Restart the Mac and hold CMD + R to launch Recovery Mode Launch Terminal from Recovery Mode Run the following command to ensure “.AppleSetupDone” file is listed: ls -la "/Volumes/Macintosh HD - Data/private/var/db" Run the following command to remove “.AppleSetupDone”: rm "/Volumes/Macintosh HD - Data/private/var/db/.AppleSetupDone" Run the command on step three again to ensure that the file was removed and is not listed in the directory Reboot the Mac to Prestage Enroll with all of its glory.

Hi Everyone, I just recently learned about Custom Triggers and I think they are great. I have a question about how I can get this done though. Policy 1: (made to be fast)-install essential software-force restart in 2 minutes-next login enable FileVault 2 Policy 2:-install supplemental software-install printers-install etc How can i trigger Policy 2 to run after that restart?

We are an MSP that supports about 20 unique Mac clients. I've been in the process of moving many of our clients' management functions from Datto RMM to Jamf MDM over the last year or so (with an increased urgency after the recent Kaseya RMM exploit this summer). As such, I've been porting over many BASH scripts that will download and run PKG- and DMG-based installers on the managed Macs. The preference is to download the most current installer directly from the developer site, and we host the installers in our own repo when that isn't a practical option (behind a login, no direct DL link, etc). Things are working great. Obviously we start running into limitations when talking about apps like Adobe CC, but aside from those, are there any other benefits to building custom packages for Jamf (Composer, AutoPKG, PKGmaker, etc) instead of continuing to use my current scripting methods? Just seems like a lot of extra work to go the custom pkg route...Thanks in advance for the feedback

Hey AllI am looking to have a policy get called while I have a JamfHelper window up doing a 12minute countdown. This is all happening once a machine is enrolled  and keeps the techs from clicking ahead before the installs of all the software are complete.  So far I'm able to get the countdown timer going using the enrollment complete trigger, but unfortunately all the other enrollment complete triggers are waiting for the jamf helper countdown to complete before they run.  #!/bin/sh /Library/Application\\ Support/JAMF/bin/jamfHelper.app/Contents/MacOS/jamfHelper -windowType utility -lockHUD -icon /Library/Desktop\\ Pictures/PPSLogo.jpg -title "Tech Office" -heading "Please wait for install to complete..." -description "Installing all needed software..." -countdown -timeout 720 -alignCountdown right  I'm wondering if I just add a&to the end of a policy trigger before the caffeinate command, will that then run the install policy in the background?Li

Does anyone have a download link to the Security Update 2022-002 Catalina pkg? I like to wrap it up into my MDS workflow so I don't have to run SU after its done doing its thing.Thanks! 

Hey All -  I'm running into a weird issue where during testing, I had my upgrade workflow to get our computers upgraded to the newest version of Monterey via a pkg file. All went perfectly during testing. However, when I pushed it live this morning, all users received this error that the process was killed when it attempts to call startosinstall: "/Library/Application Support/JAMF/tmp/upgradeRebootWarning.sh: line 20: 60521 Killed: 9 /Applications/Install\\ macOS\\ Monterey.app/Contents/Resources/startosinstall --agreetolicense --nointeraction Error running script: return code was 137." For reference, this is all the script is doing: #!/bin/bash #get logged in user info loggedInUser=`/bin/ls -l /dev/console | /usr/bin/awk '{ print $3 }'` loggedInUserUID=$(id -u "$loggedInUser") echo "The current logged in user is $loggedInUser and their UID is $loggedInUserUID" #create applescript string userPopup="display dialog \\ \\"Your machine has finished the download a

hey there,in the config profiles there is the option to activate the screensaver after x minutes. however, is there also the option that the user is then no longer able to change the time until the screensaver is activated? in my tests it is now the case that the screensaver is active, but the user can still change the 5 minutes, for example, as he wishes. this should be blocked. how can i change this? 

