Hello everyone, We use Jamf School in our school to manage iPad that are borrowed to our pupils. I have set a mail profile for every single one of them. Since september i encounter an issue that i did not have before. The students password is automatically written in "Incoming Mail Server" but not in "Outgoing Mail Server".  We can manually put the password but i want the password to be automatically to earn some precious time. Is there a way to do it? Thanks

Hey Guys,Is there any way to block the ability to set parental control passwords on an AppleTV? People have been setting passcodes on the devices and it is really annoying to wipe them every time to reset the code. Cant seem to find any info about this. Thanks

Hi, due to an Audit finding we are to enable the native macOS Firewall in our Mac estate consisting of about 150+ machines. I've created the config profile with the Firewall payload and it deploys and works with no issue, but we donot want stealth mode to block the ICMP protocol, as we need Ping and other network troubleshooting utilities that it provides. Also dont want screensharing blocked, as well as Airdrop. Any advice how to accomplish this please?

We don't use DHCP, we manually assign each network connected device a static IP.  It is possible to do this for our iPads from within Jamf Now rather than on each individual iPad?

Work for a public school district, use MacBook Airs for students, and of course Jamf Pro to manage them. Students keep finding ways to play Roblox. We've restricted every variation of the word "Roblox" and all the installers in Restricted Software. Seems like all they need to do is rename the app (for instance, to "easy" or "easy.app" or even just a letter, "g" or "g.app") and it is able to open. Any ideas?

Good Afternoon, I work at a school that uses Jamf Pro to manage our 2300ish Macbook Airs. All are 2020 M1s currently running on Sonoma. I'm having a lot of trouble finding a way to "wipe" multiple devices at one time and I have zero experience in using the Jamf API or even how to start using it. Everything is in prestage though and Apple School Manager.So far I've tried scripting it but haven't had any luck. My guess is the only way I'll be able to do this is through the API as "wipe" device doesn't seem to be an option for one of the Action commands.  I really don't want to have to reset over 2k macbooks this summer by hand. Anyone who has any advice would be greatly appreciated. Thank you,

Hello everyone We're currently running into an issue. We've recently activated the LAPS for PreStage accounts. Seems that now after just one wrong try on the login screen the account gets locked for 1 minute. It happens to the LAPS, aswell as the local accounts. Is there any way to disable or set a higher number of wrong password-tries? We've tried it with a Passcode Config Profile, but this did not help. Even if you set the number to 11, it still locks down after 1 try. This is pretty annoying, also considering the fact, that those LAPS passwords can be quite easy to mistype one letter. Kind regards, Dario

I've tried deploying Mohs Surgery iOS app(https://apps.apple.com/us/app/mohs-surgery-appropriate-use-criteria/id692790649) to managed Macs through Jamf Pro w/o success. I've made sure to match the short version, bundle ID, and app link. I can deploy this to iOS devices just not Macs.I've confirmed on a vanilla M1 unmanaged Mac that it works through App Store.Through self-service it attempts to install but spins infinitely.Through automatic install it shows 1 license used but never shows up in /Applications.Included below are the configs for Mac and iOS:

Hi,I'm developing a container application that has 2 system extensions.During uninstall on customer environment, the extensions are fail to get deactivated. The customer is working with JAMF environment, and the only way that resolve this problem is to install a profile that allows the extensions automatically (bypass manual extension approval) and than revoke the profile.In addition, even with no dedicated profile for my application, the user need to manually approve the extensions, and deactivating the extensions from the container app fails.Here's the deactivation code from my application :   self.deactivationRequest = OSSystemExtensionRequest.deactivationRequest(forExtensionWithIdentifier: extensionIdentifier, queue: DispatchQueue.global(qos: .default)) self.deactivationRequest!.delegate = self OSSystemExtensionManager.shared.submitRequest(self.deactivationRequest!)   I don't have full visibility of the customer profiles environment, but perhaps you can tell me if there'

anyone had an issue at some point where users would get locked out of their accounts even though the password is correct, i've been investigating this for quite some time now and even though the user is a standard Account not mobile it still get's locked out at certain point, right now i have a user whose getting locked out every other day, i tried reading the logs but nothing helpful there. we are using Kerberos Extension for password Syncs, Default passcode policy, Filvault without institutional key , i read online that it's an issue with FV but i can't replicate the lock, because most of the time the lock happens after a restart or shutdown (sometimes it happens after a device is locked) anyone with a similar exp?

Very recently we've had some users who have upgraded their version of macOS beyond Monterey up to Ventura or Sonoma (I know, we need to get away from it ASAP, but we're stuck a bit longer because of the Microsoft/Adobe SMB hidden file issue).Our staff are all standard users and do not have admin access to their computers. In the past, any attempt to upgrade macOS to a new version would not be possible without entering admin credentials.Why is this suddenly being allowed to happen and what is the best practice using Jamf to prevent it?

After updating, the "block popups" setting on our iPads always revert back to the default of being enabled. There is no way to permanently disable this setting within Jamf, but is there a way to stop the setting from going back to enabled after every update?

