Hi Team,   We are adding some restrictions in thunderbird add-ons for that we using below mentioned scripts. When we are in sonoma we haven't faced any issues. After upgraded to sequoia we started facing the issue. Need your support to fix this. When we running this script we are getting this error. Fyi: Thunderbird is working fine, if we haven't scoped the policy.   #!/bin/bash# Identify Company account and save itloggedInUser=$(stat -f %Su /dev/console) echo "Adding Thunderbird JSON..." # Check to see if folder already presentDIR="/Applications/Thunderbird.app/Contents/Resources/distribution"if [ -d "$DIR" ]; thenecho "File already exists. Exiting..."sudo hdiutil detach '/Volumes/distribution'exit 0 #success? file already existedelse### Control will jump here if $DIR does NOT exists ###echo "Moving file"# mount dmg PATH TO CHANGEhdiutil attach '/Library/Application Support/JAMF/Waiting Room/thunderbird_addon_policy.dmg'sudo cp -R '/Volumes/distribution/Users/Shared/distribution

Hi all How or where can I generate the below xml Code in the Jamf School Website and push at the iPads? Update the xml <general> section of the script I was using with the information below. <general> <command>EnableLostMode</command> <lost_mode_message>$lostModeMsg</lost_mode_message> <lost_mode_phone>$lostModePhone</lost_mode_phone> <lost_mode_footnote>$lostModeFootnote</lost_mode_footnote> <always_enforce_lost_mode>true</always_enforce_lost_mode> <lost_mode_with_sound>true</lost_mode_with_sound> </general>   

Does anyone have a script they use to check membership of Microsoft Entra groups? Everything I'm finding is Powershell, and I need something that can run natively on Macs out of the box.

I have created a Company Portal app and a registration configuration profile, both of which are working as expected. However, when deploying the Company Portal on devices running macOS Sequoia, the installation does not progress it just keeps spinning indefinitely in the self service. like installing only Even when I try to install it manually, it always gets stuck at "Preparing for installation." Is anyone else facing this issue with the Company Portal on macOS Sequoia? Any help would be greatly appreciated.

Putting this on here in case someone has come across this issue. Macbook Pro's with the M4 Chip on Sequoia 15.1 + higher have been receiving the color spinning wheel when prompted to print over a secure network. There is a guest network available, however, our Secure network is the only network we can access printers. A work around we found: turning off wifi before opening the printing option window > Click Print > Print Queue opens "waiting" > turn wifi back on > Print job goes through. This is for Docs, PDFs, Jpegs. Minus pages from the web. The waiting period for the spinning wheel to stop could be 5-10 minutes or by using opt+cmd+esc to force quit. Operating Systems under Sequoia work no problem, but with these new models released with Sequoia, we've been unsuccessful with downgrading to a lower OS. 

We are looking to set up a secondary automated device enrollment profile and would like to enforce a minimum OS requirement during enrollment. The primary profile already has this restriction in place. We would appreciate any suggestions or guidance.

I'm a Tech Director in a K12 school and one of our teachers purchased a Cricut machine. The trouble is that the software requires frequent updates and without the updates you can't use the software. I found Patch Management for Cricut in Jamf Pro but I need to automate the process or at least to figure out a Self-Service way to allow users to run the updates? Helppppp!!!! :-) 

Hi Sorry if this has been answered before but I can't find anything.   We've just deployed iPads for the first time and are randomly getting the message The connection to iCloud timed out. And it is signing the users out.  Can anyone advise what might be causing this and how to fix?

Another script born from necessity.  User's seem to be running out of disk space due huge amounts of Adobe CC files, so I created a script to show them the largest files or folders in their home directory.  Script variables can control the starting location and scanning "depth" Source here: https://github.com/ScottEKendall/JAMF-Pro-Scripts/tree/main/DiskUsage

Is there an extension attribute available (or something else) that will allow me to build a smart computer group which pulls all systems with a specific restricted software rule in scope? Meaning, I want to create a smart computer group that shows all systems that Ive restricted abc123.app.

We use a time filter to switch the students profiles over to a school profile during school hours from their own personal profile. The majority of devices work, but we have a handful that do not switch over fully and there are apps that remain useable that they have installed from their personal profiles.I have checked that the problem devices have enough storage, the O/S is up to date and all of the correct profiles etc are assigned. The logs for the device state that the profiles have been applied correctly and show as installed.I have also wiped a device, reinstalled and set it up but the problem returned.Is there anything I am missing or has anyone found out what causes the profiles not to switch properly?

Hi all, Looking to upgrade several Ventura machines to Sonoma. Plan is for JP to issue commands to download and install Sonoma and users receive a prompt to reboot to finish the upgrade. Testing hasn't yielded expected results. Leveraging Software Updates in JP with "download and install" + Target version > specific version deploys the upgrade but the machines automatically reboot with no warning or user interaction. Duplicated experience with 14.7.3 then 14.7.4 (after the latter was released last week). Happens with Intel-based and Apple silicon machines. Noticed some prior discussion on the forums recommend using MDM commands. Not sure if the above scenario meets the criteria. Appreciate the assistance.

