You asked, and we’re thrilled to deliver! Tech Thoughts, Jamf Nation’s own technical blog, is now live! Jamf’s Community team is so excited to offer this space for increased knowledge sharing and problem solving!  Today we’re starting with two blogs: one from a Jamf technical expert (Thanks, @talkingmoose ), and one from us, your Community team. Plus we'll be sharing one from a fellow Jamf Nation community member on Wednesday! We hope you enjoy these pieces and consider contributing your own content in the future.  Now head on over to Tech Thoughts to check out the goodness! And thank you for all of your future contributions. Together, we’ll make Tech Thoughts a space you can’t live without. And we’re looking forward to it! 

Hi all,To appease our auditors, we need to add a custom text field to all our Laptop entries.  It simply needs to say "Data classification level: C2".I've tried to do it via Extension Attributes, but it won't print out what I need.  (I'm sure I'm not using EA correctly) Has anyone been successful in just adding a custom text anywhere?   Thanks in advance!  

I installed the beta of the new macOS Ventura to test things before Apple starts shipping laptops with it in the fall. I am running into errors when trying to register with InTune (surprise surprise). I get the initial Authentication for JamfAAD pop up with the instructions, that immediately disappears and I get the Registration with Intune failed error box.Thoughts?

I think this is a Catalina issue as I don't recall noticing it in Mojave. I just installed the recently released supplemental update for Catalina and have noticed that all the log files in /Library/Logs have been removed after the upgrade. I took a snapshot on a VM and ran the upgrade a few more times just to confirm this is happening - it is. Before the upgrade I have a folder /Library/Logs/MyComputerName. In this folder is where I put custom logs, including the log file for our update script. That entire folder is gone, and most of the log files under other folders in /Library/Logs are gone as well (though some empty folders still exist). I read that Catalina has moved system files to a read-only operating system. I'm wondering if that could be part of this problem. Does anyone know if this is the expected behavior? Is there a better/recommended place to store log files that will survive macOS updates?

The time zone on my cloud hosted JSS is wrong. I know this is a user specific setting in Account Preferences but I am finding it difficult to find my time zone. I have already done this once but when Jamf updated it appears my time zone was reset. When I try to change it I select "English" and "America" but then I must choose from a list of names of cities form all over the world. None of the American cities I recognize are in my timezone. I am a simple minded American who does not have all of the cities of the world memorized as to what country and state they belong. Why can't Jamf put the actual name of the time zone to choose from? For example: "Central", "Eastern" or "Mountain"

I want to add a couple of internal apps to some Freelancers phones but I'm in a bit of a loop trying to create a Personal Device Profile. When I click 'Devices' > 'Personal Device Profiles' I get greeted with 'Configure user-initiated enrollment for mobile devices to continue'. So I go into 'Global Settings' > User-Initiated Enrollment', enable iOS for 'personally owned devices', then go back to Personal Device Profiles and it says 'CANNOT ADD NEW PERSONAL DEVICE PROFILES - When User Enrollment is enabled, you can only delete personal device profiles.'Am I missing something really obvious here? Feel like I'm just going in circles and not getting anywhere!

I'm new to Jamf pro and have experienced issues with pushing out apps. Under the device in management history it shows failed commands and the error appears as 'Please log in to your iTunes Store account'. Any suggestions as to what this could be.

Hello,I am currently working in a school that uses 900+ iPads and 300+ MacBooks and wanted to ask if anyone has used or is currently using Zero-Touch Deployment in their institutions? Every Academic year, we collect all the devices for wiping and reinstalling, which can be tedious with that many devices.I am fairly new to Jamf and would like some suggestions that may help ease in setting up devices through Jamf.Thanks!

Hello all.  I have a set of apple tv's that have been working fine without issue.  All of a sudden one of them decided to not advertise on airplay unless it has the configuration profile removed.  Any ideas?  I have wiped the device, updated, restarted.  When I exclude it from our scope it works fine.  No other apple tv's in the configuration profile scope are having any issues.