This script automates the configuration of display settings on macOS by checking the system architecture, downloading and installing the correct version of `displayplacer`, and setting up display mirroring with specified parameters. It ensures compatibility with ARM64 and Intel systems while optimizing display settings such as resolution, refresh rate, color depth, and scaling. The script uses JAMF parameters to adjust these settings dynamically.Feel free to adjust the description if you have any specific points you'd like to highlight!DisplayPlacer: https://github.com/jakehilborn/displayplacer #!/bin/bash # ----------------------------------------------------------------------------- # Script Name: DisplayPlacer.sh # Author: [Muhammad Hasib] # Created: 25Jul2024 # Last Modified: 25Jul2024 # Description: This script checks the system architecture, downloads and # installs the appropriate version of displayplacer, and #

Hello,does anyone know how to fix this? In the companyname placeholder is the entry {{companyname}} displayed. But we entered the name of our school in the right field. We also use the payload variable %companyname% for beeing displayed on the lock screen and the school name is displayed there correctly. I also was contacting the jamf support two years ago because of this and they said, that this is a known bug. Greetings

Hi. Does anybody has used Splunk or another tool so far to display the progress of Smart Group memberships over a certain period of time for data analytics? Thanks,Maik

Having a big issue here with one of my user's mac devices.  So, it keeps coming up on my CTO's laptop where every time he tries to access an O365 product it wants a password.  Problem is none of the passwords work for this.  He just got this device and ran it through Jamf from OOBE and everything else is accessible. We even installed Edge and it works through there, but the preferred browser is Chrome.  I implemented the SSO extension, and it is working fine for others.From his device he is getting the below: All users also have the Windows Accounts extension for Chrome enforced on the devices.Anyone else faced or facing this issue? 

Hi all, Having a bit of a struggle figuring out how to package and send out an application without having user have to sign in to an apple account. See image attached. Is there anyway in composer to bypass signing with an apple account to open the app?

Hello,We currently have an environment that has some computers with the standard release of Firefox and some with the ESR release.  I'm looking to standardize this to the ESR version, but am looking for suggestions on how best to achieve this? I currently have the latest ESR setup with patch management and most systems have installed that update now.  Would checking the box in patch management for "patch unknown versions" achieve the change?  I have a script in place for the extension attribute for standard vs ESR, but I don't see the ability to make a smart group from that like I originally expected.Thanks for any ideas you can offer!

  As enterprises grow increasingly and rely on technology, finding efficient ways to provide  employees with access to digital tools is important. While iPads are often the device of choice  for many organization, a one-to-one deployment may not always be feasible. Apple’s Shared  iPad functionality, combined with Jamf Pro, offers a powerful solution for enterprises  looking to provide secure and personalized access on shared devices without compromising  user experience or data security.    What is Shared iPad in Enterprise?    Shared iPad is a feature designed to enable multiple users to share a single iPad while  maintaining a secure, personalized experience for each individual. Each user logs into the  device with their Managed Apple Account or a temporary session, accessing their unique  apps, settings, and data. When users log out, their data is stored securely and becomes  inaccessible to others.&nbs

Hi  Can someone please help me with the nudge custom launchagent? I am trying to run Nudge in every 3 hours instead of default 30 mins.  So far, I tried to edit the .plist file in /library/Launchagents and repackage Nudge from Composer and deploy from JAMF, but no luck so far. Got the error saying unable to move files in final destination while running policy.   

Background information: I need to mass remove all devices from all groups via api I've been reading through all the API Calls available from jamfs /api page, i've come to the conclusion if it would be anywhere, it would be here [https://ENTERJSS.URLHERE] :8443/api/#!/mobiledevicecommands/createMobileDeviceCommandURL_post but via "Delete" (assuming a Remove From Groups Option is an available command) instead of "Post" but "Post" is all that's available. Am I missing something? Does anyone know of a way to remove an iOS Device from all static groups via API Call? Thank you

We have a number of machines that don't have the bootstrap token escrowed. I'm trying to provide a self-service option by having someone run the script from Self-Service. My understanding is that the scripts would run as root, but I'm getting the error:Script result: Enter the admin user name:Error: Missing user name.profiles: Unable to authenticate user information.Do scripts run in a policy not run with root access?

Hello everyone, I hope you are well and can answer my questions.   We are currently on-boarding a new client and they are using MaaS360 at the moment with another MSP. I have everything just about finished up in JAMF, except Auto-Enrollment which requires connecting to the Apple Business Manager Server. Once I do, that is usually what bring in the devices (If I remember correctly). If the devices are currently already setup with a MDM profile on them with another MDM service provider, would that be interfered with if I would setup the connection between ABM and JAMF? I am wanting to make this transition seamless and have zero down time as the customer works 24/7 and needs access to these devices.  I have only done setup of new users to JAMF and not migrated from another MDM Provider. Any insight would be helpful.    My Plan was to have the users setup and tie that to Groups and profiles so that when he sees the users account it downloads the appropriate profile and

We are a young company and have been on Jamf Pro for less than a year. We were not able to start our operations with Apple Business Manager (ABM) so we will need to bring our existing inventory (all purchased direct from Apple) into ABM. I have been reading about the process here and I am concerned about the part that says:If you want to add a Mac that’s currently configured, you must first erase all content and settings.Important: All your data will be erased. Make sure you have an up-to-date backup of your data because it will all be erased.We have more than 100 active computers in Jamf. Is there a way to bring them into ABM without erasing everything? I can't see how that is going to go over well with one user, let alone 100+.Needless to say I am looking for some guidance (and hopefully some reassurance) that there is a better way.

I have a MacBook Pro (14-inch, M2 Pro, 2023) in our test environment on macOS 14.4. When i set the prestage to enforce the latest macOS based on device eligibility i get an error:   System Update could not be installed, even though the machine should force it up to 15.2. Has anyone else seen this?