Hi all, We are running the latest production ring version of OneDrive (23.153.0724.0003) and setup known folder move via the official Microsoft documentation, has anyone been able to get this working on the production ring? Deploy and configure the OneDrive sync app for Mac - SharePoint in Microsoft 365 | Microsoft LearnI found an article that suggested it was a known issue with Microsoft on the production ring but that was from 2022 so i assumed it would've been fixed by now.Has anyone been able to setup KFM move for Desktop and Documents to OneDrive? 

Hey guys, I need to deploy VSCode & Jetbrain Snyk extension via Jamf. VScode is in format .vsix and Jetbrain is looking like a simple folder with one Library and .jar files inside this folder.Have any of you had to deal with such an installation?Thank you in advance.Regards

I setup Platform SSO (enclave) and it works... okay. Outlook and OneDrive both still require me to enter the email address to begin. It's better than nothing, but deeper integration to capture username prompts would be great. And, it would be ideal if we didn't need Company Portal to broker this login. Jamf Connect is already connected to Entra. So, it would be great if it can broker platform SSO, and autofill usernames in apps with the app prefixes defined in the profile. 

We have Jamf School in use and now we need to reassign the push certificates to a central Apple-account since before we used to renew them with the personal ones. In Jamf i have the option to change the Apple-Account to which the certificate is assigned but will it affect in any way our MDM and will the devices be still available ?   Thanks in advance

Hi all,I hope I'm posting this in the right place, but I am experiencing an issue with my jamf school shared iPad deployment regarding display names.From the list of selectable users, most users have their first name listed, but for a very select few users, their accounts are listed with their last name instead of their first name. This has become confusing for the younger students here at the school I manage. Hope that makes sense.I don't know why this is, their first names only range between four to six characters, and there aren't any users who share the same first or last name as the affected users in the system. If I could list their entire name that would be ideal, but I'm willing to take any advice or solutions to this problem.My users are provisioned through SFTP sync and uploaded to ASM. I have checked their users through Jamf and it looks like the first and last name are being populated correctly.Thanks!- sammy

Greetings, My grad school is starting a new project to look at how to get user account data (Mac Home folder) transferred from a users old computer to a new computer when the user and the computers are fully remote. We currently provision all computers on-site, and then ship them to the remote user.  The user is then responsible for the transfer of data from the old computer to the new one.  This results in a fairly heavy lift for the user and support staff.  We're moving towards a low-touch process where the user can initiative the provisioning out of the box, so we're investigating ways to reduce the data transfer load as well. Apple Migration Assistant is somewhat less than ideal; it's sort of all or nothing (well, not exactly, but it's not great) and we've had many bad experiences with it on managed devices.  We use CrashPlan for home folder backup, but it's very slow at restoring folders over a couple gigs in size. Suggestions?  Are there home grown soluti

Hi all,I have been using a script that sets the Recovery Lock password on Silicon Macs without the correct Recovery Lock password already set using the following APIhttps://JAMF_PRO_URL/api/preview/mdm/commands  As mentioned here:https://learn.jamf.com/en-US/bundle/technical-articles/page/Recovery_Lock_Enablement_in_macOS_Using_the_Jamf_Pro_API.htmlHowever it looks like the /preview/mdm/commands has been deprecated, can someone confirm and is there another way to do it or can it only be done with PreStage now? Source: https://developer.jamf.com/jamf-pro/docs/privileges-and-deprecations

Afternoon All  Hopefully someone has seen this before. I have recently patched VLC media player the install media is DMG so used Repackage https://bitbucket.org/twocanoes/repackage/src/master/?ref=steemhunt application to create a PKG for deployment. I have noticed that some devices don't unmout the sparsebundle within pkg package. I though this might have been some issues with creation of the pkg. So I delete the current version and recreated it.Testing the new package created in same way this doesnt seem to happen.I though removing the orginal pkg from DP would stop it being mounted seems not. So I have created a policy forcely remove it on login. /usr/sbin/diskutil unmount force /Volumes/1010139C-84D6-4178-A17F-D3DD4F424C8C.This seems to be working fine if the machine is rebooted, I think this should sort itself out overtime as the machines are powered off daily. On restarting a device which has just run the above command it doesnt get mounted on login.I have two ques