Hello,I am trying to create a webhook using API as mentioned in https://developer.jamf.com/jamf-pro/reference/createwebhookbyid with <authentication_type>HEADER</authentication_type>I am unable to find any documentation on how to pass the header information in the API. As per https://learn.jamf.com/en-US/bundle/jamf-pro-documentation-current/page/Webhooks.htmlheader information needs to be sent as key value pairs but not sure how to pass in the API. I get this error,Error: Header information is required Can someone shed some light on this.  

Hi Nation, does anyone know why some iOS devices are able to set the screen lock time to never and other ones not?I have no idea if there are some configuration profiles or anything else in jamf PRO wich causes this. Thanks for your help :)

Trying to setup a test student account and have it automatically accept the VPP Invitation which was introduced in the last JSS updated. I'm currently getting this error: Managed Apple ID does not match account The managed apple ID is populated in the student account and I'm logged into the App store with this managed apple ID on the iPad. Not quite sure what this error message means. Any ideas?

Hello folks,how do you deal with Mozilla Firefox and the Auto Updater if the users are not local admins and cannot install the helper tool? is there a way like with google chrome?Cheers

Hey, Let me know if this is the wrong area to post in. Essentially we are attempting to disable Siri and its "Listen For" option. Unfortunately it seems we can only disable siri but if "Listen For" was enabled prior to disabling siri it still allows for the pop-ups saying "you dont have permission". We have been able to supress/kill the pop-ups as a temp fix for the time being though we notice the Siri icon in the top right of the menu bar is still there. While you can manually get rid of that icon in the Control Center, We have yet to find much if any information or option to control the control center options and remove that icon through Jamf Pro's Config profiles as of yet. My question is, Is there any way to remove a menu bar icon even if its with like a script or anything or even a way to manage the Control center through jamf just yet?

hi All,Pretty new to JAMF and i would like to know if anyone has a doc I can read on how to add a line to the visudo settings.Right now its a manual process every time i provision a laptop but i would like to script this.I have search and there are so many answers and none officially supported by JAMF. I now just do sudo visudoedit the filewrite/quit and save the file. Any help is appreciated

If you're wanting to create a self service policy object that users can run to execute sudo jamf policy and sudo jamf recon, these are the steps you'll want to take. I haven't seen a clear and concise post on this so I wanted to create one.When creating the Policy, in the General payload, you'll leave all triggers off because you want it to be triggered by Self Service. For the execution frequency, set it to be Ongoing. Then add the Maintenance Payload and hit Configure. This will automatically have the Update Inventory selected. The update inventory essentially does what a “sudo jamf recon” would. Then to also have it force a check-in, go to the Files and Processes payload and under Execute Command you can put in “jamf policy” without the quotes. Lastly, make the policy available in Self Service. This will then ensure a check-in and update inventory will occur when a user selects that button.

Recently I've been trying to extract infos of which extensions our users have on their browsers.I have a script running for our major browsers and it's working great but now I'd like to get more infos that are sealed inside a .json file.Is there a way to extract specific lines from a .json file such as the "manifest.json" you can find in every Chrome extension's folder?Specifically I need only the rows talking about which permission does the extension have as seen below.

I'm not really concerned but I had this popup appear on a few people's screen after a MacOS Update. This is not our normal Jamf Connect login screen and kinda made me question how this came up out of nowhere. Not sure if anyone has seen this type of screen or would know why it would pop up.

Does anyone have any best practice for this? I suspect we'll need to package both the STATA/MC and STATA/IC versions. Thanks for any guidance.

Sorry if a little off topic but I need to change my email address assoicated with this Jamf Nation Community.I have looked everywhere but can't see the option.

Hello All! Looking for some advise from anyone who has had experience with Microsoft Intune for macOS MDM.  I feel every organization gets the question, "Why are we paying for Jamf when we could use Intune?"  Well that conversation has finally come around at my organization.  Everything I am reading and heard from others screams don't drop Jamf Pro for Intune, but looking to get some specific reasons why.  Anything that could be shared regarding this would be awesome!

As a system administrator, I am happy to use Jamf Safe Internet with Jamf Pro to manage 1:1 iOS devices in an educational environment. However, we are experiencing a problem with a Jamf Safe Internet policy rule that includes a scheduled content filter. The expected behaviour was that the content should only be blocked during the specified scheduled times.Unfortunately, the content is being blocked as soon as the rule is submitted and continues to be blocked outside the scheduled times. I know that scheduled content filtering is a new feature in the Jamf Safe Internet product. Has anyone else tried this feature and had a similar issue?Any advice or guidance would be greatly appreciated.