I've created an EA with the script  #!/bin/bash echo "$(mdls "/System/Applications/Utilities/Terminal.app" -name kMDItemLastUsedDate | awk '{print $3}')" and running it on my device, it returns  2024-12-12 as expected. I then created a Smart Group with Criteria <Name of EA>, Operator 'after (yyyy-mm-dd)' and Value '2024-01-1'. Jamf returns a list of devices but I do not believe this list is accurate, as it does not include my device when I've been using Terminal all morning. Any suggestions on what could be happening or what I can do to improve its accuracy?  

Good morning!I did a search and couldn't find my exact question, so feel free to point me in the right direction if you know of anything...But I'm having an issue updating Jamf Connect in my environment. Because of the Launch Agent I'm running with it, it can't properly close and update and results in a very annoying, persistent pop-up asking to close the program that when followed, relaunches and pop-ups again until you restart the machine a few times.I'm reaching out because there has to be a better way. What's the easiest solution to ensure Jamf Connect is updated and not being disruptive to our users?Thanks!Joel

Hi Team, Apologies if this was ask before but I cannot find the proper process to unmanaged devices that are no longer on the network. A lot of conversation around using API and CURL command but as a none mac user, I cannot figure out how to use. I know it's not great to other people who work hard to post and reply to those query but i'm struggling to know what to use and how to use the API We use windows base system and servers and Jamf Pro cloud Can someone please help me? Thank you in advance Regards G_Man

Hey all,We have about 150 student iPads 9th gen that haven't updated to 18 because we used the schedule install command which requires at least 17 to be installed. What is the best course to get these iPads updated? Do I resend a plan in jamf to download and install and target just these iPads?Or does it make more sense to have out staff have the students update on device?

Is the calculator app new to ios 18? I never noticed it until I started updating ipads to ios18. Is there a way to remove/hide the calculator app with a configuration profile?   Thanks

Hi, Anyone using Jamf Protect to audit all file access (new/read/update/delete) on an attached storage device? If so, how are you setting that up?   Thanks

Hello,   We were trying to install iMovie to some laptops. We add the laptop to the scope of the imovie app catalog in jamf pro but nothing appears to happen. The app would not show up on the laptop after a few restarts and manual inventory updates. In jamf, the app shows in the scope of the computer but in the history tab there was no pending, failed or completed command that shows regarding the iMovie app. I went into this section in the image provided and in username box i typed in admin which is the local admin account we create on all managed laptops. After that the iMovie app downloaded on the laptop. Not sure if typing the admin account in the username was the solution but will   I have to do this to every laptop I assign the iMovie app? How can I avoid this and just make sure the app installs on all laptops in scope? Thanks  

Co-Authored By Simone Martorelli and Jonathan Krauer At the Jamf Nation User Conference this year, the Mac@IBM team presented a new solution that’s set to transform Mac device migrations in the enterprise: IBM Data Shift. Developed in response to the unique challenges of managing large-scale Mac deployments, it provides a user-friendly, secure, and efficient method to migrate data on managed devices—bridging gaps left

Hi, I have quite a few macs with admin accounts on 10.13.6 that dont have a secure token (viewed by running sysadminctl command).I want to add the secure token silently without involving the user via ssh or someother tool, as i have seen the users of the machines have this secure token.I have tried sysadminctl -secureTokenOn "admin account" -password "password" but get Operation is not permitted without secure token unlock.i know that sysadminctl -adminUser user -adminPassword “password” -secureTokenOn "admin account" -password “password” Will probably do it but i cant go asking for the user password Does anyone know of another way?

looking for mac admins in the area to get together once in a while....let me know  if you are and we can set something up   Dan

Hello, Are there any alternatives to Apples Screen Time, more specifically the App & Website Activity section where we want to track data on how much time students are spending on apps. Not sure if Jamf Pro has any way to configure and collect the data or will we have to go through each students device and set it up and go to each device to collect the data?

Update 19 December 2024: Standard cloud upgrades are scheduled for the weekend of 20–21 December (details below). We appreciate your patience. Today we are releasing Jamf Pro 11.12; highlights include: New Restrictions for Computers and Mobile DevicesNew restrictions include support for bypass screen capture alert and the ability to restrict Apple Intelligence features. Computer Extension Attributes Page RedesignThe redesign features improvements to search, filtering, and display of computer extension attributes.   For additional information on what's included in this release, review the release notes via the Jamf Learning Hub. See the latest

We're looking into solutions for restricting users from download packages or software via Terminal. Just as an example, installing Homebrew via Terminal to install Python. Once users have access to Python, they are able to install and Python packages they please. It's been getting difficult to track who has Python installed and what sorts of packages installed as well. If a user installed Python via the Python website, we can see the installer listed in Jamf's app list for their device but found that if they installed it via Terminal, the only way to detect it is to run 'python3 --version' in Terminal to see if it returns a Python version. I'm exploring to see if we can restrict certain Terminal commands with an Admin password (such as restricting running the command that installs Homebrew). I'm open to seeing if Terminal can be completely locked down with an Admin password but would much like to explore other options first, if available. Has anyone else ran into somet

