Greetings! Having a bit of trouble with a host name mismatch on a ceritificate that's causing an issue with Outlook on startup. So far, I've added and exported the certificate in Keychain Access, uploaded it to the JSS in a configuration profile, and then tried to deploy it to a test computer but the problem here is that the trust settings are set to Use System Defaults. Then, I tried packaging the certificate up with composer and copying it to /tmp and installing it with this command: /usr/bin/security add-trusted-cert -d -r trustAsRoot -k /Library/Keychains/System.keychain /tmp/certificate.cer Which does add it and set to Always Trust... However, I still see the Verify Certificate message when Outlook is opened and Use System Defaults as the Trust settings even though the certificate is marked trusted for all users. Any thoughts on what I might be doing wrong or another way to go about adding this certificate to the keychain and setting it to Always Trust? Thanks!

I set up a configuration marked OnPrem and SharePointDoor, but when logging in it tries to authorize me through office365, but we have a keycloak

So, I’m Extremely new at all this IT stuff, I was able to launch Nudge on to 2 test laptops via jamf using https://github.com/macadmins/nudge/wiki/Jamf-Pro-Guide but I don’t know how to make it Do anything. a link to a step by step would be great. Thanks in advance.

Has anyone found an easy way to deploy the Rapid7 Mac Insight Agent using Jamf

Hello all, I will be purchasing some new hardware for local software distribution points for both content caching servers using Apple's content caching service, and for software distribution points for lab installs.  We do a lot of Adobe CC installation, and other larger software packages. What do you use in your environment?   Opinions on using a Mac mini?  Does the amount of RAM or processor speed in a Mac mini make a difference between either of those use cases?   Thanks!

We are encountering the following error: 'An SSL error has occurred, and a secure connection to the server cannot be made.' This error appears in the management history in the Jamf portal. The installation of apps is failing, for the apps from the Mac App Store and those made available in the Self Service portal.      

I was planning to send a message to end user through Swiftdialog via a JAMF policy but it has to be after a specified time like after 50 mins or 80 mins. Any way is there? I cant see any such flag in Swiftdialog, if anyone knows about it please let me know. 

We're looking into adding a content caching M1 Mac mini to our network. I wanted to see what others have run into on their networks.1. How much storage space would we need? We're only going to cache software updates and apps for macOS and iOS, not iCloud caching.2. How much network traffic are people seeing? The Mac mini just added a 10 Gigabit Ethernet option. I'm going to say that should be a fat enough pipe.There anything else that any of you have run into?

Hi Community, We've had restrictions in place on installing Sequoia, and the restriction period is now coming to an end. Since we've had limited opportunities for testing, we would greatly appreciate any feedback from those using the new macOS in their environment.  

When running the following command: sudo security delete-certificate -c "NameOfCert"  /Library/Keychains/System.keychain   I'm getting: Unable to delete certificate matching "NameOfCert"   I'm building a job to deploy to multiple endpoints to clear out a wifi profile cert that isn't working. Thanks in advance for any assistance 

Today we are releasing a maintenance version of Jamf Pro. Consider upgrading to Jamf Pro 11.11.2 if you leverage AirPlay and are using devices with iOS 18, iPadOS 18, or tvOS 18 in your environment. Potentially impacted workflows include patient bedside environments, where Jamf Pro’s Global AirPlay Permissions settings allow for 1:1 mapping of bedside iPads to only see that room’s Apple TV devices as available targets; and interactive classroom settings, where teachers use Airplay to wirelessly display iPad content on an Apple TV. This release addresses the following product issues: Jamf Pro Server [PI120758] The AirPlay payload for computers now includes the DeviceName key to identify Apple TV devices with tvOS 18 or later as allowed AirPlay destinations, and it no longer requires a DeviceID key to be set. [PI121960] [PI122414] If you have AirPlay destinations mapped in Settings > Global > AirPlay permissions, devices with iOS 18, iPadOS 18, and tvOS 18 or later are now avai

Can anyone tell me if there is an updated version of this script floating around? https://www.jamf.com/jamf-nation/third-party-products/files/764/firefox-installupdate This has worked for quite awhile in our environment, and still works for updating Firefox, however if it is run on a machine that does NOT have Firefox installed it fails and does not install. Alternatively, if there is a better solution out there for installing/updating Firefox I would love to see it too :) Thanks all

Hi,We can't deploy Adobe Photoshop and Adobe Premiere Pro with Jamf.Do any of you have this problem?Whether we import the package via Jamf Admin or via JSS it is the same result.

As the title says, my client's computer can't access google, so I have to find a way to install an extension for these devices, trying to manually drag in crx files is feasible, but it requires an administrator to manually do it on each device, which seems too stupid, do you have any good ideas?

How do I get rid of this message for good ? Even after I 'cancel all' the next day there are a bunch of them again. Is it trying to install a configuration profile that has been deleted from my configuration profile payload? What's actually causing this?  

