We are looking at utilizing Jamf Setup Manager to make enrolling devices easier. I tried installing the graphics for the setup manager and it will not load when going through the setup manager. I have verified that it is packaged correctly and it is assigned in the PreStage but it is still not seeing them. I have had similar problems in the past when trying to upload them in the prestage but now want to get this fixed due to trying this new way of enrolling the devices. I have confirmed that it is not installed on the computer after enrollment.

I came up empty on Jamf Nation and realize this isn't specifically a Jamf-related thing per se, but maybe you guys would have some ideas. I'm in IT at a university where we just upgraded some of our audio software over the winter break, including Reaper.I initially did an update from 6.66 (hail Satan) to 6.83 using a package created in Composer and then scoping it as a policy, pretty straightforward. And that was fine. The problem is that our license isn't valid for version 7, and I don't have much of a paper trail as to how Reaper was originally deployed and what we actually paid for, etc. Long story...the guy before me left some notes but it's taken some reverse-engineering to get things going again.So I ended up just buying 13 of the $60 discounted licenses for one of our classrooms rather than trying to retrace our steps from the last purchase. Went around logged in under the [local] admin account and licensed a few computers, so far so good...then logged into my own network accoun

How to Implement Temporary Permissions in Jamf Connect with Azure Entra Background: I got a bit frustrated the other day because, well, most folks have teams of people to configure these token settings, dig into the claims, and get everything working seamlessly. Meanwhile, I had NO IDEA what I was doing. As someone who manages desktop technicians, I work closely with them to handle the technical aspects of both macOS and Windows environments. When I first dove into the Jamf Connect documentation on temporary elevation permissions, I’ll admit—I got a bit... annoyed. It didn't feel very easy for what seemed like a straightforward task. So, if you’re in a similar boat, trying to configure these permissions with existing setups, this guide is for you. I’ve broken down the steps to make it a little less painful and help you get up and running without reinventing the wheel. Assumptions Jamf Connect is already set up in your environment with your IDP configurations in place. You have a group

Hi all, I've been running Jamf Pro with Jamf Connect Basic for over a year for our basic MDM needs, but still have our users (about 140) log in to their Macbooks with a locally managed account rather than our primary identity provider, Google Workspace. We already have the link between the Jamf Connect and Google for self service and I understand that Jamf Connect Basic allows "the login window which enables users to login from the macOS via their cloud identity" but can't find in the documentation how to enable this. Is this possible or do I need to look at (yet) another third party solution for this? Any help would be greatly appreciated.

Hi!We recently noticed that our Shared iPads automatically log off a user after 10 minutes of inactivity. (I do know about the equally unsatisfying screen lock after 2 minutes, but that's not it.)I'm quite positive that this wasn't the case last year when we had the same scenario. Is there any way of disabling automatic logging off or modifying the period of grace for inactivity? (In addition, some updates must've led to the logging-off process, i. e. writing data back to the managed iCloud accounts, taking way longer [around 2-3 minutes] than earlier this year, such that easily logging in again is not really feasible.)Any input much appreciated!Neven

Good morning.In my instance of Jamf Pro I have several developers using Rancher Desktop in Administrative Mode, which requires "sudo access" for some operations. Therefore, at each start, they must rise (we have provided a special tool) to start the application. Is there a way I can avoid this step for them?I tried with a script that modifies the sudoers file like this:   echo "$USER_NAME ALL=(ALL) NOPASSWD: $/Applications/Rancher Desktop.app/Contents/MacOS/Rancher Desktop" | sudo tee -a /etc/sudoers > /dev/null.   The file is indeed modified but Rancher continues to ask for the password on startup.Am I doing something wrong? Are there other ways?I already tried also to install the app in the User Folder.

Hi, I am trying to get information of User,  Computer Name, Operating System, Last Inventory Update and Last Check-in through APIs Right now, the API I'm dealing with are these 2 below:https://xxx.jamfcloud.com/api/v1/computers-inventoryhttps://xxx.jamfcloud.com/uapi/preview/computers The problem is they are NOT returning all the computers' details only partially. I even tried with https://xxxx/uapi/preview/computers?page=1&page-size=10000000 or https://xxx/api/v1/computers-inventory?section=GENERAL&page=0&page-size=10000&sort=id%3Aasc.Do you have any idea what did I miss ? or suggestions to another API calls ? Thank you so much,

I have been playing with machine based certificates now on the macs, trying to get them to authenticate more cleanly to our environment. I ran into a problem. I can push the config profile, and i finally got it working. It installs an AD cert into the SYSTEM keychain. When you are logged in, it connects automatically and fine to the network using the machine certificate. yay...However the problem, is if you reboot or logout, the network disconnects. The wireless in the top right goes connected for a few seconds, then goes faded (not connected) again shortly after. It might flap like that a few times. My radius server sees no connection attempt at the time, so its not really doing anything. Log on as an existing user, and all is well again. anyone got any ideas? policy pushes out a certificate and a wireless profile in the same configuration profile. Using TLS, radius is NPS server. Certificate logon works fine on windows machines. Machine is active directory joined.

