Hi, I setup everything like documented here: https://github.com/Installomator/Installomator/tree/main/MDM/Jamf I'm trying to install Microsoft 365. The swiftdialog opens, the progress is completing (All MS packages installed) but swiftdialog never closes (stuck at "Finishing…").  /var/tmp/dialog.log last message is “Finishing…”/vag/log/Installomator.log states: "Installed MicrosoftOffice365, version blabla… All done!, exit code 0" I also tried to change the priority of zz_Quit, but this doesn't change anything.If I run the content from the zz_Quit Script from a terminal, the window get's closed. Any hint? Thanks, Stefan  

Hi All, I am having a problem getting an iPad app installed from the Self-Service. Sparta Scan is available in the Mac App catalog and we have acquired the appropriate number of VPP licenses from ABM - even renewed our VPP token. When attempting to install via Self-Service, the app completes the installation, but when looking for it on the iPad, we are not seeing anything installed. In the Jamf Pro device management log for that device, I do see that Sparta Scan installed. We've deployed a handful of other apps in similar fashion, but it only seems to be this app.  iPad: 10th gen 18.3.1 Jamf Pro: 11.14.0 App: Sparta Scan 3.32.1   Any insight is appreciated. Thank you!

We deploy a number of security products that require specific privacy preferences be set so that users don't block them from working. A couple recent deployments I've witnessed a new privacy pop-up for local network devices. I'm using JAMF Pro 11.9.0, but do not see any privacy preference options for this new Sequoia option. Anyone else seeing this or perhaps I'm looking in the wrong place. Just wanted to confirm with the community before raising it to support.

With Jamf School, we use Azure to authenticate our iPads as part of enrollment (Automated Device Enrolment). We've never normally had a problem, but we're now hitting an issue where, after successfully bringing up the Azure login screen and accepting the credentials, it will then display 'Redirecting you for authentication' on a loop for a few minutes. This will then fail and say 'We couldn't sign you in. Please try again.' I would be grateful for any ideas on how we might be able to troubleshoot this!

Im looking for ways to check the UK macs in our jss for icloud users that have enabled Advanced Data Protection and would like feedback on what people have done.

Hey Jamf Nation! We're excited to announce with Jamf Pro 11.15.0 Beta Blueprints is open for testing in Jamf Pro. We're also continuing Compliance Benchmarks in beta along with Icon Redesign and a lot more! How to join the beta: Enroll in the Beta Program under Product Feedback at account.jamf.com. Once you enroll you'll receive an invitation to join the Beta Forum, click "Join this group Hub" to gain access. Email beta@jamf.com with questions.The beta program is covered by the Jamf non-disclosure agreement; please do not share any information regarding your testing on any public forum, including the non-beta areas of Jamf Nation. Use the Jamf Nation Beta Forum or contact Jamf via beta@jamf.com with any questions. Thank you to all who participate in this program! 

Hi all,New to this sub so I thought I would make a start with an interesting one.I've got jamf pro and jamf connect setup with Azure AD and working for the most part.Apart from the actual connect dialogue box closes instantly and doesn't actually log in. After some digging, I found that it's failing with the error...Kerberos Authentication Failed with error: KerbErrorHelpful and awfully generic, I know.I can confirm that not ticket is present after logging in by running "klist".If I run "kinit" it'll prompt me for passwords and then everything works as expected, firewall auth, smbs connect without prompting for credentials (When the account in use has permissions).I've got a ticket open with Jamf, they've not been too helpful as the ticket has been open for 8 days without a response from them! They've even tried closing the ticket.I'm at a loss, I want to get this project wrapped up by August and this is the final step, getting kerberos working and auto mapping of user drives...Thanks

I am curious to know what everyone is using for your SUPERMAN deployment script (of those of you who do  use SUPERMAN).  Here is my script: https://github.com/ScottEKendall/JAMF-Pro-System-Scripts/blob/main/Superman%20Script.sh I am pretty sure it is working, but I am curious if I missed something critical or some "fine tuning" might be in order...the docs on his website can be "daunting"... Please let me know your thoughts / suggestions...  

We allow our employees to use the spotify app. Most of them are standard users meaning they get prompted for admin credentials for the update helper. What we want to do is kill automatic updates and then they can update via either self service or we automatically manage updates when our autopkg/jss importer runs. There are a few scripts on git to do this but none have really been proven to work. Does anyone have a surefire solution for Big Sur?

Hi everyone, Does anyone have a solution to the following: Automatically applying computer names to macOS devices that enroll via DEP? Thanks!