Background: As many of you may be aware, the Screen Recording option can only be enable by a physical user on a Mac. To manage this limitation set by Apple, I have created this workflow to prompt users to enable the Screen Recording option for the required App (Currently set to Slack, but can be easily modified). You can check out how I similarly addressed the Camera and Microphone issue here: Automatically Reset Teams Camera and Microphone for User Solution: I created this Script to check if an Application's Screen Recording permission has been set to enabled in the TCC Security and Privacy. If the TCC option is disabled, it will open System Preferences > Security & Privacy > Screen Recording and prompt the user to enable the App Jamf Workflow Extension AttributeName: Disabled System TCC ValuesScript: Disabled_System_TCC_Values_EA.sh #!/bin/bash #Extension Attribute reports disabled system level TCC values #Shaquir Tannis 5-26-2020 #Report Machine's disabled TCC valu

I just created a group for our iPads called D1-Smart, however, I noticed that these iPads appeared in our as Missing Devices in our Smart Device Group.  Why?

I've noticed the only thing that helps is to restart it and it gets back to normal for a day or so before spiking again. Mysql.exe is the culprit and when I had a look at the server logs while it was happening I found - 2022-09-01 12:18:32,527 [ERROR] [Thread-822 ] [GetBootstrapToken ] - Computer ComputerShell [ID=131, Name=ELM069] requested Bootstrap token but no token was found2022-09-01 12:20:45,479 [INFO ] [duledPool-0] [rentProfileCleanupMonitor] - Running parent profile cleanup.2022-09-01 12:20:46,156 [INFO ] [duledPool-4] [CsaTokenServiceImpl ] - (Token does not exist) No CSA enablement auth code found, so no additional processing is required2022-09-01 12:23:03,562 [ERROR] [Thread-827 ] [GetBootstrapToken ] - Computer ComputerShell [ID=12, Name=eggs’s iMac (23)] requested Bootstrap token but no token was found2022-09-01 12:24:17,443 [ERROR] [Thread-827 ] [GetBootstrapToken ] - Computer ComputerShell [ID=82, Name=EOMB010] requested Bootstrap token but no token was found2022-

Hi all, Novice Jamf user here. I have a configuration of 18 iPads we'll call "Teaching" iPads. As far as I can tell, I'm not using anything that doesn't already come in the box, so to speak, so I have a policy that configures a specific wireless connection and then pushes out five or 6 apps that we purchased through Apple School Manager, which is connected to our instance of Jamf.All the apps appear to deploy, but I keep getting this pop-up message on the screen that tells me to sign into iTunes to manage/install apps but we're not using iTunes on these devices and we don't have AppleID accounts associated with these devices, as they are being managed centrally by our organization.The only clue I get is when I pull up a specific device and look at the management history and see the command "Install App - Self Service" that is either at pending or can't install because the device was busy and I have no idea what this means.Any idea what I might be missing?

Can anyone please clarify what permissions are required for the LDAP Server Account?What functions does it perform aside from user/group lookup and authentication?TIA

Hi All i just wanted to know how people are managing turning on the firewall on your machines as i have 60 machines that i need to turn the firewall on but dont know the best way around this

Has anyone experienced any issues resetting (AD) passwords on a Mac? In AD I select an account and set, “User must change password at next login”, I attempt to login as that user and am prompted to change the password, but all password entered are rejected with: Your password does not meet the requirements of the server.” The password policy is set to 8 characters and that’s it. This same user will have no issue resetting in Windows. I will also receive the same error when attempting to reset from Users & Groups in System Preferences. I have seen this many times in the past so I don’t believe it to be strictly related to Mavericks, Yosemite or in this test case, Sierra. What’s strange is that some users will reset just fine. It would be great if I could resolve this as all of our student passwords are reset come deployment, requiring them to change it when they’re picked up. When we run into this problem we usually just change it in AD manually for them.