I've done a ton of searching and still haven't come up with the answers I need. I'm looking for a document/web page that tells me exactly how to setup a 2nd NDES server with App Proxy and get it working with Jamf, including how to setup the config profile for iOS and MacOS.  We have moved to Cisco ISE and it requires certs to access the network.  We do have NDES/SCEP working with Intune, but there aren't many documents on how to setup a 2nd one to work with Jamf.We've tried several documents and everything looks fine, but the iOS profile won't load on the device.  I feel like there's probably something easy that needs to be done on the NDES server, but I can't figure it out.  ***We are using profiles and not setting up Jamf to be a SCEP Proxy.  Not my decision.  And our network team says they can't do the network integration into Cisco ISE.  Again, not my decision.***And before anyone suggests it, I have worked with Jamf Support.  They

Hi folks We are trying to configure Jamf Pro as a SCEP proxy for our Microsoft CA which is hosted in our company network.So far we have set up the NDES role on one of our servers and the website shows the challenge passwords can be obtained from the mscpe_admin webpage. We have verified that the connection between jamf pro and the SCEP / NDES server is allowed on our firewall. I can see inbound traffic from the jamf pro network ranges (Data Region eu-central-1). In the logs of the SCEP configuration profile, I always get an error that the server could not be found, which I weird since I see the traffic coming in on the firewall. I tried both ways of configuring SCEP, in the configuration profile and in "Settings/PKI Certificates/Management Certificate Template), it shows the same issues. Now what's really the icing on top is that sometimes we get an error that the certificate could not be verified, which I see only in the jamf pro server logs(but I might be reading that w

Hello,   we have the following problem: Nobody can change their AD password via NoMAD. This error shows up: "Unable to change password: Configuration file does not specify default realm" I found out as soon as I go to the nomad app container and execute the unix file, another NoMAD instance is opening and showing an icon in the menu bar, where I can successfully change my AD password:   In Jamf we deliver nomad and the launch agent as a policy and a Plist as a configuration profile.  This comes from the past, I dont know if this is enough and correct in this time: The weird thing is that it is working with the unix file inside the nomad.app which is on all our Macs.  Thank you for your help in advance!  

I'm rather suddenly having an issue with Mac Apps and it not installing Google Chrome from the Jamf App Catalog. Before, if I wiped a device and got it set back up, within a few minutes Chrome would auto-install like it should. But over the last two days I've had 400+ devices stuck in the 'In Progress' stage including devices I've recently wiped.  Version deployed is the latest version of Chrome Target Group: All Managed Clients Update Method: Automatic Initial Distribution: Install automatically I tried switching it from Install Automatically to making it available in Self Service, but when I opened Self Service, there wasn't an option to install, only Open or Reinstall but it would error each time I selected either option.  Any ideas?

Hi, is there a way to add network shares to finder favorites via the command line? I could not find anything by googling.  

Greetings. I need to be able to ingest Security related log data from JAMF Pro api. Does anyone have suggestions on the API endpoints that I should focus on? ThanksFrank 

In Acrobat Pro and Adobe reader the Generative AI upload is enabled by default and you have to opt-out if you don't want to do that. Here for more: https://helpx.adobe.com/acrobat/using/generative-ai.htmlFollowing script can be deployed with a policy and creates two plists which disables Generative AI in Adobe Reader and Acrobat Pro. #!/bin/sh # Adobe Reader /usr/libexec/PlistBuddy -c "Add :DC dict" /Library/Preferences/com.adobe.Reader.plist /usr/libexec/PlistBuddy -c "Add :DC:FeatureLockdown dict" /Library/Preferences/com.adobe.Reader.plist /usr/libexec/PlistBuddy -c "Add :DC:FeatureLockdown:bEnableGentech bool false" /Library/Preferences/com.adobe.Reader.plist # Adobe Acrobat Pro /usr/libexec/PlistBuddy -c "Add :DC dict" /Library/Preferences/com.adobe.Acrobat.Pro.plist /usr/libexec/PlistBuddy -c "Add :DC:FeatureLockdown dict" /Library/Preferences/com.adobe.Acrobat.Pro.plist /usr/libexec/PlistBuddy -c "Add :DC:FeatureLockdown:bEnableGentech bool false" /Library/Preferences/

Hi Everyone,   Am trying to Packaging Homebrew-4.4.0.pkg using Jamf composer When i install Homebrew-4.4.0.pkg on clean Mac machine it will install without issue it shows Homebrew 4.4.0 when checked on terminal with brew -v but When i package it using jamf composer and install the packaged Homebrew on other Mac machine it will show Homebrew 4.3.0 on terminal with brew -v. Can someone please help me with this, packaging Homebrew 4.4.0 is not right?  