Hi Team,   We are adding some restrictions in thunderbird add-ons for that we using below mentioned scripts. When we are in sonoma we haven't faced any issues. After upgraded to sequoia we started facing the issue. Need your support to fix this. When we running this script we are getting this error. Fyi: Thunderbird is working fine, if we haven't scoped the policy.   #!/bin/bash# Identify Company account and save itloggedInUser=$(stat -f %Su /dev/console) echo "Adding Thunderbird JSON..." # Check to see if folder already presentDIR="/Applications/Thunderbird.app/Contents/Resources/distribution"if [ -d "$DIR" ]; thenecho "File already exists. Exiting..."sudo hdiutil detach '/Volumes/distribution'exit 0 #success? file already existedelse### Control will jump here if $DIR does NOT exists ###echo "Moving file"# mount dmg PATH TO CHANGEhdiutil attach '/Library/Application Support/JAMF/Waiting Room/thunderbird_addon_policy.dmg'sudo cp -R '/Volumes/distribution/Users/Shared/distribution

Hi all How or where can I generate the below xml Code in the Jamf School Website and push at the iPads? Update the xml <general> section of the script I was using with the information below. <general> <command>EnableLostMode</command> <lost_mode_message>$lostModeMsg</lost_mode_message> <lost_mode_phone>$lostModePhone</lost_mode_phone> <lost_mode_footnote>$lostModeFootnote</lost_mode_footnote> <always_enforce_lost_mode>true</always_enforce_lost_mode> <lost_mode_with_sound>true</lost_mode_with_sound> </general>   

Does anyone have a script they use to check membership of Microsoft Entra groups? Everything I'm finding is Powershell, and I need something that can run natively on Macs out of the box.

I have created a Company Portal app and a registration configuration profile, both of which are working as expected. However, when deploying the Company Portal on devices running macOS Sequoia, the installation does not progress it just keeps spinning indefinitely in the self service. like installing only Even when I try to install it manually, it always gets stuck at "Preparing for installation." Is anyone else facing this issue with the Company Portal on macOS Sequoia? Any help would be greatly appreciated.

Putting this on here in case someone has come across this issue. Macbook Pro's with the M4 Chip on Sequoia 15.1 + higher have been receiving the color spinning wheel when prompted to print over a secure network. There is a guest network available, however, our Secure network is the only network we can access printers. A work around we found: turning off wifi before opening the printing option window > Click Print > Print Queue opens "waiting" > turn wifi back on > Print job goes through. This is for Docs, PDFs, Jpegs. Minus pages from the web. The waiting period for the spinning wheel to stop could be 5-10 minutes or by using opt+cmd+esc to force quit. Operating Systems under Sequoia work no problem, but with these new models released with Sequoia, we've been unsuccessful with downgrading to a lower OS. 

We are looking to set up a secondary automated device enrollment profile and would like to enforce a minimum OS requirement during enrollment. The primary profile already has this restriction in place. We would appreciate any suggestions or guidance.

I'm a Tech Director in a K12 school and one of our teachers purchased a Cricut machine. The trouble is that the software requires frequent updates and without the updates you can't use the software. I found Patch Management for Cricut in Jamf Pro but I need to automate the process or at least to figure out a Self-Service way to allow users to run the updates? Helppppp!!!! :-) 

Hi Sorry if this has been answered before but I can't find anything.   We've just deployed iPads for the first time and are randomly getting the message The connection to iCloud timed out. And it is signing the users out.  Can anyone advise what might be causing this and how to fix?

Another script born from necessity.  User's seem to be running out of disk space due huge amounts of Adobe CC files, so I created a script to show them the largest files or folders in their home directory.  Script variables can control the starting location and scanning "depth" Source here: https://github.com/ScottEKendall/JAMF-Pro-Scripts/tree/main/DiskUsage

Is there an extension attribute available (or something else) that will allow me to build a smart computer group which pulls all systems with a specific restricted software rule in scope? Meaning, I want to create a smart computer group that shows all systems that Ive restricted abc123.app.

We use a time filter to switch the students profiles over to a school profile during school hours from their own personal profile. The majority of devices work, but we have a handful that do not switch over fully and there are apps that remain useable that they have installed from their personal profiles.I have checked that the problem devices have enough storage, the O/S is up to date and all of the correct profiles etc are assigned. The logs for the device state that the profiles have been applied correctly and show as installed.I have also wiped a device, reinstalled and set it up but the problem returned.Is there anything I am missing or has anyone found out what causes the profiles not to switch properly?

Hi all, Looking to upgrade several Ventura machines to Sonoma. Plan is for JP to issue commands to download and install Sonoma and users receive a prompt to reboot to finish the upgrade. Testing hasn't yielded expected results. Leveraging Software Updates in JP with "download and install" + Target version > specific version deploys the upgrade but the machines automatically reboot with no warning or user interaction. Duplicated experience with 14.7.3 then 14.7.4 (after the latter was released last week). Happens with Intel-based and Apple silicon machines. Noticed some prior discussion on the forums recommend using MDM commands. Not sure if the above scenario meets the criteria. Appreciate the assistance.

Hello,I am trying to create a webhook using API as mentioned in https://developer.jamf.com/jamf-pro/reference/createwebhookbyid with <authentication_type>HEADER</authentication_type>I am unable to find any documentation on how to pass the header information in the API. As per https://learn.jamf.com/en-US/bundle/jamf-pro-documentation-current/page/Webhooks.htmlheader information needs to be sent as key value pairs but not sure how to pass in the API. I get this error,Error: Header information is required Can someone shed some light on this.  

Hi Nation, does anyone know why some iOS devices are able to set the screen lock time to never and other ones not?I have no idea if there are some configuration profiles or anything else in jamf PRO wich causes this. Thanks for your help :)

Trying to setup a test student account and have it automatically accept the VPP Invitation which was introduced in the last JSS updated. I'm currently getting this error: Managed Apple ID does not match account The managed apple ID is populated in the student account and I'm logged into the App store with this managed apple ID on the iPad. Not quite sure what this error message means. Any ideas?