Has anyone gone through the process of creating a Configuration Profile Applications & Custom Setting  payload to restrict the AI options in iTerm2 (the prefs domain is “com.googlecode.iterm2”)? And if so, can you post the profile in this thread?Since I hate to re-invent the wheel I figured I’d ask before starting to build a payload for this from scratch…

We have been using the following script as part of our deployments since Apple silicon became a thing (I did not write the script). It appears that the “--agree-to-license” no longer functions in Tahoe and appears to invoke “help” in policy logs. Manually running “softwareupdate –-install-rosetta --agree-to-license” also returns “help” contents. Has anyone else seen this? #!/bin/bash# Installs Rosetta as needed on Apple Silicon Macs.exitcode=0# Determine OS version# Save current IFS stateOLDIFS=$IFSIFS='.' read osvers_major osvers_minor osvers_dot_version <<< "$(/usr/bin/sw_vers -productVersion)"# restore IFS to previous stateIFS=$OLDIFS# Check to see if the Mac is reporting itself as running macOS 11if [[ ${osvers_major} -ge 11 ]]; then# Check to see if the Mac needs Rosetta installed by testing the processor processor=$(/usr/sbin/sysctl -n machdep.cpu.brand_string | grep -o "Intel")if [[ -n "$processor" ]]; thenecho "$processor processor installed. No need to install Rosett

Hi,I am looking for a way to restrict icloud login on managed macbooks to using managed apple ids only. Does anyone know a way of doing this?At the moment, even if we give a user a managed apple id, there is nothing we can do to stop them using a personal apple id on company macbooksthanks

I am looking for a script to remove old Jamf remote policies from Jamf cloud. We have several hundred of them I discovered after running Kmart tool. I found this one but I cannot get it to work. https://www.elliotjordan.com/posts/remove-remote-policies/ Thanks 

Just curious if anyone knows a way to disable ALL banner notifications. Just wipe them all out. I manage a few iMac labs and students really don’t need these things popping up for every single application they open. I can disable some specific ones with configuration profiles but it’s really hit or miss. Mostly miss. Thanks!

NoMAD has a bug on Tahoe, Whilst updated computers continue to work, new accounts appear to be unable to click on the NoMAD menu at the top of the screen.  Does anyone know a way to fix this?

Great success at our Benelux Apple Admins meet-up last last night! Thank you Mischa, Raf, Javier and Jonas for speaking and of course all attendees. On to the next one! 💪🏻 

Hello,we recently have the problem that the commands coming from Jamf Pro are stuck on the “pending” status. Not too long ago i tried to unmanage an iphone, which worked. But now its not possible to unenroll or to initiate commands in general without them being pending.Thank you in advance, i will put a screenshot of the problem as an example.Kind regards,Siraj 

With under-the-hood updates for macOS Tahoe 26, Mac Health Check (2.4.0) improves visual indicators for each of its various checks.https://snelson.us/mhc  

Anyone using TeamDynamix?  We are looking at changing our ticket system however, we want something that is integrated with JAMF or at the least user friendly with JAMF.  Any thoughts would be greatly appreciated

Hey Community!Whether you’re attending JNUC in person or watching from afar, we’re looking for a few amazing customers to take part in a quick 15-minute video interview during JNUC. As a thank you, participants will receive some exclusive conference swag 🎁. We’d especially love to hear from those who:✅ Work in Education or Healthcare OR✅ Are part of an organisation (any vertical) with 250–1,000 employees or 1,000–5,000 employees✅ Have experience with Blueprints, Compliance Benchmarks, or Endpoint Telemetry Your insights may be featured in:🎥 Promotional videos for JNUC🎥 Individual testimonials🎥 Customer success story highlights 👉 Interested? Comment below or email us at jamfnation@jamf.com to get involved. Not heading to JNUC but would love to share your story? Email jamfnation@jamf.com now!  Let’s showcase your story and celebrate your success at JNUC and beyond!

Hi dear Jamfies,  since im quite new to the whoe jamf environment and had to take over a whole functioning instance, i wanted to make Tahoe available via Graham Pugh’s “Erase-Install” script. The manual, i was left with described, that as first step, i have to create an entry via title editor and just copy and paste the information (with adjustments) from the earlier version. Now in my case, i cannot enable this title, meaning, it wont show up in Jamf Pro, please see attached screenshot. I also seem to fail understanding the note given, since the manual i was given from earlier coworkers does not mention any other steps besides copying and pasting the information on software title tab and requirements tab. Can someone help me out? Thanks in advance. 

Is it possible to create a Time Machine backup profile that limits the backup size depending on the clients storage. For example, if a Mac has 512gb storage I want to limit their backup size to 1TB but if they have 2TB storage I want to limit them to 4TB. Obviously I could create groups based on device storage size and apply a different config to each group. But I’m wondering if there’s some formula I could enter in the “Backup Size Limit” field or some other method to achieve this nicely. Thanks!

