Hi, We have Netskope deployed in our environment which was running fine until a week ago. Whenever the installtion is run, a pop up appears saying Terminal need access to control installer. We have PPPC configured, where Netskope have access to system all files, accessibliity, and FileProviderPresence. Anyone have same issue or can lead to solutions. We have tried everything we could, but still unable to fix.

I am trying to change the /etc/krb5.conf file. I have specific settings that I can't share... what I did was create a policy, under files and processes I put vi /etc/krb5.conf and the bash script I need run to change these settings. Did I do this right?

I'm trying to find a way to force a User Profile picture for all users via Jamf Pro. I have spent a day now reading posts about it and they all seem to assume that I already know what the User profile name is and that it is going to be the same on all computer or the scripts are not working/ erroring out or they say to set it up to be done before the user profile is created. none of these solutions work for my needs. I need to be able to force change the picture on all existing profiles with out already knowing what the profile name is.All the computers are running Monterey or newer.Is there anyway to do this?

Hey All, This year Autodesk decided to change the installer for AutoCAD, Maya and Mudbox. Here's how I got AutoCAD to install silently since the new silent installer option is broken. You will want a policy to copy the app from the dmg to a temp directory. I used /tmp EDIT: You only want to change the license server address in the script below. Nothing else. #!/bin/sh year="2021" pkgpath="/tmp/Install Autodesk AutoCAD ${year} for Mac.app" pkgPath1="/tmp/Install Autodesk AutoCAD ${year} for Mac.app/Contents/Helper/ObjToInstall/lib.pkg" pkgPath2="/tmp/Install Autodesk AutoCAD ${year} for Mac.app/Contents/Helper/Packages/AdSSO/AdSSO-v2.pkg" pkgPath3="/tmp/Install Autodesk AutoCAD ${year} for Mac.app/Contents/Helper/Packages/Licensing/AdskLicensing-10.1.0.3194-mac-installer.pkg" pkgPath4="/tmp/Install Autodesk AutoCAD ${year} for Mac.app/Contents/Helper/ObjToInstall/licreg.pkg" pkgPath5="/tmp/Install Autodesk AutoCAD

Hello All,    Just wanted to see if anyone else is experiencing this or has experienced this in the past. Our ABM is showing that it has not synced with Jamf since this update on March 18th. Since then we have not been able to automatically enroll any devices and due to this all of our purchased machines are not being enrolled at all and only show up in ABM. They are not showing up in Jamf despite them showing that they are connected to the Jamf server in ABM. Has anyone experienced this and does anyone know of a fix?

HiWe use Mac and Windows with Outlook in our schoolIn the group policy I can configure default fonts for Windows How can I configure Default Fonts for Mac for all the users in the organization Kind regards,

Need to disable Hand-Driven Reactions on MacOS (Thumbs up and 2 fingers on a meeting on MacOS can trigger fireworks, balloons, etc.) We are managing MAC devices from Mosyle tool (Alternate of JAMF) I want to disable this reaction feature for all the devices centrally on all the apps as this is Mac OS feature want to disable this feature on Mac centrally using a script. I know we can disable it by clicking on Green symbol and click on reactions when an app id open, but we want to disable this from Mosyle portal the reason we need a Script. Can someone help me with this.

It's taking forever to repair the Database Tables, and I'm not certain the process continues after I'm timed out of the web interface. Is it possible to repair the database tables from the command line?

Hi there,  This option was working till macOS Sequoia.  sudo defaults write /Library/Preferences/com.apple.loginwindow AdminHostInfo HostName This is working with a profile but now with macOS Sequoia it stops working.  Anyone see the same problem and is there a solution? Thanks

I'm having serious performance issues with the 11.9.1 update (Jamf Pro Cloud). Any time I edit the scope of a profile the interface slows to a crawl and I get the dreaded "Poor network connection" pop-ups. It can take up to 30 seconds or more just to register keystrokes when filtering the list of computers and another 10 seconds or longer to select/add something. It was always slow/laggy working with profiles, but not like this. Anyone else?

Hello again. I'm seeing a lot of older posts about this that are not relevant to Sonoma; most posts are from years ago. This is a 2 part question: I want to upload a Corporate image to be used for Desktop Wallpaper. I'll need this to be built into the "image" we use for MacBooks.2nd question, once picture is installed in the right folder, all I need to do is use the the "Lock Desktop Picture" setting in Restrictions and add the file path, correct? Any help is greatly appreciated. JAMF ProSonoma 14.4.1MacBook Pro 

Hi- does anyone have a source for the Bluebook Exams installer package?  I can only seem to get it from the App store, and trying to build a package using Composer constantly fails.  (Building works, but the package doesn't work) Have to deploy to a student testing lab...   Thanks!

Hi Jamf Nation Team, We are currently working to deploy the Falcon Sensor in our system, but we need to monitor the sensor's status. Unfortunately, the Extension Attribute I was using is not gathering the necessary information. Could you please help me if you have any that I can use: Sensor Registration: Confirms whether the Falcon Sensor is correctly registered with the CrowdStrike cloud.Sensor Operational Status: Checks if the Falcon Sensor service is running correctly on the endpoint.Sensor Cloud Connectivity: Verifies that the sensor can successfully communicate with CrowdStrike’s cloud infrastructure. Thank you!

Hello All,    We want to use superman to update our MacBook fleet but our higher ups want to make sure that this device is not malicious. Has anyone run into this before and point me to any confirmation that this software is not malicious. I know that many people use this to update MacBook fleet as Jamf built in software updates does not work on OS under 13 and asking users to update their devices never works. 

