Hi all, is it possible to create a smart group with membership based on Entra ID platform SSO registration? That is, devices where a user has gone through the SSO registration process by selecting the Company Portal notification. I'm rolling out Platform SSO to our devices and am in need of a way to group which devices have SSO registered so we know which ones can be signed in by any organisation user, and also just to verify that it's enabled on devices we're pushing it to. Thanks :)

I have a script that shows exenstion attribute for the type of license installed for Office.   With the release of the Office 2024 LTSC license does anyone know if the script will be updated to add the information for the 2024 license? I installed the LTSC 2024 serializer but it still reads 'office 2021 volume license'  and from the actual mac end the 'about word' shows 'Office LTSC Standard for Mac 2024'.   Word version is 16.90.2 the script is called Office_License.sh (see below for the script).  Looks like an IF statement needs to be added for Office 2024 volume license https://github.com/pbowden-msft/ExtensionAttributes

We are using Rapid 7 for Vulnerability scanning in our environment, and we are seeing a lot of "Vulnerability in the Oracle Java SE Hotspot component" vulns pop up pointing to some jar files inside Jetbrains apps/folders.  The listed resolution is to update "Azul Zulu" and links to an Azul JDK page. None of our users have installed the Azul OpenJDK, and I don't think I can update the .jar files inside the .app. Has anyone else seen these vulnerabilities and know how to approach this?

Will Self Service+ be added to Jamf Pro automatically to replace the current Self Service.  The current way it is set up on my end, when we add a user and they add the profiles, Self Service automatically deploys to those computers.  Will this be added to Jamf Pro as well for the new Self Service+? If so, is there a timeline of when this will happen?

From a small email distribution list to a formalized community forum, Jamf Nation has served as the premier online resource for Apple management enthusiasts for more than a decade. And recently, in case you missed the news, it hit a milestone - 300,000 posts. Jamf’s founder, and former CEO, Zach Halmstad, not only recognized the desire for customers to share ideas as a way to problem solve, but he also saw their need to connect as humans. So in 2012, he pitched an idea - Jamf Nation.   “Early on we witnessed the huge benefits our customers saw when they could ask each other questions and share their solutions,” Halmstad recalled. “Jamf Nation was the next step for us to ensure customers were successful.”In a 16-slide Keynote, Halmstad pitched his idea to his colleagues at Jamf. He shared the reasons to shift the company’s rapidly growing email distribution list to an online forum, citing communication as a main goal. (Slide from original deck shown below). Fast forward 12 years, a

We have added a new reward to Jamf Nation Rewards: the ability to donate using points to Los Angeles County, by supporting organizations providing emergency relief.  Dangerous wildfires, including the destructive Palisades fire, have ravaged Los Angeles County. The wildfires have burned more than 60 square miles and destroyed over 12,000 buildings. More than twenty people have died, dozens more are missing and more than 90,000 people are under evacuation orders.   It is the most destructive fire in LA history.  If you’re interested in a way to help through sending a donation, we have set up a new way you can redeem your Byte reward points to help with the LA wildfire relief.  It only takes 50 points to donate $25! To find out where the donations are heading, check out this page -https://jamf.benevity.org/community/fundraiser/24332  Donations can be made under the reward '$25 Donation to Emergency Relief LA County'. Please reach out to jamfnation@jamf.com s

Question? Has Jamf changed his Classic API Syntax?  Example: When making a simple get Command using the following syntax  curl -su example:exmaple -H "accept: text/xml" https://example.jamfcloud.com/JSSResource/computers/ I get the following error message:  <title>Status page</title> </head> <body style="font-family: sans-serif;"> <p style="font-size: 1.2em;font-weight: bold;margin: 1em 0px;">Unauthorized</p> <p>The request requires user authentication</p> <p>You can get technical details <a href="http://www.w3.org/Protocols/rfc2616/rfc2616-sec10.html#sec10.4.2">here</a>.<br> Please continue your visit at our <a href="/">home page</a>. </p> </body> </html>%                         However if I just cut and past from the try this out I notice that url now has a bearer token attached to the end. Example cu

