Hi everyone, I have a question about removing a device from inventory preload. for example, there are 10 devices in preload. I selected one of them and click delete it, will this action will delete the rest of 9 devices? just wanted to make sure the action only remove the devices I selectedBest Regards

I’m currently developing a remediation policy for Self Service that triggers the uninstall and reinstall of a profile. While I can successfully remove and reinstall the profile, I need a verification step to check if the profile was reinstalled. I'm using the following command:bashprofiles show -o stdout | grep "ProfileDisplayName = "$profileName"" | /usr/bin/awk '{print $3}' | sed 's/[[:punct:]]//g'This works perfectly for single-word profile names, like "Zoom," but fails with multi-word names, such as "Zoom Profile," resulting in "no such file or directory." I’ve tried enclosing the profile name in both single and double quotes, and using "${profileName}", but nothing seems to work.Could anyone suggest how to modify the command so it successfully handles profile names with more than one word? Here’s the function I created for verification:bashfunction checkInstall() {installed=$(profiles show -o stdout | grep "ProfileDisplayName = "$profileName"" | /usr/bin/awk '{print $3}' | sed 's/

Hi, as was suggested to me, I'm trying to use a hybrid solution to take advantage of App Installers with regards to the management of updates, and the installomator policies for initial provisioning, as Mac Apps have an important delay for installations when executed in Self Service.However, I have a simple but annoying issue in the Store, as in the "All" category, I see both installation options, even if I clearly deactivated all the Self Service Categories on Mac Apps Self Service tab. How can I handle this? The "All" category doesn't seem to be removable, so I ask those who make these two options coexist how they handle this annoying redundancy on self service.

Hello Team, I reenrolled few macs in Jamf using by user initiated enrollment and mail invitation to end users but before going to re-enroll l those macs I never deleted their devices entry from Jamf console, I just ran "sudo jamf removeframework" on those macs and did clear all existing profiles and then did hit the URL of Jamf and followed by /enroll and provided by credential and downloaded CA certificate and MDM profile and installed those two. I can see all applicable configuration profiles are deployed but device are not speaking to Jamf console, if I run the command "sudo jamf recon" then it is saying command not found. What is the solution here I dont want to reenroll those macs back again to Jamf.

Right. Where do I begin.... I am going to try and be as constructive as possible rather than just complaining. We've been running Jamf Pro (currently 11.4.2) for almost two years. Since day one we had issues with out of the box or EACAS Macs fully completing enrolment. The usual state they would end up in was for the profiles to install fine, VPP apps to install, etc, but for no policies to run nor for Self Service to install. When I looked on Jamf Nation and other sources I saw that this can sometimes happen and so because I'm a scripting god I came up with an amazingly complex script that is installed as part of an PreStage Profile's enrolment package workflow. The script does the following:/usr/local/bin/jamf policyThis immediately caused enrolment to complete, the Self Service app appeared in /Applications and everything was once more right in the world. A reboot would achieve the same, but we didn't want to randomly reboot the Mac halfway through enrolment or ask the user to

Hi Community,I am just sharing here another way of deploying silently a new Desktop Background to Mac computers without using Script install, Desktoppr or a Configuration Profile. This workflow is compatible from Catalina to Monterey Beta.Place your_image.png into /Users/SharedOpen Automator app on macOS Big SurCreate New application projectChoose in Library 'Get Specified Finder Items" and select your_image.png (located in /Users/Shared)Add "Set Desktop Picture" in Automator libraryExport your Automator project > Save (ideally sign it) into /Users/SharedOpen Composer appDrag and Drop your Automator.app in it (from /Users/Shared)Add from Users/Shared folder in Composer your_image.pngSelect Script and Post-InstallCopy paste this simple script belowBuild and sign your packageCreate your Jamf Policy to deploy it  #!/bin/bash open /Users/Shared/Your_Automator.app sleep 10 rm -R /Users/Shared/Your_Automator.app rm -rf /Users/Shared/Your_Image.png  

When I run the application on the iPad, it will wipe and reconfigure itself fine with all of the applications but does not retain the name or the username/email. How do I get the username/email and the device name to stay the same on enrollment?Ex. Name: iPad 1username: name@yourcompany.comWhen it wipes, the information above will be removed from Jamf Pro. How can I make it stay? 

