I saw during one of the demo's at JNUC this year someone had added custom logo's to their JSS icons (not necessarily self service). Was that something they did manually or is there a way to brand my JSS that I'm unaware of?

Good morning, We recently upgraded our MacBook fleet to MacBook M1 Apple Silicon. Our old scripts that allowed us to force bluetooth back on does not work anymore do the restrictions of Apple Silicon. I was checking if any found a to turn bluetooth on using terminal? I found the  /usr/sbin/bluetoolctl in terminal but it only shows if the power is on for bluetooth but nothing else.

Provide your users a “heads-up display” of critical computer compliance information via swiftDialog Background More than six years ago, William Smith (@talkingmoose) published "Build a Computer Information script for your Help Desk"; we implemented a customized version in the fall of that same year. Last week, during a conversation with one of our rock-star TSRs — whom I’ll refer to as “John” — we decided it was time for swiftDialog-ized reboot. Features The following compliance checks and information reporting are included in version 0.0.2. Compliance Checks Compliant OS Version Last Reboot Free Disk Space MDM Check-in MDM Inventory FileVault Encryption BeyondTrust Privilege Management

 Hi https://learn.jamf.com/en-US/bundle/jamf-account-documentation/page/Jamf_SSO_with_Jamf_Account.htmlUse this guide to configure your Microsoft Entra IDI'm in the process of doing something and it says it's connected, but I can't see the IDP redirection page. Can you share any success stories?

Hello All, Can someone please guide me on this? I have two images one that I want to set as the wallpaper and the other as the lock screen. What are the possible ways to achieve this?

Whenever i try to change the Timezone via the device details page on the bottom it just changes for a second, loads, and then goes back to the old Timezone. This is only happening on a few iPads we have, the other ones are working just fine and they have the exact same profiles and are in the same device groups. The devices location is just as always in germany, but the time is US/Pacific. This is extremly annoying for our employes, because thats like a 9 hour difference between Timezones, so i would appreciate some help on that topic.

Trying to get an understanding of what some scripts do that were written by a previous Jamf admin. We have a device in our fleet that keeps racking up Pending management commands. The MacBook in question is up to date in terms of OS and software updates, but it never seems to process any management commands. I tried clearing them then sending a blank push, but that didn't do anything. A bit of online searching uncovered the recommendation to run the following command: sudo profiles renew -type enrollment I ran that on one of my test devices (actually ran it from Self Service because the script is a payload to a Policy) and am trying to understand what the script actually does, or how I can tell that it ran successfully. I can see in jamf.log where the script began to execute, but there's no other info in jamf.log or install.log. I checked the system logs by running the following Terminal command: log show --predicate 'proc

I'm seeing some strange behaviour with the login window on devices in one Jamf environment but not in another. All machines have the CIS L1 baseline and some additional lockdown restrictions on them. They should be asking for the username and password at the login window on startup and after a logout. This works fine for devices in one environment but in the other I get the user account(s) listed on startup and only the password is required. It works as expected if you log out though. I wondered if it was something relating to FileVault but, again, the configs between both Jamf environments should be the same. The only difference I can see is that one Mac is Intel (T2) and the other is M1. Here are some examples of what happens on the Mac that isn't working as expected:- Startup: After logout:

I found another excellent script from Karthikeyan Marappan on his GitHub site for setting or clearing the recovery lock on a system.  I took his script and put a nice GUI frontend on it.  I believe this only works on Apple Silicon Macs at this time. Initial Welcome screen Succesfull clear message Successful set message No Device found JAMF Script parameters to pass

Hi ,    Im able to read members of a AD group with command  dscl "/Active Directory/domainname/All Domains" -read /Groups/ADgroupName | grep -Eo 'CN=[^,]+' | sed 's/CN=//' | sort -V . How can I add a computer to same group ?

As someone who’s been part of the Apple admin community for a few years now, I’ve had the privilege of helping out the amazing team with MacAD.UK, both as an attendee and behind the scenes. In my day-to-day role as a Technical Lead for Workplace Solutions, I spend my time working with all aspects of our business with everything Apple and development, collaborating with fellow admins, sharing knowledge and supporting customers adopt Apple technology whenever I can.  MacAD.UK is a community-driven, session-led Apple-focused conference, has been a staple in

I'm rolling out a 10.9 lab, and my workflow works fine.My machines deploy and configure as expected.Bind to AD works great.The AD bind has "force local home directory" and "Use UNC path..." enabled.I can log in with LDAP/AD users, and profiles/policies work fine.The users get a local home forced. They DON'T show up in the local user list or via a command like: "dscl . list /Users UniqueID"These sorts of users used to automatically show up in 10.7.Since this is my first wide installation of 10.9, I'm not sure where to look to diagnose - any help?

