Here is another goodie!  As everyone knows (or maybe it is just me), that the Adobe apps are a real pain to deal with, and I have come up with a script that will facilitate the removal of any Adobe apps that are discovered on a user's system.   The script will go thru and import a directory listing all of the adobe apps that it can find and determine the highest "year" that is installed, and when the user is presented with the removal options, it will NOT allow them to remove the the highest year versions, but will allow them to remove previous versions.  I will also remove any CS6 and older files, outdated Adobe reader apps, outdated Acrobat apps & Safari flash plugin You can also pass the year when a new version becomes available and it will (optionally) present the user with a message stating that there is a newer version available if they don't already have it installed. There are two critical functions for

I've been tasked wtih trying to rightsize our Mac fleet's SSD that we purchase for the devices.  I've been tried doing an EA script that is generating some info and I tried creating an advanced computer search looking at "Boot Volume % full".  The Comp search one seems to give inconsistent data when I click into a machine record it vary's wildly from the column the report spits out.     I was thinking that once I get consistent data out, I could use smart groups to dump the machines that are 25% full go into one group, 26-50% to another, and so on.  But I'm also open to other suggestions.   thank you!

Hi Friends! Today is the FINAL day to apply to be a Jamf Hero! A few things to note: Heroes is for ANY Jamf customer. (It doesn't matter if you're new to Apple management or have loads of experience!)  Even if you were in the program before, you still need to apply.  Applications won't open again until next spring. THIS is your chance to get in amazing community!  Learn more from this previous post.  Or apply directly HERE!  Reach out to jamfnation@jamf.com with any questions.     

I have been trying to scope a policy to an Azure directory group however im not having any luck. In the settings JAMF thinks the user is a member of the directory group so that part all seems ok. In the policy i scoped it to all managed devices with a limitation of the directory group but it doesnt seems to run at all. I have tried both a Self-Service policy and a policy that runs on check-in but neither seems to work. When i remove the group limitation the policy works fine. Is there anything else i need to do to get the group limitation working?

Hi, I'm looking for a script or uninstaller for removing all Jamf components. My company made a decision to move to Intune, and we took the non-best practice route of manually moving devices (best practice is to completely reimage). Because of this the devices have Jamf residuals on them. We're simply looking to clean up after and remove any unlicensed elements as part of good due diligence. I did find one post suggesting use of a third-party uninstaller. Perhaps this is best over trying to come up with a script?

So I was having a hard time removing TV.app from the dock. Now before we start I know I could've used dockutil (which I've used in the past before) to make my life easier. However I didn't want to push any more 3rd apps unless I really needed to. I decided to use the built-in tools JAMF has to keep our deployment lean. I read a lot of post and found nothing relating to the TV.app itself.Some Applications are found in /Applications (Music, Numbers) while other like TV.app is found in /System/Applications (Launchpad, Photos). So I kept on trying /System/Applications/TV.app and nothing happen, it didn't remove itself. I tried every thing I can think of and nada, it was putting up a hell of a fight. So I decide to dig into the app itself. I finally came across something interesting. If you open up this file: /System/Applications/TV.app/Contents/version.plistYou will find:<string>TVDesktop</

Using Configuration Profiles option in JAMF i had setup HTTP/HTTPS Proxies.Distribution method was "Install Automatically". In Scope had added the target machine to which these Proxies should be applied In Proxies option enabled "Enable Web Proxy (HTTP)" and " provided Hostname or IP address and port number for web proxy.In Proxies option enabled "Enable Secure Web Proxy (HTTPS)" and providedHostname or IP address and port number for secure web proxy.After this saved the Proxies.Checked and verified in logs and found that the Proxies was pushed automatically. As per JAMF logs Proxies values were pushed successfully and automatically to target

My team has been tasked with changing some settings for Safari and Chrome. We have to have the homepage set and then a second tab that's blank. We are able to successfully push these changes with a config profile, but of course this locks down the settings.   Has anyone had any experience with pushing settings like this and the user still being able to change the settings back if they want?   I tried scripting the changes and pushing to me device, but neither browser seems to care about the changes. Any advice would be much appreciated.   Thank you

In any organisation some of the applications are licensed and which need to be scoped to individual machine or through static group collection.But when we check the JAMF App Catalog which are limited to scope “Smart Computer Groups” only.Could you please enhance this JAMF App catalog scope feature to the individual machines or static group.Thanks.

