I am working on creating some installer packages to run on some Macs that are not yet enrolled in my Jamf Pro server. For reasons outside my control, we need to install several apps on these Macs using the processes that would have ran had they been enrolled in Jamf Pro. The installer packages deploy all the install components, then they use a post install script to finish the install process. The post install scripts feed in tokens and licensing information. I am using a valid Apple Developer ID installer certificate. If I launch any of these packages, I can see that the certificate is there. I can also open them in Suspicious Package. It shows that the certificate is there and trusted. When I launch these packages on a Mac that is not the one I used to create them, I see this error: "Apple could not verify “NameOfMyPackage.pkg” is free of malware that may harm your Mac or compromise your privacy." I can run "sudo xattr -r -d com.apple.quarantine" followed by the path to the package.

Would love to hear some success stories.

I'm trying to utilize a script that will upload a file as an attachment to a computer. I'm trying to figure out the minimum necessary permissions to accomplish this. I used an admin account and was able to upload fine, but when I try to use a lower-privileged account, I get an HTTP 502 response code from the CURL command. Some of the permissions I think might be related already are:- Allowed File Extensions (Read)- API Integrations (Read)- Computers (Read, Update)- File Attachments (Create, Read, Update, Delete) I can't find anything in the admin guide or on the API page

borrowed the script from @bwoods and put some nice Swift Dialog UI on it.  Gives user notification of what is about to happen and notifications along the way.   #!/bin/zsh ###################################################################################################### # # Gobal "Common" variables (do not change these!) # ###################################################################################################### export PATH=/usr/bin:/bin:/usr/sbin:/sbin LOGGED_IN_USER=$( scutil <<< "show State:/Users/ConsoleUser" | awk '/Name :/ && ! /loginwindow/ { print $3 }' ) USER_DIR=$( dscl . -read /Users/${LOGGED_IN_USER} NFSHomeDirectory | awk '{ print $2 }' ) OS_PLATFORM=$(/usr/bin/uname -p) [[ "$OS_PLATFORM" == 'i386' ]] && HWtype="SPHardwareDataType.0.cpu_type" || HWtype="SPHardwareDataType.0.chip_type" SYSTEM_PROFILER_BLOB=$( /usr/sbin/system_profiler -json 'SPHardwareDataType') MAC_SERIAL_NUMBER=$( echo $SYSTEM_PROFILER_BLOB

Hello All,    We want to use superman to update our MacBook fleet but our higher ups want to make sure that this device is not malicious. Has anyone run into this before and point me to any confirmation that this software is not malicious. I know that many people use this to update MacBook fleet as Jamf built in software updates does not work on OS under 13 and asking users to update their devices never works. 

Hi there A quick question, hopefully. We have a new config that has been pushed to some users to test new APs and a new SSID. A couple of them have not connected automatically to the new SSID, despite valid certs etc in the payload and having successfully appeared in the keychain. In the config, there is a "trusted certificate" area, under the Trust section in 802.1x settings So a couple of questions- Any idea why some users didn't connect automatically despite the profile being there, and some people connected just fine? Can someone please explain what the "trusted certificates" does? If the user tries to connect manually to the SSID, they choose the cert to connect with, and then they have the pop up from Apple to say to confirm trust etc. The certs in the wifi part of the network config are ticked, so I would have thought there would be nothing to do- but some users are still being requested for manual authentication / connection.

Hi! Is there any way to allow an app DLP to capture the screen on macos without user involvement or notification?

Hi,we recently acquired a Jamf Pro license and wanted to build a update ring for certain softwares.Since Cisco Anyconnect is not available in Patch Management i thought i'll make a feature request.