Not sure if anybody have seen, but with the 10.35.0 Jamf Pro version, it seems like classic API can be used with the bearer token authentication: https://developer.jamf.com/jamf-pro/docs/classic-api-authentication-changes  When I am trying to use the code samples to simply get all sites from JSS with a simple curl command:apiURL="JSSURL" username="USERNAME" password="PASSWORD" # created base64-encoded credentials encodedCredentials=$( printf "$username:$password" | iconv -t ISO-8859-1 | base64 -i - ) allSiteData=`curl -X GET \\ $apiURL/JSSResource/sites/ \\ --header 'authorization: Basic $encodedCredentials'` echo "AllsiteData is: $allSiteData" I get:% Total % Received % Xferd Average Speed Time Time Time CurrentDload Upload Total Spent Left Speed100 422 100 422 0 0 2562 0 --:--:-- --:--:-- --:--:-- 2740AllsiteData is: <html><head><title>Status page</title></head><body style="font-family: sans-serif;"><p style="font-size: 1.2em

I am working with the api to create users and query or update device info. Now i am trying to perform dep endpoint actions, but i get a 404 Not Found error.If the payload is malformed i get a 500. The endpoints for devices and users works with post and get requests as (mostly) expected. this is related to the "teacher endpoint not working" thread https://community.jamf.com/t5/jamf-school/jamf-api-the-endpoint-teacher-is-not-usable/m-p/255375#M652 

I've got a PKG Big Sur installer, and I've started caching it on devices needing it.I'm wondering if there's a way that I can run the cached installer with the --agreetolicense --nointeraction flags or if running the package Install Cached removes any way we'd be able to do this.We have the script from https://github.com/kc9wwh/macOSUpgrade but it was implemented by someone who is no longer with us. I'm trying to work with it but I want to make sure I have a backup plan, as it wasn't working (or at least installations were failing) when they left us.

I have a local admin account on several machines that are also the management account on those machines as well. Is there a way after the fact that I can go back in and hide them? I can't seem to find a policy setting or script that will do that. We need to hide the current already created ones. I did create a quick add package that will create that user and hide it on any further machines but not sure if there is easy way to hide the already existing one. Hope that makes sense.

Hi, New to Scripting still but trying to learn.My goal is to deploy around 15 Mac Mini within a course of about 2 weeks. My goal is to try to create a policy and/or configuration profile if I can do Teamviewer Host in a silent install without "any input effort by me or a user."  I integrated our Teamviewer token to Remote Administration, after that I am lost on how to proceed. I know I need to push the host .PKG into the account on the Mac minis so it can install but how can I customize the setting up either Easy Access by pulling the name of the computer and setting up other customizable features Teamviewer offers as well so it can show up in our Management Console. 

I'm working on home screen layout for our sales ipads.  [Devices > Configuration Profiles > Home Screen Layout]I didn't have any issues adding the well known apps thanks to JAMF's search feature but I have a couple of lesser known ones, for example, Service Finance Dealer App.  https://apps.apple.com/us/app/service-finance-dealer-app/id962933342 Can anyone help me by telling me how to find this information?TIA,Brandon

Hi AllMy first post, please excuse my knoweldge in Jamf, hardly been playing with it for a month.Ive started supporting an existing Jamf implementation and have a couple of requests to reset passwords on Macs where users have left the Org. I thought it would be just the matter of creating new local admininstrator account policy or even issueing a wipe command so device can reset and start again. Unfortunately its on login screen and doesnt have a wifi connection option (which I understand is due to FV2 being enabled??)The end user told me that he tried to reset the device and it keeps asking for a recovery key.I have since enabled the "startup scripts" option so policies can be triggered on System Startup but sounds like it only applies once the policy refreshes, ie, after logging in with any account.My questions1) How do I reset a Mac that is stuck in this situation, can I use any capabilities Jamf has?2) How do I obtain the recovery key the user is referring to?3) Are there any such

