I created an EA to tell me the last time Adobe Acrobat was used. The issue I am facing is that i have gotten a lot of results showing as NULL. From what I can tell this happens if the user has not launched Adobe Acrobat since it has been updated. Any ideas or a better way to report the last time it was used?    #!/bin/bash    # Define the path to Adobe Acrobat    acrobatPath="/Applications/Adobe Acrobat DC/Adobe Acrobat.app" # Adjust path if needed    # Check if Adobe Acrobat is installed    if [ -d "$acrobatPath" ]; then        # Get the last used date using mdls        lastUsedDate=$(mdls -name kMDItemLastUsedDate -raw "$acrobatPath")        # Check if a date was returned (meaning it was opened at least once)        if [ -n "$lastUsedDate" ]; then            echo "<result>$lastUsedDate</result>"        else            echo "<result>Never Opened</result>" # Or a default date like "2001-01-01"        fi    else        echo "<result>Not Present</result&g

I dunno know who this will help out, but here it be ………We normally do screen recordings of macOS enrollments. This does several things for us.We provide it to our Support Team so that they can see the new[er] enrollment flow. Become familiar with it. As it sometimes changes from time to time. We share it out with our Security Team as well. So that they can see the enrollment process as well. In case they have a question or request a change that they would like to change. Lastly, we do it for training as well. We show the process of beta’s [macOS 26b3]. So that the team can see the process & changes that have been made or are coming down the pipeline.This has been & continues to be a helpful tool we continue to provide to our teams. However Apple has made some changes with how this process was done in the past. No matter what I tried we were not able to capture any video output until it got to the desktop. This just sux’d, we could no longer provide this service. Sure we could t

Hi all -Trying to install Adobe Creative Cloud through Jamf School. I have had success with other .pkg files, but the installer file generated from our Adobe Admin Console is opening up like a folder and not a simple .pkg file.I've scanned the posts here for answers. Tried to send it as a zip, tried to generate a file with Compressor. No luck.Anyone have any suggestions? Thank you!

Hi everyone,I’m Ajay Hinduja, a Geneva Switzerland (Swiss) a travel enthusiast who’s recently been exploring Apple device management through Jamf Pro.I’d like to deploy an app across all managed Macs in my environment, and I’m wondering what the best practice is for doing this efficiently. Should I use a policy with a custom trigger, Self Service, or is there a better approach you’d recommend? Also, any tips on dealing with app updates or version control would be greatly appreciated.Thanks in advance for your guidance!Best,Ajay Hinduja, Geneva Switzerland (Swiss)

Hey Jamf Nation!Are you able to keep up with all the content that Jamf Nation has to offer? It’s a challenge to make sure you don’t miss out on all the info and happenings. I’m thinking  the Tech Thoughts Blog, General Discussions, the Events page, to name a few.Make it easy on yourself and click on the ‘Subscribe’ button on the right hand side of any page you follow to get updates when there’s new posts.   

Hi All, I was wondering if it’s possible to push a plist/script to allow Outlook to download external images from a sender. I have seen a thread on here regarding the same topic, but I believe this is to download ALL external images from ALL senders, which is something that we do not want to do. We just want to download from a specific address. Any help pointing me in the right direction would be amazing.Thanks, Chris

Like most JAMF environments, we don't let users be admins on their own box, so when a user gets a new computer that means that they cannot use Apple's Migration Assistant either, so I had to come up with a "homegrown" solution for users to migrate their data instead of having the IT do the transfer for them.  This a constant work in progress, and in no way as comprehensive as Apple's utility, but it works to get the job done.  Feel free to use in your own environment and let me know of any feedback / usability enhancements, etc...  Again...this is not perfect in any way, and always a WIP, so if you use this test, test, test!  Enjoy...   Source Code: https://github.com/ScottEKendall/JAMF-Pro-Scripts/tree/main/MigrationWizard

The Jamf 400 course is the highest certification level in the Jamf training program and is designed for administrators who want to deepen their knowledge in scripting and automation. This course not only requires a thorough understanding of Jamf Pro and macOS but also the ability to independently analyze and solve complex problems.    What to Expect in the Jamf 400 Course?  The Jamf 400 course covers advanced topics and practical challenges. Key focuses of the course include Automation and Scripting:   Developing and implementing advanced Bash scripts and API calls to automate administrative tasks.  Prerequisites and Target Audience  To successfully complete the Jamf 400 course, intermediate to advanced scripting skills as well as familiarity with the Jamf API are required. The course focuses on deepening these topics and applying them in complex scenarios.  The course is designed for Experienced Jamf administrators who are already familiar wit

I’ve been silly busy learning lots of non Apple related stuff. However there does seem to be a need for a how to guide of sorts on how to implement Jamf’s new SSO requirements.  Back in the day, you set up a SAML integration from your IdP to Jamf Pro. Access group of users on one side, Jamf user accounts on the other and you called it done.  Jamf is changing how all this works. Instead of an integration per app, they are replacing everything with one OIDC connection from your IdP to their Jamf Account page. Every single SaaS app you then get from Jamf will then already be enabled for SSO, you just have to put the accounts in place. Essentially authentication becomes a once and done and the gating is done on the application side.  Any other speculation as to intent from Jamf here I think is complete hogwash.  This article has a Okta focus, because that’s the IdP I use. Your mileage will vary with other providers.  Before I get into the technicals I do need to po