I think might be a Tahoe this? Multiple Macs in my environment have been having Self-Service+ crash whenever we run anything on it. It just closes itself with no error or explanation, and the subsequent policy doesn’t run. Tried on multiple policies with the same result on multiple different Macs, all on Tahoe (26.0). Had no problems with the Beta. Has anyone else seen this? I’ve deleted the keychain for Self Service+, re-installed, and deleted the cache for Self Service+ as well.Is this a known issue, by chance? Self Service+ version is 2.8

Is there really no longer a way to sort Jamf Discussions by date??? Finding something from 8 years ago at the top of the list is not helpful.  

Hi all, We have a situation where we need to remove some iMacs from our Jamf instance, but we need to keep Logic on them. We have purchased Logic through Apple School Manager and it feeds into our Jamf with those purchases, so I’m assuming they will have to be connected to Jamf in some way to get the app. We need these Macs to be offline and standalone as they are old and no longer supported, so we don’t want to risk having them on the network (we’ve previously been a victim of a ransomware, so network integrity is critical now). My question is, is there a way to release the Logic licences we have purchased through Apple School Manager as, say, install codes or VPP codes (I’ve checked Jamf Pro and there is no VPP codes under Managed Distribution) so we can install them individually, or do we have to have them on Jamf to get the licences? Many thanks,Ben

I am wondering if anyone could help with a process for automating with JAMF a way to click on settings for both zoom and VIA  after the install has happen.  Both applications need system preferences adjusted in order to use the product and we need help figuring out how to get JAMF to do this after the app is installed.  Any help is greatly appreciated.        Thank You

We are seeing issues with machines that have broken AD binds, is there a way to automatically remove the profile and reinstall it, or can I just add those machines from a SmartGroup into the scope?

Helpful app that I ran across in Slack. Nice GUI to show you the configuration profiles installed on your macOS client.It’s helpful in pointing out deprecated keys. It also shows you duplicate keys, which is helpful. For example, if you have duplicate keys restricting macOS Deferral updates. • Link: https://github.com/ninxsoft/LowProfile  Want to see what is inside the Configuration Profiles that are installed on your Mac?  Curious to know what a Configuration Profile will enforce / change on a device before actually installing one?  Tired of having to manually un-sign Configuration Profiles, only to have to flex your XML parsing skills to find out what is inside?  Maybe you just want to qualify that your MDM vendor is creating Configuration Profiles the way you expect?

here's my problem:-a user tries to change his/her password and it fails because the mac lost trust with AD, I'm able to send configuration profiles, do a "sudo jamf recon" works fine, except the mac is not bound, even though in Directory Utility it shows its bound. -after unbinding and rebinding everything works fine.(fyi: macs are on 10.11.6 and 10.12.x with JSS: 9.96) I'm trying to avoid having to do that manually.How can I do that using a script if a mac is actually bound to AD? thank you for your help.

Jamf Compliance Editor v1.5.0 • https://github.com/Jamf-Concepts/jamf-compliance-editor  

Hey all,Working on a script that prompts the user for information. Once complete, I set the script to ask the user if they would like to enter another response. If yes, a policy is triggered to call the script again. I seem to be getting an error. I believe it is because you can’t trigger a policy that is already running.I’m aware I can make the loop within the script. Just want to confirm that this is not possible. Has anyone run into this or found another option?

I recently spent some time working on a script to deploy AirPrint printers as we’ve got a few of them on our campus that don’t have driver support from the manufacturer, meaning AirPrint is the only option. I wanted to share what I’ve come up with in case anyone else is in need of this. All you have to do is change the details in the “Printer details” section at the top of the script to match your printer’s IP address, location, and display name. I’d also recommend modifying the PPD path slightly to give it a more specific name than just printer_driver.ppd. Example: break_room_printer_driver.ppd. Note: For this to work, the Mac needs to be on the same network as the printer since it queries the printer to gather the information to create the PPD file. The result is that you can deploy an AirPrint printer to your Macs via Jamf Pro complete with the icon and everything!   #!/bin/bash # Adds a printer via AirPrint. # Author: John William Sherrod - jwsherrod@mac.com # Version 1.0: 02

Students in our School figured out, that Widgets and Focus cancel restrictive Settings you set with Jamf. For example: With an other Focus you can change your Homescreen and use Widgets. If you lock the Screen with an App like Classroom you also can get around the Screenlock by clicking a Widget like the clock.Is it possibly to block Focus or at least Widgets on other Focuses?

Hey all,So I know we can use Jamf Connect or even just a script for elevation to admin for a standard user. Has anyone attempted to creating some form script that would require the user to enter a validation code provided for the admin rights before granting rights?The work flow would look something like this, SS policy that prompts for a code. The code would then verify against “something” - maybe an API call. Once it could verify the number it completes the script that elevates permissions temporarily.Im not sure where the script could validate the code from though. Maybe just a parameter that the Helpdesk could enter upon request?Thoughts?