Skip to main content

Get Support

Get Support

10000 Topics
R
rhooperValued Contributor
asked in General Discussions
Restrict Multiple apps with one Policy

Hey all,A non-scripter, knows just enough to be dangerous, tech here with a question.I have attempted a search for over three hours for a method to restrict multiple applications using one Restriction policy.We need to block Chrome, Firefox, Opera, Chromium Browsers on multiple devices. I tried adding in each of these apps in the 'Process Name' box separated by Semi-colons, Colons, Comma's and it does not work. As seen in the attached image.Besides adding 25 devices into a separate restriction policy, I see no means of performing a mass restriction. These separate restrictions are going to have to suffice for now, but what an administrative nightmare it is causing. Any help is appreciated.Maybe a feature request is in order with multiple add lines?

130
PRanxter
M
Mouthbaten_1911Contributor
asked in General Discussions
S
sekwila
asked in General Discussions
iOS DEP Enrollment: "Unable to Download Profile Configuration" error

We have this bug for over a week, Jamf Support couldn't solve it yet.We could enroll around 40 iPads without any problems, but suddenly, this error "Unable to Download Profile Configuration" pops up after continuing the DEP Enrollment process on every iPad. We tried our school wifi and multiple mobile hotspots.We tried renewing the DEP token, ASM connection, unassigned the devices from MDM and reassigned them in Apple School Manager, but no luck yet.See the attached screenshot:It says: "An internet connection is required to download the configuration for this profile. To continue, you can try again or choose a Wi-Fi network. Options: Try Again or Choose Wi-Fi NetworkUsing the latest Jamf (hosted) 10.47.0.Any help is greatly appreciated.

4260
agungsujiwo
A
alexjdaleContributor
asked in General Discussions
M
MCfreizNew Contributor
asked in General Discussions
emadams
emadamsContributor
asked in General Discussions
C
cyberotterNew Contributor
asked in General Discussions
Using API to Unmange Computers and Remove MDM Profile

Hi there! I'm tasked with migrating our devices from Jamf to WorkspaceONE. Working on a migration script to unmange computers automatically and have the user install an MDM profile for automated enrollment.  My issue is the JamfPro API Command to UnmanageDevice. Its just not going through. Here is the command I am using:  curl -X POST --header "Authorization: Bearer $bearer_token" "$JamfProURL/JSSResource/computercommands/command/UnmanageDevice/id/$DeviceID" The variables are working for everything else so it can authenticate into jamf and pull the device ID using the computers serial number, but this is the main blocker. Below is the response I get: <html> <head> <title>Status page</title> </head> <body style="font-family: sans-serif;"> <p style="font-size: 1.2em;font-weight: bold;margin: 1em 0px;">Not Found</p> <p>The server has not found anything matching the request URI</p> <p>You can get technical detai

1280
C
boberito
boberitoJamf Heroes
published in Tech Thoughts
Config Profile and Manage ALL the Things…Just AboutBlog

You can manage so many more settings than Apple documents.  Apple’s list of supported management keys for configuration profiles is slowly growing, though some listed on their own support site no longer apply or work for current versions of macOS. If you want the official Apple documented supported settings for configuration profiles there’s two places, Apple’s developer documentation and an Apple support page  https://developer.apple.com/documentation/devicemanagement/profile-specific_payload_keys  https://support.apple.com/guide/mdm/complete-payload-list-mdm5370d089/1/web/1.0  The developer documentation is nice because it lets you know what keys have been updated and changed. The complete payload support page is nice because it gives a little more description about each setting.  But…But…But…there’s so much more, so many more settings you can manage with a configuration profile! So, what if you want to manage settings not listed in those documents…there’s a

633
bethjohnson
A
AN_MNew Contributor
asked in General Discussions
Unmanaging Macs via Script