Hi,we recently acquired a Jamf Pro license and wanted to build a update ring for certain softwares.Since Cisco Anyconnect is not available in Patch Management i thought i'll make a feature request.

Hi folks - working with a new jamf cloud and I've run into a problem trying to have a user follow the steps to make their device Entra compliant.  When they log into the Company Portal app (after starting the registration from Self-Service) the login screen for Entra pops up, accepts their username and password, then goes to a blank window.  We know authentication is happening because the MFA for the user kicks off but the login window is blank and does not show the numbers.     Has anyone seen this before?  I was able to do this on a different machine two days ago.  The OS on this machine is 15.0

Hi everyone, I've been facing an issue with internet connections just after updating to macOS Sequoia. Two devices running Sequoia cannot establish a connection with each other in Docker.   Error response from daemon: Get "https://europe-docker.pkg.dev/v2/": net/http: request canceled while waiting for connection (Client.Timeout exceeded while awaiting headers)   This issue started right after I installed the update, and I've heard about DNS/connection issues related to it. The first thing I wanted to test was turning off the firewall, but I wasn't able to make any changes. I have a policy that was supposed to turn off the firewall with the following command:   defaults write /Library/Preferences/com.apple.alf globalstate -int 0   However, it didn't work on Sequoia, although I tested it on Sonoma and it worked well there. I've tried searching online but haven't found anything that works so far. My question is: Does anyone have any ideas on how to disable the firewal

Hi,  I want to disable OneDrive from the background service, but I don’t know how to do it. Currently, it is enabled, and I want to disable it. On Microsoft’s website, they explain how to enable it, but not the opposite. https://learn.microsoft.com/en-us/sharepoint/deploy-and-configure-on-macos#background-services Would you know how to do it?

Hi ! Can someone suggest me how to set up a custom analytic to get an alarm if a user (yes, they need to have adminrights sadly) removes the MDM profile? I had some cases in the last weeks where all profiles went missing and i do not want to suspect someone falsely.    Thanks !

So we might be learning this lesson the hard way, but we have an Air that a student has locked via his iCloud account and does not know the code. We've been fighting with Apple support and GSX to get it unlocked but in the interim we've begun discussing how to prevent this in the future. Only way I really see would be to disable the iCloud preference pane (configuration profile I assume?), correct? If that is the case, then you are debating the cost benefit of them being able to utilize the iCloud features against locking and wiping a device as well. If we go the route of disabling the iCloud pref pane, a user could still enable this during an OS upgrade to right? Finally, wondering if there is an extension attribute or another way to query all my devices to see who has iCloud enabled on their laptops?

Hi all - really annoying that the option for pointer size is greyed out and our developers need the option to adjust available.  Has anyone seen this and found a workaround via Jamf through a script or profile? All my efforts have failed, many thanks :) 

I have the following in a script on Jamf Pro. When I deploy the script and it runs this I can see on the test Mac it has "Attempt 1 to bootout com.Daemon" in the log file.  However, it fails to continue with the rest of the script. I tried adding || echo "bootout error"  after the bootout command but that didn't help either. When I run the launchctl list | grep "com.Daemon" command I can also see it has successfully booted out the Daemon.  Why won't it continue to then trigger the jamf policy? I've tried /usr/local/bin/jamf policy -event 'Trigger'I've tried with sudo and without. I've also tried to have it trigger the jamf policy first which works but if I put a delay in the policy so I wait until bootout is complete it doesn't progress to attempt bootout (it waits on policy completing). I tried adding & to then end (/usr/local/bin/jamf policy -event 'Trigger' &) and that resulted in bootout command running but jamf policy did not. When I run the s

Hello,I'm testing the Temp user promotion setting:I have set a com.jamf.connect config profile with the below plistIt's showing correctly on the jamf connect menu bar but when I click and select the reason nothing happens and the timer doesn't show in the bar nor the user gets elevated.Hope anyone encoutered the same issueThanks   <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>TemporaryUserPermissions</key> <dict> <key>TemporaryUserPromotion</key> <true/> <key>URLCommandLineElevation</key> <false/> <key>UserPromotionDuration</key> <integer>60</integer> <key>UserPromotionReason</key> <false/> <key>UserPromotionTimer</key> <true/> <key>VerifyUserPromotion</key> <false/> </d

We have the Internet Accounts system preference pane disabled, but our users are still able to add accounts to Internet Accounts. I think this is being done via Safari because IIRC, it will ask you if you want to add a supported account when you sign in to that account through the browser. Does anyone know via the command line how to remove these accounts? Or do we just have to temporarily allow access to the Internet Accounts preference pane in order to remove these?

I have been working on a policy that will create a temporary admin account. A launch daemon gets installed and launched to handle the account deletion. Once the alotted time has elapsed, I see the account and its home folder get deleted. I see that the launchd process is no longer running. Everything works exactly as intended, but the launch daemon does not get deleted. I can manually run a command such as "sudo rm /Library/LaunchDaemons/com.my.launchdaemon.plist" and that works perfectly. The launch daemon triggers another Jamf Pro policy to run that deploys a script that runs the account deletion, deletes the home folder, unloads the launch daemon and then is supposed to delete the launch daemon. A moment ago, I commented out all the steps except the launchdaemon unload and deletion, and watched as the script deleted the launch daemon! Below are all the steps that the script runs. #!/bin/zsh # Delete the Rescue Admin account and its home folder echo "Removing Rescue Admin account" d