Hey members,I have got some good resource like script to update mac OS in particular version on M1 Mac Patches and security updates) like 10.1.2.....10.3.5......10.4.1 etc. and (as I understand this script works in 3-4 stages 1. Free space check 2. Deferment notification 3. Run software update according to the users deferral) till postpone response it works fine till 2nd stage but after user postponing it at last day it seems doesn't enforces user to forcefully download and install updates.can somebody please help here?you can refer the script repo here Regards,Vinayak

Has anyone built a system extension profile specifically for the McAfee Client Proxy application? The only article they have is for kernel extensions back on 10.13 & 10.14. They also have a full disk access article, but none of the binaries listed are actually installed with the Client Proxy app. I've asked that our proxy team reach out to McAfee, but they have been less than useful so far.

Hi everyone,our corporate policy requires us to enable the Mac OS Firewall, doing so causes Airplay / Airdrop and other Services like Sonos to not work anymore, due to blocked incoming connections.I searched in this forum and online but couldn't find a solution yet.As of Monterey all the scripting possibilities are blocked, did anyone of you get it configured correctly and can share how he/she did it ?ThanksChris

Hi JamF Community Members, We are required to use Yubikey's as a MFA option. Ideally we'd like to push this configuration through Jamf Pro. Can anybody point me in right the direct or provide a link to the relevant documentation?

Currently, we're using the below script that works with renaming our machines and randomising the machine's name.#!/bin/bash num="$((RANDOM % 9999))" size=${#num} toadd="$((6 - $size))" for (( i=1; i<=toadd; i++)) do num=0$num done compname=PREFIX-$num if [ ${compname} ]; then sudo scutil --set HostName $compname sudo scutil --set ComputerName $compname sudo scutil --set LocalHostName $compname fi echo $compname Attempting to further improve this so machines do not end up with a duplicated name (no matter how small a chance!) there is. Is there a way to do an inventory check for all machine names on Jamf Pro and then either a) add those numbers to an exclusion list so they're never chosen, or b) re-roll the randomiser section, after checking, if the name already exists? How would the above be edited / shortened to make this a thing?What possible improvements could be made to the above as well? Any help is greatly appreciated :) !

Hi everyone,Has anyone had an issue where during a new computer setup and in the Enrolment Customisation window, after the Okta authentication, a Jamf Pro window pops up, asking the user to select a secure question and answer in order to create an account in Jamf Pro? Getting it for the first time today.Thanks!

...a complete newbie here, please be easy on meI plan to cache a PLIST and a PKG using a policy and use a script to trigger the installation (they have to be in the same directory when installing per the vendor). I am struggling with such a script which I figured would find somewhere in this forum but I could not. Can anyone help?I tried to execute the following command from the File and Processes section, installer -pkg /Applications/Open Client/installer_10.22.pkg -target /but I get this errorResult of command:installer: invalid option Roaming Usage: installer [-help] [-dominfo] [-volinfo] [-pkginfo] [-allowUntrusted] [-dumplog] [-verbose | -verboseR] [-vers] [-config] [-plist] [-file <pathToFile>] [-lang <ISOLanguageCode>] [-listiso] [-showChoicesXML] [-applyChoiceChangesXML <pathToFile>] [-showChoicesAfterApplyingChangesXML <pathtoFile>] -pkg <pathToPackage> -target <[DomainKey|MountPoint]> any help appreciated please, thanks

I have just written a blog post on how to automatically update Google Chrome using Jamf if anyone is interested. You can find my blog post here: https://lew.im/2017/03/auto-update-chrome/I have seen a few different methods posted here, but most require some admin intervention (uploading new packages, changing version numbers etc.) but this method is fully automated. Create the Extension Attribute, Smart Group and Policy and you're good to go! Every time Google release a new version of Chrome, this script will automatically grab it and install it on your Macs.

I need to manage some Linux Ubuntu laptops. How do I Install/Config for Linux OS laptops? Some insight/vids would be great.

Hi Everyone,I have some kindergarteners - 2nd graders that I would like to have auto-login to their MacBook Airs using Mojave. They all have the same username and password. These students are unable to fully read or type so I want to have each computer automatically login upon startup (as well as have the computer never prompt for a password if the computer goes to sleep or the lid is closed). Is there a script(s) that will allow me to do this that anyone is willing to share? I prefer not to use the configuration profiles section since this really limits the future flexibility of the machine for each individual user. Thank you in advance.

Calling all Jamfers (not sure if that's a word for all Jamf Nation members, but it is now haha),Ok, so like a lot of mac admins out there I've had my share of AD binding breaking in the past, but the information making the rounds regarding "bindpocalypse cve-2021-42287" seems pretty scary. I know that Apple has been encouraging mac admins to get away from AD Binding for a while now, but here's the thing...it has worked really well in terms of being easy and mostly reliable for enterprises, esp. those that like my situation (K-12 public school) have mac labs and not a whole lot of mobile devices (laptops). It has been an easy way to allow AD users to authenticate and mount their network home folders. There's NOMAD and Jamf Connect...I deployed NOMAD a year or so ago when we were having some binding and there for login issues. It was ok, but I didn't love it. The issue of what happens when users change their AD password on one NOMAD iMac what happens when they try to log into anothe