Hi JAMF nation,The Cert: CN=JSS Built-In Signing Certificate, OU=FILEVAULT2COMM expired in my paternity leave and when i try to renew it i have only the possibility to revoke it in Settings -> Global Management -> PKI Certificate -> Jamf Pro Built-in CA. Do i have a chance to renew that? Or do I have to create a new one, but that means to recreate all Recovery Keys, right? Thank you very much.BRDaniel

After our server was updated to 10.31 the unknown keys feature is presenting itself in a number of profiles. At first all unknown keys were "payloadenabled" which per the release notes can be safely removed.However, now a number of the profiles have more keys showing as unknown, and I can't find any documentation on what they are or whether they can be removed or not.All of these profiles are standard Jamf profiles created within JSS.Keys include:1. allowKeyboardActivityContinuation in Mobile Device Restrictions profile2. com.apple.MCX.FileVault2:UseKeychainUserEntersMissingInfo in Computer Security & Privacy profileIs anyone familiar with what these keys do, and if they can be removed without affecting the profile? No changes have been made to these profiles, and they were all created in Jamf. Thank you   

We found a pocket of several hundred Macs in one of the environments we support. We want to get these Macs into JSS so we can get them into a Static Group. Is there a way to import a tab delimited or csv text file that contains only MAC Address, Serial Number and Computer Name? I'm hoping to avoid manually inputting these. Thanks,Don

Is it possible to use Jamf Pro to remote onto a enrolled Macbook? and if so how? 

Upgraded a test machine to Monterey from Big Sur and it wants the user to approve the system extensions for Microsoft Defender and Cisco AMP that were working fine before and approved with Configuration Profiles.For Defender, I've tried unscoping and rescoping the Configuration profile as well as uninstalling and reinstalling DefenderStill trying to understand it but has anyone else hit this issue and found a way through the problem?

Hello World!This issue is kind of weird since it should work, but it doesn't work. We're using JAMF School as our MDM to control circa 230 M1 MacBook Air that have from MacOS 11.3 all through 11.5.1 We have 11.6.1 available for update on some devices and want to force update on every MacBook but, when you are on the device and choose "Install and Restart", it sends the command to the device, it shows the "Success" warning on the top right but nothing happens on the device side.I've noticed this has some random reactions, sometimes it stucks on 13% during download on JAMF side, sometimes it goes smoothly through download but nothing happens on device side and once or twice you could get a prompt on device side asking for admin credentials. Does anyone have this feature working like it should ? Best regards to you all!

Hi!Newbie here so sorry if this has been asked before.We are a Special Needs School and want each class/Department to have a number of iPads that are a shared resource - not 'one each'.  As our students find it hard to log in on devices so we want a simple passcode to open a device then they can use whatever apps are installed.  We want to be able to control what apps etc. are on each iPad (will be specific to a Department) but not to the level of a specific person.Please can someone offers some advice as to how we would set this up.Many thanks.

I'm deploying a new machine for the first time using connect 2.9. Right after DEP installs our configuration profiles and the connect pkg, We get the menu bar app login pop-up. This is before the 365 login presents itself. The popup is not branded and if anything is provided, it fails. However, if you close the popup, the deployment proceeds fine. What setting is controlling this behavior?  

Is there a way to delete multiple policies in Jamf Pro? I'm not seeing an option and search brings up nothing.

I'm starting to test out macOS Monterey, and I just encountered this pop-up warning when running a Self Service policy. I tried clicking the Learn More button, but I was not redirected to a browser to get more info. In the past a similar warning has appeared in preparation for kext and 32-bit deprecation, and it sounds like there's something new on the horizon to be aware of. Anyone testing Monterey encounter this pop-up? 

Hi allWe are getting a lot of failing to download packages with the error "Error: Package was not successfully downloaded. -1200" can anyone shed some light on what this error code means? I'm struggling to find the answer... Thanks