We are seeing an issue with On-Prem installation of Jamf Pro 11.15.0.The Jamf-Pro.exe Server Tools are getting picked up by CrowdStrike for a malicious hash.Even grabbing the 3.1.5 Server Tool exe and manually installing it to the path results in Quarantine.We're having our InfoSec team investigate, but looks like this may affect others. Anyone else with On-Prem infrastructure seeing this issue?

Hi, I am looking for an Uninstaller for the Nextcloud App that also would remove the local cached Nextcloud Files. Because the location of those cached Files can vary, do I have to check the Nextcloud preference file of each User to find out the right location? Thanks for any help!

Our standardized testing program uses a locked-down browser, and will kick out a tester, if anything tries to do something in the background. We think that a number of students were kicked out of their tests because they set up Mail.app and got a notification. Rather than try to play cat and mouse with alert settings, is there a way to completely disable the Notification Center? I tried putting Notification* as a Restricted app, that gets killed, but that seems to have had no effect. We are currently running 10.12.6, but are going to move to Mojave this summer, so I need a solution for each OS. Under Mavericks, you could disable the LaunchAgent: launchctl unload -w /System/Library/LaunchAgents/com.apple.notificationcenterui.plist but that doesn't work under Sierra, so I bet it doesn't work in Mojave either. Should I just nuke the agent with: sudo rm -rf /System/Library/LaunchAgents/com.apple.notificationcenterui.plist Will I be able to do that in Mojave? Ideally, I'd like a

Is anyone encounter JAMF Teacher issue with after class end, restriction is not automatic restore to default. Case by when teacher start a class with apps restriction (example Google Chrome), after class end the restricted apps (Google Chrome) will not automatic restore/reappear? Is it normal? Teacher requires to manually clear all restriction when class ended to get the apps restore/reappear on student devices. Thank you.

Hello, We're working to put together new device personas (engineering, creative, etc), and all have been going well, except for our "lab" devices. Basically, they want a clean macOS device to use for testing, but it should still be enrolled in Jamf for asset tracking purchases. All the other devices, I've just added a trigger after enrollment for special_installs, and scoped/limited them by appropriate AD group. But for the clean devices, I need them to stop the normal enrollment process entirely. No config profiles (outside of the jamf required ones) and no software installed. I'd normally add them to an exclusion group, but I can't think of a way to do that automagically prior to enrollment... 

Hi everyone, I've been facing an issue with internet connections just after updating to macOS Sequoia. Two devices running Sequoia cannot establish a connection with each other in Docker.   Error response from daemon: Get "https://europe-docker.pkg.dev/v2/": net/http: request canceled while waiting for connection (Client.Timeout exceeded while awaiting headers)   This issue started right after I installed the update, and I've heard about DNS/connection issues related to it. The first thing I wanted to test was turning off the firewall, but I wasn't able to make any changes. I have a policy that was supposed to turn off the firewall with the following command:   defaults write /Library/Preferences/com.apple.alf globalstate -int 0   However, it didn't work on Sequoia, although I tested it on Sonoma and it worked well there. I've tried searching online but haven't found anything that works so far. My question is: Does anyone have any ideas on how to disable the firewal

With Jamf Pro 11.16.0 Beta we’re continuing our Compliance Benchmarks feedback. We’re also releasing the ability to configure the App Installers deployment process, along with new Prestage enrollment and inventory reporting options. How to join the beta: Enroll in the Beta Program under Product Feedback at account.jamf.com. Once you enroll you’ll receive an invitation to join the Beta Forum, click “Join this group Hub” to gain access. Please also check out this recent blog on Configuring SSO in Jamf Account prior to testing Compliance Benchmarks. Email beta@jamf.com with questions.The beta program is covered by the Jamf non-disclosure agreement; please do not share any information regarding your testing on any public forum, including the non-beta areas of Jamf Nation. Use the Jamf Nation Beta Forum or contact Jamf via beta@jamf.com with any questions. Thank you to all who participate in this program!

Hi,  I want to disable OneDrive from the background service, but I don’t know how to do it. Currently, it is enabled, and I want to disable it. On Microsoft’s website, they explain how to enable it, but not the opposite. https://learn.microsoft.com/en-us/sharepoint/deploy-and-configure-on-macos#background-services Would you know how to do it?

We're using Adobe CC (Creative Cloud (all applications) for schools – shared licenses.  Adobe documentation only offers deploying their packages via Jamf Pro. I'd tried to use Jamf School application installers. They work great but this likely fails 'cause the installers are obviously configured as user based licenses. The configured packages by Adobe admin console could not be installed even when packed with composer. This pkg-files are denied with error "Could not parse XML-file in package". Is there anybody who's next to this setup? Do you think this could be solved with a managed configuration via XML file?  

Hello, We are having issues enrolling BYOD devices in Jamf Pro using Account-driven BYOD Enrollment. We are following the instructions on Jamf documentation but we are receiving an error for any Managed AppleID that tries to sign in:"Your Apple ID does not support the expected services on this device. Contact your administrator to sign in"All of our Apple IDs are managed and the domain is setup in Apple Business Manager. We have a ticket open with Jamf Support but wondering if anyone else has had this issue. Current configuration:  This has worked before. We had these settings turned off for a while while we investigated (about 1.5 months).iPhone 13 Pro Max running iOS 16.4.1.