Hello fellow Jamf Admins,I have a request in from our InfoSec team to disable the data collection features within Firefox. I have tried pushed config profiles with custom settings to turn them off. Here's the output:<key>DataCollection</key><dict><key>Experimentation</key><false/><key>HealthReport</key><false/><key>Submission</key><false/><key>Telemetry</key><false/></dict> Firefox is not changing the settings though. It seems to not care about the plist at all. Has anyone run into an issue like this and if so, how did you get Firefox to behave? Thanks in advance!

Is it just me or is this forced update feature not working for you too? NothIs it just my system or is this not working for you too? Updates do not get forced and we are all on Sonoma.  

Hello,I have extensive experience with Jamf Pro but one area I've never touched is the API. But now with the release of Return to Service (via the API) I want to at the very least script something so that I can use this feature to eliminate some of the tedious work.I work at a school and as such have hundreds of devices to erase every school year and its very time consuming to manually enter Wifi credentials on all of them after wiping to re-enroll with Jamf Pro. Can someone help me with a script that will automate this process using the Return to Service API??? It would be much appreciated. Thanks!

We have had the Darktrace cSensor running on our macs for months. I am currently tasked with creating a report that pulls in all machines with DT sensor and its running. I found a script that I could use with extension attributes to report that the sensor is installed and running, but it does not pull any data once it's set up as the exention attribute. I can run this script in a local bash environment on my mac and it seems to report that sensor is running on my mac. #!/bin/bash# check for processPROCESS=$( pgrep Darktrace\\ cSensor )#see if process is runningif [[ -z "$PROCESS" ]]; thenRESULT="Not Running"elseRESULT="Running"fi#report resultsecho "<result>${RESULT}</result>"

Is anyone having trouble with the Jamf Server logs not actually logging?   I have a support ticket open (CS0951135) for this because I think the log4j2.xml file is not setup correct, it was broken before in 10.45, but stuff has changed in that configuration file and it is even more broken in 10.46. I am in a windows server environment, and installed using the jamf windows installer. I am installing it on the D drive on my Jamf server and not on my C drive, but I am using the installer to do all of this, so not doing anything special.  Is there anyone else out there with windows using not the c drive for Jamf with this issue?

Hello Jamf Community, We are currently in the process of setting up an on-premises Jamf server but have encountered an error. The computer begins to enroll with the MDM after entering the user credentials in Remote Management, then retrieves enrollment profile, begins to install enrollment profile, then gives an error. The error: Enrolling with management server failed. Unable to contact the SCEP server at https://our-server-domain.local:8443//CA/SCEP  Has anyone experienced this issue, or know what is causing it and how to fix it? Also, I am not sure why it is inserting two forward slashes after the port and before CA: 8443//CA. Any and all help is greatly appreciated. Thank you.

Hi all, we're looking into managed Wi-Fi network settings for our MacOS 15 devices when users begin upgrading (deferred for the full 90 days), but within the network payload settings or the restrictions settings there is no way to disallow the users ability to change the private IP address back to fixed or rotating. The "Disable MAC Address Randomization" works when we deploy a network to machines, but users can still just go into settings and enable this. Any ideas or have I just missed a simple setting somewhere? This is early days and we still have until December before our users start upgrading.

Cannot find this answer anywhere. We currently have Jamf Safe Internet but prior to that we utilized the content filter in Jamf Pro via configuration profile. When we implemented JSI I was never told I had needed to, or if was recommended to, disable the JAMF Pro content filter. So now when I am making changes to the allow/block list I am not sure if one is interfering with the other. What is best practice?

We want these to NOT be able to be toggled off, even by an admin - ideas?

Is there a way to get a report or list of all failed commands for our mobile devices in Jamf Pro.  Whenever I go to a device for any reason I often find failed commands from several months ago and manually clear those.  But it would be nice to be able to know all the devices with failed commands so I can look at what failed without having to go to each device individually.

Hello, Is it possible to block the passwords app within Mac OS Sequioa I tried to block it through a config profile and also a policy but I’ve had no luck is this an app that can be blocked or no? 