We are on Jamf Now and I have added SAP Privileges to all the devices to allow my team to make themselves an admin. This is installed via the App Installer and added to the device Blueprint. It was working well, but I think recently it automatically updated to version 2.0 of Privileges, and now has stopped allowing users to escalate themselves to admin - everyone is stuck as a standard user. I suspect this is because the new 2.0 upgrade needed to reinstall the Helper tool, but when it auto-updated the users were all in standard access mode. And now we are stuck with no way to change this. Is there a way to prompt Jamf to install the Helper tool so that Privileges will work again?

Hey everyone, I'm currently looking for a smart way to automatically logout logged in macOS users. Situation: School using PSSO, users can work on whatever Mac they want. Most students don't log out properly. No planning on force rebooting the Mac. No planning on login into each Mac using local admin credentials and ending the sessions.   Fast User Switching and AutoLogOutDelay are configured as follows:   sudo defaults write /Library/Preferences/.GlobalPreferences MultipleSessionEnabled --bool YES sudo defaults write /Library/Preferences/.GlobalPreferences com.apple.autologout.autoLogoutDelay -int 300   The autoLogoutDelay seems to be completely broken and / or doesn't work at all. All accounts are still logged in despite the delay of 5 minutes - or I just don't geht how it's supposed to work.   Anyway - I've stumbled across this post which seems to be an effective way (need to test it) https://community.jamf.com/t5/jamf-pro/force-logout-help-please/m-p/130871#M11

Hello,   We recently subscribed to Jamf Pro and have access to our account with the licenses. However, when attempting to create our Jamf instance via “Onboard instance,” we encounter the following error message: “There was an unknown error creating your tenant. Please create a support ticket for further assistance.”   We have tried several tenant names while following the naming guidelines, but the instance still cannot be created.   Has anyone else experienced this issue? If so, how did you resolve it?   Thank you in advance for your insights!   Best regards,Dylan

As you’ve probably heard, Declarative Device Management (or, for less of a mouthful, DDM) is making significant changes to the way in which managed devices go about their business in some key ways - most notably how managed software updates work. We’re going to take a look at this in detail, as it’s been a particularly hot topic in the Apple Admin community over the last couple of years.   What is DDM, anyway? Firstly, it’s not a typo of ‘MDM’! In a nutshell, gone is the notion that the MDM server needs to constantly check-up on how a device is getting on with a certain command it’s been asked to do; instead, the device has much more independence and tells the MDM server when something has been done. This majorly cuts down on the stream of commands issued to devices (particularly when performing remote software updates, which we’ll loop back to shortly) and means that a growing number of attributes, such as OS version, can be updated on the MDM without an inventory update command

Hey ya'll -Newish to managing Jamf here! Our team is looking to force notification previews for the Self Service application, even if the end user has "show previews - never" enabled. Is there a script or option to do this?Thanks, Mike 

Hi folks, I am looking for a way to prohibit enabling of Internet Sharing since it can be a pretty serious security risk. I was able to do it with Quest's QAS group policies, but we've stopped using that product. Is there a way to granularly disable Internet Sharing permanently using managed preferences? Thanks!

Hey Jamf Nation! We're excited to announce with Jamf Pro 11.14.0 Beta the compliance benchmarks capability is available for testing. A full version of compliance benchmarks will be available in a future release of Jamf Pro. The Jamf Pro 11.14.0 Beta also features ADCS certificate deployment using SCEP, App Installer support for External URL downloads and more! How to join the beta: Enroll in the Beta Program under Product Feedback at account.jamf.com. Once you enroll you'll receive an invitation to join the Beta Forum, click "Join this group Hub" to gain access. Email beta@jamf.com with questions.The beta program is covered by the Jamf non-disclosure agreement; please do not share any information regarding your testing on any public forum, including the non-beta areas of Jamf Nation. Use the Jamf Nation Beta Forum or contact Jamf via beta@jamf.com with any questions. Thank you to all who participate in this program! 

