Hello, I need to deploy about 8 fonts to some machines across our fleet. I didn't see anything specific to fonts in the Admin Guide. I do see they can be installed with Profiles, but it seems that a package via composer w/ the fonts deployed to /Library/Fonts/ seems the easiest way to get this done. Licensing on these fonts is taken care of, are there any gotchas here w/ deploying fonts? Is there anything more to this, than a simple package dumping them in /Library/Fonts/? Thanks for the help!

Solved: Use configuration profiles. I need to make sure all users have access to the font used in our branding for printing documents like invoices from FileMaker. I need to distribute this without user interaction. So far I have written this script. It downloads the font to ~/Library/Fonts/. It works, but the font is not available. I can't ask these users to work with Font Book. #!/bin/bash cd ~/Library/Fonts file="./sampleFont.otf" if [ ! -f "$file" ] then curl -O https://someHostName/$file fi

I'm starting to see an issue with our Mac's (bond to AD) will lose their connection to AD. Here are the symptoms that I notice when I start having odd issues:My wireless will not connect. (We use Computer Authentication, which requires your Mac to be bond to our AD) My Domain admin account will no longer be able to "unlock" preferences or do any admin task.If I try to use dscl to browse AD, I'm able to do a "ls" at the top level and see "/Active Directory" and then cd (change directory) to /Active Directory. Next I do "ls" again and see our domain LPCDOMAIN1, but I can't change directory to it. It will give me an error message. (sorry I don't have that wrote down) Troubleshooting step:When I check the "Login Options" under Uesr&Groups, it show that I'm joined to AD and will list my domain name and the green light.I'm able to find my computer name in AD, when searchi

Hello people!While testing first macOS enrollment to Jamf pro with jamf connect I  encountered an error.I've created a PreStage enrollment and pushed 1 Configuration profile.After going threw basic step(like connecting to wifi) then the windows with  Remote Management happened.After pressing continue,a small  blank pop up windows shows up  with this error at the bottom of the page: “Error <kCFErrorDomainCFNetwork:303>”I've tried to google it and that was the only thing that showed up:Jamf Enrollment Customization – kCFErrorDomainCFNetwork:303 – macmuleBut still,I don't know where is the issue comi

Just opened a ticket about this but it's kind of a nightmare since I was forced into self quarantine unexpectedly at the beginning of the week so I only have a fresh laptop and no test machines and my users are also all remote.Anyone else experiencing this or have an idea of what I could try to fix it?I'm also on a hosted JSS server nothing is on prem. I have had several complaints today about Self Service prompting people to install an update let's say for Zoom...they open Self Service to install the update and it either fails or says complete but then an hour later they get another prompt from Self Service asking them to install the update.I checked logs and it looks like this is effecting all of my current patches.EVERY patch policy pushed within the last couple of days has a status of pending with multiple attempts (some over 10)with a status of:Attempt: 5No ActionsAttempt: 4Executing Patch Policy Mozilla FirefoxDown

Hello,I am getting our DEP workflow resolved and I think I finally have it where the system will install all of the policies necessary at the initial prep. However, now I am noticing a different error. The Mac Inventory never uploads to the JSS. When I look at the Mac entry all of the details are empty: 0 Applications, 0 Plugins, no data for any EA. Oddly it does have some correct data: IP Address, Profiles, Certificates, Services. If I open Terminal and run a jamf recon, everything runs through until the "Submitting data". I then get "Unknown Error - An unknown error has occurred". We have a Policy in Self Service to run the Update Inventory, and when I run that it shows complete, but still no data is sent to the JSS. I can install any of the other Policies in Self Service with no problems. It's just the Inventory that will not upload. So, what to I check next to see why this isn't uploading? Thank, Tim

 Hey Everyone, hoping someone can help. we're getting all kinds of crazy errors in JAMF when trying to remove a dock item using Dockutil. Everything from root access to dock item not found, to argument not supported. It can't be this hard, is it? Trying to do this in Monterey on the M1 MBPs. Here's what i've been trying to push out. A simple script. Running it locally works. Am i doing something wrong here:  #!/bin/zsh loggedInUser=$( scutil <<< "show State:/Users/ConsoleUser" | awk '/Name :/ && ! /loginwindow/ { print $3 }' ) dockutilbin="/usr/local/bin/dockutil" loggedInUserPlist="/Users/$loggedInUser/Library/Preferences/com.apple.dock.plist" $dockutilbin --remove file:///Applications/BarcodeForVerification2021/Barcode\\ x14.app --restart $loggedInUserPlist exit 0    

We have iPad minis for a series of public meetings starting soon. They need to display a large PDF file for folks to browse. How easy would it be to create a single app mode "kiosk mode" that locks the app in JAMF Pro?  