Does anyone know if there is a configuration profile I can use to turn off Settings -> Home Screen & Dock -> Show App Library in Dock?  I see iPadOS 15 decided to add this "super helpful feature" for us and defaulted it to on, of course.  It ignores my Home Screen Layout profile and puts it in the dock anyway.

Today we released Jamf Connect 2.40.0. This release includes the following changes and improvements:  The Verify User Promotion via FIDO2 (VerifyUserPromotionFIDO2) setting allows administrators to have users authenticate through Safari prior to a privilege elevation session. Authenticating within a browser adds support for WebAuthn authenticators including passkeys and FIDO2 keys. This setting is currently supported with the following identity providers: Microsoft Entra ID Okta Identity Engine Okta OpenID Connect (OIDC) PingFederate Note: Requiring WebAuthn authentication for privilege elevation may require changes to your identity provider's authentication policies. After enabling the setting, the Jamf Connect OIDC application located in your identity provider configuration must use the following Redirect URI to prevent any errors: jamfconnect://loggedin The Jamf Connect menu bar app now displays the temporary privilege elevation duration in the format "MM:SS" to improve

Hey folks,Since updating our inventory of MacBooks to MacOS 14 Sonoma, users have noticed weird behaviour with Airdrop that was working correctly on MacOS 13.x. From the jamf-managed MacOS 14 MacBook, users can:Airdrop TO Jamf-managed iPad (iPadOS 17.0.3)Airdrop TO non-managed personal iPhone (iOS 16.7.1) However, airdrop is not working in the other direction. If the other devices are not signed into the same iCloud account, the MacOS device is not even visible as an available device to airdrop to (visible to everyone settings are enabled). If the devices are signed into the same icloud account, the MacOS device will be visible as an Airdrop target, but actually sharing a file will timeout and fail. All of these devices (including jamf-managed MacOS) are able to Airdrop TO a personal non-managed MacOS 13.4 device We have no Configuration Profiles restricting use/access to Airdrop. Airdrop settings are set to 'visible to everyone' on all devices. The issue only

This is going to sound lame, but how do I turn off this new feature using a Jamf Pro config file? We are Jamf Cloud hosted so we currently have the newest shipping version of Pro. Given that we are in a school setting, our teachers don't want a student using the new functionality on an iPad to get things done for them on say a math test. I'm told that Jamf Teacher might offer this capability, but I want to know all the ways to possibly control this including from the centrally-set side.

I've tried moving all of the apps that use Policies to install to use Jamf App Catalog instead (if they are present). What I noticed is that the apps take a long time to install when re-provisioning a Macbook. Sometimes it would take 3 days before the apps would show up as installed on the Macbook. Is this delay normal? Is there a setting to force it to install immediately after enrolment just like it did with Policies?

I add all email accounts to our end user iPhones during setup using Configuration Profiles (Exchange ActiveSync & Google Account). I am a one-person tech department for an organization of ~40 end users (including myself), so I typically employ 2-3 of our most trustworthy and tech-literate managed end users as "testers" for new major OS upgrades before deploying them organization-wide.Since updating two managed end users to iOS 18, they have both lost access to the "Auto Reply" option underneath each of their managed/Jamf-deployed Mail Accounts (whether Google or Exchange). I have always limited their ability to turn on Notes, Reminders, and Contacts in these accounts, and before iOS 18, they always retained access to "Auto Reply" and "Account Settings" despite the aforementioned restrictions. This seems like a massive step backward if it's intentional. Any ideas? Am I missing a new feature/setting I need to turn on or off?

I have created a configuration profile using "Application and Custom Setting" Payload with Application domain as "com.microsoft.wdav" where I am enabling "Real-Time Protection" (attached screenshot). When I push this config profile, it enables the "Real-Time Protection" on device and make it restricted (attached screenshot) stating "This setting is managed by the organisation"When I upgrade the macOS to 14.7, suddenly the real time protection setting becomes unrestricted. As far as I know, any application setting managed by JAMF is restrcted by default. Hence, I need you help to understand why the setting is reverted post OS upgrade? And, how can I ensure that real time protection is restricted for user to make the changes?