IT Specialist, 25 years - I have taken a keen interest in the Apple side of this since I’ve taken this role. We have a fleet of iOS devices we manage through jamf pro - anyway I am looking for a career in MAC/jamf/iOS management/administration. Is their any path recommendations, I’ll be taking jamf 100 this year and later jamf 200.

Hey, so we have the following scenario:We had to push a wipe command and we confirmed the wipe appeared as complete on our end. However, the user has not input the wipe code and they really need to recover information off the computer. If the device is not yet wiped and we can still push commands remotely via our RMM. Will removing JAMF off the device cancel it out or will still require the wipe to go through? Thanks in advance!

Hi all,Curious if anyone would know how to auto-fill the "Email Address" field under the "User and Location" tab with the data from an extension attribute we have?For example if the extension attribute is pulling an email address from a computer XXXX.XXXX@somecompany.com, can I then have that data plopped into the "Email Address" field under the "User and Location" tab? Or is this simply not possible?Thanks in advance!

When enrolling certain devices, they're becoming caffeinated and I have no idea what is causing it. Obviously, it's preventing our devices from ever going to sleep or having their screensaver kick on. I have gone through every script and app install (including their pre and post install scripts) that we deploy and have not been able to come across a single caffeination command. Anyone know how to tell exactly what is causing the caffeination? I have the command to fix it, but I want to prevent it from happening in the first place.

Good Afternoon,I've looked under Config Profiles > Restrictions, but can't find it.  Is there a way to disable AppleID Sign in in settings?  We don't use managed apple ID's and don't want the students logging on to the devices.Thanks for your help

Hi All, Is it possible to call a script with a network state change locally. I have been looking for a .plist to do this, but I cannot find one. Jared

creating a policy for carbon black sensor. you need to modify the script to give it a path the the package. "CBD_INSTALLER="/Path/Where/PreinstallScript/Downloads/Installer.pkg" Jamf is running on a windows server and i tried the location "\\\\vsrvjamf\\jamfshare\\Packages\\CBCloud3.7.1.12 Install.pkg" and "D:\\jamfshare\\Packages\\CBCloud3.7.1.12 Install.pkg" but those didnt work. what should i put there?

I am experiencing an issue where users are able to disable filevault even though the "User Adjustment of FileVault options" is set to "Prevent FileVault from being disabled".  But at times users are then given the ability to disable filevault randomly until I distribute the profile again. I also have the setting "Require user to unlock FileVault After hibernation" set to disable in this profile. Could that setting be causing this issue? 

 Hello!  I want to start off saying I am new to the school world of IT. Been doing years of IT for dentists, and always for profit so its a change of pace for sure. So I took a new job and I have been tasked with moving everything over from eight mac mini servers and configurator / apple school manager information to Jamf. The outgoing IT person is not going to help, and it looks like whatever he setup stopped working over the summer, and wont be able to work since its " the old way of doing this" and likely no longer supported. We want to take away the eight mdm servers and just use Jamf.    I followed the JAMF setup assistant and things seemed to go well, I had to create eight tokens and imported all of that. Which brings me to my first question,  Apple school manager says we have 552 total apps but Jamf says 978 when i look in inventory, and the dashboard says 1038 apps synced.  I have no idea how Jamf is getting those numbe

Hi folks!I've posted a gist on GitHub that includes two regexes you can use to identify Monterey compatible Macs in your organization.It has two slightly different strings. You can use either regex in Jamf Pro in Advanced Computer Searches or Smart Computer Groups. Add the Model Identifier criterion to a new search or smart group, set the operator to "matches regex" and paste in one of the two regex strings.Which regex string should you use?The first string matches Mac models that are available today. It's more exact but won't match any new Mac models without updating it as new models are released. The second is more future-proof and will match future Mac models. However, when Apple releases the next major macOS versi

Hi It looks like we need to deploy/upgrade our base sensor for Crowdstrike Falcon. It seems the previous script does not work and the sensor requires more permissions on Big Sur. Any help/insight would be greatly appreciated.

Hi all, Please can someone provide an example using the Jamf Pro API to change a drop down EA on a computer record?Im currently using this Solved: Updating Pop-Up Extension Attribute Value via API - Jamf Nation Community - 87213 for the classic api. Thanks

Hello All, Posted something about extensions a couple weeks ago. This request is specifically for Google Chrome extensions. Does anyone have a working EA script that can be used to generate a report on installed Chrome extensions? Sort of like from this request a couple years ago.- This one currently doesn't work. Tried all the different variations listed on this post.

Scenario - If user already has an app "xyz newer version" and we push app from jamf "xyz older version" then the app is getting downgraded. Instead can we have rules in Jamf or script which does not install app if it already exists or checks for version before installing ? 

Hey folks,    I am sort of new to Jamf Pro and I am having a bit of an issue getting the ESET client on our Mac's   Using Jamf Pro the agent goes on without issue and it seems like the needed extensions are dealt with as well but it is not adding the client or showing up on my Eset Protect on premise server console (v8.1)   I have been working with ESET for a couple of years but I am just a few months into Jamf Pro.   Anyone else have any suggestions.   I set things up using eset kb7324 which talks about eset and Jamf Pro.   Also these are M1 macs so I have rosetta turned on and EEA in the script to add the antivirus.   When this did not work I tried to push the client as a policy using the .dmg but that did not work and it seems like to even do that I really need a .pkg file.   Any help would be greatly appreciated.