Hey guys, So in the midst of setting up our jamf i have a second user profile set up for our Dept to login to every laptop, Is there a way to set a standard profile pic using jamf pro ? Any advise would be great. Thanks

We're not a fan of Jamf requiring a Jamf Account SSO setup to access new features such as Blueprints or Compliance Benchmarks. What about new features down the pipeline? I was looking forward to Blueprints, and we use the JCE now for Compliance Benchmarks (CIS Level 2). So, the new features had us excited since it was presented at JNUC 2024. However, the Jamf Account SSO setup may be a deal breaker for organizations. Consider reading and voting for this Jamf Nation Idea:https://ideas.jamf.com/ideas/JPRO-I-1182

I have a strange issue.  First couple of wave deployments worked well, but now has stopped working.  Every device that I scope Nudge and the jamf profile to, give the message No minimum required macOS version found within the Nudge Deferral Status Extension Attribute.  This Mostly Mac blog states that means the requiredMinimunOSVersion key is not found.  This sounds like Nudge or Jamf are not reading the config profile located in /Library/Managed Preferences/com.github.macadmins.Nudge.plist.  I am using the default Nudge Suite (latest) with Jamf Pro Schema.  Any ideas are greatly appreciated

We have a Smart Group to set the Lock Screen and wallpaper on our iPads that has been working fine for over a year. Today I was setting up a couple of iPad Air M3 systems (iOS 18.3) and it didn't work on both of them. I checked the group's Automated Management tab in the Smart Device Group and it is showing "Error" in the status field for those devices. The desktop image file is a 1080x1080 PNG file. Any ideas?

Hey guys hope you are all well coming up to Christmas. We have been having issues with Sophos popups on BigSur. i have followed all the steps Sophos recommend but we still get the pop ups i have attached out configs and the pop ups were getting

Hi there, What would be the best/easiest way to enable SSH on a specific users' machine remotely, from Jamf? thank you!

A Read-only Friday post by William Smith You have no control over when you’ll get an idea.Yes, I do get my best ideas in the shower. Ready to go on a scavenger hunt? Getting through and beyond your own anxieties about presenting at a technical conference or meetup is the hardest part about presenting at a technical conference or meetup. Taking that first step to commit yourself to an uncomfortable (but worthwhile!) challenge begins your journey of a thousand miles. But I promise the rest will only feel like 500. 🫠 Now begins the execution: we need to first find ideas for a topic. What do I know that I can present? You may ask yourself, “What do I know that makes me an authority on anything?” Simply put, it’s your own experiences that your audience wants to hear. Notice the title of this post starts with “Finding”. Right now, it’s time to find your story. Don’t try to make something out of thin air. In the next blog post, I’ll talk about starting and developing your story. Every presen

Hello all,   Newbie here. I've been tasked with installing a mobile config profile and then have to install an extension from https://droxi-extension.s3.amazonaws.com/droxi-ext.html I can upload and scope the mobile config with no problem, but I don't know how to deploy this extension. I know how to deploy an extension from the Chrome web store, but I'm having trouble figuring this one out. I have to deploy this to many Macs across 8 different locations. If all else fails, I'll have to do it by hand one by one and that'll take a longggg time. Thanks in advance!!!

Hi ! Can someone suggest me how to set up a custom analytic to get an alarm if a user (yes, they need to have adminrights sadly) removes the MDM profile? I had some cases in the last weeks where all profiles went missing and i do not want to suspect someone falsely.    Thanks !

So we might be learning this lesson the hard way, but we have an Air that a student has locked via his iCloud account and does not know the code. We've been fighting with Apple support and GSX to get it unlocked but in the interim we've begun discussing how to prevent this in the future. Only way I really see would be to disable the iCloud preference pane (configuration profile I assume?), correct? If that is the case, then you are debating the cost benefit of them being able to utilize the iCloud features against locking and wiping a device as well. If we go the route of disabling the iCloud pref pane, a user could still enable this during an OS upgrade to right? Finally, wondering if there is an extension attribute or another way to query all my devices to see who has iCloud enabled on their laptops?

Hi All, We have an issue with employees who are offboarded. When they return their Mac's, sometimes we find their Apple id's block us from wiping the computer and giving it to the next user. When this happens, we need to find the original invoice, send it to apple with a request and then they can unlock the Mac. I am wondering what companies do to circumvent this issue. We use Jamf but we do not provide company Apple id's. We dont mind if users connect their private Apple id's to the computer as it helps with the Apple ecosystem. Any suggestions would be greatly appreciated

Afternoon All  Im trying to pull back a license for an app deployed via VPP I have removed the device from scope and update the inventory but it still not showing as been avilable to deploy again.   Does ASM need to sync with jamf as well?   Thanks Tom

Hi all - really annoying that the option for pointer size is greyed out and our developers need the option to adjust available.  Has anyone seen this and found a workaround via Jamf through a script or profile? All my efforts have failed, many thanks :) 

Hi All, We have company managed Macs with Jamf. We do have sensitive company data on the computers which we do not allow to be transferred out of the company environment. We block the use of external storages. If we allow users to connect their Apple id's and iCloud, will they be able to transfer company data from the computer to their iCloud? Is there anything we can do to prevent this? Maybe block their iCloud somehow? Any suggestions? Thanks in advance

We enrolled a device and, during the assistance migration, used a Time Machine backup from a non-enrolled machine. Using the Jamf login configuration profile, we allowed the merge of the network account with the local account. After merging, the local account name appears in the "Users and Groups" section and in the terminal, but the password of the network account is required. What steps can we take to ensure that after the merge, the local account adopts the network account name? In our standard routine, we use a synced network account and local account.