Hi there,  I hope this message finds you well. I purchased a few apps from Apple School Manager earlier today. I can see the number of available apps was increased in manage licenses. I also received an email from the Apple Store that mentions Your recent VPP purchase is available. When I go back to mobile device apps on Jamf Pro, the number of apps in managed distribution did not increase. I checked, and no certificate was expired. Every certificate is still active. Please kindly advise on this case. Many Thanks, Jonathan

So I am trying to figure out if its possible to use the Jamf Splunk Add-On to see if our team can use it view logs for one of our policies, where certain groups can gain temp-admin priv.From reading the documentation, you can use Splunk to spew out data from an Advanced Computer Searches, which can't cover that need. Or doing a Custom API call referencing from Jamf's classic API documentationHowever, haven't been able to find something that will fit the request. Was wondering if anyone knows way to use Splunk to spew out a certain policy log.

Hi guys, We have quite a few users who seem to download applications and run them from their desktop, Spotify and Chrome being the biggest culprits. I'm looking for a way to remove the application from users desktop folders. We have a couple of users (read: myself and a few other IT people) that have these installed on their machines in their Applications folder, and we don't want to touch those. Our users have local homes on our iMacs, and we run an AD environment. What's the best/tidiest way that people have used to remove apps from multiple users desktop folders?

Hey Jamf Nation!Since we announced Self Service+ at JNUC 2024, it has continued to evolve with features focused on content discovery, branding, and usability. Today, we’re excited to introduce the next major milestone: identity management in Self Service+. We're moving Jamf Connect's desktop app capabilities into Self Service+, which brings key functionality: synchronizing macOS accounts with cloud-based credentials, and privilege elevation for just-in-time admin rights on Mac. Jamf Connect's login window plugin remains separate application and is not included in this preview of Self Service+, ensuring continuity for account provisioning and local multi-factor authentication.How to join the beta:Enroll in the Beta Program under Product Feedback at account.jamf.com. Once you enroll you'll receive an invitation to join the Beta Forum in your email, click "Join this group Hub" to gain access.Email beta@jamf.com with questions. The beta program is covered by the Jamf no

Hello all, I've had an issue since upgrading to Jamf Pro v10. On some client Macs, the Self Service app constantly crashes. In some cases it crashes as soon as it tries to launch. In other cases it crashes as soon as you click anywhere in the app window. In a few other cases, the app will be working fine, but as soon as you click on the 'History' or 'Updates' button at the top, the app crashes and continues to do so each time your open it. It has mostly happened on 10.11.6 clients, but we have one Mac running 10.12.6 that is now having the same issue. I had logged support call with Jamf about it. They said it was a bug with 10.0 and to update to 10.1. Did that, confirmed that the clients had the newest version of the app, but no change. Removing the frameworks from the client and re-enrolling it worked once on one client, but as soon as I clicked something in the app window, boom, crashed. Jamf did a remote session into my server, made sure everything look

Jamf Nation,We have big news for you today. I’m thrilled to share that we have announced our intent to join forces with Identity Automation, a company known for its innovative solutions, with capabilities that span identity lifecycle management, access management, and governance to help organizations secure their environments without hindering the user experience.  This joining of forces is a natural fit, allowing us to enhance the way we support schools and other organizations that rely on desk-less workflows. We have a history of partnership with Identity Automation and RapidIdentity - sharing many customers who have benefitted from our shared technology and integrations. By further integrating Identity Automation’s technology with our own, we’ll be able to provide even more powerful solutions to help organizations enhance security, improve standard workflows and provide flexibility for shared devices.  Our priority remains delivering the best possible experience for you, o

Content backfill required

Hi all,We are trying to determine if we can use Jamf to audit which users are actively using Apple Intelligence.Our hunch is that Apple doesn't log gen AI actions but I was wondering if anyone here might have some specific advice that could help.Thanks in advance!