Why this is important:Our Macs use Jamf Connect Sync & sync Kerberos tickets to obtain the expiration date of their password. Now that everyone is perma. working from home, the computers are never touching the network and not updating their Kerb tickets and therefore not updating the expiration of the password resulting in poor behavior such as continuing on the current countdown of days left till expiration even after a PW is changed or worse, after it expires, it starts to count up in negative days (i.e. -10 days) since their previous password expired. We do not want to remove this functionality all together as there is about half the workforce who will still VPN into our CORP domain and are correctly retrieving tickets and we want that functionality to exist either way as it's a vital piece of information with as short as our PW policy is. What I wanted to accomplishHave a script that runs on password change that sets the

Help your users easily provide Microsoft Support their Office configuration files while maintaining user privacyBackgroundAfter implementing Microsoft’s recommended macro security in Office for Mac settings via a Configuration Profile, then having affected users run Paul’s Office-Reset packages via Jamf Pro’s Self Service, some users are still observing the dreaded Run-time error 32815 triple-prompts for Visual Basic for Applications when opening blank documents in Word, Excel or PowerPoint.

Hello There, I am wondering if there is anyone using Cisco VPN Any-connect 4.9 in macOS Big sur Beta? I installed it but it is giving me error right from start and I can't even launch it. Please see the attached screenshot for the error. Any help appreciated. Thanks.

Can anyone help me with the script for removing SEP in JAMF? My script skills are not that good. I'm more of a copy and paste guy. This link seems to have the best info.https://knowledge.broadcom.com/external/article?legacyId=TECH103489 I have downloaded the SymantecRemovalTool modification zip provided at the bottom of the page. I then view the command via Xcode copy and paste it into a new script create in Jamf. Next, I create a Policy including the script. The policy fails with a script exit code:4 The below step I don't follow. Is anyone willing to share their Policy? (Pics of Policy would be awesome so I know what is meant by a dummy script) **Symantec provides support for SymantecRemovalTool/RemoveSymantecMacFiles only when running them locally; it is the customer's responsibility to integrate SymantecRemovalTool with Apple Remote Desktop or other remote deployment tools. Both of these tools require no a

Every time I try and play an embedded YouTube video on my powerpoint it keeps saying "This experience is unavailable, Your organization's admin has turned off the service required to use this experience." I have looked through all of our configuration profiles and policies and see nothing related to restrictions on the powerpoint application. Could it be a problem with the package itself that we have on the Jamf Cloud Server or could it be a setting in Security & Privacy?

Hello, I'm having a weird network account issue. When I bind to our active directory server and have "create mobile account" selected network accounts will not work. However, when I bind to our active servers without "create mobile account" selected it works just fine.  This happens both when I use our jamf policy or when I just manually bind the computer right from the mac. OS is 12.4

Someone accidentally scoped an expensive app that we had 10 licenses for to 4000 iPads. They reversed the scope almost immediately, but now we have a pending command on 3990 iPads that's never going to go through. I have some experience with the API and shell scripting, so I thought I could grab a list of commands' UUIDs and delete the ones that meet my criteria, but I don't see a way to flush commands with any precision. Under commandflush, it looks like all I can do is delete all the pending commands on a particular mobile device, which for various reasons we don't want to do — just this one command. Any ideas? 