So I know this was requested and asked about a couple years ago based on searches but have not seen anything recently. With the addition of screen time tracking having been added to iPads in general is this something that JAMF now tracks or are we still out of luck?   I have several users requesting new iPads because there are "We use them to much and there aren't enough for all of us" but in reality I think its they do not want to share.

Hello everyone,   I'd like to know if it's possible to have a configuration profile for each of my Chrome extensions when deploying them on the same target? I currently use a single configuration profile for all my extensions, because when I tried to create several configuration profiles and applied them to my target, only one of them applied. Current configuration : <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>ExtensionSettings</key> <dict> <key>eljmjmgjkbmpmfljlmklcfineebidmlo</key> <dict> <key>installation_mode</key> <string>normal_installed</string> <key>update_url</key> <string>https://clients2.google.com/service/update2/crx</string> <key>toolbar_pin</key> <string>force_pinned</string> </dict> <key>cjpalh

Hello Gurus, I am fairly new to JAMF, so I'm still learning. I would like to use Azure groups to assign configuration profiles. I was able to connect to our Entra ID environment from Settings > Cloud identity providers. I can query and find our Azure groups from Settings > User accounts and groups. The problem I'm facing is that these Azure groups are not showing up under Scope when I am setting up Computers > Configuration Profiles or even Policies. The reason for this is to set up different applications/policies for users in different departments. Since we already have different security groups set up for departments, I'd like to utilize what we already have in Azure. We'd also want to avoid LDAP and stick with Cloud only. What am I missing here? Thanks!

Hi there. I am fairly new to Jamf and have been handed control of a school who is already setup. I have a teacher who wants students to take a photo on the ipad and then be able to open gallery, select the photo and email it to themselves. But there is no email listed when they try to share the photo. Does anyone know where to allow this in the dashboard?   Thanks.

Just wondering if there is a way to enable the Safari Homepage button so that it's visible.  I would like to do this on the command line so that I can have Jamf do it 

Hi there,Looking for instructions on how to install the Veeam Agent for Mac. Veeam doesn't have any instructions they just say to "refer to the documentation of your MDM solution.". Obviously there's nothing in the documentation for how to install the Veeam agent using Jamf.Can anyone help me out here? Thanks!Sincerely,

We use iPads for our Electronic Flight Bags, and one of the applications on these devices utilizes the native iPadOS Mail app to send emails. We operate in a Microsoft Exchange Online environment and have successfully pushed email accounts assigned to user devices with OAuth, where they enter their password and 2FA. However, we also use backup devices assigned to planes or loaners, which are user-agnostic. We are trying to push a centrally managed service account for these devices, as the pilots wouldn’t know the password for this email account. Modern Auth is disabled for this account, so a username and password should suffice. Despite this, when setting up the configuration profile, it still prompts for a password on the device when the profile syncs. Does anyone have any ideas or suggestions on how to resolve this issue?

I've installed Zoom via VPP on several iPad's.  Recently got a call that the customer stated they were required to update Zoom.  When they went to the App Store to update they got this message:  "Zoom cannot be updated because it was refunded or purchased with a different Apple ID".  This customer was not signed into a Apple ID.  I was under the impression that since it was "purchased" via VPP, that it wouldn't need an Apple ID associated in order to update.How does everyone else update non-Apple apps on iPad's that were installed via VPP?Thanks for any help in advance.

I've an idea up at https://ideas.jamf.com/ideas/JPRO-I-778 that I'm honestly kinda jazzed about! Don't know if it will work--still workshopping.The 36,000 ft fly-by is:1) Eliminate Cloud Standard for the SLG space, making Cloud Premium the entry point.2) Bundle training at least up through 200 with the product; offer this "free" for 6mos - 1year.    For an org not convinced there's an exit clause with a Jamf-determined fee.3) Admins both go through training before their own onboard, and must participate in at least one peer    org's onboard before their own. The notion is pay it forward and/or servant leadership.4) At the end of the introductory period, org's agree to sign on for no less than 3-5 years.5) Orgs that go above and beyond in assisting with onboards maybe get to host a JNUC (a little friendly    competition). Where not prohibited by law, policy, etc, perhaps entities may negotiate a waiver of fees    pertaining to