I'm trying to use Jamf Sync from the command line to keep a local backup of our jamfcloud packages. It works great from the GUI (so everything is in my keychain), but in the CLI I can't get it to connect to the server. The issue is with the formatting of the source I think. With the "Name" for my source in the GUI set as "JamfCloud" (for my JCDS), and the local directory named "JamfcloudBackup" I've tried... -s JamfCloud -d JamfcloudBackup -p-s JCDS:JamfCloud -d JamfcloudBackup -p-s JCDS:xxxxxxxx.jamfcloud.com -d JamfcloudBackup -p-s JCDS:https://xxxxxxxx.jamfcloud.com -d JamfcloudBackup -p-s https://xxxxxxxx.jamfcloud.com -d JamfcloudBackup -p And I get the same response... Loading distribution pointsCouldn't find the source distribution point or folder:  The help page says to use "the source name" but is that the name defined in the GUI, or the actual URL in my case?

We migrated from on-premise Jamf Pro to Jamf Cloud, and recently some users cannot see the apps deployed from Mac Apps, while others can. We are using a single Smart Group, but we are puzzled as to why it does not appear on other machines, even on Zero Touch built devices.Do you have any idea why this is happening? And can you advise me on where I can troubleshoot this? Thank you so much.

We have recently purchased Jamf Business and have an Intune backbone for Windows.  I know in previous experience that there is a Jamf and Intune connector but upon searching, it looks like that will be deprecated.  Is there another way of going about reporting machine info to Intune from Jamf Pro?  

How is everyone handling SecureTokens? We are seeing issues with password resets outside of macOS and the SecureToken not working anymore, I am guessing because they aren't getting sync'd up. NoMaD is not allowing users to change their passwords anymore from within macOS even though the password criteria is met. 

HiDid anybody try this?How to turn on the "Reminder To Enable Auto Backup" popup for managed devices – Goodnotes SupportI can not get it to work with the provided XML config. When I add the red part of the suggested configuration I get this error:"Unexpected key "" while parsing <dict/>."Adding a "/" before "key" lets me save the file but breaks my working license key config.Any ideas? I find the feature itself to be very useful!

Hi, we need to create a few certificate authenticated wifi profiles to distribute to macs, as the office is mainly windows  and the number of macs is 20 or so, there is not much desire to set up an azure app proxy, ndes etc to allow jamf pro to connect to the internal CA through scep to generate certs, but looking through the documentation am not sure if it is possible to access the internal CA through scep when creating a new wifi profile.  

Hi I've been searching around for an answer to this but cant find anything that answers it. A) Whats the preferred option, Is using the SCEP Proxy preferred over using the ADCS Connector? B) Is there any functionality difference between the two options once its set up? Or do they perform identical functions Struggling to figure out what the difference is, and why I would go with one over the other. I've got an environment where because of the organisations security requirements we need to use ADCS Connector instead of the SCEP Proxy functionality. I just want to make sure that the ADCS connector will provide the same "end state" functionality as using the SCEP proxy. Any suggestions appreciated. Thanks!Kevin

A new OS in the fall means it's time to review and update EAs. Post your new versions that will support macOS Sequoia (15). I realized that I still had one using `airport` (which is (way) deprecated), so here's my new Current Wi-Fi.sh:     #!/bin/bash # 1.3 240808 PWC SSID=$(/usr/bin/wdutil info | awk -F: '/SSID/ { print $NF;exit } ') SSID=${SSID:1} if [[ -z $SSID ]]; then echo "<result>Not Connected</result>" else echo "<result>${SSID}</result>" fi exit 0    Let's f^%#!^ go!

