Get Support
Recently active
HiWe are facing an issue where ex-employees have signed in with personal accounts on icloud on corporate devices. Its been a pain while re-purposing the device where find my mac cannot be removed . I know we can restrict signing in to personal accounds via configuration policy but management dont want to take that route at this point of time . 1. is there a way other than contacting apple support to remove find my mac from the computer while wiping it ?2. if we enable activation lock , will that help to erase or disable find my mac for users Any help would be appreciated, Thanks,
Our staff now has the error message " This provider is unavailable due to a device management profile" If we disable defender then they get access again. I cannot find any setting in the profiles that would be blocking OneDrive.
We have one VPP account hooked into our jamf pro cloud install. We did originally have an additional site set up which would create an global entry and an additional entry for the second site, but that was an inherited mistake which was since fixed. A couple of weeks ago I went through and started removing old apps or apps with no scope. Once there were fewer entries, I noticed that every time I added a new app to the Mobile Device Apps list, it would create an extra duplicate entry with the default options. We normally only do auto-install, but there's always a duplicate entry for the same app set to Make Available in Self Service with no scope. Why is this happening and how can I fix it?
Hey, We need to upload the personal recovery key from jamf to snipe using the jamf2snipe script. Any idea where i can find the subset to this? Thank you!
Hey Jamf Nation!Do you need to create a custom MacOS Dock for your users?I created a guide for the Jamf community, complete with scripts and packages, to help you do that.After struggling to find a current, working solution I decided to build one myself. Since it took some time to make, I thought I'd share it with others that are looking to do the same thing. Hope it's helpful!GitHub Repo with Full Guide Here: https://github.com/bluemoosegoose/Build-a-Custom-MacOS-Dock Some info about it:This Guide allows you to craft a custom MacOS dock for your environment, written specifically for Jamf Pro Admins.Verified working on Monterey 12.3.1 and should be backwards compatible.The custom dock will be built once, on first login, for any user that logs in to the Mac.After the dock has been built once, it will not run again automatically, which is the intended behavior because we want our users to have our custom dock during onboarding and then give them the ability to make ch
Hi everyone, I have a question about removing a device from inventory preload. for example, there are 10 devices in preload. I selected one of them and click delete it, will this action will delete the rest of 9 devices? just wanted to make sure the action only remove the devices I selectedBest Regards
I’m currently developing a remediation policy for Self Service that triggers the uninstall and reinstall of a profile. While I can successfully remove and reinstall the profile, I need a verification step to check if the profile was reinstalled. I'm using the following command:bashprofiles show -o stdout | grep "ProfileDisplayName = "$profileName"" | /usr/bin/awk '{print $3}' | sed 's/[[:punct:]]//g'This works perfectly for single-word profile names, like "Zoom," but fails with multi-word names, such as "Zoom Profile," resulting in "no such file or directory." I’ve tried enclosing the profile name in both single and double quotes, and using "${profileName}", but nothing seems to work.Could anyone suggest how to modify the command so it successfully handles profile names with more than one word? Here’s the function I created for verification:bashfunction checkInstall() {installed=$(profiles show -o stdout | grep "ProfileDisplayName = "$profileName"" | /usr/bin/awk '{print $3}' | sed 's/
Hi, as was suggested to me, I'm trying to use a hybrid solution to take advantage of App Installers with regards to the management of updates, and the installomator policies for initial provisioning, as Mac Apps have an important delay for installations when executed in Self Service.However, I have a simple but annoying issue in the Store, as in the "All" category, I see both installation options, even if I clearly deactivated all the Self Service Categories on Mac Apps Self Service tab. How can I handle this? The "All" category doesn't seem to be removable, so I ask those who make these two options coexist how they handle this annoying redundancy on self service.