There is a lot of information about custom macOS screen savers and how to implement, but it took me a long time to sort through everything and find answers, so i am posting my findings here. I am going to try to keep it simple. Task: Deploy a custom screen saver built by an in house developer using xcode in .saver format. Set the screen saver for the login window and the logged in user. Solution:Part 1 - According to an Apple KB article, you cannot set a "Custom" screen saver at the login window. The article publish date is a bit stale, but after working with Jamf Support and my own testing, this still holds true up to macOS 10.15.2 (also tested on macOS 10.14.6). https://support.apple.com/en-us/HT202223 Part 2 - You can however set a screen saver for a logged in user. Package up your custom scr

Hey Mac Admins, I wanted to share a custom Jamf Extension Attribute I wrote to help detect the current IPv6 configuration state for whichever network interface is actively routing traffic — including when a VPN tunnel is in use. This script: Detects the active interface via route get default Handles VPN tunnel interfaces (utunX) by falling back to the actual

 I have been able to determine if the application is enabled and running, just have not been able to create a script or guidance to help the user turn it back on without generating support tickets. I have seen this type of guidance demonstrated with a Jamf lead learning presentation.So what I want to do is create an alert that will guide a user to a self service help script that will either direct a user to or allow them to click a button to enable Jamf Private Access when it gets disabled. Anyone have any Ideas? I have not been fruitful in my search of information as of yet to be able to run JamfPrivateAccess using CLI or create the assistive guidance necessary.

Hi,This is a bit of a strange issue; so I thought I'd see if it was one anyone else has seen, and had a resolution for.We have a configuration profile to apply our wi-fi settings. The wi-fi has a hidden SSID and is using WPA2 Enterprise, certificate based security. The profile works fine. It applies, and computers can join the wi-fi; however, every now and again the mac will stop joining the wi-fi. The profile is still applied. When I check the advanced wi-fi settings I can see that it still has all the settings present. It just will not join the wi-fi.The only thing I can find that makes it join the wi-fi again is to remove the configuration profile, and then re-add it; however that is awkward as the devices are rarely connected to ethernet in order to re-apply the profile.Hopefully someone has seen this behaviour before, and knows what the fix is?Thanks,

Just as an FYI - Slickdeals has Macworld today only for $7 / yr (up to 2 years). http://slickdeals.net/permadeal/95416/discountmags-macworld-magazine

Hello, We're looking to import Cyber Threat Intelligence a feed into Jamf Protect.  Something like STIX2.1 or a GraphQL API similar to here .The idea is to enrich Jamf Protect endpoint protection and integrate IoC's from external feeds.Is there already a solution?  Is this on the roadmap?

Has anyone noticed that the latest version of Jamf Connect, version 2.45, now shows up at the very bottom of the screen as opposed to centered on the screen? Is this the norm now?

My employer has a yearly daycare program where parents pay to drop there kids off at one of our campuses and then the kids can take various fun classes. This year one of the classes features the plane flight slim. I was looking at that and the installer for it is a custom .app, that asks whether you want the demo, or full version with a license key, and then it downloads about 80GBs.  For some reason it won't let you install the app in /Applications/ saying it will cause 'problems', it defaults to ~. However you can change it to /Users/Shared, which is what i will do. By default xplane stores its activation in ~/X-Plane 12/Output/preferences/, i don't know if that could be moved to the equal computer level locale. Does anyone have any experience with deploying this app via jamf pro and SSO via Jamf Connect? Contact the vendor for multi seat advice? Build a massive composer package and pray? thanks for the

Hi, I work in an education space (with Mac labs and the like) - we have 800+ Macs. Our current process for keeping macOS up-to-date is to copy an entire mac installer to each mac, then use a policy to trigger this installer. I find this a little exessive for applying minor updates. I'm wondering how else people keep their Mac fleets up-to-date.  I've looked at Jamf Managed Software Updates but it seems quite manual, and also hit-and-miss.  

