Leverages swiftDialog v1.11.2 (or later) and Jamf Pro Policy Custom Events to allow end-users to self-complete Mac setup post-enrollment via Jamf Pro's Self Service.Continue reading …

Hello all,Posting here to possibly get some help on an issue we’ve been running into using Duo Mobile and macOS.We are deploying Duo through Jamf Pro and we have no issues using the automated enrollment for Mac users that are in office. Our issue is with the Mac users that work remote. As i understand it by default macOS will not allow you to select or change wifi networks from the login screen. This causes conflicts with Duo to where a user is unable to login to the Mac because it is not connected to the internet and it will block a user from logging in, We have it set to enroll them into offline access as well, but this will not prompt them to do so until after they complete the 1st initial authentication.All of our Macs are on the latest 12.5.1 and we are using MacLogon-2.0.0.pkg being installed through a policy in Jamf Pro.If we install Duo on a Macbook then ship it to a remote user, it is essentially a paper weight that they can’t login to or connect to the internet with.Has anyon

Hello everyone,We use JAMF school to manage our iOS devices. We are primarily a Windows environment when it comes to laptops and desktops. We currently have new and older MacBook’s(iMacs too) that are not in the domain. They are stand-alone. For security reasons we need to start authenticating users when it comes to macOS devices. I have read some documentation regarding authentication via Azure or LDAP. What would be the pro and cons of going with either one? Also, would it join the domain after the Device enrollment? If so, would those configurations be done in the organization settings or within the profiles? I also read about directory binding. Would this need to also be configured, or is it something not related?I have several questions to have a better understanding before moving forward.Any help would be greatly appreciated.

I want to enroll a Jamf Now Fundamentals setup to x3 new MacBook Pro's, I've configured the apps/software I require etc and am ready to enrol.Do I need to setup a local Admin and Standard accounts on the new Macs before enrollment?Or can I just get away with a Standard local account on the Mac?As I may need to install additional apps that's are't available on the App Store.

Hello!Current Issue:Issued Command "Enable Lost Mode"iPad was found - However, when "Disable Lost Mode" is sent it does not get received. Nor does any other command.iPad was restarted - From what I read that does cause the wifi to shut off. I have downloaded Apple Configurator however, the computer does not see the iPad when it plugged into it. Any help would be much appreciated in this problem. Thanks! 

Hello community,My organization has recently rolled out the latest version of Jamf Connect and when some user's sign out, and they are on Wi-Fi only, they are getting the error that you can't sign in to Jamf Connect because computer is offline. Is there a way to make sure the wireless connection always stays on for Macs when logging off? Can we update our Jamf Connect configuration profile to do so? Or could this just be the way our Wi-Fi cert for our network works? Any insight is appreciated and I'm sorry if I didn't make this question too clear.

We are starting to use Apple Classroom for one of our grades to test.We are manually rostering classes is Jamf Pro (10.39.1).  Every time I try to create a 16th class, it overwrites the 15th class.  We need to roster 20 classes.  Does anyone know if there is a limit to the number of classes we can manually create in Jamf Pro?We are trying to avoid having to use Apple School Manager because we use Veracross as our SIS and moving data between the two is nearly impossible.Any insight is appreciated!

Hi All,Any ideas on how we can deploy Google Chat App via Jamf Pro for Mac devices? New to Jamf,Tem

Hi all,I need bit of guidance and suggestions here. I've been using Jamf for a few months now and would like to push out an update to all enrolled Mac devices for 12.6. What is the best way to push this out that doesn't restart the computer for the end user. I want them to be able to download the update in the background but restart upon confirmation of the user.  Thanks for all the help in advance!