Hello Team, I reenrolled few macs in Jamf using by user initiated enrollment and mail invitation to end users but before going to re-enroll l those macs I never deleted their devices entry from Jamf console, I just ran "sudo jamf removeframework" on those macs and did clear all existing profiles and then did hit the URL of Jamf and followed by /enroll and provided by credential and downloaded CA certificate and MDM profile and installed those two. I can see all applicable configuration profiles are deployed but device are not speaking to Jamf console, if I run the command "sudo jamf recon" then it is saying command not found. What is the solution here I dont want to reenroll those macs back again to Jamf.
Right. Where do I begin.... I am going to try and be as constructive as possible rather than just complaining. We've been running Jamf Pro (currently 11.4.2) for almost two years. Since day one we had issues with out of the box or EACAS Macs fully completing enrolment. The usual state they would end up in was for the profiles to install fine, VPP apps to install, etc, but for no policies to run nor for Self Service to install. When I looked on Jamf Nation and other sources I saw that this can sometimes happen and so because I'm a scripting god I came up with an amazingly complex script that is installed as part of an PreStage Profile's enrolment package workflow. The script does the following:/usr/local/bin/jamf policyThis immediately caused enrolment to complete, the Self Service app appeared in /Applications and everything was once more right in the world. A reboot would achieve the same, but we didn't want to randomly reboot the Mac halfway through enrolment or ask the user to
Hi Community,I am just sharing here another way of deploying silently a new Desktop Background to Mac computers without using Script install, Desktoppr or a Configuration Profile. This workflow is compatible from Catalina to Monterey Beta.Place your_image.png into /Users/SharedOpen Automator app on macOS Big SurCreate New application projectChoose in Library 'Get Specified Finder Items" and select your_image.png (located in /Users/Shared)Add "Set Desktop Picture" in Automator libraryExport your Automator project > Save (ideally sign it) into /Users/SharedOpen Composer appDrag and Drop your Automator.app in it (from /Users/Shared)Add from Users/Shared folder in Composer your_image.pngSelect Script and Post-InstallCopy paste this simple script belowBuild and sign your packageCreate your Jamf Policy to deploy it #!/bin/bash open /Users/Shared/Your_Automator.app sleep 10 rm -R /Users/Shared/Your_Automator.app rm -rf /Users/Shared/Your_Image.png
When I run the application on the iPad, it will wipe and reconfigure itself fine with all of the applications but does not retain the name or the username/email. How do I get the username/email and the device name to stay the same on enrollment?Ex. Name: iPad 1username: name@yourcompany.comWhen it wipes, the information above will be removed from Jamf Pro. How can I make it stay?
Hello fellow Jamf Admins,I have a request in from our InfoSec team to disable the data collection features within Firefox. I have tried pushed config profiles with custom settings to turn them off. Here's the output:<key>DataCollection</key><dict><key>Experimentation</key><false/><key>HealthReport</key><false/><key>Submission</key><false/><key>Telemetry</key><false/></dict> Firefox is not changing the settings though. It seems to not care about the plist at all. Has anyone run into an issue like this and if so, how did you get Firefox to behave? Thanks in advance!
Is it just me or is this forced update feature not working for you too? NothIs it just my system or is this not working for you too? Updates do not get forced and we are all on Sonoma.
Hello,I have extensive experience with Jamf Pro but one area I've never touched is the API. But now with the release of Return to Service (via the API) I want to at the very least script something so that I can use this feature to eliminate some of the tedious work.I work at a school and as such have hundreds of devices to erase every school year and its very time consuming to manually enter Wifi credentials on all of them after wiping to re-enroll with Jamf Pro. Can someone help me with a script that will automate this process using the Return to Service API??? It would be much appreciated. Thanks!