First a bit of background:We are a higher-ed institution that has a small cohort of international students.We deploy a purchased book from ASM to all incoming freshmen that our board wants them to have when they leave (we allow personal Apple IDs on our devices since they pay for them and they are theirs to keep, so when the VPP invite happens, their personal Apple IDs are linked to their Jamf user account on the backend)In previous years we used VPP codes and registration email invites; it was troublesome at times, to say the least.This year, to make it easier, we are deploying through Self Service and VPP registration invites through notifications. For 90% of our users, the process works perfectly if they followed directions. We already know the issues that arise with what region the Apple ID was created in, and we know the fix for this - US based Apple ID, or we give them access to the library's copy (we only have 10 concur

Hello Jamf Nation, I am excited to introduce the Jamf 100 training course. The Jamf 100 is an online, self-paced course that combines video lecture from Jamf instructors with direct links to relevant documentation and resources alongside practical examples. The Jamf 100 serves as a foundational component to our core Jamf courses. We think this course is a fantastic building block for anyone beginning their journey as an Apple device administrator or advancing down that path and bringing Jamf products into the fold. We believe this course material can serve many different functions; an introduction into iOS and MacOS use and management for those new to the Jamf Nation, preparation for future Jamf course enrollments or a tool to help already established organizations familiarize more staff with the tools already in place. The 100 course is broken down into six sections. Sections two and three focus on core competencies of iOS with an eye to it’s relationship

I have a Policy set to run first after Macs enroll in JamfPro that only contains the following in "Files and Processes"softwareupdate --install-rosetta --agree-to-licenseAnd for the most part it works great. The problem is that I have seen a lot of M1 Macs unable to install some packages because they are missing Rosetta. When I check the Policy log for installing Rosetta, the command does run, but it seems to successfully fail. There appears to be an issue with getting the Rosetta installer from Apple at that particular moment the command was run. Usually there will be a line that says "Rosetta is unavailable" or other messages about the server isn't available. I've been trying to find a fleshed-out script that can check for errors while executing that one-liner and tell Jamf that it failed so it shows as an actual failure. Does anyone have a script that takes these server-side failures into account?I've already tried obtaining the Rosetta pkg via instruct

Hi We are running into issues installing app store apps and I think it's because our VPP server token has been revoked. I believe this token was set up in an old employee's account and I can't find where to get a new token to upload. I have checked our abm account and can't find it anywhere. I read on a Jamf post that VPP is no longer supported after January 2021? Is this the case? How can I go about installing app store apps with Jamf pro if so?

hey all, I have been tasked with Blocking all extensions in Safari, sans the approved list. can anyone point me in the right direction? Thanks

Hey there,we're trying to set some advanced settings in Microsoft Outlook. We want to tick the red outlined box and enable SSL.Right now we're using this script, which work's, but throws an error. I'm not really into scripting but i tried a little bit on my own and came out with the following:osascript <<END tell application "Microsoft Outlook" set ldap server of exchange account 1 to "XXX" set ldap use ssl of exchange account 1 to yes set ldap port of exchange account 1 to 6666 end tell END It throws no error, but it won't enable SSL either. I think it's because I don't define the default exchange account and I don't really know how to do it. Shouldn't it be just "exchan

We are using Jamf Pro, without Jamf Connect.Now we are looking to take away admin rights from our users (insert evil laugh here) and let them request temporary admin access via Self Service.But is it possible to migrate their current accounts to a standard account or is that not possible and do we have to reinstall those Macs?

Greetings all,It is documented in the Jamf Connect manual that Jamf Connect will lose its control over the login process after a system upgrade.  It shows issuing the authchanger command to re-establish the control.  We don't have control (at this point) over when people run system upgrades, so we would like to automate this process so that any time that linkage to Jamf Connect is broken it gets reconnected.  Does anyone already have this process set up and working?  It was suggested to use a script in Self Service, but we do not want to leave this step to the tender mercies of our end users.  We want this to be as unobtrusive (invisible) and bullet-proof as possible.  We're looking at the authchanger -print output and grepping for pertinent information, but we are hoping that somebody has run into this already. Thank you for any suggestions!

Never mind, issue solved.

Hi guys,We are currently in the process of upgrading our Mac's to Monterey. Unfortunately after completing the first time setup for our Mac's, some of our macs are still attempting to retry the first time setup when we return the next day or sometimes even after a few hours. We are prominently upgrading through software updates. My colleague believes that it could perhaps be the Mac's not being able to cache the *apple.complete* files which are read upon boot. Please could someone help. Many Thanks, Alexander