Hi folks - working with a new jamf cloud and I've run into a problem trying to have a user follow the steps to make their device Entra compliant.  When they log into the Company Portal app (after starting the registration from Self-Service) the login screen for Entra pops up, accepts their username and password, then goes to a blank window.  We know authentication is happening because the MFA for the user kicks off but the login window is blank and does not show the numbers.     Has anyone seen this before?  I was able to do this on a different machine two days ago.  The OS on this machine is 15.0

Today we are releasing a maintenance version of Jamf Pro; this release addresses the following product issues: Jamf Pro Server [PI126319] Jamf Pro now pushes a new single sign-on extension (SSOe) profile to devices that have been either re-enrolled without being marked as unmanaged in Jamf Pro or scoped for device compliance for shared devices and had the SSOe profile removed. [PI131971] Performance is improved in environments where a large number of computers belonging to a site update their inventory simultaneously. [PI134534] A 404 error no longer occurs when navigating between a smart group that is scoped to a blueprint and the blueprints interface.   For additional information on what's included in this release, review the release notes via the Jamf Learning Hub. To access new versions of Jamf Pro, log into Jamf Account with your Jamf ID. The latest version is located in the Solutions section under Jamf Pro.   Cloud Upgrade Schedule Your Jamf Pro server, inc

Hi all - has anyone found a way to make Zoom the default for all events on new Outlook?  Tried a few different policies with no success.  Can add manually as a Zoom meeting, but this is pain for all users.  Many thanks in advance!

Hi, we ran into an issue during the Jamf Pro Patch Management. I ran a Patch Management Policy for Microsoft Teams 2.x with the Option to patch "Unknown Versions", too. The issue on some Mac Clients, all an macOS 15.3.2, that they were randomly quitting the Teams App. It turned out that their Inventory in Jamf Pro did not include the installed Microsoft Teams Version in the Patch Management section. In the Inventory view, the installed Microsoft Teams Version was recorded. A Jamf Recon didnt fix the issue, no MDM or DDM commands have failed on those Clients ... Did someone else run into a similar issue?

Anyone know if the ablity to set a screensaver at login windows is still broken in Sequoia. I belive its still the case in Sonoma.Im currently using this at works fine if a user is logged in locks the screen screensaver starts. The research I have done so far seems to indicate loginidealtime should trigger it at login screen, just doesnt seem to do anything. Have been playing around with a lower number that doesnt seem to help either.It something we always struggled to set in our labs, we adjusted our power policy last time so the macs would sleep. <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>askForPassword</key> <true/> <key>askForPasswordDelay</key> <integer>0</integer> <key>idleTime</key> <integer>900</integer> <key>loginWindowIdleTime</key

I am about to scream. After several hours on the phone with ASM and JAMF, and after being moved up the chain about three times, the issue is not resolved. All my info in ASM is correct and synced, the 5 students show up in all their classes as offline, and their ipads DO NOT show an EDU profile, even though I have checked User ID and location, I have verified it matches in ASM, I have verified I have the right ipad, the right person, the right Apple ID, and done blank push and update inventory and everything else you could think of. Still no dice. The one thing I discovered is that on all the messed-up ipads, the roster info did not sync over. I put it in manually, but still no dice. ANYONE have this issue? I am mega frustrated.

How can I find if any connected to VPN? Is it dependent on app to find it, like as for Cisco AnyConnect and Pulse it will be different. Or any generic way is there in macOS? 

In macOS 15, the new Private MAC address settings is enabled by default, and there is a new settings in Profile to disable it, BUT it's only for a spacified SSID. If you need a global setting to disable the Private MAC for all existed and new SSID, try to create a new policy to run this command: sudo defaults write /Library/Preferences/SystemConfiguration/com.apple.airport.preferences.plist PrivateMACAddressModeSystemSetting -int 1 It will not disable the Private MAC Address immediately, but it will work after forgot the network or reboot the computer.  

we have a few older Intel iMacs that are applying policies as normal, but configuration profiles changes and deletions seem to be stuck in pending. They're all checking in, and policies work without issue. This lab is all Intel iMacs running MacOS 14.7.1, but 75% works without any issues. They all report as being successfully enrolled in Jamf, and they where all automatically enrolled via ASM. I'm not sure what to do to troubleshoot, as these profiles work fine with most of the Intel iMacs, and our newer fleet of Apple Silicon computers.