I'm new to Jamf, so I'm hoping someone can help me figure out how to do something that should be pretty simple.I work at a college.  We have computer labs with iMacs.  Some professors require students to use some Windows-only software, so I created a virtual Windows computer that people can connect to from an iMac.  They get to the virtual computer via a web browser.  I've been asked to put a shortcut to that website on the iMac desktops so that a user can log on to the iMac, double-click the icon on the desktop, and get to the virtual Windows computer.How do I use Jamf Pro to push the shortcut to the lab iMacs in such a way that each user will have that shortcut when they use their individual Active Directory (AD) credentials to log on to the iMac?  I know how to create the icon that they will click on, but not where to put it so that each user will have it on their desktop or how to put it in that location with Jamf.Thanks in advance for your help.  --Je

Hi,This is probably really stupid, but when I open my mac, the login screen that is presented is the default mac screen unlock. Is it possible for JAMF Connect to be the pause/resume authentication screen?

 I’m trying to find the best method to allow pop-ups from sites in Google Chrome. I tried defaults write com.google.chrome DefaultPopupsSetting –integer 1 but nothing happens.  My google fu is failing me beyond this. Any help appreciated. Also, if there is a way to do this with a Jamf Config profile that would be great. I just can’t find it.Thank you

I just update some iMacs to Big Sur and I am having trouble pushing a new local account to the computer. I have wiped them and reloaded from scratch and still nothing. I also renewed the MDM profile. Also Deleted the .applesetupdone file. I thought it was my payload so I deleted it an recreated a new config policy. The Admin account works fine but the Standard user doesn't login or doesn't get created. Anyone had issues like this?

Hi guys, I am in the process of setting up DEP with ABM for my company. I was reading multiple JAMF Nation posts and videos regarding how to set up DEP with ABM and going forward with doing PreStage enrollment for initial setup. My question is: is it possible to have multiple PreStage Enrollment option. My goal is to have MacBooks follow a different setup path than lets say a MacMini for a conference room. 

I'm trying to add a warning to our Big Sur installer in Self Serve. I have the policy set to make sure users have to view the description, but that doesn't seem to be enough.I've made a script with jamfHelper. It's a simple warning message to back up important files to our Google Drive before continuing, with a button to cancel and a button to continue.In the policy, this warning is set to run "Before". The policy is working correctly, giving me the warning before trying to run the erase-install (grahampugh) script. However, I can't seem to get the Cancel button to actually halt the policy execution.. Can this be done? This is what I have so far.RESULT=$("$jamfHelper" -windowType hud -title "Before you continue... Warning from the HelpDesk" -icon "$jamfIcon" -heading "$heading" -description "$description" -button1 "Cancel" -button2 "I understand." -defaultButton 1 -lockHUD -iconSize 200)if [ "$RESULT" == 0 ]; then# do button1 stuffecho "Cancel was pressed!"echo "error: script fail

Hello,suddenly the Option/Settings are not showing on the right side of the screen in the Safari Browser (iOS and MacOS) when opening the Profiles in Jamf for School. All works fine when using Google Chrome. I've tried all the settings in Safari, but couldn't get them to show. Anyone else having this problem or is it only me? Any suggestions would be helpful, thanks in advance.Kai 

SOLVED: - PEBCAK issue... Hi there,Since a week ago, Office365 no longer installs using DepNotify.  This used to work fine.The process of installing Office365 takes a few minutes and DepNotify continues, however when checking my apps, Office365 did not install.When installing the same pkg manually, it works fine, so it seems to be only doing this behavior when downloading it using sudo jamf policy -event In Jamf it says pending after DepNotify, but won't trigger again as it's only part of DepNotify. The only thing I can think of is the fact that I already re-installed this device over 80 times. Does Jamf have any kind of throttling or data limit? Are there any logs I can check?Thanks! 

We received some iPads for the teachers. The only option they have when holding the finger on the homescreen is sharing the app. There are no other options like removing or modifying. In Restrictions "Allow removing apps" is chosen. There is a layout pushed to the devices, though. Could that be the problem? Thanks for the help.