Hello We have started to enroll our macbooks for our employees without adminrights. Yes we have the privilege access configured in jamf connect, but don't want use it for everyone :) So i started to configure what is necessary for our employees that they can work without adminrights. So far so good. Now i am actually helpless with this one problem about creating a symlink via jamf pro policy after installation of Visual Studio code. What i need is: A symlink in the directory /usr/local/bin/code which points to /Applications/Visual Studio Code.app/Contents/Resources/app/bin/code   So i am able to create it, but it isnt working. Checking it on a testmachine the symlink shows me in the "get info" as "Original" the path /usr/local/bin/code  instead of /Applications/Visual Studio Code.app/Contents/Resources/ap

Copied and pasted from Mr. Macintosh site.   Safari18.2SonomaAuto.pkg Safari18.2VenturaAuto.pkg

How would I go about blocking extensions on Arc? Since it's a Chrome wrapper will blocking extensions work the same way in Arc as they do in Chrome by using a config profile? If so, what are you using for the preference domain? 

Hello everyone, I need assistance in configuring a policy that will apply only one time for each new computer following its enrollment, specifically for machines located at a certain site. The policy's aim is to modify the keyboard layout setting. As it stands, the factory setting for the laptop keyboards is Arabic, and I need to update this to Arabic—PC layout, owing to the fact that most new employees are familiar with the PC keyboard layout. This policy should only affect new installations and not disrupt existing setups. Additionally, I want to ensure that employees retain the option to switch back to the default MacOS keyboard layout if they choose to do so later. I've investigated the following plist file for keyboard configuration:      /Library/Preferences/com.apple.HIToolbox.plist     However, updating the keyboard layout through system settings does not seem to result in changes t

Hello Jamf family, Is there a script that can uninstall apps like in Intune? Thanks, JM

I have set up Cache Server 1 in City A, where I added the subnets of this location in the "content cache for" section. For my local network, I used the "custom public IPs" option and added a TXT record to the local DNS. This configuration is working as expected. Now, I am setting up Cache Server 2 in City B. The configuration is the same as in City A, ensuring that the subnets in City B fetch cached content from Server 2. I have also configured them as peers, with no parent settings in place, and both City DNS servers are synchronized with each other.   Q1: How is data served to clients in City B if Cache Server 1 already has the same files? Q2: What changes should be made so that, in the event one server goes down, devices at both locations can still retrieve data from the other server? Additionally, while both servers are available, how can we ensure that devices access their respective server to minimize latency?

Is there an inventory setting or extension attribute to see the iPad Chip?

Is there a way to automatically have Safari 18.1.1 install on all end user MacBooks? I 'thought' if we pushed 14.7.1, Safari 18.1.1 would be included/installed at the same time. That does not seem to be the case as users still have to manually go into Settings -> software updates -> updates safari there.

Anyone using EntraID for IDP with JC have any best practice suggestions for what claims to include in the ID Token?  We plan to use the Admin Elevation feature for particular groups.

Hello fellow Admins,   My company has recently implemented Jamf Connect to do a "pre-provisioned" style setup for refreshes. We are stuck on our new hire setups as Okta is not setup yet for a new hire, but the login requires your Okta credentials. I have seen the option to list a help button that takes the new hire to the Okta portal to finish the setup:htt

Hi all, I have a client whose company has very strict policy about data protection and privacy. We are developing an App for this client that will utilise the Apple Dictation function. Due to the data protection and cybersecurity requirements, we want to use the Apple Dictation function in offline manner, which is possible. However, Apple documentation did not provide option to exclude audio and text data using in audio transcription process to be uploaded to Apple servers. Hence we are looking to use JamF to block such traffic. In fact, we want to block most traffic to public internet, except those necessary for operating the devices, MDM and app. For example, we will allow list of servers used for certificate validation. My question to JamF community and JamF experts is if JamF can help us achieve our objectives, which including network traffic filtering at OS layer (blocking even iOS traffic to Apple servers)?

I have deployed BeyondTrust's remote support client to my test machine. However, if I set the configuration profile to Allow Standard Users to Allow Access for ScreenCapture, the app doesn't seem to realize it's been authorized. It continues to prompt to allow. Even if I check it with an administrator account. As you can see in the screenshots, even the Accessibility and Full Disk Access are also showing denied, even though they are set to allow in the configuration profile.The fun part is (on a fresh image) if I set the ScreenCapture to Deny, then use an administrator account to allow while on the computer, it actually does allow it.