Our users that have recently upgraded to Big sur 11.6.3 or 11.6.4 have had printing issues to our Ricoh printers.  Monterey 12.2.1 might also be affected.We are having to re-install the printer drivers for each user.   is anyone else experiencing this?Tim

Is there a way to set the display name for the Jamf Pro Webapp? Right now it shows the IP address of our secondary server and localhost for the primary. Ideally I would like to change these to the FQDN of the servers. Thanks!  

 Beginning with Outlook Build 16.58 (February 2022 update) Outlook will default to the New Outlook experience. But we want to default to the "Classic Mode" when Outlook will be started the first time after Onboarding. (User can switch to New Outlook later, if wanted. But it should first start with Classic Mode as default.)In this blog from macadmins, there's a solution for this:2. Can I configure the settings ahead of time so that my users don't see any change when 16.58 rolls-out?Yes. Your best option is to explicitly set the EnableNewOutlook preference to integer value 1. You can do this via the defaults command or through a Configuration Profile.The defaults command is: defaults write com.microsoft.Outlook EnableNewOutlook -integer 1 But this does not work for us. We created a Policy with the Office 16.58 package and entered this command as process. After onboarding and starting Outlook the first time, the new Outlook is set as default.Anybody know, how we can set this con

Hello folks, any chance to run Jamf CLI commands like "sudo jamf policy" or "sudo jamf launchSelfService" from a bash script? Thanks a lot|

Hello All, Any info on how to get Cisco AMP to install on machines. I have the DMG downloaded which has a pkg inside. I followed the instructions at this Jamf community URL:https://community.jamf.com/t5/jamf-pro/deploying-cisco-amp-v-1-9/td-p/213222  I tried just using the dmg as well with no luck, any hints or tips are really appreciated  

Can someone guide me or link to a resource? I have my pkg file (trying to put a webloc in the applications folder to then put in the dock). It is not letting me install this and is giving the error that "the package is trying to install content to the system volume." I am stuck, I've tried changing the path in Jamf Pro for the target drive to /Applications but that doesn't help....What do I need to do?

I would like to automatically force Allow access to the Microphone and Camera for apps such as Zoom and Chrome. As part of our security policy we have disabled users from accessing the security and privacy setting. Whenever they need to grant access to the mic or camera for a new app, we have to exclude their machine from this policy in JAMF, have them force pull the policy from their terminal, and then they go in and grant the permission access. We would then re-apply the policy back on their machine and have them force the policy in terminal once more. This is a tedious process that interrupts the workflow for all involved and simply does not scale with our growing user base. Is there a way to have a JAMF config profile push down the permission to automatically Allow access to the mic and camera for specific apps? I've taken a look at the PPPC config settings in JAMF and for the mic and camera it seems like it can only push down the Deny and not Allow setting. Is there a way arou

Hello allI am running into an issue where some machines do not have Securetoken, I have a script that seems to be working with M1 machines but not Intel machines. I tried uploading the script but it didn't show up right so its posed below Script to assign SecureTokens: START OF SCRIPT#!/bin/bash##########################Admin credentials##########################adminUser=$4adminPassword=$5#################################################################This will store the logged in user's name to a variable.#################################################################userName=$(/usr/bin/python -c 'from SystemConfiguration import SCDynamicStoreCopyConsoleUser; import sys; username = (SCDynamicStoreCopyConsoleUser(None, None, None) or [None])[0]; username = [username,""][username in [u"loginwindow", None, u""]]; sys.stdout.write(username + "\\n");')#################################################################################This will prompt the user for their password

No text available

I have a policy that automatically renames and binds systems to AD that runs on enrollment. I'd like to be able to run that policy for systems that are fresh out of the box. I'm able to scope systems to a prestage, but it doesn't seem like Jamf is able to scope systems to policies that haven't run their initial enrollment. Anyone have ideas?

I am looking to disable editing desktop and documents on our network and so far I am not having much look.Our Macs are linked to AD and people login with there AD accounts.We have a suite of Macs and want to make sure people save to network drives and not the devices.So either a script that runs on login and making it so that all accounts are setup as Guest accounts on the Macs would work I guess but not sure how to do this.I have used scripts like the following and they all work when logged into the device but error via Jamf.sudo -u $USER chflags uchg ~/desktopsudo -u $USER chflags uchg ~/documents The Errors  Script result: sudo: unknown user: chflagssudo: error initializing audit plugin sudoers_audit sudo: unknown user: chflags sudo: error initializing audit plugin sudoers_auditI was looking at ideally doing it via a login script as then I can exclude the admin account etc to make sure things can still be done if needed.    

So our organization is looking to have all users upgraded from Big Sur to Monterey. All machines in our organization are standard users, NOT administrators (minus IT of course). I've been trying out different methods and landed upon the erase-install by grahampugh.While this is *almost* perfect for the upgrade, the policy in JAMF never completes and always stays in "Pending".- The issue with staying in Pending is, while testing, the machines upgraded to Monterey successfully, but then the update runs AGAIN. We want to first have users manually install it via a policy in Self Service and then force push it to machines after xx amount of time (say a week after avail in Self Service).  Is there any possible way to get the erase-install policy to show as completed in JAMF OR is there another way to get machines upgraded to Monterey seamlessly? 