We are having a hard time printing PDF's this school year using Monterey on both Intel and Apple Silicon machines.  Most are stopping in the print queue with a "Stopped - 'Filter' failed" error.The only way we've found to get them to print most of the time is to do a Save As and then save as a JPEG.  This is occurring with both direct print queues as well as print queues we share from a Windows Server using generic PostScript drivers.  Most research (which doesn't show many recent discussions) shows to reinstall or update the drivers, which I've tried with our direct print queues, and also to try a right click>Reset Printing System and then reinstall printers, which I've also done with no change.  Because this is happening with both manufacturer drivers as well as the Generic PostScript driver, I'm guessing it's a macOS issue?  I did update one of my laptops from 12.4 to 12.5.1 in the process of troubleshooting and found it removed all of my print queues and

Hi,I have seen people talk about a plist that stores the server addresses in the go- connect to server - server address box.I can't seem to see a plist on any of my machines even if I add a server address manually.Any help appreciatedthanks

We a new to Jamf School this year 2022 - switching over from Securely - and right now i am starting to regret the switch. We were told during a sales call that this was the system and that all our answers could be found on Jamf Nation and or during support calls. Well lets say that JAMF nation offers NO help and when you post something NO one reply's.   I have support ticket open now for over a month and it is now at HIGH and the still NOTHING. I have teachers and administrations complaining of why we went to this system!! It shouldnt be this HARD.  Please tell me we are not the only school distict with this issue!!   I need some sort of Management contacts - I need resolutions ASAP so our teachers can actually Teach and use the applications as they were meant to be used. 

I know it's not a priority compared to other areas of Jamf but the Patch Management Definitions for OneDrive aren't aligned with the OneDrive release cycle (Insider, Production, Enterprise) which Microsoft are working to: Patch management is currently reporting 19.086.0502 as the current version however 19.103.0527 is currently deploying to the Production ring and virtually all my fleet is now reporting an unknown version in Patch Management. I know this will always be a moving target but it's something that really needs to improve as it's kinda awkward when management look at the Patch Reporting and ask why we don't know what version of an app clients are running.

Why is it that the only option this gives you is to purchase more licenses?  It would be so much better to have a link that brings you to the number of devices you have enrolled vs. the number you have exceeded by so you can actually see where the issue is?  Very frustrating.

I recently started a new job where the company had me install Jamf on a brand new MacBook and I am wondering what exactly hand logs, more precisely, if the websites I go to, how much time I spend on those, what softwares I download (if I download a VPN) and where I log in from

I see on Wacom's site that they have a fully compatible with Apple Silicon and Big Sur driver for the Cintiq displays (among others). So, that has to mean no more kernel extension, right? From their description of granting permissions during the install, I assume they are still not thinking about us higher education lab supporting folks. Since there is no mention anywhere of them supplying a PPPC file to support their hardware, has anyone already generated a functioning one for Big Sur? I'm trying to think ahead to this summer's builds.

We will start with a grade to use students shared ipads 1:1 and we have doubs about the initial configuration: What recommended, shared ipad profile or normal profile with a lot of capabilities? SharedShared Ipads could be a lof of restrictions when the ipad will be personal for all the course NormalWithout shared option, how can we prevent students to use their personal icloud account to lock school ipads and force them to use only the Apple ID School managed? Thank you a lot.

Looking for a way to prevent a user from deleting files when put in the trash. Is there a script (or such…) to lock the trash so that files could not be placed in or preventing them from selecting Empty Trash?

We have a script we add to to Teams, Edge and Office when updating that removes /Library/Application\\ Support/Microsoft/MAU2.0 and /Library/LaunchAgents/com.microsoft.update.agent.plist. For Edge and Teams, the apps are still auto-updating by themselves. We want to be able to control the updates.  Any assistance would be great. Thanks

Hi all,I have recently been brought on to my organization and am working with Jamf Pro for the first time. I've tried coming through the posts to look for topics that would help clarify things for me on issues that we're having, but I just cannot seem to find the answer.Problem:All of our new MacOS devices with 12.3 or newer do not automatically launch DEPNotify, older MacOS devices such as 12.2 will automatically launch the package and begin the configuration process. From what I have read, there may need to be some verbiage changed in the scripting process or potentially another package? I could use some help getting pointed in the right direction. Thanks for any help and feedback on this.

I wanted to share my configuration XML for those wanting to rollout zoom to IOS and lock it down. I am working through Zoom's documentation here:Using MDM to configure Zoom on iOS The following is the configuration I used: <dict> <key>SetSSOURL</key> <string>yourdomain</string> <key>SetEmailDomainsRestrictedToLogin</key> <string>yourdomain.org</string> <key>ForceLoginWithSSO</key> <integer>1</integer> </dict>

I have a CSV with a list of all the departments and buildings. Is there an easy way to bulk import it into Jamf? I looked at MUT, but don't see how to do it with that. I think it can be done with the API as well, but if anyone has a working solution it would be helpful. Thank you

Have never been able to figure this one out. Configuring a policy to add Adobe Illustrator to a dock will always fail and show a "?" All of the other Adobe CC apps seems to work fine. Adobe Illustrator CC 2018 file:///Applications/Adobe%20Illustrator%20CC%202018.app/ I have a theory that the OS cannot translate the upper case"I" double lower case Ls ("ll") properly. Any other theories?