Hey folks, I'm looking for the best way to get an outlook add-in deployed/installed on all our macs. Any suggestions would be greatly appreciated. 

Restart the Mac and hold CMD + R to launch Recovery Mode Launch Terminal from Recovery Mode Run the following command to ensure “.AppleSetupDone” file is listed: ls -la "/Volumes/Macintosh HD - Data/private/var/db" Run the following command to remove “.AppleSetupDone”: rm "/Volumes/Macintosh HD - Data/private/var/db/.AppleSetupDone" Run the command on step three again to ensure that the file was removed and is not listed in the directory Reboot the Mac to Prestage Enroll with all of its glory.

Hi Everyone, I just recently learned about Custom Triggers and I think they are great. I have a question about how I can get this done though. Policy 1: (made to be fast)-install essential software-force restart in 2 minutes-next login enable FileVault 2 Policy 2:-install supplemental software-install printers-install etc How can i trigger Policy 2 to run after that restart?

We are an MSP that supports about 20 unique Mac clients. I've been in the process of moving many of our clients' management functions from Datto RMM to Jamf MDM over the last year or so (with an increased urgency after the recent Kaseya RMM exploit this summer). As such, I've been porting over many BASH scripts that will download and run PKG- and DMG-based installers on the managed Macs. The preference is to download the most current installer directly from the developer site, and we host the installers in our own repo when that isn't a practical option (behind a login, no direct DL link, etc). Things are working great. Obviously we start running into limitations when talking about apps like Adobe CC, but aside from those, are there any other benefits to building custom packages for Jamf (Composer, AutoPKG, PKGmaker, etc) instead of continuing to use my current scripting methods? Just seems like a lot of extra work to go the custom pkg route...Thanks in advance for the feedback

Hey AllI am looking to have a policy get called while I have a JamfHelper window up doing a 12minute countdown. This is all happening once a machine is enrolled  and keeps the techs from clicking ahead before the installs of all the software are complete.  So far I'm able to get the countdown timer going using the enrollment complete trigger, but unfortunately all the other enrollment complete triggers are waiting for the jamf helper countdown to complete before they run.  #!/bin/sh /Library/Application\\ Support/JAMF/bin/jamfHelper.app/Contents/MacOS/jamfHelper -windowType utility -lockHUD -icon /Library/Desktop\\ Pictures/PPSLogo.jpg -title "Tech Office" -heading "Please wait for install to complete..." -description "Installing all needed software..." -countdown -timeout 720 -alignCountdown right  I'm wondering if I just add a&to the end of a policy trigger before the caffeinate command, will that then run the install policy in the background?Li

Does anyone have a download link to the Security Update 2022-002 Catalina pkg? I like to wrap it up into my MDS workflow so I don't have to run SU after its done doing its thing.Thanks! 

Hey All -  I'm running into a weird issue where during testing, I had my upgrade workflow to get our computers upgraded to the newest version of Monterey via a pkg file. All went perfectly during testing. However, when I pushed it live this morning, all users received this error that the process was killed when it attempts to call startosinstall: "/Library/Application Support/JAMF/tmp/upgradeRebootWarning.sh: line 20: 60521 Killed: 9 /Applications/Install\\ macOS\\ Monterey.app/Contents/Resources/startosinstall --agreetolicense --nointeraction Error running script: return code was 137." For reference, this is all the script is doing: #!/bin/bash #get logged in user info loggedInUser=`/bin/ls -l /dev/console | /usr/bin/awk '{ print $3 }'` loggedInUserUID=$(id -u "$loggedInUser") echo "The current logged in user is $loggedInUser and their UID is $loggedInUserUID" #create applescript string userPopup="display dialog \\ \\"Your machine has finished the download a

hey there,in the config profiles there is the option to activate the screensaver after x minutes. however, is there also the option that the user is then no longer able to change the time until the screensaver is activated? in my tests it is now the case that the screensaver is active, but the user can still change the 5 minutes, for example, as he wishes. this should be blocked. how can i change this? 