We run n-2 for our cloud instance, and we just upgraded to 11.14.1 this past weekend. Now I'm noticing when I command+click the PreStage Enrollment in a computer record to open it in a new tab (Chrome and Safari), I'm presented with a page that says "Automated Device Enrollment not configured". I can manually navigate to the PreStages fine and if I do a regular click on the PreStage in the computer record it opens fine, it's only when opening it in a new tab that I get the message. I had gotten in to the habit of using a new tab because I noticed clicking back after looking at the PreStage just reloads the PreStage page instead of bringing me back to the computer record for some reason. I also just noticed if you simply refresh the PreStage tab (say you want to see if a machine is assigned or not yet), or even click in the URL bar and hit return, you get the error message again. It's like it has to see that you clicked the link from a computer record for some reason.

Hi All, Does anyone have SnagIT Deployment Tool plist for Jamf Pro? Thanks Advance 

Hey all, Just wanted to bring this up — generally, our Chrome settings configured via a configuration profile are working as expected. However, we now have a requirement to allow users to change their homepage, which isn't possible with the current enforced config profile setup. I've tested a few different methods, including manipulating Chrome’s ExternalPolicyDefaults.json, but haven’t had success getting the homepage to remain changeable by the user. The only method that partly worked was using an XML-based configuration like the one below. This does set the homepage and opens a second empty tab, but unfortunately, it still

We are deploying ClickShare to all of our conference rooms and have run into an interesting deal. Naturally, when the program starts from the puck, after plugging it in to the Mac, it needs to be allowed to record the screen. For installed programs, I would just do a PPPC configuration policy.  But I can't get it working for this. I have tried to get the Team Id, and it responds that the Clickshare. App on the puck is not a valid program.  I tried using Path (Which I have not used before), and that doesn't do the trick either. I used the IDs on Barco support site, but that is for the installable app, and doesn't work for the puck app. Has anyone come across this? Thanks Dave

We've just bought some new M1 Macs and when we installed 12.1 on them, they all have this Airplay Receiver turned on and want to view each other's screen. In a classroom, we definitely do not want this. Any idea how to turn this off? I can't seem to find the plist that looks after this.

HelloFor those of you using super as any comes across this issue.We currently rolling out MacOS 15 to our Mac estate I have seen this message in the logs it doesnt seem to be all machines just some. Sun Apr 27 06:44:10 M-5ce91eb4f537 super[94775]: Disallowed: The following "over-the-air" macOS major upgrades are available but not allowed:Sun Apr 27 06:44:10 M-5ce91eb4f537 super[94775]: Disallowed: macOS major upgrade 1 of 1 is: Title:macOS Sequoia 15.4.1,Build:24E263,Version:15.4.1 Depsite my config profile having the write settings for major upgrades <key>InstallMacOSMajorUpgrades</key> <true/> <key>InstallMacOSMajorVersionTarget</key> <string>15</string> Th

This is your friendly reminder that there are just THREE days left to apply to be a Jamf Hero!  Jamf Heroes Offers: Access: Heroes get more access to Jamfs across the organization. Recognition: You win when people know who you are. We’ll help you develop your personal brand as a way to showcase your knowledge in the industry. Fun: Jamf Heroes provides a solid dose of fun, which not only fuels the soul, but also helps facilitate friendships within the program. And more: We’re also big believers in creating moments that matter. So be ready for a surprise or two! Any current Jamf customer is eligible to apply (through this Friday, May 2)! Learn more here!