We are a school where every student has an ipad. we use apple classroom to control the use of ipads during lessons. however, it is enough for the student to disable bluetooth to no longer be viewable in apple classroom.Is it possible that on jamf there is no possibility to insert in the profile the possibility to always leave the bluetooth active? the lack of this feature is very limiting. is it expected in the next updates? I saw from the forum that it has been talked about since 2016

Does the return to service app actually reinstall ipad os? The documentation uses words like "wipe" but isn't definitely clear on  if the OS on a ipad is erased and installed clean.      

Hey everyone - with Jamf Pro 11.13 we introduced the ability to manage your SSO authentication configuration in Jamf Account, and then re-use that configuration for managing access to Jamf Pro. Centralizing the authentication management for SSO in Jamf Account allows multiple Jamf applications and services to share in the same login process and eliminates the need for necessarily setting up IdP connection within each service. Using the settings for SSO from Jamf Account enables authentication through your organization's preferred identity provider, but for organizations without an IdP, the integration allows for Jamf ID to act as your means of authentication.  Single Sign-On Options for Jamf Pro FAQ    With the release of Jamf Pro 11.15, th

is it possible to install rlm license for arnold for Maya 2024-25 similar to previous versions on mac?

I want to add a file to the Shared directory on users computer, would like use Jamf Pro to deploy this file to the directory, does anyone have any idea on how to action this process?

When using Jamf Remote Assist I'm sometimes seeing an error about being unable to save screenshots. I'm not taking any screenshots though. Any idea what is causing this? Could it be when certain (Microsoft?) apps are open?

The go-to, open source, “patch-nearly-every-macOS-app-I-didn’t-even-know-was-in-my-environment” now MDM-agnostic super-tool just turned three Introduction App Auto-Patch 3 integrates local application discovery, Installomator, and user-friendly swiftDialog prompts to automate application patch management for Mac computers. With version 3, automation has been elevated with the introduction of several new features, including an automated background agent, settings via a configuration profile and enhanced deferral options. The end-user experience can differ based on how you configure App Auto-Patch: Completely Silent Silent Discovery, Interactive Patching Full Interactive 17-minute Quick-start for Jamf Pro Configuration Profile While version 3 of App Au

Hello,we have been using jamf teacher for several years to block certain apps or functions during lessons to prevent distractions while working.There are now two problems that cannot be solved in this way:1. we also have a rule at our school that iPads are not to be used during breaks.2. many teachers find it too time-consuming (or simply forget) to activate the lessons they have created with the special permissions/restrictions at the start of lessons.hence the question of whether it is possible for me to severely restrict the iPads from the ground up and that the apps and functions required for a specific lesson have to be activated - in other words, exactly the opposite of the way it has been handled so far.if this is not possible, are there any other suggestions for how we can overcome the problems mentioned above?Thank you very much for your help!

No se pudo completar la operación. (ErrorDomain 203). El certificado de este servidor no es válido. El servidor al que intenta conectarse podría estar suplantando a "bag.itunes.apple.com", lo que podría poner en riesgo su información confidencial. No se pudo completar la operación. (ErrorDomainCFNetwork 203).

Hi, We have Netskope deployed in our environment which was running fine until a week ago. Whenever the installtion is run, a pop up appears saying Terminal need access to control installer. We have PPPC configured, where Netskope have access to system all files, accessibliity, and FileProviderPresence. Anyone have same issue or can lead to solutions. We have tried everything we could, but still unable to fix.

I'm seeing a few CIS L1 baseline failures for devices in Jamf Protect but when I check the devices on JAMF Pro, the extension attribute is showing no known failures. This seems to also be intermittent depending on macOS updates. Are there any known issues? I've attached some examples of what's failing below:    

I have a package that only successfully installs when the logged on user runs it. Is there a way to deploy this via Self Service but not use the Jamf Binary account to install it? The other option could be to deploy the package to the user's desktop for them to manually run but I can't find a way to do that either.

I am trying to change the /etc/krb5.conf file. I have specific settings that I can't share... what I did was create a policy, under files and processes I put vi /etc/krb5.conf and the bash script I need run to change these settings. Did I do this right?