We have had the Darktrace cSensor running on our macs for months. I am currently tasked with creating a report that pulls in all machines with DT sensor and its running. I found a script that I could use with extension attributes to report that the sensor is installed and running, but it does not pull any data once it's set up as the exention attribute. I can run this script in a local bash environment on my mac and it seems to report that sensor is running on my mac. #!/bin/bash# check for processPROCESS=$( pgrep Darktrace\\ cSensor )#see if process is runningif [[ -z "$PROCESS" ]]; thenRESULT="Not Running"elseRESULT="Running"fi#report resultsecho "<result>${RESULT}</result>"
Is anyone having trouble with the Jamf Server logs not actually logging? I have a support ticket open (CS0951135) for this because I think the log4j2.xml file is not setup correct, it was broken before in 10.45, but stuff has changed in that configuration file and it is even more broken in 10.46. I am in a windows server environment, and installed using the jamf windows installer. I am installing it on the D drive on my Jamf server and not on my C drive, but I am using the installer to do all of this, so not doing anything special. Is there anyone else out there with windows using not the c drive for Jamf with this issue?
Hello Jamf Community, We are currently in the process of setting up an on-premises Jamf server but have encountered an error. The computer begins to enroll with the MDM after entering the user credentials in Remote Management, then retrieves enrollment profile, begins to install enrollment profile, then gives an error. The error: Enrolling with management server failed. Unable to contact the SCEP server at https://our-server-domain.local:8443//CA/SCEP Has anyone experienced this issue, or know what is causing it and how to fix it? Also, I am not sure why it is inserting two forward slashes after the port and before CA: 8443//CA. Any and all help is greatly appreciated. Thank you.
Hi all, we're looking into managed Wi-Fi network settings for our MacOS 15 devices when users begin upgrading (deferred for the full 90 days), but within the network payload settings or the restrictions settings there is no way to disallow the users ability to change the private IP address back to fixed or rotating. The "Disable MAC Address Randomization" works when we deploy a network to machines, but users can still just go into settings and enable this. Any ideas or have I just missed a simple setting somewhere? This is early days and we still have until December before our users start upgrading.
Cannot find this answer anywhere. We currently have Jamf Safe Internet but prior to that we utilized the content filter in Jamf Pro via configuration profile. When we implemented JSI I was never told I had needed to, or if was recommended to, disable the JAMF Pro content filter. So now when I am making changes to the allow/block list I am not sure if one is interfering with the other. What is best practice?
We want these to NOT be able to be toggled off, even by an admin - ideas?
Is there a way to get a report or list of all failed commands for our mobile devices in Jamf Pro. Whenever I go to a device for any reason I often find failed commands from several months ago and manually clear those. But it would be nice to be able to know all the devices with failed commands so I can look at what failed without having to go to each device individually.
Hello, Is it possible to block the passwords app within Mac OS Sequioa I tried to block it through a config profile and also a policy but I’ve had no luck is this an app that can be blocked or no?
Does anyone know if there is a configuration profile I can use to turn off Settings -> Home Screen & Dock -> Show App Library in Dock? I see iPadOS 15 decided to add this "super helpful feature" for us and defaulted it to on, of course. It ignores my Home Screen Layout profile and puts it in the dock anyway.
Today we released Jamf Connect 2.40.0. This release includes the following changes and improvements: The Verify User Promotion via FIDO2 (VerifyUserPromotionFIDO2) setting allows administrators to have users authenticate through Safari prior to a privilege elevation session. Authenticating within a browser adds support for WebAuthn authenticators including passkeys and FIDO2 keys. This setting is currently supported with the following identity providers: Microsoft Entra ID Okta Identity Engine Okta OpenID Connect (OIDC) PingFederate Note: Requiring WebAuthn authentication for privilege elevation may require changes to your identity provider's authentication policies. After enabling the setting, the Jamf Connect OIDC application located in your identity provider configuration must use the following Redirect URI to prevent any errors: jamfconnect://loggedin The Jamf Connect menu bar app now displays the temporary privilege elevation duration in the format "MM:SS" to improve
Earn a cool badge and Jamf Nation Reward Bytes for your published articles. We’re looking forward to your submissions!
Already have an account? Login
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.
Sorry, we're still checking this file's contents to make sure it's safe to download. Please try again in a few minutes.
Sorry, our virus scanner detected that this file isn't safe to download.