Creates a LaunchDaemon and a self-destructing Bash script to run a recon at next Reboot, after confirming your Jamf Pro server is availableBackgroundWith surprising frequency, updating a computer’s inventory with the Jamf Pro server the next time a computer reboots can be quite handy. For example:After upgrading the OS via erase-installAfter completing Setup Your MacAfter running Office Reset policiesAfter FileVault-related policiesThe self-destructing script will create a LaunchDaemon and

HiI'm trying to get an email notification when a specific application is not running on the device.For that purpose, I have a Smart Group for the devices where the process is not running and sends an email on each membership change. The annoyance is that on the user login after boot the app is not detected, generating a report because the device was added to the group, but in the minute after the application is detected and the device removed, generating a new message.I'm trying to reduce these unnecessary reports by introducing a delay or a condition on the smart group.My initial idea was to place a condition like "Last Inventory Update" or "Last Check-in" more than a few minutes ago, but the rule builder only works with date and days, not minutes.How would you accomplish the objective? [receiving email notifications on apps that are not running but with a small delay]

Happy Monday everyone, I'm currently going through the process of implementing the CISCAT benchmarks for Security, you can take a look at some of the features here if you are unfamiliar. I am trying to make it so that I can deploy SecureKeyboardEntry to the terminal. The best I could come up with is making a script to edit the PLIST and then pushing that script via policy. defaults write /Users/$USER/Library/Preferences/com.apple.Terminal.plist SecureKeyboardEntry 1 The bit seems to work in having the setting checked off, however it also seems to remove whatever terminal customizations the user has. Anyone have any recommendations for implementing this?

Hey All!I've tried with 0 success to get the screensaver to load up on the login window.   (set to 1min to speed up testing)I've tried all the Screensavers, but none will load over the login window. However, if a user is logged in, no problem, the screensaver comes right up. It's not the biggest problem, but to save my screens from burning, I set a power setting to put the display to sleep instead.  Students think the Macs are off instead of sitting down to use them and drift off to use a PC.  We run lots of metrics and device use often defines device purchasing. Any suggestions or maybe an upcoming patch/update?  I've tried some of the older scripting madness I used to use to overwrite pref/plists etc but those no longer work (really haven't worked well since Catalina).  I'm just stuck. &#1

i have a computer extension attribute we use to set a computer's Role. its a drop down list. im trying to get a script to update that EA value in bulk off a .csv file of serial numbers.im hitting a wall. i get no errors and it looks like it all runs fine, but it just wont update the EA value. i have the script running is a self service policy. i have pasted my script below. what do i have wrong?also most of this is cut and paste from many other sources on the internet. mostly jamfnation #!/bin/bash exec > /Library/pthsd/output.txt 2>&1 YourAPIUsername="$4" YourAPIPassword="$5" # This is your unix line ending formated csv file of serial Numbers # First Column is labeled serial INPUT=$(/usr/bin/osascript << EOF tell application "System Events" try set INPUT to text returned of (display dialog "Enter the path to the .csv file with serial numbers" buttons {"Cancel", "Enter"} default button 2 default answer "") end try end tell EOF)

Not sure if anyone has run into this slight issue... when I erase a new M1 iMac using Erase all content and settings, and then enrol a managed device, when the enrolment completes I run additional installations and configuration via DEPNotify. DEPNotify does not kick in when the computer is wiped using Erase all content and settings, however if I use Recovery and wipe it, everything works as expected... 

We have a big problem with our Big Sur machines that can't renew/generate a new AD Certificate.Big sur machines receive correctly the initial certificate from AD during enrollment, ONLY the renewal feature does not work.We have tried both on the local network and over VPN, same result. So it's not a VPN issue.Works fine with our Catalina machines though. All our machines are bound to AD. We are not using ADCS Connector.Running Jamf Pro 10.26.1 on prem on a Windows server. The AD-Cert is valid for 365 days and it set to renew 14 days before expire date. For troubleshooting purposes, we created a new certificate template with 7 days of validation and automatic renewal is set to 5 days before expire date.Unfortunately, we get the same problem as before. Works only on the Catalina machines. We have generated a sysdiagnose file from a catalina and big sur machine and sent it to the jamf support. Without any luck so far.

I've had an issue crop up today where devices (specifically iOS devices) are not getting VPP licenses assigned to them when an app is in scope. I've confirmed we have thousands of extra licenses available but each device is stuck in this state:Pending - All licenses are in use or the license is not assigned yetWhen checking the Volume Purchasing logs this message is repeated endlessly:[ERROR] [ralPool-309] [VppCommService ] - Error managing licenses. ErrorNumber: 9600 , ErrorMessage:Either an associate or a disassociate array is required.I've got a ticket in with Jamf, but I'm a newer Jamf administrator and wasn't sure if this is a Jamf/Apple problem or something I might be able to fix. 

Hi when I install the company portal on my iPhone it gets stuck at download management profile, which I understand.So how do I get my iOS devices compliant with (or maybe even without) the company portal thnx a bunch

Hello!I have Jamf connect set up on a Mac and when the display is locked and waiting for a password after so many minutes of inactivity, the only options I see are to enter the password or "cancel" which puts the display to sleep.I'd like to get it configured so that when the display is locked after inactivity that there be a way to switch to another user so if someone walks away and the screen gets locked, another user can still log into their account (without force powering off the iMac). Any ideas?