Hi All, I just need some assistance with unmanaging Macs through a script which is ran using a policy via Self Service. Our goal is for end-users to run this script themselves to unmanage the device (and lifting all the restrictions) without erasing the device. We have a mix of MacOS Monterey, Venutra and Sonoma. We have noticed that removeMDMProfile no longer works for MacOS Venutra and higher (I think because of Apple's updated security) but it has been working for MacOS Monterey. This is the script we are using at the moment:     #Remove JAMF echo "Deleting JAMF..." 2>>$Result_path 1>>$Result_path sudo /usr/local/bin/jamf removeMdmProfile 2>>$Result_path 1>>$Result_path sudo /usr/local/bin/jamf removeFramework 2>>$Result_path 1>>$Result_path sudo /usr/local/bin/jamf -removeFramework 2>>$Result_path 1>>$Result_path MDM_UUID=$(sudo profiles -Lv | awk '/attribute: name: MDM/,/attribute: profileUUID:/' | awk '/attribute: profileU

310
karthikeyan_mac
mbayhylle
mbayhylleContributor
asked in General Discussions
L
liubkkkk0New Contributor
asked in General Discussions
M
mpittcasdContributor
asked in General Discussions
The Configuration for your iPad could not be downloaded

Seeing this message on an old iPad Air so I'm not sure if that's the problem. User installed some kind of update but it's stuck at the Remote Management screen when connecting to JAMF. The error message continues "The configuration is not available".    Reading through a lot of the other posts with a similar message when enrolling. I've so far tried removing it from pre-stage and adding back then waiting, I renewed the token from ASM as well as uploaded a new token from JAMF back into ASM. Our pre-stages don't have any certificates with them that would need updated like what fixed some others. I also erased it completely with a restore and update but still get stuck. Is this iPad too old? Maybe it's a different issue? I haven't seen this before but none of our other iPads are having problems.

460
L
N
nguyenhungNew Contributor
asked in General Discussions
BrandonAmos
BrandonAmosContributor
asked in General Discussions
C
chadlawsonContributor
asked in General Discussions
Long Shot: Fixing a macOS Push Cert Issue

I recently took a full-time position with a company for whom I used to consult on their Jamf instance. It had been a little over a year since I was on the system and in the meantime there had been a few other people with their hands inside it though it was mostly perceived as stable and left alone.But I recently discovered that in the intervening year, the APNS cert had expired. A new certificate was created (with a different AppleID) and the handful of iOS devices were re-enrolled. Since the Macs were still checking in, it was assumed that nothing needed to be done.I managed to find the original AppleID and found the cert under that login had been renewed at the same time. But it was the cert with the new login was uploaded to Jamf instead.I have both certs downloaded and I created an extension attribute to determine which computers have which cert topic. Of the computers that have reported in, it's almost 50/50!So I have a large number of computers that are still checking in but not

140
agungsujiwo
Shwan
ShwanNew Contributor
asked in General Discussions
macOS15 Sequoia BUGGGG!!!

I have a script that worked before OS15. After updating to OS15, the script became abnormal. Even if it connected to the allowed SSID and obtained the IP address, it would turn off and on WIFI infinitely. The following is the script. Thank you for your help~~我有一个在OS15之前运行正常的脚本。在升级到OS15之后，脚本变得异常。即使连接到允许的SSID并获取了IP地址，它也会无限循环地开启和关闭WiFi。以下是该脚本。谢谢您的帮助~~我有一个在OS15之前运行正常的脚本。在升级到OS15之后，脚本变得异常。即使连接到允许的SSID并获取了IP地址，它也会无限循环地开启和关闭WiFi。以下是该脚本。谢谢您的帮助~~我有一个在OS15之前运行正常的脚本。在升级到OS15之后，脚本变得异常。即使连接到允许的SSID并获取了IP地址，它也会无限循环地开启和关闭WiFi。以下是该脚本。谢谢您的帮助~~     #!/bin/bash #！/bin/bash #！/bin/bash #！/bin/bash #！/bin/bash#!`/bin/bash` 文件内容： ```bash #！/bin/bash #！/bin/bash #！/bin/bash #！/bin/bash ```#!`/bin/bash` 文件内容： ```bash #！/bin/bash #！/bin/bash #！/bin/bash #！/bin/bash ```#!`/bin/bash` 文件内容： ```bash #！/bin/bash #！/bin/bash #！/bin/bash #！/bin/bash ```         # set the allowed SSID GUEST-VIP设置允许连接的SSID为“GUEST-VIP”。设置允许连接的SSID为“GUEST-VIP”。设置允许连接的SSID为“GUEST-VIP”。     &nbsp