I have been using JAMF Admin.app to upload packages, set their Category (Application, Utility, etc) and index them. Last year some time I noticed that if I upload a .pkg, I can't index them until I save, quit the JAMF Admin.app, and then launch it again. Then it will allow me to set the Category and run an index. Weird - but I can deal with it as I am usually just updating a package or two and done.Today, I had multiple packages to test and upload and I noticed that after I uploaded all the packages, saved, and quit, when I opened it again and started setting the Categories and running index, some of the packages would fail to let me do an index and would give an error. I skipped them for now and set the Categories and saved and quit the app. When I launched it again, the categories I set had reverted back to 'uncategorized' and went back to being blue. I deleted the packages that were giving errors when I went to index them, and uploaded them again, set the categories again for the on

Hello, We were using that solution for setting Big Sur deployment policy in Self Service: https://www.jamf.com/blog/streamlining-your-macos-upgrade-process/As far as I understand, it doesn't work on M1 Macs because it requires password for restart - as well as similar modified script for Monterey . There is an error in execution log: Error: failed to authorize for installation. Provide a password with --stdinpass or --passpromptI am thinking to create temporary admin account for policy execution, then delete this account when Monterey is installed. Would you please help me to modify deployment command, where account name and password should be added? ##Start macOS Upgrade/Applications/Install\\ macOS\\ Monterey.app/Contents/Resources/startosinstall --agreetolicense --nointeraction --forcequitapps --pidtosignal $jamfHelperPID >> /var/log/startosinstall.log 2>&1 & Thanks! 

I need to deploy Cisco anyconnect VPN client on MAC endpoints, however post installation, it gives prompt to end user to allow the app from system preferences.I want to bypass this step so that post deployment end user does not have to go to system pref to allow the appXattr command i am using is sudo xattr -d -r com.apple.quarantine /Users/username/Downloads/AnyConnectClientwhere the AnyConnectClient is a folder where the anyconnect.dmg file residesHowever, the command is not working for me. post installation, it still asks for user to allow the app from system preferencesDoes xattr work on .dmg file? Do i need to install the app first then run the command and then give path to some app system file? If so, how do it create package of the installer which is free of this restriction?

I have worked out how to change a Mac computer name in the JSS console then propagate it out to the client. I noticed that in the example of a name like 'test-name-air', the ComputerName and LocalHostName take this change but the HostName gets truncated to just 'testname'. I am not sure if Active directory will care about the HostName being different or not. At this stage it doesn't appear to and I would prefer not to have to deal with further complications of scripting the rename of HostName if I don't have to. Thanks for any help.

Hi,under My Profile > My Settings > Privacy it is possible to restrict showing privacy related data, e.g. the e-mail address, only to "Friends".My question is, where can I find my friends list?Does anybody have an idea?

Apologies but I am a little confused on how I can trigger a policy, after a specific user (local account) logs onto a specific Mac.  I see the the triggers "once per user"  and when I try and scope it to that specific user, I don't see that local account listed.  Thank You.

FYI to all other Jamf admins out there who maybe searching these keywords, this is a known issue.PI101517 - PI-007623Users assigned to a group with administrator privilege may be unable to save Custom Enrollment configurations.Solution for us was to create a temp admin account to create the Enrollment Customizations. You may also be able to change an existing account to have full Admin access. 

Something has changed again. I go to download the new 10.37 client and my choices are Linux, Windows, Manual and Jamf Pro Apps. Which one do I download for the Mac?

Hello,I noticed that the inventory was not done on computers with MAMP installed.When I do a "jamf recon -verbose", the inventory hangs completely and I think that it is the /Applications/MAMP/ folder that is causing the problem and not the MAMP.app application.Have you seen this issue before and do you know how to work around this behavior?Thank you for your help

So we have a nice tool to looks at packages for scripts that might have deprecated languages in them (see https://github.com/scriptingosx/pkgcheck).  Has anyone created something to look at the first line of all the scripts in the JSS and report ?  I am guessing would have to use the JAMF API, to get <script_contents>, then match on the first line like in pkgcheck.  Anyone working on this?

Hello all,we have the problem that some of our users when they received their new device, want to import a TimeMachine backup from their old device and do it with the help of apples Migration Assistant. After the successful transfer, the device no longer connects to Jamf and displays the following error:There was an error.Device Signature Error - A valid device signature is required to perform the action.Only a "sudo jamf -enroll -prompt" helps but for this I have to know as admin that the error exists. Does anyone have an idea to work around this problem? The affected devices do not check in anymore and do not update the inventory either.

No text available

Hey Everybody,I'm not seeing the option in the classic API, or maybe I'm missing the obvious, but is it possible to either get all the groups for a specific site, or query what site a group belongs to?  The default query grabs everything, but I'm only interested in groups for a specific site.jamfGroupArray+=($(curl -sX GET -H "accept: application/xml" -H "Authorization: Bearer ${jssAuth}" "${jssURL}/JSSResource/mobiledevicegroups"))Thanks again!