Hi everyone, I'm currently exploring ways to enhance our mobile device management (MDM) strategy and considering the integration of Jamf Pro with other third-party MDM solutions. Has anyone successfully implemented such an integration? If so, could you share your experiences, challenges faced, and any best practices? Thank you!

Looking for a way to disable notifications, either by a script equivalent to option clicking or using DND from 7am to 2am, something like that? ThanksDave

Hi, We want to set corporate wallpaper for managed MacOS. Guide me the steps how to complete that task.

I'm currently testing Jamf and have everything working as I want with with the exception of figuring out the best way to rename computers after they are setup.  Currently I'm using Jamf with Jumpcloud pushing the user accounts for staff to an employee's computer however I'm stuck with the default computer name of Macbook Pro. I'm trying to figure out the best way to script this or use a policy that runs after the user is setup  to that a machine can be renamed for username-Macbook Pro.I'm wondering what the best way is to accomplish the renaming task so it can be automated and not have to be done manually each time a computer is deployed . Thanks for any suggestions. 

I added Self Service+ to our Self Service "classic" portal today to test out. I noticed when installing Self Service "+" that "classic" quits suddenly, but seems to install "+". Anyone else see this?   Jim

So I enrolled a test Apple TV... After I confirmed that it received all of the desired configuration profiles, I sent a wipe command to it. Out of the corner of my eye, I saw the screen go black so I then deleted its record from the JSS. With the screen black, the Apple TV sat there with no light on the front of it. After 2 or 3 minutes I got impatient and unplugged it - I thought it would have rebooted after the wipe. When I reconnected the power cable, I see that it has my “Conference Room Display” payload still on it, which means it’s still managed and never got the wipe command from the JSS!The “Conference Room Display” restriction does not allow me to get to the main tvOS screen so I can perform a system reset. To make matters worse, I can’t send any management commands to it because it’s no longer in the JSS! Is there any magic command I can do to this thing to get it back to factory?

Good morning.This is my situation:I have about 60 macs already in use by my colleagues, but they have recently been added to ABM from the our reseller.I would like to enroll them and I know that with sequoia the need of admin rights to perform "profiles renew -type enrollment" has been removed.However, to be able to send an email containing a "one click" process for the end user, there is still a problem: Gatekeeper.I tried to create shell script with Automator, a .command script or an app with AppleScript.Nothing, Gatekeeper intervenes anyway.Any alternative method?...other than having to sign the script with a developer account?Thanks

Hey Everyone, In my organization we are looking for a way to allow users to update some specialty apps without having admin access. There are specific apps such as Kemper, Ableton 11 Standard, Slate Connect, Autotune central, native access, etc.. that only 2-3 users out of about 100 need to update. However when the apps need updates they need to be done ASAP because of how the apps interact with each other. We have uses Make me an admin as a temporary solution but want to move away from that for security reasons. I know that some of the apps are built in to jamfs patch manager section but for the others what can I do to allow the user to update them without giving him full admin access?Thanks in advance

I'm still fuzzy on how to force Chrome to restart after an update without having the user have to do it. I understand that I can use Mac Updates to automatically push updates, but I don't see how to force a relaunch. We run into this pretty often where there is an update, but the users don't relaunch their browser. Any suggestions? What am I missing? 

I'll be coming into Minnesota from Dallas on Sunday. No way I will miss watching the Cowboys play and they will be playing the Vikings that night. What better than to watch it at Brit's? Anyone interested in football and beers?

Hello,   I'm deploying a picture for lock screen.  Now i need to deploy picture as a screensaver. How can i do it ? I couldnt find any guide for this.   Can you help me?   Thank you.