wondering if there is a way to block HomeBrew and/or HomeBrew software/app install commands in JAMF Pro?there is a way to block apps, but not sure if there is one for terminal command installers.Let me know.Thank you

Hello, I am new here and I'm hoping someone can help me:)I have a group of 15 iPad Pros from our Art Department that have the Adobe Fresco App scoped to them. I'm getting "Remove App-Adobe Fresco" command at least every other day. The app is being deleted while students are working causing a loss of work.I have the app scoped via Smart Device Group. I also have them in a Configuration Profile to allow the app store, which also keeps installing and removing (the configuration profile) via command in Jamf. I cannot figure out why. I have reached out to support but we have not resolved the issue. There has to be a conflict somewhere, but there's nothing that I can see. I have plenty of licenses.Any insight would be much appreciated!

We have a script that is running with a trigger of login and some machines it runs without issues on, some we get the following when it fails:  The application cannot be opened for an unexpected reason, error=Error Domain=NSOSStatusErrorDomain Code=-10673 "(null)" UserInfo={_LSLine=3878, _LSFunction=_LSOpenStuffCallLocal} The script is pretty simple:#!/bin/sh CU=$( scutil <<< "show State:/Users/ConsoleUser" | awk '/Name :/ && ! /loginwindow/ { print $3 }' ) su "$CU" -c 'open https://company.sharepoint.com' Any help would be appreciated.  Thanks

Hi,Is there a setting somewhere that would stop the scroll wheel working after it's enrolled into Jamf Pro?It worked fine before it was enrolled.Mouse is A4tech X7.Monterey 12.6 intel Macbook on Jamf Pro.Thanks.

Hi,I have a strange issue with a Mac, it's enrolled in Jamf and I can add it into Policies or CP most of the time. But for a reason that I can explain, I can't add it to specific Profiles.When I'm filtering with name or serial number, the computer is not showing in the results… And TBH I really don't get it why since I can add it on other Policies or CP, even groups.  

There are a few iPhones that went missing a while back. We've given up trying to find them and decided to just send lock commands and move on.  If I send the lock command and it's in pending status, can I delete the device from JAMF and will it still execute if one day the device is picked up? Or is there a better way to make sure the lost device if found and wiped will not allow the person who found it use it at all and contact us?