At some point in your career as an Apple Admin, you’ve (most likely) inherited a Jamf instance and said either to yourself or out loud, “Huh, I wonder why they did that. I certainly wouldn’t do it that way” or “That’s not the best practice I was taught”.   Caveat: There’s no such thing as best practice. The better concept is defining the best practice for your environment.   This is where you get to step in and be the hero. It’s your job to take the environment, back it up first. Make sure you backup your instance and sync it to your free Jamf sandbox (If you don’t have one, talk to your rep). Once you’ve backed up and sync’d to the sandbox, I hope you’re noticing the theme here…you can get started with the H.E.R.O. process.   Something not mentioned is the process of writing documentation. DOCUMENT, DOCUMENT, DOCUMENT. Write down everything from the current state, proposed changes, changes you made (with dates), how configs work, workflow processes, and everything else. The 1st thing

I manage several dozen iPads using Jamf Pro.  I have a restriction set to only allow OS updates after they are 30 days old.  Once the 30 days are up, I manually push out the update using the “Download and schedule to install” option, setting the “Force install date” one week in the future and selecting the specific version I want installed.  What I am seeing is that when the “Force install date” comes around, the update is not forced, but the user is allowed to continue using the iPad without updating the OS.  I expected them to be “forced” to update when this date happens.  Does “force” have a different meaning here?  What am I missing?  Also, if I choose “Download and install” it does not force the user to update the OS either.  Thanks for any insight.  I’m new to this world.

Hey all, looking for some help or confirmation here. I’m managing lab Macs (M1/M2, macOS Sequoia) where user accounts are deleted at reboot. I want to stop OneDrive from auto-launching that “Set up OneDrive” window every time a new user logs in — but still allow students to launch it manually if needed.   Here’s what I’ve tried so far:   Scoped a Jamf Managed Login Items config profile with a rule to block application.com.microsoft.OneDrive(Label Prefix, team ID UBF8T346G9) Also added a rule to block com.microsoft.OneDriveLauncher just in case that agent is still around Tried both Jamf’s GUI approach and uploading a signed com.apple.servicemanagement profile directly with <Authorization>false</Authorization> rules Even layered on launchctl disable + login hook scripts to unload and delete the LaunchAgents   But the wizard keeps launching for brand-new users, even when all signs say the login item is blocked. Nothing shows in launchctl list, and the

New releases include:iOS 18.6 iPadOS 18.6 macOS Sequoia 15.6 HomePod 18.6 tvOS 18.6 watchOS 11.6 visionOS 2.6https://support.apple.com/en-us/100100

Have Logic on our recording studio machines (AD bound lab machines), but struggling to capture the plugin cache in Composer in a way that prevents Logic scanning for plugins on every login (We have c.400 plugins so it’s a real time killer). Do chip in with any questions/ suggestions, I'm very much not a Jamf power user, but to me has fallen the task...

That’s right  - there are brand-new swag options waiting for you in Jamf Nation Rewards!Check out your Jamf Account to see what’s new and start redeeming those hard-earned bytes.Not a member yet? Learn more and join here.And we’d love to hear - what are you saving your bytes for? Drop it in the thread 🧵!Here’s a sneak peek ⬇️  Explore the full lineup in Jamf Nation Rewards!Your rewards await 😎

Don't miss your chance to secure your 2025 JNUC tickets at the Just In Time rate of $1499 ($1299 for educational organizations). Starting Friday, August 1st, the Standard rate of $1,699 will apply ($1,499 for education).If you need help getting approval to attend, we've prepared a Convince Your Boss Letter to ensure you don't miss out.Have questions or need additional assistance? Visit our JNUC FAQ or email us at jnuchelp@jamf.com.Ready to secure your spot? Register for JNUC 2025! We look forward to seeing you in Denver this October! Kind regards,Jeff

I installed an App from self service. However, after installation, self service now only gives me the button to "Reinstall". There is not a "Uninstall" button for this App. How do I uninstall it ?

I'm trying to apply proxy settings to Macs for use only when they are in the office, connected to corporate Ethernet or WiFi, but I don't want these proxy settings to be applied when the user is at home or anywhere that isn't the office. Is there a way that this can be done?

Some of our primary school students have just used the Jamf Student app to update all the apps on their iPads. The Jamf Student app updated, but now it's asking the students to log into the Student app with a .jamcloud.com account. Our students are 10 years old and do not have any online accounts, how do they now use the Jamf Student app if they aren't allowed a .jamfcloud.com account? 

Been having a lot of problems with Filevault over the years. Now I’ve just discovered that you can no longer use the Filevault recovery keys in macOS 15.5. Instead, you are expected to boot to recovery, which is more of a pain. This removal is insane. Like many we use the stored key from Jamf to unlock devices in the event of account passwords not working. Now we have to use Recovery mode. I’d love to know Apple’s reasoning for this. Anyone else aware of this and have any comment? 

Hi there, Has anyone managed to successfully get the Jamf Pro Custom API action call card working in Okta?I get a 401 Unauthorized error even though the bearer token is brand new and passed directly to the auth field of the custom API action card. I even tried with API endpoint reference curl command and compared an invalid bearer token to a valid freshly generated one: curl --request POST \ --url https://sandbox.jamfcloud.com/api/v1/ddm/18/sync \ --header 'accept: application/json' \ --header 'authorization: Bearer invalid_token'{ "httpStatus" : 401, "errors" : [ { "code" : "INVALID_TOKEN", "description" : "Unauthorized", "id" : "0", "field" : null } ]}%  curl --request POST \ --url https://sandbox.jamfcloud.com/api/v1/ddm/24/sync \ --header 'accept: application/json' \ --header 'authorization: Bearer working_token'{ "htt

Since moving to JAMF Cloud, we’ve noticed that some time appears to be off. For example, I ran an Inventory Update manually on a computer, and the record in JAMF console shows that it was run 1 hour earlier than it actually was.Also, with Apple TVs we have records that say that the Inventory Update occurred up to an hour in the future.I’m not sure that this is causing an actual problem yet, but concerned that it could.  Are there time zone settings we should see or anything?  All of our client devices are in the same time zone (unless a client goes on a temproary trip or something).