Not sure if anybody have seen, but with the 10.35.0 Jamf Pro version, it seems like classic API can be used with the bearer token authentication: https://developer.jamf.com/jamf-pro/docs/classic-api-authentication-changes  When I am trying to use the code samples to simply get all sites from JSS with a simple curl command:apiURL="JSSURL" username="USERNAME" password="PASSWORD" # created base64-encoded credentials encodedCredentials=$( printf "$username:$password" | iconv -t ISO-8859-1 | base64 -i - ) allSiteData=`curl -X GET \\ $apiURL/JSSResource/sites/ \\ --header 'authorization: Basic $encodedCredentials'` echo "AllsiteData is: $allSiteData" I get:% Total % Received % Xferd Average Speed Time Time Time CurrentDload Upload Total Spent Left Speed100 422 100 422 0 0 2562 0 --:--:-- --:--:-- --:--:-- 2740AllsiteData is: <html><head><title>Status page</title></head><body style="font-family: sans-serif;"><p style="font-size: 1.2em

I am working with the api to create users and query or update device info. Now i am trying to perform dep endpoint actions, but i get a 404 Not Found error.If the payload is malformed i get a 500. The endpoints for devices and users works with post and get requests as (mostly) expected. this is related to the "teacher endpoint not working" thread https://community.jamf.com/t5/jamf-school/jamf-api-the-endpoint-teacher-is-not-usable/m-p/255375#M652 

I've got a PKG Big Sur installer, and I've started caching it on devices needing it.I'm wondering if there's a way that I can run the cached installer with the --agreetolicense --nointeraction flags or if running the package Install Cached removes any way we'd be able to do this.We have the script from https://github.com/kc9wwh/macOSUpgrade but it was implemented by someone who is no longer with us. I'm trying to work with it but I want to make sure I have a backup plan, as it wasn't working (or at least installations were failing) when they left us.

I have a local admin account on several machines that are also the management account on those machines as well. Is there a way after the fact that I can go back in and hide them? I can't seem to find a policy setting or script that will do that. We need to hide the current already created ones. I did create a quick add package that will create that user and hide it on any further machines but not sure if there is easy way to hide the already existing one. Hope that makes sense.

Hi, New to Scripting still but trying to learn.My goal is to deploy around 15 Mac Mini within a course of about 2 weeks. My goal is to try to create a policy and/or configuration profile if I can do Teamviewer Host in a silent install without "any input effort by me or a user."  I integrated our Teamviewer token to Remote Administration, after that I am lost on how to proceed. I know I need to push the host .PKG into the account on the Mac minis so it can install but how can I customize the setting up either Easy Access by pulling the name of the computer and setting up other customizable features Teamviewer offers as well so it can show up in our Management Console. 

I'm working on home screen layout for our sales ipads.  [Devices > Configuration Profiles > Home Screen Layout]I didn't have any issues adding the well known apps thanks to JAMF's search feature but I have a couple of lesser known ones, for example, Service Finance Dealer App.  https://apps.apple.com/us/app/service-finance-dealer-app/id962933342 Can anyone help me by telling me how to find this information?TIA,Brandon

Hi AllMy first post, please excuse my knoweldge in Jamf, hardly been playing with it for a month.Ive started supporting an existing Jamf implementation and have a couple of requests to reset passwords on Macs where users have left the Org. I thought it would be just the matter of creating new local admininstrator account policy or even issueing a wipe command so device can reset and start again. Unfortunately its on login screen and doesnt have a wifi connection option (which I understand is due to FV2 being enabled??)The end user told me that he tried to reset the device and it keeps asking for a recovery key.I have since enabled the "startup scripts" option so policies can be triggered on System Startup but sounds like it only applies once the policy refreshes, ie, after logging in with any account.My questions1) How do I reset a Mac that is stuck in this situation, can I use any capabilities Jamf has?2) How do I obtain the recovery key the user is referring to?3) Are there any such

Hi JAMF nation,The Cert: CN=JSS Built-In Signing Certificate, OU=FILEVAULT2COMM expired in my paternity leave and when i try to renew it i have only the possibility to revoke it in Settings -> Global Management -> PKI Certificate -> Jamf Pro Built-in CA. Do i have a chance to renew that? Or do I have to create a new one, but that means to recreate all Recovery Keys, right? Thank you very much.BRDaniel