Can't find in the docs the technical difference between Check-In Date and Inventory Update. What device properties are updated on each one of them? For example, would a new installed App would be updated on the Inventory Update or Check-In Date?

Hey Jamf community, I hope someone can help me with our problem with the SSO Extension.We have replaced Enterprise Connect with Kerberos SSO Extension and now we have the problem that the password expiration date is not taken from Active Directory.We only get the message "Password doesn't expire".All other functions like change password work without problems.Does anyone know the problem and has a solution for this?     thankful for any help 🙂  best regardsMarcel 

We have an issue. We host our website on WIX and they do not have a way to host the JSON file required for BYOD and ABM (Managed Apple IDs)...etc.Anyone in the same situation that devised a way to host the file elsewhere and have re-directs work?We either have to move to another host (not likely to happen) or manage BYOD with InTune.

I am experiencing an issue where iPad apps are not installing on certain devices. This issue started on November 12th 2024. The affected devices are only devices that have not been enrolled in Jamf before. If I wipe a currently enrolled device and reenroll it, the apps will load just fine.  All apps I have pushed are not installing (including self service).  The errors I get on the iPad are "sign into iTunes to allow domain.jamfcloud.com to manage and install apps" and "This Apple ID can not purchase App Store Apps" My organization has managed Apple IDs and we use VPP for all apps. I checked, and there are no apps that are not under VPP or have run out of licenses, despite Jamf Pro saying, "Pending - All licenses are in use or the license is not assigned yet" under pending commands. This has never happened before and I am extremely confused on why this is only happening to devices that have not been enrolled into Jamf before. Any ideas are appreciated!

Remotely control computers in Jamf with Intune Remote Help, is it even possible if the systems are not integrated with each other???Personally, I am very convinced that it does not work unless the systems are integrated with each other. Or am I wrong?The reason I ask this (to me, rather stupid question) is because we are two camps - 2-3 people in the Intune world and myself in Jamf. We will eventually abandon Teamviewer and I have taken the opportunity to ask the question how we will then solve the remote control of the Mac computers.- We fix that with Intune Remote Help, I get as a reply from those in the other camp.I answer:- So we still have plans to integrate Intune with Jamf?The others:- Hmmm

  We have some users with iPhones in the field taking lots of photos/videos of roads/bridges that seems to be the biggest issue taking up space and leading to these iOS Update Download Error: Insufficient Space, especially with these larger iOS 18.x updates Was chatting with a user some last week and tried a consumer app on my iPhone over the weekend I wasn’t really impressed with. Seen anything else lately that does a good job of this? I found Clean Up in Photos but this is brand new may not be exactly what I am looking for. It's tedious for many users to have to manually choose what to delete off their iPhone. Thanks

I'm looking for an up to date extension attribute that checks to see if a mac has an account signed into iCloud and what that full account name is, if an account is signed in.   I've found several other EA's that look for this plist, MobileMeAccounts.plist. The mac I'm testing with is running on OS 15.1, and I do not see this plist under ~/library/preferences.   Any info on if the plist has changed or moved would be greatly appreciated as well.

I've been doing a bit of a clean-up on our Jamf Pro instance prior to us migrating to Jamf Cloud (which will hopefully be within the next month or two) and one of our extension attributes seems to be a bit out of date as I've noticed it's not been working properly.It's supposed to determine what the active/in-use network interface is (i.e. Ethernet or wireless) and has the following script:#!/bin/sh OS_MINOR=`/usr/bin/sw_vers -productVersion | /usr/bin/cut -d . -f 2` if (( $OS_MINOR < 5 )); then if [ -f /System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/Support/networksetup ];then echo "<result>`/System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/Support/networksetup -listnetworkserviceorder 2>&1 | grep $(/usr/sbin/netstat -rn 2>&1 | /usr/bin/grep -m 1 'default' | /usr/bin/awk '{ print $6 }') | sed -e "s/.*Port: //g" -e "s/,.*//g"`</result>" else echo "<result>The networksetup binary is not present on th

Just setup MacOS onboarding and working great for use.As anyone configured the MacOS Onboarding extension attribute mentioned here https://www.motionbug.com/jamf-pro-and-macos-onboarding/This does'nt appears to create tag usisng  touch /Library/Application Support/JAMF/.onboardingcomplete. I assume thats what its suppose to do, unsure if the path is correct shouldnt it be touch /Library/Application\\ Support/JAMF/.onboardingcompleteDoesnt create the file either way assuming thats what its suppose to do.Anyone got this working? think I missing something simple.   ThanksTom

I created the MakeMeAnAdmin Policy and made it available in Self Service and it is working well and creating the log file at the end.Is there a way to retrieve that file without having to engage / bother end user?The following options would have to engage end user, no?1. https://github.com/kc9wwh/logCollection/wiki2. JamfRemoteAssistANDIs there a way I can receive a notification when an end user executes that policy (when they click on "run" on the MakeMeAnAdmin button in self service)?