I've done simple Jamf Now Auto-enrollment and have stupidly changed my User accounts to standard users using a terminal command I thought I could revert back to as and when needed. But I can't seem to revert the terminal command. Learnt my lesson is always have an extra admin account when using terminal commands.Will I be able to boot into recovery mode on these Macs and removed the setup file, which allows the macOS setup assistant to run again? Or will the Jamf Now Auto-enrollment stop me from doing this?Basically I want to do this: https://osxdaily.com/2022/03/25/no-admin-account-mac-fix-macos/ The terminal command I used was: sudo dseditgroup -o edit -d UserName -t user admin

We are currently preparing our fleet to migrate from 2018 MacBook Air's running Mojave to 2020 M1 MacBook Air's running Monterey, and we are running into a problem. When a new machine is set up and there is no migration of a user folder, everything works fine. However, if a user folder is migrated, it seems that Self Service will SOMETIMES, not all the time, stop working. Anything that tried to install will return with "an error occured". When checking the jamf binaries by doing a "sudo jamf manage" on one machine that was exhibiting this behavior, terminal says "A valid device signature is required to perform this action" which usually tells me that something got messed up with the Jamf Binaries, so here comes the second issue.When I enter the "sudo jamf removeFramework" command in terminal, the config profiles that were installed do not go away; and, I can't remove them manually. When I try to re-enroll the machine,  it tells me to install a new MDM profile, so I do, a

A lot of different students use the laptops where I work and we have one set profile for them to use. The idea is that when the laptop logs on we can disassociate from the WiFi and also delete the password key that sits inside of the keychain access so each student can use their own WiFi username and password. I've managed to do this and I can do it manually through these commands:#!/bin/bashsleep 30echo "sleep over"sudo /usr/libexec/airportd en0 disassocsudo /usr/bin/security -v delete-generic-password -l networkaliasecho "disassociated"First I give the computer about 30 seconds to reconnect to the wifi before disassociating and then I use the next command to delete the password that sits in keychain access. These commands work perfectly fine when I run each one manually, along with when I use "sudo jamf policy -event trigger" to force it for testing, but every time I let the command run itself on logon it disassociates but never deletes the password and lets you reconnect to the

I know there is an account created when the device is enrolled into Jamf but we would like to create another admin account when the device is being enrolled and also to all the current devices we have enrolled. What is the best way to do this?

Just messing around with creating a script with a co-worker. I've seen some previous scripts that when you run them it launches the systempreferences>Software Update. I'm not very good with scripting, so I'm having issues finding what command actually opens the update window. I'm using a modified version of the script here. We did modify it, but the final step where it shuts down never kicks off. Handling macOS Software Updates with Jamf Pro | Babo D's Corner (wordpress.com).

Hi, If using the deferral option when sending a mass action MacOS update, does anyone know how long it is between each deferral reminder/until it forces update if last deferral has been used.

Hey Everyone!  Running into a snag with the new v1.3.1 Okta Device Trust registration process.  There is nothing wrong with the script, rather i'm running into deployment issues of command line tools (python3). This is the script I'm using to get the command line tools:#!/bin/sh echo "Checking for the existence of the Apple Command Line Developer Tools" /usr/bin/xcode-select -p &> /dev/null if [[ $? -ne 0 ]]; then echo "Apple Command Line Developer Tools not found." touch /tmp/.com.apple.dt.CommandLineTools.installondemand.in-progress; installationPKG=$(/usr/sbin/softwareupdate --list | /usr/bin/grep -B 1 -E 'Command Line Tools' | /usr/bin/tail -2 | /usr/bin/awk -F'*' '/^ *\\\\*/ {print $2}' | /usr/bin/sed -e 's/^ *Label: //' -e 's/^ *//' | /usr/bin/tr -d '\\n') echo "Installing ${installationPKG}" /usr/sbin/softwareupdate --install "${installationPKG}" --verbose else echo "Apple Command Line Developer Tools are already installed." fi e

As a user i can give myself temporary admin by opening SelfService>Security>Install(Temporary admin rights for 10 min). So i was thinking to make some script that will be able to do such thing so i dont have to go in Self Service all the time to do so. Is something like that possible?

Hi everyone we are rolling out BT privilege management to our Endpoints and we are running into issues assigning the policies to different flex groups e.g high low and medium flex. We have the Azure AD connection enabled but we cannot assign AAD groups to Macs in the console(we can for Windows). When we assign policies via standard AD groups the policies don't filter down to the devices. Apparently this is a known bug. Ideally we don't want to use AD as we are trying to move away from Binding.We have reached out to our BT rep but we haven't made much progress. How are you all pushing policies to the different groups?