Hello I'm trying deploy EndNote 21 so that End Users can open Word and the Cite While You Write plug-in will be configured. Have tried to use configurater to do this and while everything seems to be in the write place the plugin doesnt load in word.i did come accross this old post https://community.jamf.com/t5/jamf-pro/endnote-x8-w-cite-while-you-write-deployment/m-p/148974#M138024Which I have tried to updated. #!/bin/bash WordMajVersion=`defaults read "/Applications/Microsoft Word.app/Contents/Info" CFBundleShortVersionString | awk -F "." '{print $1}'`WordMinVersion=`defaults read "/Applications/Microsoft Word.app/Contents/Info" CFBundleShortVersionString | awk -F "." '{print $2}'` case $WordMajVersion in15) echo "Word version 15.xx, need to confirm it is above 15.24"if [ ${WordMinVersion} -ge 24 ]; thenrm -dfR /Library/Application Support/Microsoft/Office365/User Content.localized/Startup/Word/EndNote CWYW Word 2016.bundle#Copy the new oneditto "/Applications/EndNote 21/Cit

As one of the maintainers of the Jamf Pro terraform plugin here  i'd like to request a new feature to assist with creating Jamf Pro based terraform resources as templates, whereby there would be the ability to export from the gui a template of existing resources into HCL (hashicorp configuration language). The exported template would help admins understand the HCL syntax and properties that deploy admin's resources. The exported template would function as a starting point for new and existing users of the plugin and would act as a basis from which it can be modified for the admin's specific scenario. The exported resource template process would attempt to create a usable template from the off and would be autogenerated, however there would be an understanding that exported templates could still require some modifications before they can be used to deploy Jamf Pro resources. The feature request would enable admin's to pick one or more resources from the gui for exporting to a

The situation:We are using jamf school in conjunction with Azure Entra. This means that users can log in to a 1:1 iPad via SSO. This has worked without any problems so far. The problem:Now we wanted to use some shared iPads. We have created a corresponding DEP profile. When a user now wants to log in to the device, the following happens: Immediately after entering the managed Apple ID, a code prompt appears. The required code is of course not known, as none has been entered yet. You would actually expect a window to open with an MS login screen where you can enter the user password. In the activity log I find an error: “Install/update profile (AzureProfile)” with the content “Profile installation failed / The payload type ‘com.apple.webClip.managed’ may not be installed for the system in multi-user mode.”This profile does not originate from us, but is probably created automatically because of the SSO. There are numerous posts on the subject of webClips, which cannot be easily integra

Hi, I'm wondering if anybody else is having issues with iOS18 and JAMF School? Currently, we've noticed the following: On restrictions, we have  'Allow creation of VPN configurations' turned off. On the new iOS, VPN and device management are now lumped together. Having this setting turned off means you can't see device management at all, so you can't see any certificates or restrictions that are installed. A colleague has informed me that they have had issues with certificates not working properly with in upgrade to the new iOS, but it has worked if factory reset. Another issue I've noticed is Bluetooth. In settings on JAMF School, there's an option for Bluetooth "Enforce Bluetooth on devices with JAMF School Student 6.2.0 or later". I am now able to toggle Bluetooth on iOS 18 which will cause absolute chaos for teachers as we heavily use Apple Classroom. Bluetooth can not be toggled on iOS 17 with this JAMF school setting enabled. Is anybody else having these issues? Does anybody

Hello community, does Jamf plan to make an iOS and iPadOS app for administrators?

First a warm hello to the community and a happy new year to everyone 🙂I am looking for a solution to run a client policy (job) on jamf pro immediately after setting the scope to the policy instead of triggering it with a event like "change networkstate" or "recurring check-in". The reason is, we have to change a configuration file on the client dependent  of a server event in our windows domain.I cannot find any article here, so I would be glad, if someone can help me to solve my problem.greetings,Michael

Is there an option to remove a user's ability to perform mass actions in jamf Pro?  We recently conducted a risk assessment, and we discovered that anyone can perform a mass action as long as they have permission to use that action on an individual device.  Is there a permission or another tool you have used that would remove the jamf users ability to do something like wipe all devices but allow to still wipe one device at a time?

Hello Everybody, Our Macbooks on the domain. So we are deploying AD certificate to our macbooks.  I have 2 question for this.1- How this is working? For example, I'm login in a macbook nothing happens.(certificate not installed) But after reboot or log out then login, AD Certificate is installed. Why do i reboot or logout? 2- AD certificate is applying to all users. When we are  setting up a macbook, login with local account. So Jamf try to add AD certificate to local account. I dont want it. How do i set exclude for the local accounts?  This is a local account and AD certificate always pending.Thank you.         

Hello, I'm new to Jamf. Does anyone have suggestions on configuring Cisco VPN to install during the initial startup or right after logging in with my Windows credentials?