110
Shwan
W
WgphotoContributor
asked in General Discussions
Jamf Sync app

Hey, guys. Started testing Jamf Sync app, since Admin is going away (gone?). I was checking out the documentation and the latest bug fixes list that the upload timeout was changed to an hour to accommodate large uploads, but does not solve issue with files larger than 5GB on a JCDS2 distribution point. This concerns me as my most frequent uploads are Adobe apps and they typically are larger than 5GB. I have not had much success with the web upload of these installers in the past, which is why I continued to use Admin. I am attempting an upload now using Jamf Sync, but I suspect it may just fail as package is larger than 5GB. Progress bar isn't doing much either. What have your experiences been?Bug fixes• Changed the timeout for uploads to an hour to solve an issue with large uploads. This does not solve the issue with files > 5 GB that are uploaded to a JCDS2 DP. 

490
leslie_h
S
sharif_khanValued Contributor
asked in General Discussions
Cortex 7.7.2 Deploy via JAMF

Hi EveryoneI hope this document will help everyone who use Cortex in their environment for mac and manage via JAMF Pro. You can deploy cortex via Jamf. It is pretty simple and straight forward. All you need to follow PaloAlto Networks document: https://docs.paloaltonetworks.com/cortex/cortex-xdr/7-7/cortex-xdr-agent-admin/cortex-xdr-agent-for-mac/install-the-cortex-xdr-agent-for-macos. Here you will find they have already pre-configure MDM profile for Cortex one for M1 and another one for non M1. you will get all those here: https://docs.paloaltonetworks.com/cortex/cortex-xdr/7-7/cortex-xdr-agent-admin/cortex-xdr-agent-for-mac/install-the-cortex-xdr-agent-for-macos/install-the-cortex-xdr-agent-for-mac-using-unified-configuration-profile#id945ae538-41d5-4b65-ad37-233fd665e992. After download unsigned one upload to your Jamf pro and make some changes as required and follow the document if needed. After upload profile scope your machine to have them on endpoint before corte

620
A
T
TraianNiculaiContributor
asked in General Discussions
Intune integration stuck and require to register again

Hello, We just started to implement Jamf and we want to configure Jamf integration with Intune. All the policies are in place and we are using company portal to make the enrollment. The issue here is that, after we run the Microsoft Intune Integration from Self Service, we have to login in company portal, after finishing the Company portal the user is prompted with this:If you click continue, you will have to make one more Azure sign in, but the login screen will get stuck after entering your password. My guess is that it get stuck due to system asking you if you want to save the password. The only workaround I found is to close the screen, sign in to Jamf and redeploy the integration script. This time, the enrollment will be done because you are no longer prompted to save the credentials. My question is: Is there something we do wrong or can this be solved? Regards,Traian

60
T
A
applebravoNew Contributor
asked in General Discussions
B
bvondeylenContributor
asked in General Discussions
D
DaveRukampNew Contributor
asked in General Discussions
Managed macOS devices intermittently failing wired and wireless authentication, any ideas?

Anyone have ideas on how to get the client to consistently present the computer name during the authentication attempt? My understanding is that the 'Use Directory Authentication' option in the profile configuration should be forcing this. I thought I came across an article from back in the 10.10 days where this was discovered as a bug and fixed in 10.11, did it come back?Problem Statement: Corporate managed macOS devices are intermittently failing wired and wireless authentication against the Aruba ClearPass policy. The issue appears to be that sometimes the Mac is sending the logged in user’s username for authentication rather than the Mac Computername which is what is expected. Additional Problem Statement context:When a Mac authenticates the authentication attempt is passed to the ClearPass policy manager. The ClearPass policy is expecting the Mac to pass along its Computername in the 'Username' field. It then validates that this Computername is in the Macs OU in Active D

560
agungsujiwo
L
Lion55Contributor
asked in General Discussions
Franky779
Franky779Contributor
asked in General Discussions
J
judmorris22Visitor
asked in General Discussions

Want to write for Tech Thoughts?

Earn a cool badge and Jamf Nation Reward Bytes for your published articles. We’re looking forward to your submissions!

Submit A Blog Post
Terms & ConditionsCookie settingsAccessibility statement