EDIT: This seems to be an issue effecting multiple JamfCloud hosted environments. I have Logged a support case with Jamf, as have other community members.I will keep this thread up to date with any information from Jamf Support. On two JAMFCloud Jamf Pro instances, running version 10.40.1-t1659581750 I am unable to save a particular script into Jamf, as every time I press Save it results in a 403 - Access DeniedWhilst debugging this I have found that there are certain character combinations that cause this error.If I try to save a script with the following text only, I will get the 403 error${a:}${}  the "a" parameter / var can be swapped with any letter or number and it will still cause the errorIf the curly braces are not touching the last $ it will save fine, if they are touching however it will error.There can be text in between the first ${a:} and the second ${} and it will still crash.The lines can even be commented out, and it will still crashe.g. the below w

Hello All I am trying to move our company to zero touch deployment. I have all my policies with custom triggers and config profiles setup, ive tested DEPnotify as a self service policy and it worked like a charm. I am having some trouble getting this to work with prestage though as i need to have JAMF connect there to login. I also saw there is something called JAMFConnectNotify but i havent seen much about it in use online. Does anyone have any info on deployment for these, i tried deploying depnotify by itself but it didnt work correctly. I was going to try with having JAMFConnect and DEPNotify as prestage packages and test. I used this guide to setup DEPnotify for prestage enrollment, https://hcsonline.com/support/white-papers/how-to-deploy-depnotify-as-a-jamf-pro-prestage-enrollment-package-with-custom-launching-scripts

I deployed Postman to a test MacOS system and the user is a standard user. Was prompted this morning to update Postman with a Admin user id and password.Did I miss a step? 

I was approached by one of my IT security guys today and he asked this question... Is there an easy way to monitor changes to "~/.ssh/authorized_keys” with the help of JAMF then send an alert the appropriate personnel? Does JAMF have any build in alerting functionality or should we use sendmail or something? We want to do it based on pen test results. After giving this a brief amount of thought, here is the first thing that came to mind... We could easily run something like an md5 checksum against the keys during regular JAMF check-ins. If MD5=true, nothing to doIf MD5=false, do some alert thing Then I gave a bit more thought and this... We might be able to use a JAMF web hook for real time detection and alerting... So the question is... Has anyone else done something like this? Did you use JAMF? If so, how so? If not, what did you use? Does anyone even care about such things?

Hi,We use a shared login for our Mac lab. When students log into Google services and close the Chrome window (but they don't quit Chrome), I'm finding that when the next student opens Chrome, the prior student's Google account is still logged in. Is there a way to force the Google account to logout when the Chrome window is closed (by hitting the red circle)? I've been able to partially achieve this by checking the "Keep local data only until you quit your browser" setting in Chrome settings, but that only works if the student quits Chrome through the menu, not if they just click on the red circle to close the window.

I have managed iPads that I have purchased the eBooks for on Apple and created Managed Apple IDs for in Jamf Pro. The eBooks are set to be available in Self Service mand scoped to be All Mobile Devices. The eBooks appear on the iPads inside Self Service, but the "get" button is grayed out. Can someone help me understand what I'm missing? 

For anyone looking for the standalone Safari 15.3 installers for macOS Catalina or Big Sur:Catalina: http://swcdn.apple.com/content/downloads/26/22/002-55628-A_1VLDC3LHDM/pcelahb6q0fqenbfoax3wvkqk03arnx7hc/Safari15.3CatalinaAuto.pkgBig Sur: http://swcdn.apple.com/content/downloads/21/26/002-53731-A_F8CKRUB2J8/50r4rgi8k5monni8c00hvy6z7n89b5yig2/Safari15.3BigSurAuto.pkgApple's KB article on the Security fixes in Safari 15.3: https://support.apple.com/en-us/HT213058Apple has released new Builds of Safari 15.3 with a single change listed: https://support.apple.com/en-us/HT213091The new support article also lists the updated Build number for Safari 15.3 as 16612.4.9.1.8 on macOS Big Sur and 15612.4.9.1.8 on macOS Catalina.Download links for the new are:Catalina: http://swcdn.apple.com/content/downloads/37/36/002-66034-A_46UFJIIHKN/rm0oq26tnrdrhgeokn8vcfoydrt4zi19an/Safari15.3CatalinaAuto.pkgBig Sur: http://swcdn.apple.com/content/downloads/13/56/002-67278-