Has anyone been this stuck with a locked computer? I locked a computer remotely using JSS and creating the 6 digit code. The computer successfully locked, the student then tried to guess what the code is and got it wrong. He then brought it to me with the screen displaying "Your computer is disabled. Try again in 60 minutes" Once that time runs out it just shows "Wrong passcode. Try Again" without ever giving me the option to enter a code. I have tried booting into recovery mode and doing an internet recovery. Both times it just boots to the same screen. I took it to the Apple store and they claimed they have never seen this screen before and could not help. I then spoke with my Casper rep. They had me do a PRAM reset and a SMC reset, both times it booted to the same screen. She then told me to call Apple Support and they had me try everything listed above again. Apple Care sent this issue to the engineers and I am waiting for a response. I am looking for any sug

We have a couple of mobile carts of MacBooks we occasionally loan out for testing or staff development days. Users will often leave online accounts signed in or have documents left in the folders. I have been seeking a way to clean up the devices without having to personally check for signed in Google accounts or downloaded files.The first step was to enable Guest User. Upon logging out, all files are erased. This has taken care of the biggest hurdle. Then, I have been looking for a way to automate it. There are bound to be MacBooks that have not been logged out of, which would mean they would still have to be checked upon return.I have independently tried the "Log out users after a certain time of inactivity" under Login Window and a script to automatically shutdown. Neither are suitable for this scenario, as I am using Guest User and these are MacBooks. Guest User has no log out timer and closing the MacBook will make scripting difficult.These carts will not be sent out often, so log

Is there a way for me to use Composer to make a package that I can put in Self Service that will install the application for only the user who is logged in/goes to Self Service and installs the software?Specifically I'm looking to allow users to install Zoom and install it only for them.  Zoom has an option to do this if the users download the installer from the Zoom website and do the right clicks to get to the "Install for me only" option.  I'm trying to make it easier for my users (and the people at the help desk who have to talk users through this on the phone).Thanks.

hey there,it is planned that various computers that are currently managed in a separate jamf now will be transferred to our jamf pro. so this is a move of various macbooks into our existing system.is there a best practice here? maybe even instructions? what do we have to think about in general? how does it work with the tokens / certificates? do the devices have to be set up again for this?i know my way around jamf very well by now, but this is a sore point, unfortunately, and will certainly come up soon.thank you!

Hi,I'm using jamf pro. I need to disable all safari because the only browser we manage in our company is Chrome.iv tried to search in configuration profiles - restrictions - application - but there is no reference to safari except Safari autofill.what do you guys recommend me to do?thanks :)

You read that right! Jamf’s Community team is thrilled to bring a technical blog, Tech Thoughts, to Jamf Nation on September 19th!  Over the years, you’ve asked for more technical content and resources. You wanted a space to provide longer posts that share your workflows, scripts and all-around brilliant solutions to Apple-ecosystem management problems. And you wanted to hear more from Jamf’s technical experts. Well, friends, it’s coming! Tech Thoughts will be a space for you to learn timely, technical product information from our own in-house experts. And it will give you a space to share your own expertise with the broader Jamf Nation community.  So stay tuned for Tech Thoughts to launch soon! Thanks for all you do for Jamf, and each other. We’re proud to continuously support you, our great Jamf Nation!   - Jamf’s Community team ( @JeniA , @CalleyO , @LysetteB , @phoebes  & @JustinV )

When will Jamf add this to the Jamf console? See link from Microsoft about this.MS Link

We are looking to map 2 network drives based off of the AD user that is currently logged in. We used to manage these iMacs using Profile Manager and in the Login Items payload there was a section called Authenticated Network Mounts but Jamf Pro does not have this. It seems simple but I'm not familiar with custom scripts/how to implement them using Jamf Pro. Any help would be greatly appreciated!

Anyone had any luck finding an MFA product that is deployable to devices, works with local admin accounts, and works with the new M1 processors? Duo won't work with M1. Yubikeys are not deployable.